Commit Graph

1598 Commits

Author SHA1 Message Date
Madhura Bhave f835f82582 Preliminary restructure of security packages
Restructure the security auto-configuration packages to better reflect
the part of the system that the configuration applies to.

See gh-14412
2018-10-16 01:01:10 -07:00
Madhura Bhave bebfa76f55 Fix tests
See gh-12838
2018-10-15 16:52:05 -07:00
Phillip Webb b3bdbd0e84 Upgrade cassandra-unit-spring to 3.5.0.1
Closes gh-14777
2018-10-10 10:00:44 -07:00
Stephane Nicoll 12cb478b0d Restore files changes by accident 2018-10-05 23:07:08 +02:00
Andy Wilkinson f2e4a0b44b Polish 2018-10-05 16:03:24 +01:00
Stephane Nicoll bdd8e53124 Improve filtering of actuator auto-configurations
This commit splits auto-configurations that require different
environments so that they can be filtered early.

Closes gh-12260
2018-10-05 14:57:17 +02:00
Phillip Webb 8b59503291 Validate server.servlet.path does not contain '*'
Update `WebMvcProperties` to enforce that `server.servlet.path` never
contains a wildcard ['*'] character.

Closes gh-13292
2018-10-04 19:45:41 -07:00
Madhura Bhave daa3d457b7 Revert OAuth2 Client Registration Grant Type Hierarchy
Closes gh-14554
2018-10-04 15:21:36 -07:00
Phillip Webb d76bba5e6f Migrate from ExpectedException rule to AssertJ
Replace ExpectedException JUnit rules with AssertJ exception
assertions.

Closes gh-14336
2018-10-02 10:55:28 -07:00
Stephane Nicoll ecee04a841 Merge branch '2.0.x' 2018-09-22 20:25:09 +02:00
Stephane Nicoll f225945218 Merge branch '1.5.x' into 2.0.x 2018-09-22 20:24:46 +02:00
Stephane Nicoll 3b51d79353 Remove useless jcache profile
Closes gh-14584
2018-09-22 20:24:25 +02:00
Stephane Nicoll 6e92c4ddaf Polish 2018-09-22 20:23:41 +02:00
Andy Wilkinson 4b00dc8a5c Add support for Spring Data JDBC (auto-config, starter, and test slice)
Closes gh-14489
2018-09-21 14:18:52 +01:00
Johnny Lim 521f746151 Polish
Closes gh-14517
2018-09-20 09:51:10 +02:00
Phillip Webb 0c00508b3c Register ApplicationConversionService for context
Update `SpringApplication` to automatically register the shared
`ApplicationConversionService` instance with the `BeanFactory` and
`Environment`.

Closes gh-12148
2018-09-11 14:24:27 -07:00
Andy Wilkinson 3ab6d12c56 Fix up version numbers following release 2018-09-11 17:11:47 +01:00
Spring Buildmaster 46df506b0a Next development version 2018-09-11 14:24:40 +00:00
Andy Wilkinson 7442e37154 Add JAXB API to Data JPA starter so it works out-of-the-box on Java 9+
Closes gh-14287
2018-09-05 14:23:18 +01:00
Stephane Nicoll 5f56adc334 Add activation API to WebServices samples on Java 11+
Closes gh-14308
2018-09-05 14:17:31 +02:00
Andy Wilkinson 21bc3d3ba5 Remove redundant Java 9 and 10 profile that adds JAXB API dependency
Closes gh-14309
2018-09-05 11:55:30 +01:00
Phillip Webb 59b5c54489 Upgrade to Rabbit AMQP Client to 5.4.0
Closes gh-14303
2018-09-04 15:21:06 -07:00
Phillip Webb 0cd64ea690 Merge branch '2.0.x' 2018-09-04 15:15:57 -07:00
Phillip Webb 45613f8c3c Merge branch '1.5.x' into 2.0.x 2018-09-04 15:12:22 -07:00
Phillip Webb a50686b404 Surface additional rabbit SSL factory properties
Add `validate-server-certificate` and `verify-hostname` properties to
`spring.rabbitmq.ssl` to allow additional SSL configuration.

Closes gh-14259
2018-09-04 15:07:53 -07:00
Phillip Webb 9543fcf44d Upgrade to spring-javaformat 0.0.6 2018-08-30 15:59:27 -07:00
Madhura Bhave ae413c718d Reinstate placeholders 2018-08-28 15:45:08 -07:00
Madhura Bhave a33e58fc45 Deprecate OAuth2 login redirect-uri-template
This property is deprecated in favor of
`spring.security.oauth2.client.registration.login.*.redirect-uri

Closes gh-14226
2018-08-28 15:40:54 -07:00
Madhura Bhave f5deebf0cb Support authorization_code grant for OAuth2 client
This commit also refactors OAuth2 client properties. With
the added support for authorization_code clients, client
registrations are now divided into `login` and `authorization_code`.
An environment post processor is used for backward compatibility with
old Open ID Connect login clients.

Closes gh-13812
2018-08-28 13:49:07 -07:00
Madhura Bhave fc4340c5d4 Rename OAuth2 resource server properties
Closes gh-14165
2018-08-23 16:51:27 -07:00
Johnny Lim c95b339f02 Polish
Closes gh-14149
2018-08-22 10:38:00 +02:00
Madhura Bhave 09e09bf430 Add starter for OpenID Connect/OAuth2 client
Closes gh-13830
2018-08-17 13:03:55 -07:00
Stephane Nicoll d1ac774af2 Configure build to be compatible with Java 11
See gh-14028
2018-08-17 15:16:02 +02:00
Stephane Nicoll 930c838da9 Remove Narayana support
The Spring Boot integration is now handled by the Narayana project
itself at https://github.com/snowdrop/narayana-spring-boot

This commit removes our support.

Closes gh-12026
2018-08-17 15:08:55 +02:00
Madhura Bhave fe05fed76c Merge branch '2.0.x' 2018-08-16 16:44:03 -07:00
Madhura Bhave c7b4a992be Fix formatting 2018-08-16 16:43:31 -07:00
Madhura Bhave d724f154f4 Merge branch '2.0.x' 2018-08-16 15:45:20 -07:00
Madhura Bhave b93c2b9a9f Allow actuator endpoints to be used with mvcMatchers
This commit changes AbstractWebMvcEndpointHandlerMapping to
be a MatchableHandlerMapping. Additionally, EndpointRequest,
now delegates to MvcRequestMatcher for Spring MVC applications.

For all other applications, AntPathRequestMatcher is used as
a delegate.

Closes gh-13962
2018-08-16 15:41:02 -07:00
Andy Wilkinson f28528a527 Allow Data JPA's bootstrap mode to be configured via the environment
In Spring Data Lovelace, repositories' bootstrap mode can be
configured via @EnableJpaRepositories. This commit adds support for
configuring the mode via the environment rather than having to use
the annotation. Additionally, when deferred or lazy bootstrapping is
being used, the LocalContainerEntityManagerFactoryBean is configured
to use a bootstrap executor. This allows JPA's initialization to be
performed on a separate thread, allowing the rest of application
context initialization to proceed in parallel.

Closes gh-13833
2018-08-16 20:01:24 +01:00
Andy Wilkinson 0ba6d8da4a Switch to Yahoo for OIDC as Google's cert is not yet trusted by Java 11
Until the fix for JDK-8209506 [1] is available in Java 11 builds,
SSL connections to services using Google's SSL certificate do not work
due to a lack of trust. This affects both our OAuth2 client samples
which were using https://accounts.google.com as an OpenID Connect
provider.

This commit switches the two samples to use Yahoo in place of Google.

See gh-14028

[1] https://bugs.openjdk.java.net/browse/JDK-8209506
2018-08-15 14:35:32 +01:00
Johnny Lim d5eaaf6e2a Polish
Closes gh-14049
2018-08-15 10:43:46 +03:00
Andy Wilkinson e0d67ae703 Avoid Atmosphere using a null URL to create a URLClassLoader
Unlike Java 8, 9, and 10, Java 11 does not tolerate a null URL being
used to create a URLClassLoader. The Atmosphere sample looks for
a resource named /WEB-INF/classes which only exists in a packaged
war application. In all other cases the resulting URL is null.
Atmosphere uses this to create a URLClassLoader which fails on Java
11.

This commit updates the sample to customize the handlers path. There
are other web application-specific assumptions in Atmosphere, such as
the scanning of WEB-INF/lib by default. This change appears to get
the sample going, but we should, perhaps, consider removing it in the
longer term, particularly as Boot itself has no Atmosphere
integration.

See gh-14028
2018-08-15 08:34:24 +01:00
Stephane Nicoll 48d365aba4 Fix checkstyle rule 2018-08-08 13:04:08 +02:00
Stephane Nicoll aa0739e3b7 Fix checkstyle rule 2018-08-08 10:33:34 +02:00
Madhura Bhave c69a1f208f Remove duplicate sample from modules 2018-08-07 23:43:58 -07:00
Madhura Bhave 6512406a13 Add missing samples to pom and README 2018-08-07 21:05:15 -07:00
Madhura Bhave bc6e4e6e55 Add auto-config for reactive OAuth2 Resource Server
Closes gh-13948
2018-08-07 20:46:55 -07:00
Stephane Nicoll 5cfe8dbee9 Polish 2018-08-07 17:52:47 +02:00
Madhura Bhave d6b6a5f81f Add auto-config for spring-security-oauth2-resource-server
Closes gh-13787
2018-08-06 16:53:36 -07:00
Stephane Nicoll e51c26efdc Fixup version numbers following release 2018-07-30 19:40:55 +02:00
Spring Buildmaster 73bf744cb0 Next Development Version 2018-07-30 13:37:38 +00:00
Phillip Webb 1b91c0ceb7 Merge branch '2.0.x' 2018-07-29 09:29:57 +01:00
Phillip Webb 0ec22c8bf9 Polish copyright date on changed files 2018-07-29 09:29:29 +01:00
Phillip Webb 80da9cf5eb Merge branch '2.0.x' 2018-07-29 09:28:56 +01:00
Phillip Webb aeb885192e Polish ternary expressions 2018-07-29 09:24:46 +01:00
Phillip Webb 566056fd1a Merge branch '2.0.x' 2018-07-28 10:43:01 +01:00
Phillip Webb 9ca9a491ca Fix checkstyle issues in samples
Fix checkstyle issues with samples following the
spring-javaformat upgrade.

See gh-13932
2018-07-28 10:41:56 +01:00
Stephane Nicoll e26f743e82 Merge branch '2.0.x' 2018-07-25 12:02:11 +02:00
Stephane Nicoll b6f6dca7f8 Remove useless profile 2018-07-25 12:01:57 +02:00
Stephane Nicoll 5ccb19500b Polish 2018-07-25 12:00:38 +02:00
Stephane Nicoll a2494df596 Merge branch '2.0.x' 2018-07-25 11:48:20 +02:00
Stephane Nicoll 64c668f766 Polish 2018-07-25 11:48:05 +02:00
Stephane Nicoll 4e01eb865b Polish
See gh-13210
2018-07-18 09:53:09 +02:00
Madhura Bhave f88ebc06ff Add support for OIDC Configuration Provider
Closes gh-13210
2018-07-17 16:02:03 -07:00
Stephane Nicoll 370af6df08 Revert "Ignore test affect by a regression in Spring Data Lovelace"
This reverts commit d9215d5714.

Closes gh-13784
2018-07-17 11:33:14 +02:00
Stephane Nicoll d9215d5714 Ignore test affect by a regression in Spring Data Lovelace 2018-07-16 15:44:12 +02:00
Stephane Nicoll 48962718d1 Merge branch '2.0.x' 2018-07-16 10:37:43 +02:00
Johnny Lim 068e22d60b Polish
See gh-13776
2018-07-16 10:34:00 +02:00
Madhura Bhave d1b8558430 Make /health and /info insecure by default
Closes gh-13722
2018-07-13 13:35:52 -07:00
Andy Wilkinson 6a48a440b2 Annotate our test annotations with @ExtendWith(SpringExtension.class)
Closes gh-13739
2018-07-11 17:25:21 +01:00
Andy Wilkinson db58654492 Make JAXB API available to Groovy Templates when running on Java 9+
See gh-13670
2018-07-11 09:15:34 +01:00
Andy Wilkinson d7fcec1ada Remove the use of a bean override form SampleKafkaApplicationTests
See gh-13609
2018-07-10 21:17:02 +01:00
Andy Wilkinson 134edf9f2a Upgrade to Jooq 3.11.2
Closes gh-13675
2018-07-03 17:30:48 +01:00
Andy Wilkinson 45fdf2ffa4 Support Tomcat 9 and Undertow 2
Closes gh-11749
Closes gh-12243
2018-06-28 11:33:30 +01:00
Andy Wilkinson 5c3b4333f8 Merge branch '2.0.x' 2018-06-21 17:31:24 +01:00
Andy Wilkinson 30f0fd1fe4 Merge branch '1.5.x' into 2.0.x 2018-06-21 17:31:16 +01:00
Andy Wilkinson b1d8cc55fc Polish "Fix JSP availability check when not running as a packaged war"
Closes gh-12859
2018-06-21 17:30:12 +01:00
Stephane Nicoll 3b0c1354cb Upgrade to Maven Surefire/Failsafe Plugin 2.22.0
Closes gh-13500
2018-06-17 16:43:27 +02:00
Stephane Nicoll af126b1bb3 Fixup version numbers following release 2018-06-14 12:34:39 +02:00
Spring Buildmaster 36b8639853 Next Development Version 2018-06-14 10:05:31 +00:00
Stephane Nicoll c738b73c6f Merge branch '2.0.x' 2018-06-13 09:29:36 +02:00
Johnny Lim 870d7fe16a Use @SpringBootTest.properties in tests and samples
Closes gh-13453
2018-06-13 09:24:28 +02:00
Phillip Webb e0ae805924 Update copyright header 2018-06-05 17:45:09 -07:00
Phillip Webb 845c20f13b Merge branch '2.0.x' 2018-06-05 17:14:34 -07:00
Phillip Webb e3bf518819 Merge branch '1.5.x' into 2.0.x 2018-06-05 17:13:47 -07:00
Phillip Webb 6c7289b822 Allow META-INF/resources in WAR classes folder
Update `TomcatResources` so that `META-INF/resources` folders in
`src/main/resources` no longer fail with a "URI is not hierarchical"
exception.

Closes gh-13265
2018-06-05 17:00:52 -07:00
Phillip Webb ade1397ea2 Merge branch '2.0.x' 2018-06-04 17:28:54 -07:00
Phillip Webb 571c50e43f Switch to functional web code to use static imports
Update the samples and tests to use the more idiomatic static import
style.
2018-06-04 17:27:34 -07:00
Phillip Webb 2274ac5214 Move spring-javaformat plugins to root POM
Relocate spring-javaformat plugins to the root of the project.

Closes gh-13306
2018-06-04 17:25:19 -07:00
Vedran Pavic 205b1c1327 Upgrade to Hazelcast 3.10.1
Closes gh-13322
2018-06-01 09:30:42 +02:00
Madhura Bhave 9f4a5c13a5 Add auto-config for WebFlux OAuth2 Login
Closes gh-13142
2018-05-30 18:53:11 -07:00
Phillip Webb 353560278b Merge branch '2.0.x' 2018-05-30 13:29:41 -07:00
Phillip Webb 401fcbeaa4 Merge branch '1.5.x' into 2.0.x 2018-05-30 13:29:10 -07:00
Phillip Webb 2bfcefa48e Reinstate support for disabling build checking
Closes gh-13291
2018-05-30 13:24:06 -07:00
Phillip Webb 40800355c7 Merge branch '2.0.x' 2018-05-30 12:41:48 -07:00
Phillip Webb e38d5f910b Merge branch '1.5.x' into 2.0.x 2018-05-30 12:18:38 -07:00
Phillip Webb 09fa1e7e11 Polish 2018-05-30 12:12:01 -07:00
Phillip Webb b03f890567 Upgrade to spring-javaformat 0.0.2 2018-05-30 11:14:26 -07:00
Phillip Webb 2215709165 Merge branch '2.0.x' 2018-05-25 23:50:39 -07:00
Phillip Webb 6f0ccc64a5 Fix checkstyle violations 2018-05-25 23:03:17 -07:00
Phillip Webb 9fd3b9103a Format code 2018-05-25 23:02:45 -07:00
Phillip Webb e544922dd7 Merge branch '1.5.x' into 2.0.x 2018-05-25 23:02:08 -07:00
Phillip Webb e75d8eaf40 Switch to spring-javaformat plugin
Use `spring-javaformat` to format and check code. Code formatting can
now be applied using the `spring-javaformat-maven-plugin` from the
command line. Existing checkstyle rules have also been replaced and
the CONTRIBUTING.adoc file has been updated.

Closes gh-13255
2018-05-25 20:59:04 -07:00
Phillip Webb d8157c94f3 Merge branch '2.0.x' 2018-05-25 19:48:37 -07:00
Phillip Webb 21d80d87a3 Merge branch '1.5.x' into 2.0.x 2018-05-25 18:45:37 -07:00
Phillip Webb e69296d7d3 Fix checkstyle violations in samples 2018-05-25 18:18:00 -07:00
Phillip Webb 4853477081 Reformat code 2018-05-25 18:17:37 -07:00
Stephane Nicoll 1ea3e95ff6 Merge branch '2.0.x' 2018-05-22 13:40:51 +02:00
Stephane Nicoll d5abd57a91 Remove deprecated use of spring.main.web-environment
Closes gh-13231
2018-05-22 13:39:02 +02:00
Stephane Nicoll 699b6ce6dc Remove reference to Jersey 1
Closes gh-12582
2018-05-22 10:50:27 +02:00
Stephane Nicoll 93c45cb6ec Move server.servlet.path to spring.mvc.servlet.path
Closes gh-12971
2018-05-14 12:24:38 +02:00
Andy Wilkinson d2cef484cb Fix up version numbers following release 2018-05-09 11:25:21 +01:00
Spring Buildmaster 010b4fccbd Next development version 2018-05-09 09:31:46 +00:00
Phillip Webb 5b3cb8a698 Update copyright header year for changed files 2018-05-04 15:59:26 -07:00
Phillip Webb 99dad81e9a Update copyright header year for changed files 2018-05-04 12:15:13 -07:00
Phillip Webb e125085993 Merge branch '1.5.x' into 2.0.x 2018-05-03 12:43:50 -07:00
Phillip Webb 3ee777e142 Polish ternary expressions
Consistently format ternary expressions and always favor `!=` as the
the check.
2018-05-03 09:46:15 -07:00
Stephane Nicoll 3c169b4e0a Fix bean name of EnvironmentEndpointWebExtension
Closes gh-12827
2018-04-11 11:34:44 +02:00
Johnny Lim f03849d502 Polish
See gh-12812
2018-04-10 11:46:16 +02:00
Phillip Webb 370915f8f0 Fixup version numbers following release 2018-04-09 18:20:41 -07:00
Spring Buildmaster c10aad165f Next Development Version 2018-04-09 23:14:33 +00:00
Stephane Nicoll 3634a1d9d1 Fixup version numbers following release 2018-04-05 11:23:15 +02:00
Spring Buildmaster ade4760842 Next Development Version 2018-04-05 09:01:52 +00:00
Andy Wilkinson 8608202e56 Remove Surefire workarounds that are not needed with 2.21
Closes gh-12721
2018-04-05 07:48:09 +01:00
Andy Wilkinson 4a47ab4b3e Make JAX-B available to the Jersey 1 sample on Java 9 2018-04-05 07:13:10 +01:00
Phillip Webb 7242ddae3c Polish 2018-04-04 12:05:08 -07:00
Stephane Nicoll ade6d86b65 Polish "Use secure connection to repositories"
Closes gh-12629
2018-03-27 18:02:52 +02:00
Phillip Webb a8f366a554 Fix copyright header for edited files 2018-03-16 15:07:23 -07:00
Phillip Webb a4b0be089d Polish 2018-03-14 14:05:26 -07:00
Andy Wilkinson 43d05315b3 Use Surefire and Failsafe 2.21.0 when building with JDK 10
Closes gh-12332
2018-03-08 13:11:27 +00:00
Madhura Bhave 89e42d40c5 Provide security matchers for actuator links
Fixes gh-12353
2018-03-07 19:02:35 -08:00
Madhura Bhave e6eca04af2 Make EndpointRequestMatcher#excluding public
Fixes gh-12354
2018-03-05 16:07:46 -08:00
Andy Wilkinson 82c95e136f Avoid problems with Failsafe when building samples with JDK 10
See gh-12028
2018-03-03 19:16:59 +00:00
Andy Wilkinson 065456a4af Make JAX-B available to Jersey sample when building with JDK 10
See gh-12028
2018-03-03 17:52:41 +00:00
Andy Wilkinson 1bd0313c3d Avoid problems with Surefire when building samples with JDK 10
See gh-12028
2018-03-03 17:52:41 +00:00
Andy Wilkinson f7c8be1877 Apply java9 profile to JDK 10 (and later) as well as JDK 9
See gh-12028
2018-03-02 15:28:03 +00:00
Stephane Nicoll c2c8b7dfe8 Clarify the required changes to run certain samples with Java9
This commit moves the Java9-specific profile to each sample rather than
impacting all samples. That way, affected samples are more self
contained.

Closes gh-12302
2018-03-02 12:58:25 +01:00
Andy Wilkinson 5d041a628b Disable Jetty JSP sample tests with Java 9
Closes gh-10456
2018-03-01 17:53:10 +00:00
Andy Wilkinson 0858e9b368 Remove AspectJ version override in the samples' build
As of AspectJ 1.8.13, the override is no longer necessary to build
the samples.

See gh-11095
2018-03-01 13:30:40 +00:00
Andy Wilkinson 6336aa3956 Reinstate testing of JSP samples using Java 9
Closes gh-10456
2018-03-01 13:11:08 +00:00
Phillip Webb 9bee9e9cf9 Polish 2018-02-28 13:50:43 -08:00
Madhura Bhave df337eaf5e Fix author name 2018-02-28 12:26:58 -08:00
Phillip Webb 29c3be3590 Polish 2018-02-26 10:26:02 -08:00
Stephane Nicoll b4a7e1d64b Use toLowerCase() and toUpperCase() with Locale.ENGLISH
This commit updates all `toLowerCase()` and `toUpperCase` invocations to
use the variant that takes a `Locale` to avoid locale-specific side
effect.

Closes gh-12213
2018-02-26 17:49:03 +01:00
Phillip Webb 4b9c3c137e Polish Collection.toArray
Consistently use `StringUtils.toStringArray`, `ClassUtils.toClassArray`
or zero length when converting collections to arrays.

Fixes gh-12160
2018-02-22 21:11:30 -08:00
Phillip Webb cd5266ac03 Polish 2018-02-22 20:25:28 -08:00
Phillip Webb 9e75680e6f Polish 2018-02-16 18:11:54 -08:00
Madhura Bhave 51de220b55 Enable CSRF protection by default
Fixes gh-11758
2018-02-16 13:31:51 -08:00
Andy Wilkinson 17c7f027e0 Add details of the request mapping conditions to mappings endpoint
Closes gh-12080
2018-02-16 17:36:06 +00:00
Madhura Bhave 85aeb5c00d Fix path in tests 2018-02-12 10:19:52 -08:00