Commit Graph

576 Commits

Author SHA1 Message Date
Josh Cummings 834370d8eb
Update Deprecated Spring Web Usage 2025-04-23 11:29:19 -06:00
Josh Cummings 3f7f3dabe7
Correct JavaDoc Class Reference 2025-04-23 11:29:18 -06:00
Josh Cummings b79d81a80f
Merge branch '6.4.x' 2025-04-21 08:32:54 -06:00
Josh Cummings f8d417dc03
Preserve Encrypted Elements
Closes gh-16367
2025-04-21 08:32:07 -06:00
Josh Cummings 3869b13e68
Add ResponseAuthenticationConverter
CI / Build (17, ubuntu-latest) (push) Waiting to run Details
CI / Build (17, windows-latest) (push) Waiting to run Details
CI / Test Against Snapshots (17, 17) (push) Waiting to run Details
CI / Test Against Snapshots (21-ea, 21) (push) Waiting to run Details
CI / Check Samples (push) Waiting to run Details
CI / Deploy Artifacts (push) Blocked by required conditions Details
CI / Deploy Docs (push) Blocked by required conditions Details
CI / Deploy Schema (push) Blocked by required conditions Details
CI / Perform Release (push) Blocked by required conditions Details
CI / Send Notification (push) Blocked by required conditions Details
Deploy Docs / build (push) Waiting to run Details
Aside from simplifying configuration, this commit also makes it possible
to provide a response authentication converter that doesn't need the
NameID element to be present.

Closes gh-12136
2025-04-09 17:38:24 -06:00
Josh Cummings 3e686abf50
Add ResponseValidator
Issue gh-14264
Closes gh-16915
2025-04-09 17:32:40 -06:00
Josh Cummings a283700ef8
Add CacheSaml2AuthenticationRequestRepository
CI / Build (17, ubuntu-latest) (push) Waiting to run Details
CI / Build (17, windows-latest) (push) Waiting to run Details
CI / Test Against Snapshots (17, 17) (push) Waiting to run Details
CI / Test Against Snapshots (21-ea, 21) (push) Waiting to run Details
CI / Check Samples (push) Waiting to run Details
CI / Deploy Artifacts (push) Blocked by required conditions Details
CI / Deploy Docs (push) Blocked by required conditions Details
CI / Deploy Schema (push) Blocked by required conditions Details
CI / Perform Release (push) Blocked by required conditions Details
CI / Send Notification (push) Blocked by required conditions Details
Deploy Docs / build (push) Has been cancelled Details
Closes gh-14793
2025-04-03 17:43:48 -06:00
Josh Cummings 67c21de1cf
Support Continue Filter Chain When No Relying Party
Closes gh-16000
2025-04-03 15:32:23 -06:00
Josh Cummings 5436fd5574
Remove Unecessary Code 2025-04-03 14:28:54 -06:00
Josh Cummings 91b0936189
Add AssertionValidator
CI / Build (17, ubuntu-latest) (push) Waiting to run Details
CI / Build (17, windows-latest) (push) Waiting to run Details
CI / Test Against Snapshots (17, 17) (push) Waiting to run Details
CI / Test Against Snapshots (21-ea, 21) (push) Waiting to run Details
CI / Check Samples (push) Waiting to run Details
CI / Deploy Artifacts (push) Blocked by required conditions Details
CI / Deploy Docs (push) Blocked by required conditions Details
CI / Deploy Schema (push) Blocked by required conditions Details
CI / Perform Release (push) Blocked by required conditions Details
CI / Send Notification (push) Blocked by required conditions Details
Deploy Docs / build (push) Waiting to run Details
- Ships with support for customizing the OpenSAML validators to use
- Or, you can supply your own instance of SAML20AssertionValidator

Closes gh-15578
2025-04-02 17:44:40 -06:00
Josh Cummings 99345537d6
Add RequestMatcher Migration Path for AbstractAuthenticationProcessingFilter
Issue gh-16417
2025-03-26 16:38:39 -06:00
Josh Cummings de07b1108f
Use PathPatternRequestMatcher in Web Components
This commit changes filters and resolvers that were using AntPathRequestMatcher as their
default to using PathPatternRequestMatcher.

Issue gh-16632
2025-03-26 13:28:58 -06:00
Josh Cummings 50ad378a29
Polish MockHttpServletRequest Usage
This commit makes so that the requestURI is set to a value that makes
sense with the other properties being mocked.

Issue gh-16632
2025-03-26 13:27:17 -06:00
Filip Hrisafov cd9d6ce5c9 Fix typos Open SAML 5 Javadoc referencing Open SAML 4
Signed-off-by: Filip Hrisafov <filip.hrisafov@gmail.com>
2025-03-19 18:06:26 -06:00
Rob Winch c8fea962a0
Merge branch '6.4.x'
- 04f530b opensamlFiveTest.extendsFrom testRuntimeOnly

Issue gh-16757
2025-03-17 15:41:13 -05:00
Rob Winch 04f530bc1b
opensamlFiveTest.extendsFrom testRuntimeOnly
Issue gh-16756
2025-03-17 15:41:07 -05:00
Rob Winch e6223dede3
Merge branch '6.4.x'
- adb303e Add testRuntimeOnly junit-platform-launcher

Closes gh-16757
2025-03-17 14:34:18 -05:00
Rob Winch 05116eabbd
Merge branch '6.3.x' into 6.4.x
- adb303e Add testRuntimeOnly junit-platform-launcher

Closes gh-16756
2025-03-17 14:18:49 -05:00
Rob Winch adb303e152
Add testRuntimeOnly junit-platform-launcher
Closes gh-16755
2025-03-17 14:16:44 -05:00
Josh Cummings f2d78a01c3
Fix JavaDoc Typos 2025-02-26 11:31:02 -07:00
Tran Ngoc Nhan 51e9f073dd Fix format
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-02-13 16:18:28 -07:00
Tran Ngoc Nhan 3cf1686c0b Revert Nullable annotation
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-02-13 16:18:28 -07:00
Tran Ngoc Nhan 5d089f680e Consistently NonNull annotation
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-02-13 16:18:28 -07:00
Josh Cummings 5ff87128b1
Make Saml2AuthenticationToken Serializable
Issue gh-16286
2025-02-03 10:13:14 -07:00
Tran Ngoc Nhan bcc4b415b3
Make RelyingPartyRegistration Serializable
Closes gh-16286
2025-02-03 10:13:13 -07:00
Josh Cummings 4b5bacf71a
Make Saml2AuthenticationToken Serializable
Issue gh-16286
2025-01-30 18:05:17 -07:00
Tran Ngoc Nhan e50415de85
Make RelyingPartyRegistration Serializable
Closes gh-16286
2025-01-30 17:45:41 -07:00
Josh Cummings 8735368d9e
Don't Support Serialization of Jackson Modules
Issu gh-16276
2025-01-14 17:04:36 -07:00
Josh Cummings 841c03fe3b
Add Serializable Compatilibity to Saml 2.0 Exceptions
Issue gh-16276
2024-12-17 09:36:29 -07:00
Josh Cummings b9911fd522
Add serialVersionUID to Authentication classes
Issue gh-16276
2024-12-13 16:41:32 -07:00
Josh Cummings e3cd4339b2
Add Serial Version
Closes gh-16163
2024-12-13 11:53:15 -07:00
Josh Cummings 7e83fd54aa
Add Test Saml 2.0 Test Objects 2024-12-12 18:12:11 -07:00
opensource 7b51eab9fe Initialize OpenSAML in OpenSamlAssertingPartyMetadataRepository
Closes gh-16042

This commit adds a static initializer block to both OpenSaml4AssertingPartyMetadataRepository
and OpenSaml5AssertingPartyMetadataRepository. This ensures OpenSAML is initialized upon class
loading, preventing failures when methods like withMetadataLocation are invoked without prior
initialization.
2024-11-11 16:52:47 -07:00
Josh Cummings 726ab52e1a
DefaultSaml2AuthenticatedPrincipal Can Be a Map Key
Closes gh-15346
2024-10-25 14:02:06 -06:00
Josh Cummings ecf6cace82
Re-Enable Disabled OpenSAML Tests
Issue gh-15395
2024-08-30 10:21:32 -06:00
Josh Cummings c9d083717f
Apply OpenSAML Test Fix to Remaining Test
There was one test that wasn't converted and now it is.

Issue gh-15395
2024-08-30 10:21:32 -06:00
Josh Cummings b91f10825e
Disable Flaky Tests
There was another flaky failure. While it seems clear what
needs to be done to repair it, this commit disables these
tests for now while the CI on a separate branch confirms
after a few days that the tests are stable again.

Issue gh-15395
2024-08-26 08:58:38 -06:00
Josh Cummings 561c786726
Repair Flaky Tests
The issue turned out to be that OpenSAML first sends two HEAD
requests before sending a GET to retrieve the metadata. The way
the MockWebServer dispatcher was configured, it would send back
the metadata on each request. This created a situation where sockets
were being closed by the client before the server had sent all the
response, resulting in a broken pipe.

The tests would succeed most of the time due to lucky timing between
the client closing the socket and the server having sent all of its
(unrequested) data.

This version sends an expected HEAD response when requested.

Issue gh-15395
2024-08-23 15:55:56 -06:00
Marcus Hert Da Coregio 229a8d2fad Remove unused imports 2024-08-21 08:31:11 -03:00
Josh Cummings d7138cdb67
Repair Flaky Tests
The error between MockWebServer and OpenSAML still happens on
occasion. This commit uses MockWebServer's default queue dispatcher
to remove any customization that might be contributing to
the flakiness.

Issue gh-15395
2024-08-20 17:58:56 -06:00
Josh Cummings e52c6de39c
Repair Flaky Tests
- Applying changes to OpenSaml4 tests that were already applied
to OpenSaml5 tests

Issue gh-15395
2024-08-09 08:22:05 -06:00
Josh Cummings f75cb17f35
Add Missing Delegate Call
Issue gh-11658
2024-08-06 18:14:12 -06:00
Josh Cummings 08d1be5774
Fix Build to Add Missing Tests
Issue gh-11658
2024-08-06 18:14:12 -06:00
Josh Cummings 1da383b360
Add OpenSAML 5 Support
Issue gh-11658
2024-08-06 18:14:11 -06:00
Josh Cummings c6d6bfd74f
Move OpenSAML 4 Support to Separate Source Directory
Issue gh-11658
2024-08-06 18:14:11 -06:00
Josh Cummings 1be596bb2f
Use OpenSAML API for registration
Issue gh-11658
2024-08-06 18:14:11 -06:00
Josh Cummings 78a0173cc1
Use OpenSAML API for web
Issue gh-11658
2024-08-06 18:14:11 -06:00
Josh Cummings bf5b334531
Use OpenSAML API for web.authentication
Issue gh-11658
2024-08-06 18:14:10 -06:00
Josh Cummings 51fc05630d
Use OpenSAML API for web.authentication.logout
Issue gh-11658
2024-08-06 18:14:10 -06:00
Josh Cummings ff9a925e88
Use OpenSAML API for metadata
Issue gh-11658
2024-08-06 18:14:10 -06:00
Josh Cummings 80b31820cd
Use OpenSAML API in authentication
Issue gh-11658
2024-08-06 18:14:10 -06:00
Josh Cummings 416859e70e
Use OpenSAML API in authentication.logout
Issue gh-11658
2024-08-06 18:14:10 -06:00
Josh Cummings 94431d1650
Add Internal OpenSAML API
This will be useful for exposing OpenSAML functionality at
a higher level. Each OpenSAML major version release should
provide a new implementation.

Issue gh-11658
2024-08-06 18:14:09 -06:00
Josh Cummings 54a4792b7a
Remove Unneeded OpenSAML 4 References
This will reduce the number of components that need to be
duplicated between the OpenSAML 4 and 5 support

Issue gh-11658
2024-08-06 18:14:09 -06:00
Josh Cummings ab842b74b9
Use OpenSAML ParserPool Defaults
Originally, Spring Security turned off various features
XML parsing feature for the underlying DocumentBuilderFactory
that OpenSAML uses.

Both OpenSAML 4 and 5 set these values by default, so we
can safely accept the defaults at this point.

Issue gh-11658
2024-08-06 18:14:09 -06:00
Josh Cummings 2f34824d0e Fix Formatting 2024-07-29 14:03:35 -07:00
Sanghyuk Jung 3e3f2ae8f0 Remove Duplicated "the" in JavaDoc 2024-07-29 14:03:35 -07:00
Josh Cummings 335dff63c1
Fix Formatting 2024-07-29 14:54:08 -06:00
Josh Cummings 0b0ffa01f7
Repair Flaky Tests
- MockWebServer seems to start failing to respond to connections
at a certain frequency of requests. This commit builds in a small
delay of 1 millisecond to address this.

Closes gh-15395
2024-07-29 14:45:48 -06:00
Josh Cummings 9d8888c5f0 Use AssertingPartyMetadata
Issue gh-15394
2024-07-19 18:48:23 -07:00
Josh Cummings dfa67fd8a1 Polish Tests
- Use test objects
- Ensure assertThat is checked

Issue gh-11725
2024-07-19 18:48:23 -07:00
Josh Cummings e6dfb63bdf Add OpenSamlAssertingPartyMetadataRepository
Closes gh-12116
Closes gh-15395
2024-07-19 18:48:23 -07:00
Josh Cummings 7ad9ee93cf Add AssertingPartyMetadataRepository
Closes gh-15394
2024-07-19 18:48:23 -07:00
Josh Cummings 796e4d6b6c
Add query parameter support for authn requests
Closes gh-15017
2024-07-13 23:57:57 -06:00
Josh Cummings 161b0f303d
Merge branch '6.3.x' 2024-07-10 17:13:04 -06:00
Josh Cummings 8951b6e0e1
Merge branch '6.2.x' into 6.3.x 2024-07-10 17:12:55 -06:00
Josh Cummings e1fdc61360
Merge branch '5.8.x' into 6.2.x 2024-07-10 17:12:43 -06:00
Josh Cummings 32e2735f45
Clarify Valid Metadata Locations 2024-07-10 17:10:49 -06:00
Josh Cummings dcf5cc9e06
Extract EntityDescriptor to AssertingPartyDetails Logic
Closes gh-15090
2024-07-10 17:08:36 -06:00
Josh Cummings 6bd2f1ca97
Deprecate OpenSamlRelyingPartyRegistration
Closes gh-15343
2024-07-01 19:50:54 -06:00
Josh Cummings 7b39800606
Add CachingRelyingPartyRegistrationRepository
Closes gh-15341
2024-07-01 19:43:09 -06:00
Josh Cummings 1e2900328b
Add IterableRelyingPartyRegistrationRepository
Closes gh-15027
2024-07-01 19:43:09 -06:00
James Howe 902aff451f Update OpenSaml4AuthenticationProvider.java
Fix level of log message.
2024-06-24 14:10:54 -06:00
Josh Cummings 672902a8f3
Add Metadata Content Type Test
Issue gh-15147
2024-06-21 16:01:29 -06:00
Josh Cummings a529607d42
Add samlmetadata Qualifier to Content Type
Closes gh-15147
2024-06-21 12:57:10 -06:00
Josh Cummings b73155df26
Merge branch '6.3.x' 2024-05-31 14:14:02 -06:00
Josh Cummings 3defed4c3d
Merge branch '6.2.x' into 6.3.x 2024-05-31 14:13:46 -06:00
Josh Cummings 1cc66faaef
Polish Update Signature Validator
Issue gh-15022
2024-05-31 14:13:23 -06:00
Josh Cummings c4d8693063
Merge branch '6.3.x' 2024-05-31 13:46:50 -06:00
Josh Cummings 0da7284ddd
Merge branch '6.2.x' into 6.3.x
Closes gh-15183
2024-05-31 13:46:32 -06:00
Josh Cummings 99f233f98c
Update Signature Validator
Closes gh-15022
2024-05-31 13:29:28 -06:00
Josh Cummings 6695784a3f
Polish Logging
Issue gh-14801
2024-05-31 12:48:07 -06:00
Max Batischev 801e808f67 Add support sign SAML metadata
Closes gh-14801
2024-05-31 12:43:19 -06:00
Josh Cummings 63e24a3026
Adjust JavaDoc Classpath
Issue gh-14931
2024-05-20 12:42:01 -06:00
Marcus Hert Da Coregio 08f11f06ab Revert unnecessary commits from main
Issue gh-15016
2024-05-08 13:49:18 -03:00
Josh Cummings c97b2aa4e0
Merge branch '6.1.x' into 6.2.x
Closes gh-14958
2024-04-25 16:12:05 -06:00
Josh Cummings d88f2e5133
Merge branch '5.8.x' into 6.1.x
Closes gh-14957
2024-04-25 16:08:47 -06:00
Josh Cummings c35e107744
Add ProxyRestriction Validator
Closes gh-14931
2024-04-25 16:04:37 -06:00
Josh Cummings 3f11622687
Polish Status Codes
Adjusted code styling to avoid nested ifs

Closes gh-11725
2024-03-22 11:24:55 -06:00
YoungKi Hong 6e45e65cac Update to return List of StatusCodes and add Saml2Error to result object and other formatting 2024-03-22 11:08:24 -06:00
youngkih 76331a5653 Add test for status code returning parent and child status code 2024-03-22 11:08:24 -06:00
youngkih e1bcd778f0 Update copywrite to 2024 2024-03-22 11:08:24 -06:00
youngkih 994e064412 Use Optional in case child status code is null 2024-03-22 11:08:24 -06:00
YoungKi Hong 01e2971085 [ISSUE-11725] Add secondary statusCode messages on error 2024-03-22 11:08:24 -06:00
Josh Cummings a1549d9dd7
Merge branch '6.2.x' 2024-02-20 17:17:27 -07:00
Josh Cummings cfb9f1ed32
Merge branch '6.1.x' into 6.2.x
Closes gh-14641
2024-02-20 17:17:12 -07:00
Josh Cummings e8c93fdc98
Move Saml Class
Closes gh-14628
2024-02-20 17:15:41 -07:00
smallbun ceb5100ba3 Optimize Saml2MetadataFilter 2024-01-31 17:40:45 -07:00
Marcus Hert Da Coregio e3ab1c94d7 Use assertj assertions 2023-11-17 09:04:50 -03:00
Marcus Hert Da Coregio a7da9491d9 Use assertj assertions 2023-11-17 09:03:36 -03:00