spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	99345537d6	Add RequestMatcher Migration Path for AbstractAuthenticationProcessingFilter Issue gh-16417	2025-03-26 16:38:39 -06:00
Steve Riesenberg	860f130bc4	Add additional validation when refreshing ID tokens Issue gh-16589	2025-03-26 15:34:17 -05:00
Steve Riesenberg	5f98ce5ecc	Polish gh-16589	2025-03-26 15:34:17 -05:00
Josh Cummings	de07b1108f	Use PathPatternRequestMatcher in Web Components This commit changes filters and resolvers that were using AntPathRequestMatcher as their default to using PathPatternRequestMatcher. Issue gh-16632	2025-03-26 13:28:58 -06:00
Josh Cummings	56e757a2a1	Provide Authentication to AuthenticationExceptions Deploy Docs / build (push) Has been cancelled Details Execute Gradle Wrapper Upgrade / Execution (push) Has been cancelled Details Update Antora UI Spring / Update on Supported Branches (5.8.x) (push) Has been cancelled Details Update Antora UI Spring / Update on Supported Branches (6.2.x) (push) Has been cancelled Details Update Antora UI Spring / Update on Supported Branches (6.3.x) (push) Has been cancelled Details Update Antora UI Spring / Update on Supported Branches (main) (push) Has been cancelled Details Update Antora UI Spring / Update on docs-build (push) Has been cancelled Details CI / Build (17, ubuntu-latest) (push) Has been cancelled Details CI / Build (17, windows-latest) (push) Has been cancelled Details CI / Test Against Snapshots (17, 17) (push) Has been cancelled Details CI / Test Against Snapshots (21-ea, 21) (push) Has been cancelled Details CI / Check Samples (push) Has been cancelled Details Clean build artifacts / main (push) Has been cancelled Details CI / Deploy Artifacts (push) Has been cancelled Details CI / Deploy Docs (push) Has been cancelled Details CI / Deploy Schema (push) Has been cancelled Details CI / Perform Release (push) Has been cancelled Details CI / Send Notification (push) Has been cancelled Details Issue gh-16444	2025-03-21 21:54:32 -06:00
Steve Riesenberg	3ebcbd4375	Merge branch '6.4.x' Closes gh-16788 Closes gh-16789 Closes gh-16790 Closes gh-16791 Closes gh-16792	2025-03-20 14:47:07 -05:00
Steve Riesenberg	96cfbd1e6c	Merge branch '6.3.x' into 6.4.x CI / Build (17, ubuntu-latest) (push) Waiting to run Details CI / Build (17, windows-latest) (push) Waiting to run Details CI / Test Against Snapshots (17, 17) (push) Waiting to run Details CI / Test Against Snapshots (21-ea, 21) (push) Waiting to run Details CI / Check Samples (push) Waiting to run Details CI / Deploy Artifacts (push) Blocked by required conditions Details CI / Deploy Docs (push) Blocked by required conditions Details CI / Deploy Schema (push) Blocked by required conditions Details CI / Perform Release (push) Blocked by required conditions Details CI / Send Notification (push) Blocked by required conditions Details Deploy Docs / build (push) Waiting to run Details Trigger Dependabot Auto Merge Forward / Trigger Workflow (push) Waiting to run Details Closes gh-16782 Closes gh-16783 Closes gh-16784 Closes gh-16785 Closes gh-16786	2025-03-20 14:46:18 -05:00
Tran Ngoc Nhan	a53ca7c3d0	Update ServerOAuth2AuthorizedClientExchangeFilterFunction javadoc Closes gh-16555 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-03-20 14:38:09 -05:00
Josh Cummings	cfe70a5fc7	Restore authorizedClientParametersMapper Assertion Issue gh-16726	2025-03-19 18:13:54 -06:00
Max Batischev	6c24a1e717	Improve JdbcOAuth2AuthorizedClientService saveAuthorizedClient Closes gh-16726 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-03-19 18:13:54 -06:00
Steve Riesenberg	5bb5d0f6be	Polish gh-16589	2025-03-18 18:07:56 -05:00
Hao	fc1469ad5e	Ensure ID Token is updated after refresh token Signed-off-by: Hao <kyrieeeee2@gmail.com>	2025-03-18 18:07:56 -05:00
Rob Winch	e6223dede3	Merge branch '6.4.x' - `adb303e` Add testRuntimeOnly junit-platform-launcher Closes gh-16757	2025-03-17 14:34:18 -05:00
Rob Winch	05116eabbd	Merge branch '6.3.x' into 6.4.x - `adb303e` Add testRuntimeOnly junit-platform-launcher Closes gh-16756	2025-03-17 14:18:49 -05:00
Rob Winch	adb303e152	Add testRuntimeOnly junit-platform-launcher Closes gh-16755	2025-03-17 14:16:44 -05:00
Steve Riesenberg	0938ca01a4	Add support for automatic context-propagation with Micrometer Closes gh-16665	2025-03-13 15:29:08 -05:00
Vedran Pavic	401e237082	Introduce JwtAudienceValidator Signed-off-by: Vedran Pavic <vedran@vedranpavic.com>	2025-02-28 12:38:18 -07:00
Josh Cummings	7df85a2ed9	Polish NimbusJwtDecoder	2025-02-27 12:40:01 -07:00
Josh Cummings	ab43a660b9	Add RFC 9068 Support Closes gh-13185	2025-02-27 12:40:01 -07:00
Josh Cummings	81e2fd2fe8	Add Type Validation Closes gh-16672	2025-02-27 12:40:01 -07:00
Josh Cummings	eb5252c4f0	Merge branch '6.4.x'	2025-02-24 17:03:13 -07:00
Pat McCusker	2bd3cadde8	Use possessive pronoun rather contraction Signed-off-by: Pat McCusker <patmccusker14@gmail.com>	2025-02-24 17:02:45 -07:00
Pat McCusker	bfce6e438d	Add fourth oauth grant type to javadoc Signed-off-by: Pat McCusker <patmccusker14@gmail.com>	2025-02-24 17:02:45 -07:00
Josh Cummings	b6c813c5a2	ClientRegistrations supports hostnames with underscores Issue gh-15852	2025-02-20 16:54:24 -07:00
Josh Cummings	3d15be1b06	JwtDecoders Supports Hostnames with Underscores In the process of verifying gh-15852, another issue with URI was discovered. This commit adds tests to the uri-computing methods and changes them to use UriComponents instead of URI. Issue gh-15852	2025-02-20 16:54:24 -07:00
Bodo Graumann	0cd6a19b87	Avoid UriComponentsBuilder.fromUri Closes gh-15852	2025-02-20 16:54:24 -07:00
Steve Riesenberg	7fc5d50adf	Polish gh-16551	2025-02-19 13:53:30 -06:00
Max Batischev	00cd95be76	Add setRedirectStrategy to OidcClientInitiatedServerLogoutSuccessHandler Closes gh-16556 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-19 13:53:30 -06:00
Josh Cummings	6793334575	Polish setJwkSelector Make so that it runs only when selection is needed. Require the provided selector be non-null. Add Tests. Issue gh-16170	2025-02-18 09:14:45 -07:00
douxiaofeng99	e22bc11cc9	Support JWK Selection Strategy Closes gh-16170 Signed-off-by: douxiaofeng99 <18600127780@163.com>	2025-02-18 09:14:45 -07:00
Joe Grandja	2480d41981	Add support for OAuth 2.0 Demonstrating Proof of Possession (DPoP) Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com>	2025-02-11 14:10:23 -05:00
Josh Cummings	11113adf62	Polish Nimbus JWK Source Implementation Issue gh-16251	2025-02-05 09:28:07 -07:00
Daeho Kwon	7b7abb28bb	Remove Deprecated Usages of RemoteJWKSet Closes gh-16251 Signed-off-by: Daeho Kwon <trewq231@naver.com>	2025-02-05 09:28:07 -07:00
Josh Cummings	f9824fd688	Polish Tests Issue gh-16251	2025-02-05 09:28:07 -07:00
Tran Ngoc Nhan	e5ea75f7f4	Implement Serial Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-01-21 18:14:52 -06:00
Rob Winch	004f38639d	Move ClientSettings to ClientRegistration Initially it was proposed to put ClientSettings as a top level class, but to be consistent with ProviderDetails, this commit moves ClientSettings to be an inner class of ClientRegistration Issue gh-16382 # Conflicts: # oauth2/oauth2-client/src/main/java/org/springframework/security/oauth2/client/registration/ClientSettings.java	2025-01-17 17:26:48 -06:00
Rob Winch	4c533569bb	Ensure missing ClientRegistration.clientSettings JSON node works Issue gh-16382	2025-01-17 17:26:48 -06:00
Rob Winch	f9498d3885	PKCE cannot be true and AuthorizationGrantType != AUTHORIZATION_CODE PKCE is only valid for AuthorizationGrantType.AUTHORIZATION_CODE so the code should validate this. Issue gh-16382	2025-01-17 17:26:47 -06:00
Rob Winch	ab629cc1ca	Add AuthorizationGrantType.toString() This adds AuthorizationGrantType.toString() which makes debuging easier. In particular, it will help when performing unit tests which validate the AuthorizationGrantType. Issue gh-16382	2025-01-17 17:26:47 -06:00
Rob Winch	b0a4dcb89e	ClientSettings equals, hashCode, toString Issue gh-16382	2025-01-17 17:26:47 -06:00
Rob Winch	2665a92107	Ensure that ClientSettings cannot be null This ensures that ClientRegistration.Builder.ClientSettings cannot be null. This has a slight advantage in terms of null safety to making this check happen in the build method since the Builder does not have a null field either. Issue gh-16382	2025-01-17 17:26:47 -06:00
Rob Winch	0ed7b18f42	DefaultServerOAuth2AuthorizationRequestResolver requireProofKey support When requireProofKey=true, DefaultServerOAuth2AuthorizationRequestResolver enables PKCE support. Issue gh-16382	2025-01-17 17:26:46 -06:00
DingHao	8d3e0844c5	Add ClientRegistration.clientSettings.requireProofKey to Enable PKCE Closes gh-16382 Signed-off-by: DingHao <dh.hiekn@gmail.com>	2025-01-17 17:26:46 -06:00
Tran Ngoc Nhan	aced3bcf16	Encode Introspection clientId and clientSecret Closes gh-15988 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-01-16 16:32:01 -07:00
Max Batischev	ed3f3d17b2	Add support customizing redirect URI Closes gh-14778	2025-01-16 14:14:11 -07:00
Josh Cummings	6019803064	Merge branch '6.4.x'	2025-01-14 18:38:14 -07:00
Josh Cummings	244fd2eb51	Support Serialization in Exceptions Issue gh-16276	2025-01-14 18:37:53 -07:00
Josh Cummings	0af4cdbf5c	Merge branch '6.4.x'	2025-01-14 17:05:21 -07:00
Josh Cummings	8735368d9e	Don't Support Serialization of Jackson Modules Issu gh-16276	2025-01-14 17:04:36 -07:00
Steve Riesenberg	6bc6946ad9	Make TokenType constructor public Closes gh-16086	2024-12-18 16:51:47 -06:00
Steve Riesenberg	a7b6c63442	Polish gh-16087	2024-12-18 16:48:25 -06:00
ThomasKasene	9404aaf010	Added a constant for DPOP in OAuth2AccessToken.TokenType Issue gh-14915	2024-12-18 16:44:38 -06:00
Josh Cummings	018e1ae1a4	Added Serialization Values Issue gh-16276	2024-12-13 16:41:32 -07:00
Josh Cummings	b9911fd522	Add serialVersionUID to Authentication classes Issue gh-16276	2024-12-13 16:41:32 -07:00
Tran Ngoc Nhan	39cd8d9faf	Update copyright headers	2024-12-05 14:52:59 -07:00
Steve Riesenberg	77233daae7	Merge branch '6.3.x' Closes gh-16139	2024-11-20 15:55:57 -06:00
Steve Riesenberg	4b41f8cb5b	Merge branch '6.2.x' into 6.3.x Closes gh-16138	2024-11-20 15:54:29 -06:00
Steve Riesenberg	0eb6acde96	Polish gh-16133	2024-11-20 15:50:29 -06:00
Kai Zander	73f3f75712	Always return current ClientRegistration in `loadAuthorizedClient` This changes `InMemoryOAuth2AuthorizedClientService.loadAuthorizedClient` (and its reactive counterpart) to always return `OAuth2AuthorizedClient` instances containing the current `ClientRegistration` as obtained from the `ClientRegistrationRepository`. Before this change, the first `ClientRegistration` instance was cached, with the effect that any changes made in the `ClientRegistrationRepository` (such as a new client secret) would not have taken effect. Closes gh-15511	2024-11-20 15:50:29 -06:00
Joe Grandja	c2cfe92a02	Merge branch '6.3.x'	2024-11-18 05:16:16 -05:00
Joe Grandja	709103e38c	Merge branch '6.2.x' into 6.3.x	2024-11-18 04:45:38 -05:00
Joe Grandja	a8c4d6cead	Require Locale argument for toLower/toUpperCase usage	2024-11-18 04:22:26 -05:00
Steve Riesenberg	ca1f891f25	Polish gh-15937	2024-11-13 15:53:59 -06:00
Davide Colazingari	aec5afb6eb	Fix assertions in NimbusReactiveJwtDecoderTests	2024-11-13 15:53:59 -06:00
Steve Riesenberg	380e856be5	Merge branch '6.3.x' Closes gh-16037	2024-11-04 13:34:57 -06:00
Steve Riesenberg	b9d5493913	Merge branch '6.2.x' into 6.3.x Closes gh-16036	2024-11-04 13:34:42 -06:00
Steve Riesenberg	86f3cd6dc7	Polish gh-15940 Closes gh-15885	2024-11-04 13:34:12 -06:00
Hyeongi Jeong	4c6fef82b9	Fix error when Bearer token is requested with empty string Issue gh-15885	2024-11-04 13:33:58 -06:00
Tran Ngoc Nhan	ab93541926	Simplify condition in some methods	2024-10-25 13:42:33 -07:00
Tran Ngoc Nhan	e76de931ce	Polish Optional usage	2024-10-25 13:42:33 -07:00
Tran Ngoc Nhan	ffed4ea1dc	Polish diamond usage	2024-10-25 13:42:33 -07:00
Josh Cummings	8a972917fa	Deprecate Nimbus(Reactive)OpaqueTokenIntrospector Issue gh-14245	2024-10-22 21:21:07 -07:00
Steve Riesenberg	dab6950231	Move parametersCustomizer The parametersCustomizer was introduced in 6.4.0-M4 with DefaultOAuth2TokenRequestParametersConverter. However, it cannot be applied to all parameters and so does not fully solve gh-11298. This commit moves the customizer to the abstract class so it can be applied to all parameters. Closes gh-15939	2024-10-18 12:22:09 -05:00
Tran Ngoc Nhan	31f8caec5f	Polish diamond operator usage	2024-10-14 11:51:35 -07:00
Giovanni Lovato	a3fd551fb5	Add ClientRegistrations.fromOidcConfiguration method ClientRegistrations now provides the fromOidcConfiguration method to create a ClientRegistration.Builder from a map representation of an OpenID Provider Configuration Response. This is useful when the OpenID Provider Configuration is not available at a well-known location, or if custom validation is needed for the issuer location (e.g. if the issuer is only reachable via a back-channel URI that is different from the issuer value in the configuration). Fixes: gh-14633	2024-10-02 15:11:01 -05:00
Steve Riesenberg	f5991ae176	Allow access token request parameters to override defaults Closes gh-11298	2024-10-02 12:05:42 -05:00
Steve Riesenberg	9ba2435cb2	Support refresh token for Token Exchange Closes gh-15534	2024-09-27 15:57:57 -05:00
Steve Riesenberg	e11c188122	Customize the strategy for resolving the principal Closes gh-15826	2024-09-27 15:39:56 -05:00
Thomas Darimont	b06c40d9ef	Add ExpressionJwtGrantedAuthoritiesConverter to extract authorities with an expression This helps to reduce custom code necessary to extract roles from deeply nested claims. Closes #15201 Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>	2024-09-23 16:59:59 -07:00
Steve Riesenberg	1a97d07079	Merge branch '6.2.x' into 6.3.x Closes gh-15829	2024-09-19 16:23:08 -05:00
Steve Riesenberg	551c483ee6	Merge branch '5.8.x' into 6.2.x Closes gh-15828	2024-09-19 16:22:37 -05:00
Steve Riesenberg	7b7a3044cf	Polish gh-15533	2024-09-19 16:13:03 -05:00
陈圳佳	8a791028b1	Fix array values of additionalParameters Closes gh-15468	2024-09-19 16:10:00 -05:00
Steve Riesenberg	42d9f146d2	Polish gh-15533	2024-09-19 16:05:39 -05:00
陈圳佳	24dbc5de53	Fix array values of additionalParameters Closes gh-15468	2024-09-19 16:05:39 -05:00
Steve Riesenberg	c1a303bc92	Add tests for overriding parameters Issue gh-15298 Issue gh-11298	2024-09-19 13:01:09 -05:00
Steve Riesenberg	5d8cf6a8bc	Polish gh-13588	2024-09-19 12:08:48 -05:00
Tran Ngoc Nhan	2c9c309d7f	Provide Casting for ReactiveJwtDecoder Closes gh-15773	2024-09-17 13:54:35 -07:00
Steve Riesenberg	63f018eb18	Update tests using deprecated classes Issue gh-15737	2024-09-10 15:10:42 -05:00
Steve Riesenberg	7490a8162b	Deprecate default OAuth2AccessTokenResponseClients Closes gh-15737	2024-09-10 15:10:41 -05:00
Steve Riesenberg	2cead9b73f	Add RestClient implementations Issue gh-15298	2024-09-10 15:10:41 -05:00
Marcus Hert Da Coregio	912062d307	Merge branch '6.2.x' into 6.3.x	2024-08-19 09:11:10 -03:00
Daniel Garnier-Moiroux	79fb0113c8	Bump io-spring-javaformat from 0.0.42 to 0.0.43 Bumps `io-spring-javaformat` from 0.0.42 to 0.0.43. Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.42 to 0.0.43 - [Release notes](https://github.com/spring-io/spring-javaformat/releases) - [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43) Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.42 to 0.0.43 - [Release notes](https://github.com/spring-io/spring-javaformat/releases) - [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43) --- updated-dependencies: - dependency-name: io.spring.javaformat:spring-javaformat-checkstyle dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin dependency-type: direct:production update-type: version-update:semver-patch ... --- Manual updates: - Adhere to rule where `@Deprecated` annotations and `@deprecated` javadoc comments MUST be used together Signed-off-by: dependabot[bot] <support@github.com>	2024-08-19 09:11:05 -03:00
Daniel Garnier-Moiroux	2caf1fb6b4	Bump io-spring-javaformat from 0.0.42 to 0.0.43 Bumps `io-spring-javaformat` from 0.0.42 to 0.0.43. Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.42 to 0.0.43 - [Release notes](https://github.com/spring-io/spring-javaformat/releases) - [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43) Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.42 to 0.0.43 - [Release notes](https://github.com/spring-io/spring-javaformat/releases) - [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43) --- updated-dependencies: - dependency-name: io.spring.javaformat:spring-javaformat-checkstyle dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin dependency-type: direct:production update-type: version-update:semver-patch ... --- Manual updates: - Adhere to rule where `@Deprecated` annotations and `@deprecated` javadoc comments MUST be used together Signed-off-by: dependabot[bot] <support@github.com>	2024-08-19 09:08:24 -03:00
Steve Riesenberg	e3c19ba86c	Add RestClient interceptor Closes gh-13588	2024-08-16 17:15:18 -05:00
Josh Cummings	b6ce40980d	Merge branch '6.3.x'	2024-07-22 15:34:34 -06:00
Josh Cummings	d887c7882d	Merge branch '6.2.x' into 6.3.x Closes gh-15460	2024-07-22 15:34:18 -06:00
Josh Cummings	4406462346	Merge branch '5.8.x' into 6.2.x Closes gh-15459	2024-07-22 15:34:08 -06:00
Josh Cummings	5c1a108b8b	Remove Stray JavaDoc Statement As of the 5.2 release, a separate registrar bean was no longer necessary Closes gh-15425	2024-07-22 15:33:57 -06:00
Josh Cummings	df76537470	Update Formatting Issue gh-15338	2024-07-18 16:39:30 -07:00
rio	e69e0eb245	Check for null Name Attribute Value Closes gh-15338	2024-07-18 16:39:30 -07:00
Marcus Hert Da Coregio	aa9c1bab67	Upgrade to Spring Framework 6.2.0-M4 Closes gh-15266	2024-06-18 14:07:05 -03:00
MateuszLenczewski	077439c73e	Fix typo in JwtDecoder	2024-06-05 17:38:12 -06:00
Steve Riesenberg	3acd2c65d9	Add since 6.4 Issue gh-15012	2024-06-04 13:44:33 -05:00
Steve Riesenberg	7c45ebd81c	Polish gh-15012	2024-06-03 17:02:38 -05:00
Filip Hrisafov	99aee99b34	Expose user name attribute name in `OAuth2UserAuthority`	2024-06-03 12:30:34 -05:00
Steve Riesenberg	db9f5935ae	Merge branch '6.2.x' into 6.3.x	2024-05-29 16:24:05 -05:00
Steve Riesenberg	5a1d261ce0	Merge branch '5.8.x' into 6.2.x	2024-05-29 16:23:37 -05:00
Steve Riesenberg	e34621ec2c	Polish gh-14977	2024-05-29 16:23:00 -05:00
JANG	1695d03b72	Assert WebSession is not null Issue gh-14975	2024-05-29 14:55:37 -05:00
Josh Cummings	dd5edeb255	Preserve ArrayListFromString Type Closes gh-15165	2024-05-28 12:43:57 -06:00
Marcus Hert Da Coregio	08f11f06ab	Revert unnecessary commits from main Issue gh-15016	2024-05-08 13:49:18 -03:00
Steve Riesenberg	2598bf8c37	Polish gh-14859	2024-04-29 15:07:45 -05:00
Crain-32	d0adb2aa70	Simplify Disabling Encoding Client ID and Secret Closes gh-11440	2024-04-29 14:46:12 -05:00
Steve Riesenberg	05d3beb6a8	Polish gh-13648	2024-04-18 16:17:49 -05:00
ch4mpy	b69939c1e5	Getters for OAuth2AuthorizedClientId properties Expose getters for principalName and clientRegistrationId which compose an OAuth2AuthorizedClientId	2024-04-18 16:10:39 -05:00
MrJovanovic13	24fd19b107	Add Default Timeout to JwtDecoders RestTemplate Closes gh-14269	2024-04-18 14:40:18 -06:00
Josh Cummings	8dd28b797a	Update to BouncyCastle 1.78 Closes gh-14910	2024-04-15 15:32:08 -06:00
Josh Cummings	b1b84f9b8a	Revert "Support overriding RestOperations in OidcIdTokenDecoderFactory" This reverts commit `9c352c4b4b`. Issue gh-14178	2024-04-11 14:29:59 -06:00
Josh Cummings	5a50bfccac	Revert "Support overriding WebClient in ReactiveOidcIdTokenDecoderFactory" This reverts commit `0041c658de`. Issue gh-14178	2024-04-11 14:29:59 -06:00
Joe Grandja	9a7f1aa4d9	Add ClientAuthenticationMethod constants tls_client_auth and self_signed_tls_client_auth Closes gh-14889	2024-04-11 15:15:11 -04:00
Joe Grandja	644cfa9f87	Add Jwt validator for the X509Certificate thumbprint claim Closes gh-10538	2024-04-11 12:35:52 -04:00
Josh Cummings	d269176781	Merge branch '6.2.x'	2024-04-04 17:07:03 -06:00
Josh Cummings	01f299f7ab	Merge branch '6.1.x' into 6.2.x Closes gh-14848	2024-04-04 16:56:11 -06:00
Josh Cummings	ef00312991	Merge branch '5.8.x' into 6.1.x Closes gh-14847	2024-04-04 16:55:52 -06:00
Josh Cummings	0af0751cfd	Treat Map Method Parameter as Immutable Closes gh-14802	2024-04-04 16:44:14 -06:00
Josh Cummings	ee42ad2c8c	Polish JwtValidators Closes gh-14831	2024-04-02 16:04:43 -06:00
Max Batischev	ff19f04fca	Add JwtValidators append to default Implemented simplified creation of default OAuth2TokenValidator with additional validators. Closes gh-14831	2024-04-02 14:41:35 -07:00
Josh Cummings	b648a24f5f	Polish Type Conversion API Issue gh-6245	2024-04-01 16:14:21 -06:00
Steve Riesenberg	0078462e41	Make constant public Issue gh-5199	2024-03-15 15:27:42 -05:00
Steve Riesenberg	9728f28380	Add additional constants to OAuth2ParameterNames These additional constants are used for optional parameters in the Access Token Request for the OAuth 2.0 Token Exchange Grant. Issue gh-5199	2024-03-15 15:27:42 -05:00
Steve Riesenberg	e52dd81d03	Customize mapping the OidcUser Closes gh-14672	2024-03-07 15:45:39 -06:00
Steve Riesenberg	85c3d0ab13	Add reactive support for OAuth 2.0 Token Exchange Grant Issue gh-5199	2024-03-06 16:02:58 -06:00
Steve Riesenberg	d2fe9094a9	Add servlet support for OAuth 2.0 Token Exchange Grant Issue gh-5199	2024-03-06 16:02:58 -06:00
greg.lee	07ac0b616b	Introduce Customizable AuthorizationFailureHandler Closes gh-13793	2024-03-01 13:11:46 -06:00
Marcus Hert Da Coregio	21580fd27d	Merge branch '6.2.x'	2024-02-16 13:31:20 -03:00
Marcus Hert Da Coregio	15306c1007	Merge branch '6.1.x' into 6.2.x	2024-02-16 13:21:15 -03:00
Rob Winch	750cb30ce4	Add AuthenticationTrustResolver.isAuthenticated	2024-02-16 13:08:29 -03:00
Steve Riesenberg	96e3e4f8b1	Customize when user info is called Closes gh-13259	2024-02-13 12:34:20 -06:00
ubaid4j	e77126740d	Add ReactiveOidcIdTokenDecoderFactory#setWebClientResolver Closes gh-13274	2024-02-01 10:04:06 -07:00
Josh Cummings	d7599ab192	Polish setAttributesConverter - Add Tests - Add Reactive Support Issue gh-14186	2024-01-30 14:37:20 -07:00
ahmd-nabil	04f0f2597a	Polish DefaultOAuth2UserService Signed-off-by: ahmd-nabil <ahm3dnabil99@gmail.com>	2024-01-30 14:37:20 -07:00
ahmd-nabil	d9d22c75a2	Add support for nested username attribute in DefaultOAuth2User Closes gh-14186 Signed-off-by: ahmd-nabil <ahm3dnabil99@gmail.com>	2024-01-30 14:37:20 -07:00
Josh Cummings	01b7ad42ec	Merge branch '6.2.x'	2024-01-25 17:33:33 -07:00
Josh Cummings	84c45adc70	Merge branch '6.1.x' into 6.2.x Closes gh-14496	2024-01-25 17:33:15 -07:00
Josh Cummings	44f22ee5cf	Merge branch '5.8.x' into 6.1.x Closes gh-14495	2024-01-25 17:32:57 -07:00
Hans Lindner	ca10187fd1	Enhance JWT decoding error handling Previously, the `decode` method threw a `JwtException` directly when encountering an unsupported algorithm or any exception during parsing. This commit introduces a more robust error handling mechanism. Now, instead of throwing exceptions directly, it returns a `Mono.error()` with a `BadJwtException` containing detailed error information. This approach provides more flexibility and allows the caller to handle errors in a more granular way, by being able to use project reactors onError functionality. Closes gh-14467	2024-01-25 17:32:10 -07:00
Josh Cummings	7ee974445b	Update Checkstyle Issue gh-14178	2024-01-22 08:44:54 -07:00
Josh Cummings	04394a63cd	Update Formatting Issue gh-14178	2024-01-22 08:26:25 -07:00
Josh Cummings	1e90bdfc0b	Update Copyright Issue gh-14178	2024-01-19 09:26:04 -07:00
Armin Krezović	9c352c4b4b	Support overriding RestOperations in OidcIdTokenDecoderFactory Closes gh-14178	2024-01-19 09:24:56 -07:00
Armin Krezović	0041c658de	Support overriding WebClient in ReactiveOidcIdTokenDecoderFactory Closes gh-14178	2024-01-19 09:24:56 -07:00
Marcus Hert Da Coregio	9135cb4fbf	Merge branch '6.2.x' Closes gh-14406	2024-01-05 07:53:50 -03:00
Marcus Hert Da Coregio	acaf9ce7e9	Merge branch '6.1.x' into 6.2.x Closes gh-14405	2024-01-05 07:53:43 -03:00
Marcus Hert Da Coregio	d032b23ab7	Make OAuth2AuthorizationExchange serializable Closes gh-14402	2024-01-05 07:53:28 -03:00
Josh Cummings	1b39c1248a	Merge branch '6.2.x'	2023-12-11 10:21:18 -07:00
Josh Cummings	966c01fa90	Merge branch '6.1.x' into 6.2.x Closes gh-14278	2023-12-11 10:21:00 -07:00
Josh Cummings	c4a99fc942	Merge branch '5.8.x' into 6.1.x Closes gh-14277	2023-12-11 10:20:38 -07:00
Candelario	e896b14046	Dropped Nimbus Error Message Closes gh-13730	2023-12-11 10:19:02 -07:00
Josh Cummings	10d88cdf28	Polish Introspection Authentication Converter - Added Reactive Support - Separated SCOPE claim and authorities work - Adjusted for style Issue gh-14198	2023-12-07 15:13:51 -07:00
ahmd-nabil	8279b22940	Add Introspection Authentication Converter Closes #14198 Signed-off-by: ahmd-nabil <ahm3dnabil99@gmail.com>	2023-12-07 15:13:51 -07:00
Parker Mauney	8e93e4715f	Fix typo in getClaimAsMap docstring	2023-11-22 14:02:17 -03:00
Marcus Hert Da Coregio	e3ab1c94d7	Use assertj assertions	2023-11-17 09:04:50 -03:00
Marcus Hert Da Coregio	a7da9491d9	Use assertj assertions	2023-11-17 09:03:36 -03:00
Steve Riesenberg	447f40949c	Revert unnecessary merges on 6.1.x This commit removes unnecessary main-branch merges starting from `9f8db22b77` and adds the following needed commit(s) that were made afterward: - `4d6ff49b9d` - `ed6ff670d1` - `c823b00794` - `44fad21363`	2023-10-31 15:22:15 -05:00
Steve Riesenberg	9db33f33c7	Revert unnecessary merges on 6.0.x This commit removes unnecessary main-branch merges starting from `8750608b5b` and adds the following needed commit(s) that were made afterward: - `5dce82c48b`	2023-10-31 15:11:45 -05:00
Steve Riesenberg	975ac10f19	Merge branch '6.1.x' Closes gh-14042	2023-10-19 16:44:03 -05:00
Steve Riesenberg	b4e0873b1e	Merge branch '6.0.x' into 6.1.x Closes gh-14041	2023-10-19 16:43:21 -05:00
Steve Riesenberg	bb732e9d35	Merge branch '5.8.x' into 6.0.x Closes gh-14040	2023-10-19 16:40:34 -05:00
Steve Riesenberg	5161712c35	Polish gh-13976 Closes gh-13757	2023-10-19 16:40:23 -05:00
Veli Döngelci	a6b872dcf3	Fix caching error state in ReactiveRemoteJWKSource	2023-10-19 16:40:13 -05:00
Valeriy Vyrva	0e30b923f8	Check for null value with the appropriate assertion method	2023-10-03 08:16:21 -06:00
Josh Cummings	c7ea8c6ac7	Fix Formatting Issue gh-13654	2023-10-02 17:47:37 -06:00
Josh Cummings	a3227f041c	Polish OAuth2AuthorizationManagers - Add OAuth2ReactiveAuthorizationManagers - Code to interfaces - Align error message with the same in AuthorityAuthorizationManager - Adjust expectations in tests to confirm an appropriately constructed authorizaion manager - Add JavaDoc and reference documentation Issue gh-13654	2023-10-02 17:26:06 -06:00
Mario Petrovski	2ee8f27997	Fix imports	2023-10-02 17:23:49 -06:00
Mario Petrovski	97ec5c921e	Fix imports in tests	2023-10-02 17:23:49 -06:00
Mario Petrovski	e1db108cb9	Improvements and unit tests.	2023-10-02 17:23:49 -06:00
Mario Petrovski	5e0ea6ce8a	Fix formatting	2023-10-02 17:23:49 -06:00
Mario Petrovski	35e5533a4b	Fix formatting	2023-10-02 17:23:49 -06:00
Mario Petrovski	e99b37a6cb	Fix build	2023-10-02 17:23:49 -06:00
Mario Petrovski	19ae3a765d	Make class final	2023-10-02 17:23:49 -06:00
Mario Petrovski	141605cb24	Fix check build issues	2023-10-02 17:23:49 -06:00
Mario Petrovski	926f4a75ba	Set the import order correctly	2023-10-02 17:23:49 -06:00
Mario Petrovski	81a708e25f	Closes #13754 Add hasScope and hasAnyScope for authorization rules	2023-10-02 17:23:49 -06:00
Marcus Da Coregio	07b6c451fd	Merge branch '6.1.x' Closes gh-13884	2023-09-29 11:47:38 -03:00
Marcus Da Coregio	8adfc9b463	Merge branch '6.0.x' into 6.1.x Closes gh-13883	2023-09-29 11:46:48 -03:00
Marcus Da Coregio	92c82191c9	Merge branch '5.8.x' into 6.0.x Closes gh-13882	2023-09-29 11:46:00 -03:00
Marcus Da Coregio	64e2a2ff8b	Apply updated Code Style Closes gh-13881	2023-09-29 11:44:32 -03:00
Josh Cummings	cb33fd7850	Add OIDC Back-Channel Logout Support Closes gh-12570	2023-09-16 15:12:21 -06:00
Steve Riesenberg	5535d17172	Merge branch '6.1.x' Closes gh-13807 Closes gh-13803 Closes gh-13802	2023-09-12 18:55:42 -05:00
Tim te Beek	9df9cb5aed	refactor: AssertJ best practices Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/bGVuS?organizationId=RGVmYXVsdA%3D%3D Co-authored-by: Moderne <team@moderne.io>	2023-09-12 16:18:14 -06:00
Steve Riesenberg	74dc3fd7b1	Merge branch '6.0.x' into 6.1.x Closes gh-13799 in 6.1.x Closes gh-13801	2023-09-12 17:02:48 -05:00
Steve Riesenberg	771d9cd8b6	Merge branch '5.8.x' into 6.0.x Closes gh-13799	2023-09-12 17:00:47 -05:00
Steve Riesenberg	9b7a110704	Fix OAuth2AuthenticationExceptionMixinTests on JDK 17 Closes gh-11893	2023-09-12 16:51:47 -05:00
Josh Cummings	fed3de8dce	Remove Logging of Untrusted Data	2023-08-08 10:02:42 -06:00
Josh Cummings	3307c656f4	Polish - Added JavaDoc @since attribute - Added Predicate based test - Adjusted test names Issue gh-13427	2023-08-08 10:02:42 -06:00
Baljit Singh	e1bae73703	add factory methods for Jwt issuer resolvers Closes gh-13427	2023-08-08 10:02:42 -06:00
Baljit Singh	7a713cab6f	improve performance of Jwt issuer resolvers	2023-08-08 10:02:42 -06:00
Baljit Singh	da35fa0485	make logging consistent for Jwt issuer resolvers	2023-08-08 10:02:42 -06:00
Baljit Singh	af00be8a3d	fix Javadocs for Jwt issuer resolvers	2023-08-08 10:02:42 -06:00

... 2 3 4 5 6 ...

1479 Commits