root
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Actions 21 Packages Projects Releases Wiki Activity
19,841 Commits 47 Branches 367 Tags 124 MiB
Commit Graph

576 Commits

Author SHA1 Message Date
Josh Cummings 80b31820cd
Use OpenSAML API in authentication 
Issue gh-11658
 2024-08-06 18:14:10 -06:00
Josh Cummings 416859e70e
Use OpenSAML API in authentication.logout 
Issue gh-11658
 2024-08-06 18:14:10 -06:00
Josh Cummings 94431d1650
Add Internal OpenSAML API 
This will be useful for exposing OpenSAML functionality at
a higher level. Each OpenSAML major version release should
provide a new implementation.

Issue gh-11658
 2024-08-06 18:14:09 -06:00
Josh Cummings 54a4792b7a
Remove Unneeded OpenSAML 4 References 
This will reduce the number of components that need to be
duplicated between the OpenSAML 4 and 5 support

Issue gh-11658
 2024-08-06 18:14:09 -06:00
Josh Cummings ab842b74b9
Use OpenSAML ParserPool Defaults 
Originally, Spring Security turned off various features
XML parsing feature for the underlying DocumentBuilderFactory
that OpenSAML uses.

Both OpenSAML 4 and 5 set these values by default, so we
can safely accept the defaults at this point.

Issue gh-11658
 2024-08-06 18:14:09 -06:00
Josh Cummings 2f34824d0e Fix Formatting 2024-07-29 14:03:35 -07:00
Sanghyuk Jung 3e3f2ae8f0 Remove Duplicated "the" in JavaDoc 2024-07-29 14:03:35 -07:00
Josh Cummings 335dff63c1
Fix Formatting 2024-07-29 14:54:08 -06:00
Josh Cummings 0b0ffa01f7
Repair Flaky Tests 
- MockWebServer seems to start failing to respond to connections
at a certain frequency of requests. This commit builds in a small
delay of 1 millisecond to address this.

Closes gh-15395
 2024-07-29 14:45:48 -06:00
Josh Cummings 9d8888c5f0 Use AssertingPartyMetadata 
Issue gh-15394
 2024-07-19 18:48:23 -07:00
Josh Cummings dfa67fd8a1 Polish Tests 
- Use test objects
- Ensure assertThat is checked

Issue gh-11725
 2024-07-19 18:48:23 -07:00
Josh Cummings e6dfb63bdf Add OpenSamlAssertingPartyMetadataRepository 
Closes gh-12116
Closes gh-15395
 2024-07-19 18:48:23 -07:00
Josh Cummings 7ad9ee93cf Add AssertingPartyMetadataRepository 
Closes gh-15394
 2024-07-19 18:48:23 -07:00
Josh Cummings 796e4d6b6c
Add query parameter support for authn requests 
Closes gh-15017
 2024-07-13 23:57:57 -06:00
Josh Cummings 161b0f303d
Merge branch '6.3.x' 2024-07-10 17:13:04 -06:00
Josh Cummings 8951b6e0e1
Merge branch '6.2.x' into 6.3.x 2024-07-10 17:12:55 -06:00
Josh Cummings e1fdc61360
Merge branch '5.8.x' into 6.2.x 2024-07-10 17:12:43 -06:00
Josh Cummings 32e2735f45
Clarify Valid Metadata Locations 2024-07-10 17:10:49 -06:00
Josh Cummings dcf5cc9e06
Extract EntityDescriptor to AssertingPartyDetails Logic 
Closes gh-15090
 2024-07-10 17:08:36 -06:00
Josh Cummings 6bd2f1ca97
Deprecate OpenSamlRelyingPartyRegistration 
Closes gh-15343
 2024-07-01 19:50:54 -06:00
Josh Cummings 7b39800606
Add CachingRelyingPartyRegistrationRepository 
Closes gh-15341
 2024-07-01 19:43:09 -06:00
Josh Cummings 1e2900328b
Add IterableRelyingPartyRegistrationRepository 
Closes gh-15027
 2024-07-01 19:43:09 -06:00
James Howe 902aff451f Update OpenSaml4AuthenticationProvider.java 
Fix level of log message.
 2024-06-24 14:10:54 -06:00
Josh Cummings 672902a8f3
Add Metadata Content Type Test 
Issue gh-15147
 2024-06-21 16:01:29 -06:00
Josh Cummings a529607d42
Add samlmetadata Qualifier to Content Type 
Closes gh-15147
 2024-06-21 12:57:10 -06:00
Josh Cummings b73155df26
Merge branch '6.3.x' 2024-05-31 14:14:02 -06:00
Josh Cummings 3defed4c3d
Merge branch '6.2.x' into 6.3.x 2024-05-31 14:13:46 -06:00
Josh Cummings 1cc66faaef
Polish Update Signature Validator 
Issue gh-15022
 2024-05-31 14:13:23 -06:00
Josh Cummings c4d8693063
Merge branch '6.3.x' 2024-05-31 13:46:50 -06:00
Josh Cummings 0da7284ddd
Merge branch '6.2.x' into 6.3.x 
Closes gh-15183
 2024-05-31 13:46:32 -06:00
Josh Cummings 99f233f98c
Update Signature Validator 
Closes gh-15022
 2024-05-31 13:29:28 -06:00
Josh Cummings 6695784a3f
Polish Logging 
Issue gh-14801
 2024-05-31 12:48:07 -06:00
Max Batischev 801e808f67 Add support sign SAML metadata 
Closes gh-14801
 2024-05-31 12:43:19 -06:00
Josh Cummings 63e24a3026
Adjust JavaDoc Classpath 
Issue gh-14931
 2024-05-20 12:42:01 -06:00
Marcus Hert Da Coregio 08f11f06ab Revert unnecessary commits from main 
Issue gh-15016
 2024-05-08 13:49:18 -03:00
Josh Cummings c97b2aa4e0
Merge branch '6.1.x' into 6.2.x 
Closes gh-14958
 2024-04-25 16:12:05 -06:00
Josh Cummings d88f2e5133
Merge branch '5.8.x' into 6.1.x 
Closes gh-14957
 2024-04-25 16:08:47 -06:00
Josh Cummings c35e107744
Add ProxyRestriction Validator 
Closes gh-14931
 2024-04-25 16:04:37 -06:00
Josh Cummings 3f11622687
Polish Status Codes 
Adjusted code styling to avoid nested ifs

Closes gh-11725
 2024-03-22 11:24:55 -06:00
YoungKi Hong 6e45e65cac Update to return List of StatusCodes and add Saml2Error to result object and other formatting 2024-03-22 11:08:24 -06:00
youngkih 76331a5653 Add test for status code returning parent and child status code 2024-03-22 11:08:24 -06:00
youngkih e1bcd778f0 Update copywrite to 2024 2024-03-22 11:08:24 -06:00
youngkih 994e064412 Use Optional in case child status code is null 2024-03-22 11:08:24 -06:00
YoungKi Hong 01e2971085 [ISSUE-11725] Add secondary statusCode messages on error 2024-03-22 11:08:24 -06:00
Josh Cummings a1549d9dd7
Merge branch '6.2.x' 2024-02-20 17:17:27 -07:00
Josh Cummings cfb9f1ed32
Merge branch '6.1.x' into 6.2.x 
Closes gh-14641
 2024-02-20 17:17:12 -07:00
Josh Cummings e8c93fdc98
Move Saml Class 
Closes gh-14628
 2024-02-20 17:15:41 -07:00
smallbun ceb5100ba3 Optimize Saml2MetadataFilter 2024-01-31 17:40:45 -07:00
Marcus Hert Da Coregio e3ab1c94d7 Use assertj assertions 2023-11-17 09:04:50 -03:00
Marcus Hert Da Coregio a7da9491d9 Use assertj assertions 2023-11-17 09:03:36 -03:00
Steve Riesenberg 447f40949c
Revert unnecessary merges on 6.1.x 
This commit removes unnecessary main-branch merges starting from
9f8db22b77 and adds the following
needed commit(s) that were made afterward:

- 4d6ff49b9d
- ed6ff670d1
- c823b00794
- 44fad21363
 2023-10-31 15:22:15 -05:00
Steve Riesenberg 9db33f33c7
Revert unnecessary merges on 6.0.x 
This commit removes unnecessary main-branch merges starting from
8750608b5b and adds the following
needed commit(s) that were made afterward:

- 5dce82c48b
 2023-10-31 15:11:45 -05:00
Marcus Da Coregio 10c85ccd29 Merge branch '6.1.x' 
Closes gh-14039
 2023-10-19 10:13:51 -03:00
Marcus Da Coregio 8ca7d19de6 Merge branch '6.0.x' into 6.1.x 
Closes gh-14038
 2023-10-19 10:13:40 -03:00
Marcus Da Coregio 9b2b7e58b5 Merge branch '5.8.x' into 6.0.x 
Closes gh-14037
 2023-10-19 10:03:33 -03:00
Marcus Da Coregio 70ad3bf749 relay_state should not be included in signing calculation when it is null 
Closes gh-13913
 2023-10-19 09:58:47 -03:00
Scott Shidlovsky 19c4e427ee Update OpenSamlAuthenticationRequestResolverTests from Junit 4 to Junit 5 
(cherry picked from commit 508f7d7b8a)
 2023-10-19 09:50:28 -03:00
Marcus Da Coregio 4ca7e842f0 Merge branch '6.1.x' 2023-10-16 08:01:33 -03:00
Roman_Dyndyn a884a45cb7 Fix parsing of GET SAML logout requests 2023-10-16 08:01:05 -03:00
adrianpoplesanu 823bc971f5 Make Optional Pretty-Printed Metadata 
Closes gh-13715
 2023-10-03 08:15:23 -06:00
Marcus Da Coregio cc6010876f Merge branch '6.1.x' 
Closes gh-13943
 2023-10-03 08:43:41 -03:00
Marcus Da Coregio 2af78c19ab Saml2LogoutRequestMixin relayState property should be binding 
Closes gh-12539
 2023-10-03 08:42:43 -03:00
Marcus Da Coregio 4c3c3e6c20 Merge branch '5.8.x' into 6.0.x 
Closes gh-13939
 2023-10-03 08:41:50 -03:00
Marcus Da Coregio 64270f28e4 Saml2LogoutRequestMixin relayState property should be binding 
Closes gh-12539
 2023-10-03 08:41:33 -03:00
Marcus Da Coregio 07b6c451fd Merge branch '6.1.x' 
Closes gh-13884
 2023-09-29 11:47:38 -03:00
Marcus Da Coregio 8adfc9b463 Merge branch '6.0.x' into 6.1.x 
Closes gh-13883
 2023-09-29 11:46:48 -03:00
Marcus Da Coregio 92c82191c9 Merge branch '5.8.x' into 6.0.x 
Closes gh-13882
 2023-09-29 11:46:00 -03:00
Marcus Da Coregio 64e2a2ff8b Apply updated Code Style 
Closes gh-13881
 2023-09-29 11:44:32 -03:00
Marcus Da Coregio e29ea47ff7 Use Gradle's Version Catalog 
Issue gh-13868
 2023-09-28 14:57:18 -03:00
Marcus Da Coregio d6fac11bfe Merge branch '6.1.x' 2023-09-25 10:10:48 -03:00
Marcus Da Coregio e916e44a5e Merge branch '6.0.x' into 6.1.x 2023-09-25 10:10:39 -03:00
Marcus Da Coregio 1a0b8b7994 Merge branch '5.8.x' into 6.0.x 2023-09-25 10:09:40 -03:00
Marcus Da Coregio 664ee9a206 Fix formatting 
Issue gh-13776
 2023-09-25 10:09:32 -03:00
Jannick Weisshaupt b67218c150 Fix corrupted saml2 metadata when special characters are present 
Closes gh-13776
 2023-09-25 14:08:14 +01:00
Steve Riesenberg d6ff58bb7f
Update Mockito to 5.5.0 
Closes gh-13810
 2023-09-19 10:39:03 -05:00
Steve Riesenberg 5535d17172
Merge branch '6.1.x' 
Closes gh-13807
Closes gh-13803
Closes gh-13802
 2023-09-12 18:55:42 -05:00
Steve Riesenberg 461bf9a09c
Merge branch '6.0.x' into 6.1.x 
Closes gh-13806
 2023-09-12 18:48:28 -05:00
Steve Riesenberg f03224fe7f
Merge branch '5.8.x' into 6.0.x 
Closes gh-13805
 2023-09-12 18:48:13 -05:00
Steve Riesenberg 3feb809b35
Fix Saml2AuthenticationExceptionMixin on JDK 17 
Closes gh-13804
 2023-09-12 18:39:29 -05:00
Tim te Beek 9df9cb5aed refactor: AssertJ best practices 
Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/bGVuS?organizationId=RGVmYXVsdA%3D%3D

Co-authored-by: Moderne <team@moderne.io>
 2023-09-12 16:18:14 -06:00
Josh Cummings 3540dee259
Merge branch '6.1.x' 
Closes gh-13701
 2023-08-18 14:36:45 -06:00
Josh Cummings 321deb30cc
Resolve EntityID Map Key 
Closes gh-13700
 2023-08-18 14:36:27 -06:00
Marcus Da Coregio 9c599fa8d7 Fix formatting 2023-08-17 09:27:02 -03:00
Josh Cummings 3ba5cc0e40
Add CSRF Exception 
Issue gh-13653
 2023-08-16 16:54:50 -06:00
1993heqiang fb2b0a76e7 Fix typo 2023-08-07 15:01:52 -06:00
Josh Cummings 8d0e426654
Generate Shared Test SAML Response 
Issue gh-13433
 2023-07-11 10:36:06 -06:00
Josh Cummings f2f19270da
Update to OpenSAML 4.3.0 
Closes gh-13433
 2023-07-10 17:56:42 -06:00
Krzysztof Krason 9b603b99ab Using modern Java features 2023-06-22 11:24:25 -06:00
Josh Cummings 49366907e2
Merge branch '6.0.x' 
Closes gh-13183
 2023-05-15 17:31:48 -06:00
Josh Cummings b438bc5384
Merge branch '5.8.x' into 6.0.x 
Closes gh-13182
 2023-05-15 17:30:14 -06:00
lukasz.migdalek f4915890cc
Use Spec Order for Verifying Signatures 
Closes gh-12346
 2023-05-15 17:24:22 -06:00
Marcus Da Coregio 65baae78a9 Merge branch '6.0.x' 
Closes gh-13142
 2023-05-08 14:52:25 -03:00
Marcus Da Coregio 0b6e84b8b7 Merge branch '5.8.x' into 6.0.x 
Closes gh-13141
 2023-05-08 14:52:00 -03:00
Marcus Da Coregio 8d5304f530 Use function definition instead of arrow function expression 
Closes gh-13106
 2023-05-08 14:43:06 -03:00
SeasonPan a44e91d044 fix javadoc typo 2023-04-24 16:41:17 -06:00
Marcus Da Coregio 1a4a2a9055 Merge branch '5.8.x' into 6.0.x 2023-04-14 13:32:10 -03:00
Marcus Da Coregio 54117d7d27 Fix test suffix to align with checkstyle 2023-04-14 13:29:15 -03:00
Brummolix d4ed0ad0cf Replace deprecated OpenSaml methods 2023-04-10 18:24:22 -06:00
Liviu Gheorghe 7e305dd003 Don't use raw xml saml authentication request for response validation 
closes gh-12961
 2023-04-03 15:11:08 -06:00
Josh Cummings 46a40e7b38
Merge branch '6.0.x' 
Closes gh-12937
 2023-03-27 16:42:28 -06:00
Josh Cummings 20358e769d
Merge branch '5.8.x' into 6.0.x 
Closes gh-12936
 2023-03-27 16:39:48 -06:00
Josh Cummings c15589ede1
Merge branch '5.7.x' into 5.8.x 
Closes gh-12935
 2023-03-27 16:35:46 -06:00
Tatiana Slednikova a106188add Add nameIdFormat processing to OpenSamlAuthenticationRequestResolver 
Closes gh-12825
 2023-03-27 16:33:11 -06:00
Josh Cummings fd4541be0c Add AuthnRequstsSigned to OpenSaml implementations 
Issue gh-12841
 2023-03-20 14:20:30 -06:00
Josh Cummings fd6aecf8da Polish AuthnRequestsSigned support 
Issue gh-12604
 2023-03-20 14:20:30 -06:00
Liviu Gheorghe 21d919169a Add support for AuthnRequestsSigned setting 
closes gh-12604
 2023-03-20 14:20:30 -06:00
Josh Cummings a7562ad950
Update io.spring.javaformat to 0.0.38 
Closes gh-12891
 2023-03-20 10:44:35 -06:00
Josh Cummings 3ad6c6ce06 Use EntityId-lookup Components 
Closes gh-12880
 2023-03-17 18:00:02 -06:00
Josh Cummings dbdf04f151 SAML Response Reads EntityId 
Closes gh-10243
 2023-03-17 18:00:02 -06:00
Josh Cummings 3f2816f745 Logout Request Reads EntityId 
Closes gh-12843
Closes gh-12845
 2023-03-17 18:00:02 -06:00
Josh Cummings 785123eb2a Add Saml2MetadataResponseResolver 
Closes gh-12846
 2023-03-17 18:00:02 -06:00
Josh Cummings 7678523b73 Support Creating EntitiesDescriptor 
Clsoes gh-12844
 2023-03-17 18:00:02 -06:00
Josh Cummings 37b893a0f5 Extract Placeholder Resolution 
Closes gh-12842
 2023-03-17 18:00:02 -06:00
Josh Cummings 42cece21b4 Add OpenSamlRelyingPartyRegistration 
Issue gh-12841
 2023-03-17 18:00:02 -06:00
Josh Cummings 538db29bfe Add RelyingPartyRegstration#mutate 
Closes gh-12841
 2023-03-17 18:00:02 -06:00
Josh Cummings 97d1a49daf Add findUniqueByAssertingPartyEntityId 
Closes gh-12848
 2023-03-17 18:00:02 -06:00
Josh Cummings 8522e9abd6 Add Missing JavaDoc 
Issue gh-12848
 2023-03-17 18:00:02 -06:00
Josh Cummings 1409ef064a Add InMemoryRelyingPartyRegistrationTests 
Issue gh-12848
 2023-03-17 18:00:02 -06:00
Josh Cummings baf2c98c9f
Merge branch '6.0.x' 2023-03-01 11:25:47 -07:00
Josh Cummings 14ee873b74
Merge branch '5.8.x' into 6.0.x 2023-03-01 11:25:21 -07:00
Josh Cummings e7b14b3ca2
Merge branch '5.7.x' into 5.8.x 2023-03-01 11:24:17 -07:00
Josh Cummings 66665344c5 Formatting 
Issue gh-12664
 2023-03-01 11:23:45 -07:00
stnor 6c7703789a Ignore SPSSODescriptor elements 
Closes gh-12664
 2023-03-01 11:23:45 -07:00
Josh Cummings 41fadaecd3
Merge branch '6.0.x' 
Closes gh-12800
 2023-02-28 13:08:47 -07:00
Josh Cummings e28ea6dbad
Preserve OpenSamlAssertingPartyDetails Instance 
Closes gh-12667
 2023-02-28 13:08:13 -07:00
Josh Cummings 735981192f
Merge branch '6.0.x' 
Closes gh-12768
 2023-02-22 10:22:47 -07:00
Josh Cummings d3a65dbbbe
Merge branch '5.8.x' into 6.0.x 
Closes gh-12767
 2023-02-22 10:22:11 -07:00
Dayan Kodippily 79887fa213 Closes gh-12472 2023-02-22 10:21:46 -07:00
Josh Cummings a1b282ff03
Merge branch '5.7.x' into 5.8.x 
Closes gh-12693
 2023-02-17 10:09:32 -07:00
Josh Cummings 2db4430dcd Preserve OpenSamlAssertingPartyDetails Instance 
Closes gh-12667
 2023-02-17 10:02:17 -07:00
Josh Cummings c1c28375d6 Add RelayStateResolver 
Co-authored-by: ghaege <ghaege@qaepps.de>

Closes gh-12538
 2023-02-16 12:25:55 -07:00
Josh Cummings ab8337e371 Polish 
Co-authored-by: ghaege <ghaege@qaepps.de>

Issue gh-12538
 2023-02-16 12:25:55 -07:00
Josh Cummings 65b9dbf031
Merge branch '6.0.x' 
Closes gh-12460
 2022-12-23 15:56:15 -07:00
Josh Cummings 9c0a35a6f6
Merge branch '5.8.x' into 6.0.x 
Closes gh-12459
 2022-12-23 15:55:43 -07:00
Josh Cummings fda0e9a2b6
Merge branch '5.7.x' into 5.8.x 
Closes gh-12458
 2022-12-23 15:54:37 -07:00
Josh Cummings 3cfaf0d11d
Avoid LinkedMultiValueMap in Serializable Object 
Closes gh-11785
 2022-12-23 15:54:00 -07:00
Marcus Da Coregio 369bc71c81 Polish 
Issue gh-11815
 2022-12-05 10:30:05 -08:00
Mitja Kotnik 70249e536a Add a new Saml2MetadataFilter constructor for RelyingPartyRegistrationRepository 
Closes gh-11815
 2022-12-05 10:30:05 -08:00
Marcus Da Coregio fa9cb82d4a Merge branch '5.8.x' 2022-11-16 14:51:37 -03:00
Marcus Da Coregio 3d0be9beba Merge branch '5.7.x' into 5.8.x 2022-11-16 14:51:23 -03:00
Marcus Da Coregio 2d19d972f4 Merge branch '5.6.x' into 5.7.x 2022-11-16 14:51:07 -03:00
Marcus Da Coregio d5aabd721a Specify UTF8 for response content 
This is needed because in some other platforms, like Windows, the default charset might be different

Issue gh-12026
 2022-11-16 14:50:31 -03:00
Marcus Da Coregio a9ece433fe Merge branch '5.8.x' 
Closes gh-12223
 2022-11-16 13:45:17 -03:00
Marcus Da Coregio 9b6be3a556 Merge branch '5.7.x' into 5.8.x 
Closes gh-12222
 2022-11-16 13:44:48 -03:00
Marcus Da Coregio 8441e755d3 Merge branch '5.6.x' into 5.7.x 
Closes gh-12221
 2022-11-16 13:44:16 -03:00
Marcus Da Coregio 53148dc7b5 Use UTF-8 in Saml2MetadataFilter response writer 
Closes gh-12026
 2022-11-16 13:43:46 -03:00
Josh Cummings b3fdd00705
Merge branch '5.8.x' 
Closes gh-12210
 2022-11-14 18:17:30 -07:00
Josh Cummings b81fbf024b
Merge branch '5.7.x' into 5.8.x 
Closes gh-12209
 2022-11-14 18:17:02 -07:00
Josh Cummings 79483b2bc9
Merge branch '5.6.x' into 5.7.x 
Closes gh-12208
 2022-11-14 18:16:22 -07:00
Sabina Palakova ed3af6482d Fix SAML logout log messages 
Fixes SAML logout log messages incorrectly referring to logout
response instead of logout request and vice versa.

Closes gh-12129
 2022-11-14 18:11:49 -07:00