Commit Graph

1749 Commits

Author SHA1 Message Date
Andrey Litvitski b0f8aa5ea0 Fix to allow multiple AuthenticationFilter instances to process each request
CodeQL Advanced / codeql-analysis-call (push) Has been cancelled Details
CI / Build (17, ubuntu-latest) (push) Has been cancelled Details
CI / Build (17, windows-latest) (push) Has been cancelled Details
CI / Test Against Snapshots (17, 17) (push) Has been cancelled Details
CI / Test Against Snapshots (21-ea, 21) (push) Has been cancelled Details
CI / Check Samples (push) Has been cancelled Details
Deploy Docs / build (push) Has been cancelled Details
CI / Deploy Artifacts (push) Has been cancelled Details
CI / Deploy Docs (push) Has been cancelled Details
CI / Deploy Schema (push) Has been cancelled Details
CI / Perform Release (push) Has been cancelled Details
CI / Send Notification (push) Has been cancelled Details
Closes gh-17173

Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
2025-06-06 06:37:03 -04:00
Joaquin Santana c0568ea9b0 Log Request Mismatch Only When Mismatches
CodeQL Advanced / codeql-analysis-call (push) Has been cancelled Details
CI / Build (17, ubuntu-latest) (push) Has been cancelled Details
CI / Build (17, windows-latest) (push) Has been cancelled Details
CI / Test Against Snapshots (17, 17) (push) Has been cancelled Details
CI / Test Against Snapshots (21-ea, 21) (push) Has been cancelled Details
CI / Check Samples (push) Has been cancelled Details
Deploy Docs / build (push) Has been cancelled Details
CI / Deploy Artifacts (push) Has been cancelled Details
CI / Deploy Docs (push) Has been cancelled Details
CI / Deploy Schema (push) Has been cancelled Details
CI / Perform Release (push) Has been cancelled Details
CI / Send Notification (push) Has been cancelled Details
Signed-off-by: Joaquin Santana <joaquinjsb@outlook.com>
2025-05-23 11:34:48 -06:00
Mark Putsiata cae3467a8d Improve AbstractPreAuthenticatedProcessingFilter docs
CodeQL Advanced / Analyze (${{ matrix.language }}) (none, actions) (push) Has been cancelled Details
CI / Build (17, ubuntu-latest) (push) Has been cancelled Details
CI / Build (17, windows-latest) (push) Has been cancelled Details
CI / Test Against Snapshots (17, 17) (push) Has been cancelled Details
CI / Test Against Snapshots (21-ea, 21) (push) Has been cancelled Details
CI / Check Samples (push) Has been cancelled Details
Deploy Docs / build (push) Has been cancelled Details
CI / Deploy Artifacts (push) Has been cancelled Details
CI / Deploy Docs (push) Has been cancelled Details
CI / Deploy Schema (push) Has been cancelled Details
CI / Perform Release (push) Has been cancelled Details
CI / Send Notification (push) Has been cancelled Details
Clarify misleading SecurityContextRepository setter documentation.
Note that AbstractPreAuthenticatedProcessingFilter saves the
SecurityContext upon successful authentication, and this behavior
can be customized via the setSecurityContextRepository setter.

Closes gh-14137

Signed-off-by: Mark Putsiata <m.putsiata@gmail.com>
2025-05-19 09:45:53 -06:00
Josh Cummings e48f26e51e
Propagate StrictFirewallRequest Wrapper
CodeQL Advanced / Analyze (${{ matrix.language }}) (none, actions) (push) Waiting to run Details
CI / Build (17, ubuntu-latest) (push) Waiting to run Details
CI / Build (17, windows-latest) (push) Waiting to run Details
CI / Test Against Snapshots (17, 17) (push) Waiting to run Details
CI / Test Against Snapshots (21-ea, 21) (push) Waiting to run Details
CI / Check Samples (push) Waiting to run Details
CI / Deploy Artifacts (push) Blocked by required conditions Details
CI / Deploy Docs (push) Blocked by required conditions Details
CI / Deploy Schema (push) Blocked by required conditions Details
CI / Perform Release (push) Blocked by required conditions Details
CI / Send Notification (push) Blocked by required conditions Details
Deploy Docs / build (push) Waiting to run Details
Closes gh-16978
2025-05-02 10:57:07 -06:00
DingHao 857ef6fe08 WithHttpOnlyCookie defaults to false
CI / Build (17, ubuntu-latest) (push) Has been cancelled Details
CI / Build (17, windows-latest) (push) Has been cancelled Details
CI / Test Against Snapshots (17, 17) (push) Has been cancelled Details
CI / Test Against Snapshots (21-ea, 21) (push) Has been cancelled Details
CI / Check Samples (push) Has been cancelled Details
Deploy Docs / build (push) Has been cancelled Details
Trigger Dependabot Auto Merge Forward / Trigger Workflow (push) Has been cancelled Details
CI / Deploy Artifacts (push) Has been cancelled Details
CI / Deploy Docs (push) Has been cancelled Details
CI / Deploy Schema (push) Has been cancelled Details
CI / Perform Release (push) Has been cancelled Details
CI / Send Notification (push) Has been cancelled Details
Closes gh-16820

Signed-off-by: DingHao <dh.hiekn@gmail.com>
2025-04-01 11:59:51 -06:00
Tran Ngoc Nhan ab6e9d2d1f
Clarify WebInvocationPrivilegeEvaluator JavaDoc
CI / Build (17, ubuntu-latest) (push) Waiting to run Details
CI / Build (17, windows-latest) (push) Waiting to run Details
CI / Test Against Snapshots (17, 17) (push) Waiting to run Details
CI / Test Against Snapshots (21-ea, 21) (push) Waiting to run Details
CI / Check Samples (push) Waiting to run Details
CI / Deploy Artifacts (push) Blocked by required conditions Details
CI / Deploy Docs (push) Blocked by required conditions Details
CI / Deploy Schema (push) Blocked by required conditions Details
CI / Perform Release (push) Blocked by required conditions Details
CI / Send Notification (push) Blocked by required conditions Details
Deploy Docs / build (push) Waiting to run Details
Trigger Dependabot Auto Merge Forward / Trigger Workflow (push) Waiting to run Details
Closes gh-16529

Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-03-20 14:38:10 -05:00
Rob Winch adb303e152
Add testRuntimeOnly junit-platform-launcher
Closes gh-16755
2025-03-17 14:16:44 -05:00
Rob Winch 6a0b683e60 StrictFirewallHttpRequest.buid returns StrictFirewallHttpRequest
Closes gh-16069
2024-12-11 15:46:31 -06:00
Josh Cummings 0f85da77be
Merge branch '6.2.x' into 6.3.x
Closes gh-16219
2024-12-05 09:52:32 -07:00
Josh Cummings 96a9cf0d2d
Restore Previous Behavior for Servlet 5
Closes gh-16173
2024-12-05 09:52:06 -07:00
Joe Grandja fa5fc6dd62 Fix checkstyle errors for toLower/toUpperCase usage 2024-11-18 04:56:17 -05:00
Joe Grandja 709103e38c Merge branch '6.2.x' into 6.3.x 2024-11-18 04:45:38 -05:00
Joe Grandja a8c4d6cead Require Locale argument for toLower/toUpperCase usage 2024-11-18 04:22:26 -05:00
Steve Riesenberg 285d16b046
Polish IpAddressMatcher
(cherry picked from commit 83a79159b8)
2024-11-15 10:17:39 -06:00
Steve Riesenberg ddf4542a9e
Add hasText assertion to IpAddressMatcher constructor
Issue gh-15527

(cherry picked from commit 3a29819651)
2024-11-15 10:17:39 -06:00
Steve Riesenberg 554df6fab6
Fix NPE in IpAddressMatcher
Closes gh-15527

(cherry picked from commit 52de894c3c)
2024-11-15 10:17:38 -06:00
DingHao 308e408b13 Polish DelegatingAuthenticationConverter 2024-10-24 20:47:46 -07:00
Josh Cummings 5048a68ab7
Merge branch '6.2.x' into 6.3.x
Closes gh-15986
2024-10-24 11:56:41 -06:00
Josh Cummings addc7c53b2
Merge branch '5.8.x' into 6.2.x
Closes gh-15985
2024-10-24 11:56:16 -06:00
DingHao 1399a82ea9 Return Null Request When Cookie Is Malformed
Closes gh-15905
2024-10-24 10:55:36 -07:00
Rob Winch 1528c421bd Merge branch '6.2.x' into 6.3.x
Add Firewall for WebFlux

Closes gh-15967
2024-10-21 09:43:48 -05:00
Rob Winch 0e257b56ce Add Firewall for WebFlux
Closes gh-15967
2024-10-21 09:42:24 -05:00
Rob Winch 542071b1f8 Merge Add Firewall for WebFlux
Closes gh-15967
2024-10-21 08:56:42 -05:00
Rob Winch 4ce7cde155 Add Firewall for WebFlux
Closes gh-15967
2024-10-21 08:46:13 -05:00
Josh Cummings 8917cdb404
Improve Performance of IPv4 Check
Closes gh-15324
2024-07-01 11:40:28 -06:00
Steve Riesenberg 1e4aff2bdb
Merge branch '6.2.x' into 6.3.x
Closes gh-15186
2024-05-31 19:02:31 -05:00
Steve Riesenberg 3fc7b6e921
Merge branch '5.8.x' into 6.2.x
Closes gh-15185
2024-05-31 18:34:14 -05:00
Steve Riesenberg dcb8c563e8
Fix ArrayIndexOutOfBoundsException
Issue gh-13310
Closes gh-15184
2024-05-31 18:12:21 -05:00
Josh Cummings 7288fecc24
Verify ipAddress Not A Hostname
Closes gh-15172
2024-05-30 17:50:56 -06:00
Josh Cummings 6956ed693c
Polish DefaultSecurityFilterChain Logs
Reuse String manipulation logic in Spring Framework
Compress whitespace

Closes gh-15096
2024-05-23 12:20:14 -06:00
baezzys ac9bdf5cbf Change DefaultSecurityFilterChain logging to DEBUG level and simplify filter log
- Change DefaultSecurityFilterChain logging level from INFO to DEBUG to align with FilterChainProxy.
- Log filter class names instead of the toString() of filter.
2024-05-23 12:02:35 -06:00
Marcus Hert Da Coregio 0acf6cca6e Merge branch '6.2.x'
Closes gh-15149
2024-05-23 14:05:06 -03:00
Marcus Hert Da Coregio 47ad405063 Merge branch '5.8.x' into 6.2.x
Closes gh-15148
2024-05-23 14:04:35 -03:00
Marcus Hert Da Coregio c7b739eb3f Fix broken link to jaspan article
Closes gh-14358
2024-05-23 14:04:10 -03:00
Joaquin Santana 927840fe88 Do Not Invalidate Current Session When It Is Registered
Closes gh-15066
2024-05-14 10:01:54 -03:00
Marcus Hert Da Coregio 08f11f06ab Revert unnecessary commits from main
Issue gh-15016
2024-05-08 13:49:18 -03:00
Marcus Hert Da Coregio b3c7f3ff19 Rename CompromisedPasswordCheckResult to CompromisedPasswordDecision
Issue gh-7395
2024-04-30 08:38:03 -03:00
Josh Cummings 36cd48474d
Merge branch '6.2.x' 2024-04-17 17:01:24 -06:00
Josh Cummings 3887f33f81
Merge branch '6.1.x' into 6.2.x 2024-04-17 17:01:03 -06:00
Josh Cummings 61df8e493d
Merge branch '5.8.x' into 6.1.x 2024-04-17 17:00:24 -06:00
Josh Cummings 470e2c5c97
Address Build Issues
Issue gh-14837
2024-04-17 16:59:40 -06:00
Josh Cummings ff473313df
Merge branch '6.2.x' 2024-04-17 16:45:47 -06:00
Josh Cummings f16a434f0c
Merge branch '6.1.x' into 6.2.x
Closes gh-14922
2024-04-17 16:45:30 -06:00
Josh Cummings ade45771b2
Merge branch '5.8.x' into 6.1.x
Closes gh-14921
2024-04-17 16:44:50 -06:00
Josh Cummings 657760af5b
Improve Logging
Closes gh-14837
2024-04-17 16:43:29 -06:00
Marcus Hert Da Coregio 61eba00654 Move HaveIBeenPwnedRestApiPasswordChecker to spring-security-web
Prior to this commit, the implementation was placed in spring-security-core, however we do not want to introduce a dependency on spring-web and spring-webflux for that module.

Issue gh-7395
2024-04-10 14:58:01 -03:00
DingHao f689f3c3fc Fix continueOnError default value in java doc
Closes gh-14870
2024-04-10 13:28:06 -03:00
erie0210 7faae83ebb docs: fix typo 2024-04-08 14:44:12 -03:00
Josh Cummings c439cfef0f
Merge branch '6.1.x' into 6.2.x 2024-03-21 17:24:34 -06:00
Thomas Hagelberg ce9f1821b1
Improve logging in AuthenticationWebFilter
Closes #14091
2024-03-21 17:24:10 -06:00