Go to file
Craig Andrews 3bf6bf10de Configure permissionEvaluator and roleHierarchy by default
Implementations of AbstractSecurityExpressionHandler (such as the very commonly used DefaultWebSecurityExpressionHandler) get PermissionEvaluator and RoleHierarchy from the application context (if the application context is provided, and exactly one of such a bean exists in it). This approach matches that used in GlobalMethodSecurityConfiguration, making everything in Spring Security work the same way (including WebSecurity).

Issue gh-4077
2017-09-18 16:35:16 -05:00
.github Remove the CLA confirmation from template 2016-06-13 13:20:22 -05:00
acl Fix logback-test.xml 2017-08-17 16:42:01 -05:00
aspects Fix logback-test.xml 2017-08-17 16:42:01 -05:00
bom Add artifactory to bom 2017-06-15 16:55:40 -05:00
buildSrc AspectJPlugin Defers until afterEvaluate 2017-09-18 14:26:12 -05:00
cas Fix logback-test.xml 2017-08-17 16:42:01 -05:00
config Configure permissionEvaluator and roleHierarchy by default 2017-09-18 16:35:16 -05:00
core Configure permissionEvaluator and roleHierarchy by default 2017-09-18 16:35:16 -05:00
crypto Fix logback-test.xml 2017-08-17 16:42:01 -05:00
data Fix logback-test.xml 2017-08-17 16:42:01 -05:00
docs Fix MyCustomDsl Reference 2017-09-18 16:07:29 -05:00
etc Fix checkstyle import into Eclipse 2016-03-14 09:19:55 -05:00
gradle Update to Gradle 4.1 2017-09-18 10:19:59 -05:00
itest Fix logback-test.xml 2017-08-17 16:42:01 -05:00
ldap Fix logback-test.xml 2017-08-17 16:42:01 -05:00
messaging Fix logback-test.xml 2017-08-17 16:42:01 -05:00
oauth2 Remove leading whitespaces 2017-09-18 11:52:31 -05:00
openid Fix logback-test.xml 2017-08-17 16:42:01 -05:00
remoting Fix logback-test.xml 2017-08-17 16:42:01 -05:00
samples Use appengine-gradle-plugin 2017-09-18 12:00:50 -05:00
taglibs Fix logback-test.xml 2017-08-17 16:42:01 -05:00
test Fix copyright lines 2017-09-18 11:11:25 -05:00
web Add `ForwardLogoutSuccessHandler` 2017-09-06 15:15:02 -05:00
webflux Fix apache license link 2017-09-18 11:52:49 -05:00
.editorconfig Provide editor config for spring-security 2016-05-03 12:26:56 -04:00
.gitignore Fix checkstyle import into Eclipse 2016-03-14 09:19:55 -05:00
.travis.yml Polish Travis 2017-05-01 20:31:01 -05:00
CODE_OF_CONDUCT.adoc SEC-3209: Add Code of Conduct 2016-02-01 14:23:59 -06:00
CONTRIBUTING.md Document schema changes in CONTRIBUTING.md (#3965) 2016-07-08 13:27:23 -05:00
Jenkinsfile Revert "Disable Spring IO" 2017-07-11 10:55:20 -05:00
README.adoc Update Minimum Versions 2017-06-29 15:12:50 -05:00
build.gradle Update to Gradle 4.1 2017-09-18 10:19:59 -05:00
class_mapping_from_2.0.x.txt SEC-1148: Simple classname mapping from 2.0 to 3.0 2009-12-02 22:44:30 +00:00
gradle.properties Update GAE to 1.9.56 2017-09-18 12:00:01 -05:00
gradlew Update to Gradle 3.5 2017-04-21 10:51:49 -05:00
gradlew.bat Update to Gradle 3.5 2017-04-21 10:51:49 -05:00
license.txt Change to Apache License version 2.0. 2004-03-23 04:44:48 +00:00
notice.txt Broaden list of names used and correct URL. 2007-12-03 04:39:17 +00:00
settings.gradle Standardize Build 2017-04-21 10:55:05 -05:00

README.adoc

image::https://badges.gitter.im/Join%20Chat.svg[Gitter,link=https://gitter.im/spring-projects/spring-security?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge]

image:https://travis-ci.org/spring-projects/spring-security.svg?branch=master["Build Status", link="https://travis-ci.org/spring-security/spring-security"]

= Spring Security

Spring Security provides security services for the http://docs.spring.io[Spring IO Platform]. Spring Security 5.0 requires Spring 5.0 as
a minimum and also requires Java 8.

For a detailed list of features and access to the latest release, please visit http://spring.io/projects[Spring projects].

== Code of Conduct
This project adheres to the Contributor Covenant link:CODE_OF_CONDUCT.adoc[code of conduct].
By participating, you  are expected to uphold this code. Please report unacceptable behavior to spring-code-of-conduct@pivotal.io.

== Downloading Artifacts
See https://github.com/spring-projects/spring-framework/wiki/Downloading-Spring-artifacts[downloading Spring artifacts] for Maven repository information.

== Documentation
Be sure to read the http://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/[Spring Security Reference].
Extensive JavaDoc for the Spring Security code is also available in the http://docs.spring.io/spring-security/site/docs/current/apidocs/[Spring Security API Documentation].

== Quick Start
We recommend you visit http://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/[Spring Security Reference] and read the "Getting Started" page.

== Building from Source
Spring Security uses a http://gradle.org[Gradle]-based build system.
In the instructions below, http://vimeo.com/34436402[`./gradlew`] is invoked from the root of the source tree and serves as
a cross-platform, self-contained bootstrap mechanism for the build.

=== Prerequisites
http://help.github.com/set-up-git-redirect[Git] and the http://www.oracle.com/technetwork/java/javase/downloads[JDK8 build].

Be sure that your `JAVA_HOME` environment variable points to the `jdk1.8.0` folder extracted from the JDK download.

=== Check out sources
[indent=0]
----
git clone git@github.com:spring-projects/spring-security.git
----

=== Install all spring-\* jars into your local Maven cache
[indent=0]
----
./gradlew install
----

=== Compile and test; build all jars, distribution zips, and docs
[indent=0]
----
./gradlew build
----

Discover more commands with `./gradlew tasks`.
See also the https://github.com/spring-projects/spring-framework/wiki/Gradle-build-and-release-FAQ[Gradle build and release FAQ].

== Getting Support
Check out the http://stackoverflow.com/questions/tagged/spring-security[Spring Security tags on Stack Overflow].
http://spring.io/services[Commercial support] is available too.

== Contributing
http://help.github.com/send-pull-requests[Pull requests] are welcome; see the https://github.com/spring-projects/spring-security/blob/master/CONTRIBUTING.md[contributor guidelines] for details.

== License
Spring Security is Open Source software released under the
http://www.apache.org/licenses/LICENSE-2.0.html[Apache 2.0 license].