Merge branch '2.7.x'

pull/29931/head
Andy Wilkinson 3 years ago
commit 41d516cb4f

@ -41,7 +41,7 @@ import org.springframework.util.StringUtils;
public class SecurityProperties { public class SecurityProperties {
/** /**
* Order applied to the WebSecurityConfigurerAdapter that is used to configure basic * Order applied to the SecurityFilterChain that is used to configure basic
* authentication for application endpoints. If you want to add your own * authentication for application endpoints. If you want to add your own
* authentication for all or some of those endpoints the best thing to do is to add * authentication for all or some of those endpoints the best thing to do is to add
* your own WebSecurityConfigurerAdapter with lower order. * your own WebSecurityConfigurerAdapter with lower order.
@ -49,7 +49,7 @@ public class SecurityProperties {
public static final int BASIC_AUTH_ORDER = Ordered.LOWEST_PRECEDENCE - 5; public static final int BASIC_AUTH_ORDER = Ordered.LOWEST_PRECEDENCE - 5;
/** /**
* Order applied to the WebSecurityConfigurer that ignores standard static resource * Order applied to the WebSecurityCustomizer that ignores standard static resource
* paths. * paths.
*/ */
public static final int IGNORED_ORDER = Ordered.HIGHEST_PRECEDENCE; public static final int IGNORED_ORDER = Ordered.HIGHEST_PRECEDENCE;

@ -1,5 +1,5 @@
/* /*
* Copyright 2012-2020 the original author or authors. * Copyright 2012-2022 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -31,15 +31,13 @@ import org.springframework.security.oauth2.client.web.OAuth2AuthorizedClientRepo
import org.springframework.security.web.SecurityFilterChain; import org.springframework.security.web.SecurityFilterChain;
/** /**
* {@link org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter} * {@link SecurityFilterChain} to add OAuth client support.
* to add OAuth client support.
* *
* @author Madhura Bhave * @author Madhura Bhave
* @author Phillip Webb * @author Phillip Webb
*/ */
@Configuration(proxyBeanMethods = false) @Configuration(proxyBeanMethods = false)
@ConditionalOnBean(ClientRegistrationRepository.class) @ConditionalOnBean(ClientRegistrationRepository.class)
@SuppressWarnings("deprecation")
class OAuth2WebSecurityConfiguration { class OAuth2WebSecurityConfiguration {
@Bean @Bean

@ -1,5 +1,5 @@
/* /*
* Copyright 2012-2021 the original author or authors. * Copyright 2012-2022 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -43,16 +43,14 @@ import org.springframework.security.web.SecurityFilterChain;
/** /**
* Configures a {@link JwtDecoder} when a JWK Set URI, OpenID Connect Issuer URI or Public * Configures a {@link JwtDecoder} when a JWK Set URI, OpenID Connect Issuer URI or Public
* Key configuration is available. Also configures a * Key configuration is available. Also configures a {@link SecurityFilterChain} if a
* {@link org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter} * {@link JwtDecoder} bean is found.
* if a {@link JwtDecoder} bean is found.
* *
* @author Madhura Bhave * @author Madhura Bhave
* @author Artsiom Yudovin * @author Artsiom Yudovin
* @author HaiTao Zhang * @author HaiTao Zhang
*/ */
@Configuration(proxyBeanMethods = false) @Configuration(proxyBeanMethods = false)
@SuppressWarnings("deprecation")
class OAuth2ResourceServerJwtConfiguration { class OAuth2ResourceServerJwtConfiguration {
@Configuration(proxyBeanMethods = false) @Configuration(proxyBeanMethods = false)

@ -31,14 +31,12 @@ import org.springframework.security.web.SecurityFilterChain;
/** /**
* Configures a {@link OpaqueTokenIntrospector} when a token introspection endpoint is * Configures a {@link OpaqueTokenIntrospector} when a token introspection endpoint is
* available. Also configures a * available. Also configures a {@link SecurityFilterChain} if a
* {@link org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter} * {@link OpaqueTokenIntrospector} bean is found.
* if a {@link OpaqueTokenIntrospector} bean is found.
* *
* @author Madhura Bhave * @author Madhura Bhave
*/ */
@Configuration(proxyBeanMethods = false) @Configuration(proxyBeanMethods = false)
@SuppressWarnings("deprecation")
class OAuth2ResourceServerOpaqueTokenConfiguration { class OAuth2ResourceServerOpaqueTokenConfiguration {
@Configuration(proxyBeanMethods = false) @Configuration(proxyBeanMethods = false)

@ -1,5 +1,5 @@
/* /*
* Copyright 2012-2021 the original author or authors. * Copyright 2012-2022 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -25,15 +25,14 @@ import org.springframework.security.saml2.provider.service.registration.RelyingP
import org.springframework.security.web.SecurityFilterChain; import org.springframework.security.web.SecurityFilterChain;
/** /**
* {@link org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter} * {@link SecurityFilterChain} configuration for Spring Security's relying party SAML
* configuration for Spring Security's relying party SAML support. * support.
* *
* @author Madhura Bhave * @author Madhura Bhave
*/ */
@Configuration(proxyBeanMethods = false) @Configuration(proxyBeanMethods = false)
@ConditionalOnDefaultWebSecurity @ConditionalOnDefaultWebSecurity
@ConditionalOnBean(RelyingPartyRegistrationRepository.class) @ConditionalOnBean(RelyingPartyRegistrationRepository.class)
@SuppressWarnings("deprecation")
class Saml2LoginConfiguration { class Saml2LoginConfiguration {
@Bean @Bean

Loading…
Cancel
Save