Phillip Webb
06398eabed
Merge branch '2.7.x'
3 years ago
Phillip Webb
b25e92f3e2
Merge branch '2.6.x' into 2.7.x
3 years ago
Phillip Webb
760dcffd8b
Merge branch '2.7.x'
3 years ago
Andy Wilkinson
1dbfcf8b57
Reinstate support for Spring Data Couchbase
...
Closes gh-28976
3 years ago
dreis2211
d8deee7cf6
Update to JDK 17 in launch script tests
...
See gh-29201
3 years ago
izeye
728206dba0
Polish GraphQL changes
...
See gh-29140
Closes gh-29194
3 years ago
Brian Clozel
88ee4fab36
Polish
...
See gh-29140
3 years ago
Brian Clozel
f61c87c3a7
Revert "Merge branch '2.7.x'"
...
This reverts commit f0677a119c
, reversing
changes made to 938d58f32c
.
3 years ago
Brian Clozel
f0677a119c
Merge branch '2.7.x'
3 years ago
Brian Clozel
c522a8007b
Add smoke test for Spring GraphQL
...
See gh-29140
3 years ago
Madhura Bhave
48a6470ddb
Merge branch '2.7.x' into main
3 years ago
Madhura Bhave
d9d161cd6b
Allow previously authorized users to access the error page
...
Prior to this commit, the `ErrorPageSecurityFilter` verified if
access to the error page was allowed by invoking the
`WebInvocationPrivilegeEvaluator` with the Authentication from the
`SecurityContextHolder`.
This meant that access to the error page was denied for a `null` Authentication
or `AnonymousAuthenticationToken` in cases where the error page required
authenticated access. This prevented authorized users from accessing the
error page in case the Authentication wasn't retrievable for the error dispatch,
which is the case for `@Transient` authentication or stateless session policy.
This commit updates the `ErrorPageSecurityFilter` to check access to the error page
only if the error is an authn or authz error in cases where an authentication object
is not found in the SecurityContextHolder. This makes the error response consistent
when bad credentials or no credentials are used while also allowing access to previously
authorized users.
Fixes gh-28953
3 years ago
Phillip Webb
7981a82785
Merge branch '2.7.x'
3 years ago
Phillip Webb
f676602c96
Merge branch '2.5.x' into 2.6.x
3 years ago
Phillip Webb
783981ba98
Merge branch '2.4.x' into 2.5.x
3 years ago
Phillip Webb
d336a96b7f
Update web.xml xsd references to for 3.1 version
...
See gh-29075
3 years ago
Phillip Webb
003fb229fd
Merge branch '2.7.x'
3 years ago
Phillip Webb
c0023118a9
Merge branch '2.7.x'
...
Closes gh-29079
3 years ago
Phillip Webb
6e01c3edbe
Merge branch '2.5.x' into 2.6.x
...
Closes gh-29077
3 years ago
Phillip Webb
17363d1b3a
Merge branch '2.4.x' into 2.5.x
...
Closes gh-29076
3 years ago
Phillip Webb
1749c893dc
Update web-app version to 3.1
...
Update the web-app version specified in `web.xml` to 3.1 in order to
make Eclipse happy.
Closes gh-29075
3 years ago
Andy Wilkinson
3b23c542a0
Test servlet 3.1 compatibility in deployment tests
...
Closes gh-28906
3 years ago
Andy Wilkinson
fe7b13ec46
Upgrade to Spring Framework 6 and Jakarta EE 9
...
Closes gh-28619
Closes gh-28620
Closes gh-28621
Closes gh-28622
Closes gh-28623
Closes gh-28624
Closes gh-28625
Closes gh-28626
Closes gh-28627
Closes gh-28628
Closes gh-28629
Closes gh-28630
Closes gh-28631
Closes gh-28632
Closes gh-28633
Closes gh-28634
Closes gh-28635
Closes gh-28636
Closes gh-28638
Closes gh-28639
Closes gh-28640
Closes gh-28644
Closes gh-28645
Closes gh-28650
Closes gh-28711
Closes gh-28866
Closes gh-28867
Closes gh-28868
Closes gh-28872
See gh-28641
See gh-28642
See gh-28643
See gh-28646
See gh-28647
See gh-28648
See gh-28649
See gh-28721
See gh-28869
See gh-28871
3 years ago
Andy Wilkinson
b6ba46942b
Remove Atmosphere sample to prepare for Servlet 5 upgrade
...
Closes gh-28786
3 years ago
Andy Wilkinson
c25890354b
Remove Hazelcast 3 smoke test to prepare for Hazelcast 5 upgrade
...
Closes gh-28827
3 years ago
Andy Wilkinson
90e8a7da3a
Remove Hibernate 5.2 smoke test to prepare for EE 9 upgrade
...
Closes gh-28826
3 years ago
Andy Wilkinson
28bce49057
Remove Jetty 10 smoke tests to prepare for Jetty 11 upgrade
...
Closes gh-28825
3 years ago
Andy Wilkinson
ba19440f8c
Drop support for EhCache 3 until it supports Jakarta EE 9
...
Closes gh-28800
3 years ago
Andy Wilkinson
a17d6f9791
Drop support for Infinispan until it is Jakarta EE 9 compatible
...
Closes gh-28799
3 years ago
Scott Frederick
015dca1956
Remove support for Thymeleaf
...
Closes gh-28611
3 years ago
Andy Wilkinson
85f9949513
Remove support for Jolokia
...
Closes gh-28704
3 years ago
Andy Wilkinson
8bf2ffd93c
Drop support for Jersey until jersey-spring6 is available
...
Closes gh-28808
3 years ago
Scott Frederick
29a21d4621
Remove support for Spring Data Couchbase and Couchbase caching
...
Fixes gh-28613
3 years ago
Andy Wilkinson
63492507b4
Remove support for Apache ActiveMQ
...
Closes gh-28591
3 years ago
Andy Wilkinson
64bf33038d
Remove support for EhCache 2
...
Closes gh-28588
3 years ago
Andy Wilkinson
ef02cc9bff
Remove support for Atomikos
...
Closes gh-28589
3 years ago
Andy Wilkinson
900085628a
Raise the minimum supported version of Java to 17
...
Closes gh-28101
3 years ago
Andy Wilkinson
814c86c5e8
Raise the minimum supported version of Gradle to 7.3
...
Closes gh-28100
3 years ago
Phillip Webb
beb68671bb
Update copyright year of changed files
3 years ago
Scott Frederick
4eed637481
Merge branch '2.5.x'
...
Closes gh-28789
3 years ago
Scott Frederick
12244a8edd
Remove use of Thymeleaf from smoke tests
...
Closes gh-28788
3 years ago
Andy Wilkinson
015cf920da
Name custom task inputs
...
Closes gh-28753
3 years ago
Phillip Webb
b6d0b44703
Fix @SuppressWarnings
3 years ago
Madhura Bhave
dd1d1482dc
Deny unauthorized access to the error page
...
Fixes gh-26356
Co-authored-by Andy Wilkinson <wilkinsona@vmware.com>
3 years ago
Andy Wilkinson
7ed19a3b59
Merge branch '2.5.x'
...
Closes gh-28735
3 years ago
Andy Wilkinson
88457d9cfa
Merge branch '2.4.x' into 2.5.x
...
Closes gh-28734
3 years ago
Andy Wilkinson
7d19ea4ca1
Limit log output produced by spring-boot-deployment-tests:intTest
...
Closes gh-28730
3 years ago
Madhura Bhave
6b79d2860f
Merge branch '2.5.x' into main
...
Closes gh-28724
3 years ago
Madhura Bhave
64270eca51
Convert environment used by SpringBootTestContextLoader
...
This commit aligns `SpringBootTest`s to also use `ApplicationEnvironment`
instead of `StandardEnvironment`. This prevents the side-effect of active
profiles from `@ActiveProfiles` from being added to the environment when
doGetActiveProfiles is called. In this case, calling `addActiveProfiles()`
in the environment post processor would result in `@ActiveProfiles` being
added to the environment first, resulting in the wrong order.
The additional call to `setActiveProfiles()` is also not necessary when using
ApplicationEnvironment because that call was put in place to prevent the side-effect
which `ApplicationEnvironment` does not have.
Fixes gh-28530
3 years ago
Andy Wilkinson
2a342ef416
Merge branch '2.5.x'
...
Closes gh-28662
3 years ago