Commit Graph

15402 Commits (de22f4754158df16a3c69deb74c03c1ed43cc8aa)

Author SHA1 Message Date
Madhura Bhave 764531c326 Merge branch '2.6.x' into 2.7.x
Closes gh-29108
3 years ago
Madhura Bhave d9d161cd6b Allow previously authorized users to access the error page
Prior to this commit, the `ErrorPageSecurityFilter` verified if
access to the error page was allowed by invoking the
`WebInvocationPrivilegeEvaluator` with the Authentication from the
`SecurityContextHolder`.
This meant that access to the error page was denied for a `null` Authentication
 or `AnonymousAuthenticationToken` in cases where the error page required
authenticated access. This prevented authorized users from accessing the
error page in case the Authentication wasn't retrievable for the error dispatch,
which is the case for `@Transient` authentication or stateless session policy.

This commit updates the `ErrorPageSecurityFilter` to check access to the error page
only if the error is an authn or authz error in cases where an authentication object
is not found in the SecurityContextHolder. This makes the error response consistent
when bad credentials or no credentials are used while also allowing access to previously
authorized users.

Fixes gh-28953
3 years ago
Stephane Nicoll 64dd1f86c0 Merge branch '2.6.x' into 2.7.x
Closes gh-29104
3 years ago
Stephane Nicoll c077ebecf7 Merge branch '2.5.x' into 2.6.x
Closes gh-29103
3 years ago
Andy Wilkinson 2fec06ac7e Find annotation without initializing factory beans
Closes gh-28977
3 years ago
Brian Clozel b04f7904ff Merge branch '2.6.x' into 2.7.x
Closes gh-29013
3 years ago
Brian Clozel 1c35ec2c3c Merge branch '2.5.x' into 2.6.x
Closes gh-29012
3 years ago
Brian Clozel 5d0206320a Upgrade to Logback 1.2.9
Closes gh-29011
3 years ago
Stephane Nicoll de383fcee0 Merge branch '2.6.x' into 2.7.x
Closes gh-29099
3 years ago
Stephane Nicoll bcaa59ce73 Merge branch '2.5.x' into 2.6.x
Closes gh-29098
3 years ago
Pavel Anisimov 415c58e21b Polish CacheManager customization section in reference doc
See gh-29094
3 years ago
Stephane Nicoll a05714ad9f Merge branch '2.6.x' into 2.7.x
Closes gh-29097
3 years ago
Stephane Nicoll 10362a9315 Merge branch '2.5.x' into 2.6.x
Closes gh-29096
3 years ago
Stephane Nicoll 8c9d398422 Test our Gradle plugin against Gradle 7.3.2
Closes gh-29093
3 years ago
Phillip Webb 1015df088d Merge branch '2.6.x' into 2.7.x 3 years ago
Phillip Webb 587d6fa309 Polish 3 years ago
Phillip Webb f3bcbca841 Update copyright year of changed files 3 years ago
Scott Frederick 4cad4851da Merge branch '2.6.x' into 2.7.x
Closes gh-29088
3 years ago
Scott Frederick 92b096abbf Fix message interpolation when code is used as default message
When `setUseCodeAsDefaultMessage(true)` was set on a message source,
attempting to interpolate the default message returned from the message
source would result in the code being unusable by upstream message
resolvers.

Fixes gh-28930
3 years ago
Stephane Nicoll f2efe56a18 Upgrade to Spring Framework 5.3.14 3 years ago
Stephane Nicoll a7a37f4ad6 Upgrade to Spring Framework 5.3.14
Closes gh-28970
3 years ago
Stephane Nicoll b8bf2cbbc7 Upgrade to Spring Framework 5.3.14
Closes gh-28961
3 years ago
Stephane Nicoll 63427b77d1 Merge branch '2.6.x' into 2.7.x
Closes gh-29086
3 years ago
Stephane Nicoll 55859ea64c Stop accessing the datasource if initialization mode is set to never
Closes gh-28931
3 years ago
Stephane Nicoll 4b1c0e5a03 Start building against Spring Framework 5.3.14 snapshots 3 years ago
Stephane Nicoll 38aeeee381 Merge branch '2.6.x' into 2.7.x 3 years ago
Stephane Nicoll 3b4d27e4d3 Merge branch '2.5.x' into 2.6.x 3 years ago
Stephane Nicoll 30ebb17b2b Polish 3 years ago
Stephane Nicoll a5734ef194 Upgrade to Reactor 2020.0.14
Closes gh-28969
3 years ago
Stephane Nicoll 28214e1e8c Upgrade to Reactor 2020.0.14
Closes gh-28960
3 years ago
Stephane Nicoll 4f14428351 Upgrade to Undertow 2.2.14.Final
Closes gh-29072
3 years ago
Stephane Nicoll a4fbc98667 Upgrade to Thymeleaf 3.0.14.RELEASE
Closes gh-29070
3 years ago
Stephane Nicoll 45e8711b5b Upgrade to Spring WS 3.1.2
Closes gh-29069
3 years ago
Stephane Nicoll 3bbc4649b7 Upgrade to MSSQL JDBC 9.4.1.jre8
Closes gh-29068
3 years ago
Stephane Nicoll 36332d42b8 Upgrade to JUnit Jupiter 5.8.2
Closes gh-29066
3 years ago
Stephane Nicoll 657f6e0010 Upgrade to Jedis 3.7.1
Closes gh-29065
3 years ago
Stephane Nicoll afd254424b Upgrade to JDOM2 2.0.6.1
Closes gh-29064
3 years ago
Stephane Nicoll 7156e3fb23 Upgrade to HttpCore 4.4.15
Closes gh-29063
3 years ago
Stephane Nicoll 0219408b7e Upgrade to HttpAsyncClient 4.1.5
Closes gh-29062
3 years ago
Stephane Nicoll 081d4f6d9c Upgrade to Hibernate 5.6.2.Final
Closes gh-29061
3 years ago
Stephane Nicoll 76b1ec3cac Upgrade to Hazelcast 4.2.3
Closes gh-29060
3 years ago
Stephane Nicoll 84d552f4d2 Upgrade to Flyway 8.0.5
Closes gh-29059
3 years ago
Stephane Nicoll fedf341d65 Upgrade to Ehcache3 3.9.8
Closes gh-29058
3 years ago
Stephane Nicoll 0165c40f02 Upgrade to Dropwizard Metrics 4.2.5
Closes gh-29057
3 years ago
Stephane Nicoll b11aa6d5cd Upgrade to Couchbase Client 3.2.4
Closes gh-29056
3 years ago
Stephane Nicoll d80e68adf0 Upgrade to Caffeine 2.9.3
Closes gh-29055
3 years ago
Stephane Nicoll c45bdd19fd Upgrade to AppEngine SDK 1.9.93
Closes gh-29054
3 years ago
Stephane Nicoll 97ee63b55b Upgrade to Undertow 2.2.14.Final
Closes gh-29051
3 years ago
Stephane Nicoll 74ce8b7516 Upgrade to Thymeleaf 3.0.14.RELEASE
Closes gh-29049
3 years ago
Stephane Nicoll e234ccd457 Upgrade to Spring WS 3.1.2
Closes gh-29048
3 years ago
Stephane Nicoll 272e184259 Upgrade to JDOM2 2.0.6.1
Closes gh-29046
3 years ago
Stephane Nicoll 084eae5124 Upgrade to Jackson Bom 2.12.6
Closes gh-29045
3 years ago
Stephane Nicoll d60c0593f3 Upgrade to HttpCore 4.4.15
Closes gh-29044
3 years ago
Stephane Nicoll 8c10266c62 Upgrade to HttpAsyncClient 4.1.5
Closes gh-29043
3 years ago
Stephane Nicoll 70805793a1 Upgrade to Hazelcast 4.1.7
Closes gh-29042
3 years ago
Stephane Nicoll f0a4ac6154 Upgrade to Ehcache3 3.9.8
Closes gh-29041
3 years ago
Stephane Nicoll 41a9b08049 Upgrade to Dropwizard Metrics 4.1.27
Closes gh-29040
3 years ago
Stephane Nicoll b7e233805f Upgrade to Caffeine 2.9.3
Closes gh-29039
3 years ago
Stephane Nicoll 6dcc289e6b Upgrade to AppEngine SDK 1.9.93
Closes gh-29038
3 years ago
Stephane Nicoll 61bb068a48 Merge branch '2.6.x' into 2.7.x
Closes gh-29032
3 years ago
Stephane Nicoll da60b96cf5 Merge branch '2.5.x' into 2.6.x
Closes gh-29031
3 years ago
copbint 0a9a6639e5 Remove redundant log4j-to-slf4j
See gh-29019
3 years ago
Stephane Nicoll 894eb83e66 Upgrade to Log4j2 2.16.0
Closes gh-28985
3 years ago
Stephane Nicoll 15ade0b5d3 Upgrade to Log4j2 2.16.0
Closes gh-28984
3 years ago
Stephane Nicoll 4c57d1717d Upgrade to Log4j2 2.16.0
Closes gh-28983
3 years ago
Stephane Nicoll 3124d9e62d Start building against Spring Kafka 2.8.1 snapshots
See gh-29017
3 years ago
Stephane Nicoll 9ca1cffab7 Merge branch '2.6.x' into 2.7.x
Closes gh-29016
3 years ago
Stephane Nicoll ba60e3d358 Merge branch '2.5.x'
Closes gh-29002
3 years ago
Stephane Nicoll 157b3aa25f Allow platform to be configured in DataSourceInitializers
Closes gh-28932
3 years ago
Stephane Nicoll 2d94fc437c Upgrade to Logback 1.2.8
Closes gh-29013
3 years ago
Stephane Nicoll d8eab45146 Upgrade to Logback 1.2.8
Closes gh-29012
3 years ago
Stephane Nicoll d18eae35e5 Upgrade to Logback 1.2.8
Closes gh-29011
3 years ago
Stephane Nicoll 6adbb50f02 Upgrade to Netty 4.1.72.Final
Closes gh-29005
3 years ago
Stephane Nicoll 1bda928ad3 Upgrade to Netty 4.1.72.Final
Closes gh-29004
3 years ago
Stephane Nicoll 5383de4fe1 Merge branch '2.6.x' into 2.7.x 3 years ago
Stephane Nicoll 32ecbb89d6 Merge branch '2.5.x' into 2.6.x 3 years ago
Stephane Nicoll 496cd3d2ba Polish
See gh-28999
3 years ago
Stephane Nicoll b81adecde3 Start building against Spring AMQP 2.4.1 snapshots
See gh-28995
3 years ago
Stephane Nicoll 93f75a7d12 Start building against Spring AMQP 2.3.13 snapshots
See gh-28994
3 years ago
Stephane Nicoll 87fc7672d8 Upgrade to Log4j2 2.15.0
Closes gh-28985
3 years ago
Stephane Nicoll 4f85d8a4b0 Upgrade to Log4j2 2.15.0
Closes gh-28984
3 years ago
Stephane Nicoll 1d8e3a865e Upgrade to Log4j2 2.15.0
Closes gh-28983
3 years ago
Stephane Nicoll b961b14d0f Merge branch '2.6.x' into 2.7.x
Closes gh-28980
3 years ago
Stephane Nicoll dfab6ee307 Merge branch '2.5.x' into 2.6.x
Closes gh-28979
3 years ago
Stephane Nicoll f6f5aec183 Polish "Check for the presence of Spring Security"
See gh-28967
3 years ago
Guirong Hu 4462f9157e Check for the presence of Spring Security
See gh-28967
3 years ago
Stephane Nicoll c7b606d8b6 Start building against Spring Integration 5.5.7 snapshots
See gh-28975
3 years ago
Stephane Nicoll 018481e381 Start building against Spring Session 2021.1.1 snapshots
See gh-28974
3 years ago
Stephane Nicoll 8792f1a792 Start building against Spring Security 5.6.1 snapshots
See gh-28973
3 years ago
Stephane Nicoll 9dc2450cd7 Start building against Spring LDAP 2.3.5 snapshots
See gh-28972
3 years ago
Stephane Nicoll d471397f47 Upgrade to Micrometer 1.8.1
Closes gh-28971
3 years ago
Stephane Nicoll 84ba9e2a8f Start building against Spring Framework 5.3.14 snapshots
See gh-28970
3 years ago
Stephane Nicoll ec453acf7f Start building against Reactor 2020.0.14 snapshots
See gh-28969
3 years ago
Stephane Nicoll f1f43e8577 Start building against Spring Integration 5.5.7 snapshots
See gh-28966
3 years ago
Stephane Nicoll e53bac272c Start building against Spring Session 2021.0.4 snapshots
See gh-28965
3 years ago
Stephane Nicoll 9894e90567 Start building against Spring Security 5.5.4 snapshots
See gh-28964
3 years ago
Stephane Nicoll a3b31db31d Start building against Spring LDAP 2.3.5 snapshots
See gh-28963
3 years ago
Stephane Nicoll 33ce2ab73b Upgrade to Micrometer 1.7.7
Closes gh-28962
3 years ago
Stephane Nicoll 4a35c7111f Start building against Spring Framework 5.3.14 snapshots
See gh-28961
3 years ago
Stephane Nicoll 7af3bd54a1 Start building against Reactor 2020.0.14 snapshots
See gh-28960
3 years ago
Scott Frederick 8f57f0babb Add classpath index support for exploded war archives
Update the Maven and Gradle packaging for war files so that a
`classpath.idx` file is written into the archive that provides the
original order of the classpath, as was previously done for jar files.
The `WarLauncher` class will use this file when running as an exploded
archive to ensure that the classpath order is the same as when running
from the far war.

Fixes gh-19875
3 years ago
Stephane Nicoll a2eeb77e21 Merge branch '2.6.x' into 2.7.x
Closes gh-28951
3 years ago
Vedran Pavic 0af4431db8 Apply SameSite session cookie property to Spring Session
This commit maps the `server.servlet.session.cookie.same-site`
configuration property to the `DefaultCookieSerializer` bean configured
in the Spring Session auto-configuration.

See gh-28784
3 years ago
Stephane Nicoll 89635eafa3 Update copyright year of changed files
See gh-28862
3 years ago
Stefano Cordio a5c56043b9 Simplify AssertJ usage
See gh-28862
3 years ago
Stephane Nicoll 2b3827332f Merge branch '2.6.x' into 2.7.x
Closes gh-28946
3 years ago
izeye 0364353204 Add public accessor for StackdriverProperties.useSemanticMetricTypes
See gh-28944
3 years ago
Stephane Nicoll a323ff7136 Merge branch '2.6.x' into 2.7.x
Closes gh-28945
3 years ago
Stephane Nicoll 5599e8d340 Polish "Add consistent quotes in YAML samples of reference doc"
See gh-28911
3 years ago
Viktor Ardelean 0b781d87b1 Add consistent quotes in YAML samples of reference doc
See gh-28911
3 years ago
Andy Wilkinson 51957f18c4 Merge branch '2.6.x' into 2.7.x
Closes gh-28942
3 years ago
Artur Signell ad754abba3 Make ErrorPageSecurityFilter compatible with Servlet 3.1
See gh-28902
3 years ago
Stephane Nicoll 7af589d31a Merge branch '2.6.x' into 2.7.x
Closes gh-28937
3 years ago
Stephane Nicoll 25a2888be5 Fix default value of spring.mvc.pathmatch.matching-strategy property
Closes gh-28936
3 years ago
Scott Frederick 3cb30cb283 Merge branch '2.6.x' into 2.7.x
Closes gh-28923
3 years ago
Scott Frederick 3555837845 Merge branch '2.5.x' into 2.6.x
Closes gh-28922
3 years ago
Scott Frederick b0b2cd79b4 Use latest buildpack image tag when no tag is provided
Fixes gh-28921
3 years ago
Scott Frederick 61fb9f83df Merge branch '2.6.x' into 2.7.x
Closes gh-28905
3 years ago
Scott Frederick ab0cc55e20 Merge branch '2.5.x' into 2.6.x
Closes gh-28904
3 years ago
Scott Frederick 467c092fdc Remove classpath index manifest attribute from repackaged war files
Fixes gh-28895
3 years ago
Andy Wilkinson a3ecdcf058 Merge branch '2.6.x' into 2.7.x
Closes gh-28892
3 years ago
Andy Wilkinson 4606e17696 Merge branch '2.5.x' into 2.6.x
Closes gh-28891
3 years ago
Andy Wilkinson af60a8a7cf Test our Gradle plugin against Gradle 7.3.1
Closes gh-28890
3 years ago
Scott Frederick 5f14cffea3 Add support for CNB platform API 0.5 through 0.8
Fixes gh-28850
3 years ago
Andy Wilkinson 86a773a8e9 Update main branch to start work on 2.7.x 3 years ago
Stephane Nicoll 46a8673bf8 Merge branch '2.5.x'
Closes gh-28839
3 years ago
Stephane Nicoll 1876b4bcd7 Update copyright year of changed files
See gh-28809
3 years ago
Leo Li f3c93d30a8 Fix reference to matching-strategy property
See gh-28809
3 years ago
izeye c7921468fc Polish
See gh-28836
3 years ago
Stephane Nicoll 88aa849f90 Merge branch '2.5.x' 3 years ago
Stephane Nicoll 1bb3f906a7 Polish
See gh-28836
3 years ago
Stephane Nicoll e4082ee5d9 Merge branch '2.5.x'
Closes gh-28834
3 years ago
fml2 1d786e49e9 Fix typos in the "External Application Properties" section
See gh-28830
3 years ago
Stephane Nicoll 9719930496 Merge branch '2.5.x'
Closes gh-28833
3 years ago
Xavier Bouclet dce979d51f Fix output of "spring --version" in reference documentation
See gh-28831
3 years ago
Andy Wilkinson 4bd86a6e20 Allow spring-boot-image-tests to run without an existing snapshot
Closes gh-28817
3 years ago
Željko Tomić 1c1c85c3f8 Fix MariaDB mapping for Quartz DataSource initialization
See gh-28779
3 years ago
Madhura Bhave 27eb992252 Fix property source ordering in SpringBootTest
Update `SpringBootContextLoader` so that the active profiles
property source has a unique name. Prior to this commit, the
default name 'test' was used which could cause ordering issues
if other `@PropertySource` values were added to it later.

Closes gh-28804
3 years ago
Phillip Webb beb68671bb Update copyright year of changed files 3 years ago
Madhura Bhave e7ff2cf358 Guard ErrorPageSecurityFilter configuration with ConditionalOnClass
Update `ErrorPageSecurityFilterConfiguration` to guard against the case
where `spring-security-core` is on the classpath but
`spring-security-web` is not.

Fixes gh-28774
3 years ago
Madhura Bhave 49e408828c Fix property source ordering in SpringBootTest
Update `SpringBootContextLoader` so that the active profiles
property source has a unique name. Prior to this commit, the
default name 'test' was used which could cause ordering issues
if other `@PropertySource` values were added to it later.

Fixes gh-28776
3 years ago
Madhura Bhave e6b5be900a Make ErrorPageSecurityFilter Servlet 3.1 compatible
Restore Servlet 3.1 compatibly by implementing `Filter` rather
than extending the 4.0 `HttpFilter` type.

Fixes gh-28790
3 years ago
Madhura Bhave f621937d3b Skip error page security filter for non-error dispatch type
Update `ErrorPageSecurityFilter` to defensively check that the
`DispatcherType` is `ERROR`. Although this check isn't necessary
for regular applications, it is needed if MockMvc is being used.

Fixes gh-28759
3 years ago
Scott Frederick 4eed637481 Merge branch '2.5.x'
Closes gh-28789
3 years ago
Scott Frederick 12244a8edd Remove use of Thymeleaf from smoke tests
Closes gh-28788
3 years ago
Andy Wilkinson 03e283a2e6 Mention WebProperties in deprecation of ResourceProperties
Closes gh-28762
3 years ago
Yanming Zhou da2dfbe0aa LettuceMetricsAutoConfiguration should not build ClientResources
See gh-28767
3 years ago
Stephane Nicoll 490ec8974d Merge branch '2.5.x'
Closes gh-28761
3 years ago
Stephane Nicoll 667bca05ec Polish "Add package info for Spring Data metrics support"
See gh-28756
3 years ago
charissathomas 42ae5114ef Create package-info.java
Closes #28731
3 years ago