Commit Graph

9748 Commits (4ed26825d7d31ad2a225d2e7c57ab44c5f82ceac)
 

Author SHA1 Message Date
Andy Wilkinson e136ef6f7d Upgrade to Spring AMQP 1.6.4.RELEASE
Closes gh-7340
8 years ago
Andy Wilkinson 42581debfe Upgrade to Spring Security OAuth 2.0.12.RELEASE
Closes gh-7339
8 years ago
Madhura Bhave 372cfb3dff Merge branch '1.5.x' 8 years ago
Madhura Bhave 82f89b4ac1 Add custom headers to allowed CORS headers for CF actuators
Update CORS configuration to support Authorization and X-Cf-App-Instance.

See gh-7108
8 years ago
Stephane Nicoll af82cbbfa9 Relaxed test assertion 8 years ago
Stephane Nicoll 0a4a84d357 Merge branch '1.5.x' 8 years ago
Stephane Nicoll 3018e95261 Merge branch '1.4.x' into 1.5.x 8 years ago
Stephane Nicoll d405265e83 Merge pull request #7326 from sebastiankirsch:master
* pr/7326:
  Polish contribution
  Add @Inherited to all AutoConfigure* classes
8 years ago
Stephane Nicoll ebfd86ea26 Polish contribution
Closes gh-7326
8 years ago
sebastiankirsch e8b0a64872 Add @Inherited to all AutoConfigure* classes
See gh-7326
8 years ago
Stephane Nicoll 7e643395f3 Merge branch '1.5.x' 8 years ago
Stephane Nicoll 101528f41a Merge branch '1.4.x' into 1.5.x 8 years ago
Stephane Nicoll f80dbd1a21 Upgrade to joda-time 2.9.5
Closes gh-7308
8 years ago
Stephane Nicoll ea35da0305 Merge branch '1.5.x' 8 years ago
Stephane Nicoll b51f92d9a4 Merge branch '1.4.x' into 1.5.x 8 years ago
Stephane Nicoll 32950bfec1 Merge pull request #7299 from vpavic:resource-server-config
* pr/7299:
  Fix JWT token URI derivation
8 years ago
Vedran Pavic 5783cd5593 Fix JWT token URI derivation
Closes gh-7299
8 years ago
Stephane Nicoll d32da0d692 Merge branch '1.5.x' 8 years ago
Stephane Nicoll 01e66ecbd5 Merge branch '1.4.x' into 1.5.x 8 years ago
Stephane Nicoll 4311cf333f Remove sample reference in build 8 years ago
Stephane Nicoll 2c71cb8efd Polish 8 years ago
Stephane Nicoll 4407194c00 Replace sample by integration test
Closes gh-3888
8 years ago
Stephane Nicoll 71bbd9faaf Polish
See gh-7322
8 years ago
Stephane Nicoll e4be5c6102 Merge branch '1.5.x' 8 years ago
Stephane Nicoll 389acb094b Merge branch '1.4.x' into 1.5.x 8 years ago
Stephane Nicoll 44a32d0a5b Merge pull request #7322 from izeye:polish-20161105
* pr/7322:
  Polish
8 years ago
Johnny Lim ec9f0ab6b4 Polish
Closes gh-7322
8 years ago
Phillip Webb 3435fdf7fd Merge branch '1.5.x' 8 years ago
Phillip Webb 6c76353682 Default `management.cloudfoundry.enabled` to true
Update `CloudFoundryActuatorAutoConfiguration` so that it is enabled
when `management.cloudfoundry.enabled` is missing.

See gh-7108
8 years ago
Madhura Bhave a77cfc3b0e Skip SSL validation when calling Cloud Foundry
Update CloudFoundrySecurityService so that SSL validation is not
required. We're unlikely to have configured public keys for the
REST endpoints we need to call. Since the endpoints are provided via
environment variables we can implicitly trust them.

See gh-7108
8 years ago
Madhura Bhave 862a06eb7a Add POST to allowed CORS methods for CF actuators
Update CORS configuration to support POST.

See gh-7108
8 years ago
Madhura Bhave 1005feb27d Update discovery endpoint to respect AccessLevel
Change `CloudFoundryDiscoveryMvcEndpoint` so that `AccessLevel` rights
are consulted so that only accessible links are returned.

See gh-7108
8 years ago
Madhura Bhave 340f1d5574 Add security for Cloud Foundry actuators
Add security to Cloud Foundry actuator endpoints. Security is enforced
by a `HanderInterceptor` on `CloudFoundryEndpointHandlerMapping`. Each
endpoint call expects an 'Authorization' header containing a bearer
token. The token signature is checked against the UAA public keys then
passed to the Cloud Controller to obtain an ultimate access level.

The client may either have 'RESTRICTED' or FULL' access, with the latter
only providing access to a limited set of endpoints.

See gh-7108
8 years ago
Phillip Webb f15e0482c5 Merge branch '1.4.x' into 1.5.x 8 years ago
Phillip Webb 1bd53ea9d8 Support package private requestFactory classes
Update `RestTemplateBuilder` to support package private `requestFactory`
classes.

Fixes gh-7319
8 years ago
Andy Wilkinson becf225911 Simplify CLI integration auto-config test by removing use of Artemis
Artemis seems to be a bit flakey which is causing sporadic build
failures, for example due to an NPE in Artemis' code.
8 years ago
Phillip Webb 1ff1402d9c Merge branch '1.5.x' 8 years ago
Phillip Webb 221feac3ec User random server port in devtools tests
Update `LocalDevToolsAutoConfigurationTests` to ensure that a random
server port is used rather than 8080.

Fixes gh-7268
See gh-7039
8 years ago
Andy Wilkinson 389f2e0f7b Make Rabbit Client milestones available to all profiles
See gh-7053
8 years ago
Andy Wilkinson c12126e360 Make Rabbit Client milestones available to the build
See gh-7053
8 years ago
Andy Wilkinson 3ac987b2f4 Start building against Spring AMQP 2.0 snapshots
See gh-7053
8 years ago
Andy Wilkinson f53ef0e8bd Merge branch '1.5.x' 8 years ago
Andy Wilkinson e5073a7172 Upgrade to Spring Security 4.2.0.RC1
Closes gh-7186
8 years ago
Andy Wilkinson a350b66150 Merge branch '1.5.x' 8 years ago
Andy Wilkinson 025bafd911 Polish new Actuator sample 8 years ago
Andy Wilkinson 229691338e Reinstate JsonPath dependency that is no longer pulled in transitively 8 years ago
Phillip Webb 0cdde3b83c Merge branch '1.5.x' 8 years ago
Phillip Webb 81c5753f4d Merge branch '1.4.x' into 1.5.x 8 years ago
Phillip Webb 90afc8ebbe Formatting 8 years ago
Phillip Webb 6a2ac080ac Create our own SessionCreationPolicy enum
Update `ManagementServerProperties` so that `security.sessions` no
longer uses `SessionCreationPolicy` from Spring Security. We now
use our own enun which allows `management.security.*` properties to
be set without the risk of a `ClassNotFoundException`.

Fixes gh-3888
8 years ago