Marcus Hert Da Coregio

Tests hanging when adding mockito-inline dependency and using cglib proxies

1

**Problem:** When adding the `mockito-inline` dependency to the project some test classes stuck when running alone. **Example code:** ```java import net.sf.cglib.proxy.Enhancer; import net.sf.cglib.proxy.FixedValue; import org.junit.jupiter.api.Test; import org.mockito.Mockito; public class MyClassCglibTests...

Cannot use `mockkObject` in a interface's lambda implementation

3

> Just be aware about usual MockK support pattern. > Tickets are checked from time to time, replied, discussed, labeled, e.t.c. > But real fixes are applied in a month-two...

Annotation attributes are now visible without any additional hints. See: - https://github.com/spring-projects/spring-framework/issues/28967

Add the ability to swallow exceptions for specific dispatcher types

1

The `FilterSecurityInterceptor` and `AuthorizationFilter` now apply to every request by default. This led to a problem from the Spring Boot's perspective: Consider the following configuration: ```java @Bean SecurityFilterChain appSecurity(HttpSecurity http)...

Improve CONTRIBUTING doc

1

Some users are having a hard time configuring their environment to work with the Spring Security codebase. We should review and improve the CONTRIBUTING doc in order to avoid contributors...

Update to OpenSAML 5

18

By removing OpenSAML3 support in Spring Security 6 we need to make sure that the OpenSAML dependency versions are updated and are compatible with JDK 17. See: - https://github.com/spring-projects/spring-security/issues/10556#issuecomment-1201699608

Remove OpenSAML3 support

3

Currently, the `spring-security-saml2-service-provider` supports the two versions of OpenSAML: 3 and 4. Since the classes for OpenSAML3 are already deprecated in Spring Security, we should remove them in version `6.0`....

Update Spring Security's configuration

1

See: - [WebSecurityConfigurerAdapter deprecation](https://spring.io/blog/2022/02/21/spring-security-without-the-websecurityconfigureradapter) - [`authorizeHttpRequests`](https://docs.spring.io/spring-security/reference/servlet/authorization/authorize-http-requests.html)

Add native support for SAML 2.0

1

We should look into how to make the SAML 2.0 support native compatible. At first, it seems not viable for the Spring Security 6 GA since we are using the...

This commit https://github.com/spring-projects/spring-framework/commit/22a750f378fcdf9d4baab721ec92952280afa207 which is now merged in Spring Framework main, added a GraalVM feature that makes constant at build-time 2 type of fields: - `NativeDetector#imageCode` - Static fields with...