spring-security

Commit Graph

Author	SHA1	Message	Date
Eleftheria Stein	3389cf3ffc	Revert "Lock dependencies" This reverts commit `83bb4603f8`.	4 years ago
Eleftheria Stein	83bb4603f8	Lock dependencies	4 years ago
Steve Riesenberg	fa5b8c6090	Update copyright year Issue gh-10557	4 years ago
Steve Riesenberg	3aa2a60f97	Fix case sensitive headers comparison Closes gh-10557	4 years ago
Marcus Da Coregio	5a47e17a0d	Improve log message when no CSRF token found Closes gh-10436	4 years ago
Joe Grandja	5c8cd23a2d	Revert "Lock dependencies" This reverts commit `fc53f81d2e`.	4 years ago
Josh Cummings	9481122e02	Restructure SwitchUserFilter Logs Issue gh-6311	4 years ago
Eleftheria Stein	fc53f81d2e	Lock dependencies	4 years ago
Marcus Da Coregio	c706a103f9	Revert "Lock Dependencies" This reverts commit `1533f098d2`.	5 years ago
Marcus Da Coregio	1533f098d2	Lock Dependencies	5 years ago
Marcus Da Coregio	b0d22d1a03	Revert "Lock Dependencies" This reverts commit `eb300c78bd`.	5 years ago
Marcus Da Coregio	eb300c78bd	Lock Dependencies	5 years ago
Marcus Hert da Coregio	02285708eb	Adjust createNewSessionIfAllowed to prevent NPE Ensure that isTransientAuthentication reuses the same authentication object from saveContext Closes gh-8947	5 years ago
Craig Andrews	a85ce9c91f	Add guard around logger.debug statement The log message involves string concatenation, the cost of which should only be incurred if debug logging is enabled Issue gh-9648	5 years ago
Joe Grandja	26c6570b10	Revert "Lock Dependencies" This reverts commit `b3250c06a9`.	5 years ago
Joe Grandja	b3250c06a9	Lock Dependencies	5 years ago
佚名	22d7043d01	Add null check in CsrfFilter and CsrfWebFilter Solve the problem that CsrfFilter and CsrfWebFilter throws NPE exception when comparing two byte array is equal in low JDK version. When JDK version is lower than 1.8.0_45, method java.security.MessageDigest#isEqual does not verify whether the two arrays are null. And the above two class call this method without null judgment. ZiQiang Zhao<1694392889@qq.com> Closes gh-9561	5 years ago
Rob Winch	71f9876c48	Revert "Lock dependencies" This reverts commit `dca4858d81`.	5 years ago
Rob Winch	dca4858d81	Lock dependencies	5 years ago
Rob Winch	419839d05c	Optimize HttpSessionSecurityContextRepository Closes gh-9387	5 years ago
Rob Winch	38e9e8ca52	Optimize HttpSessionSecurityContextRepository Closes gh-9387	5 years ago
Rob Winch	ec8f6014d4	Revert "Lock dependencies" This reverts commit `fa5f789beb`.	5 years ago
Rob Winch	fa5f789beb	Lock dependencies	5 years ago
Josh Cummings	10946e8153	Polish Tests Issue gh-9331	5 years ago
happier233	3cb98ebed0	Configure CurrentSecurityContextArgumentResolver BeanResolver Closes gh-9331	5 years ago
Rob Winch	e6d6b39767	Constant Time Comparison for CSRF tokens Closes gh-9291	5 years ago
Rob Winch	b08075a721	Fix CsrfWebFilter error message when expected CSRF not found Closes gh-9337	5 years ago
Josh Cummings	7c2010f507	Revert "Lock Dependencies for 5.3.6" This reverts commit `a153012056`.	5 years ago
Josh Cummings	a153012056	Lock Dependencies for 5.3.6	5 years ago
Josh Cummings	2dcfda7fac	Revert "Lock Dependencies for 5.3.5.RELEASE" This reverts commit `846a5a962c`.	5 years ago
Josh Cummings	846a5a962c	Lock Dependencies for 5.3.5.RELEASE	5 years ago
Tomoki Tsubaki	e44471331b	Create the CSRF token on the bounded elactic scheduler The CSRF token is generated by UUID.randomUUID() which is I/O blocking operation. This commit changes the subscriber thread to the bounded elactic scheduler. Closes gh-9018	5 years ago
Eleftheria Stein	d8bef76a0f	Unlock dependencies This reverts commit `b619d298aa`.	6 years ago
Eleftheria Stein	b619d298aa	Lock Dependencies for 5.3.4.RELEASE	6 years ago
Rob Winch	070706d948	LoginPageGeneratingWebFilter honors context path Closes gh-8807	6 years ago
Joe Grandja	38c1e3ffa8	OAuth2LoginAuthenticationWebFilter should handle OAuth2AuthorizationException Issue gh-8609	6 years ago
Josh Cummings	bbd2a9ebae	Revert "Lock Dependencies for 5.3.3.RELEASE" This reverts commit `116bfe01e6`.	6 years ago
Josh Cummings	116bfe01e6	Lock Dependencies for 5.3.3.RELEASE	6 years ago
Eleftheria Stein	2ebbb6f80a	Mock request with non-standard HTTP method in test Fixes gh-8594	6 years ago
cbornet	b6efd5ba76	Create the CSRF token on the bounded elactic scheduler The CSRF token is created with a call to UUID.randomUUID which is blocking. This change ensures this blocking call is done on the bounded elastic scheduler which supports blocking calls. Fixes gh-8128	6 years ago
Artyom Tarynin	9e665388d2	Update AntPathRequestMatcher.java Fixes gh-8512	6 years ago
Rob Winch	06a02ed4bb	Fix non-standard HTTP method for CsrfWebFilter Closes gh-8452	6 years ago
Joe Grandja	413dfc8679	Unlock dependencies This reverts commit `a61145f74c`.	6 years ago
Joe Grandja	a61145f74c	Lock dependencies for 5.3.2.RELEASE	6 years ago
Rob Winch	566c25aa10	Fix example in javadoc of FilterChainProxy Closes gh-8344	6 years ago
Joe Grandja	a78872f268	Unlock dependencies for 5.3.1.RELEASE This reverts commit `88c02684bb`.	6 years ago
Joe Grandja	88c02684bb	Lock dependencies for 5.3.1.RELEASE	6 years ago
Rob Winch	0e6e2b2a21	Fix HttpServlet3RequestFactory Logout Handlers Previously there was a problem with Servlet API logout integration when Servlet API was configured before log out. This ensures that logout handlers is a reference to the logout handlers vs copying the logout handlers. This ensures that the ordering does not matter. Closes gh-4760	6 years ago
Josh Cummings	034c23d46c	SwitchUserFilter Defaults to POST Fixes gh-4183	6 years ago
Zeeshan Adnan	dfa78804a8	Fix exception for empty basic auth header token fixes spring-projectsgh-7976	6 years ago

1 2 3 4 5 ...

1033 Commits (3389cf3ffcfc31543d41996d609fdc1902c737d8)