spring-security

Commit Graph

Author	SHA1	Message	Date
hmolsen	b248eae416	Javadoc on ProviderManager.authenticate clarification Fixes gh-3722	10 years ago
Rob Winch	db81977a1a	Polish HPKP * Javadoc polish * Whitespace cleanup Issue gh-3706	10 years ago
Rob Winch	a7b0f74803	bcprov-jdk15on -> bcpkix-jdk150n This fixes the Spring IO checks since bcprov-jdk15on is not part of Spring IO platform. Issue gh-3702	10 years ago
Tim Ysewyn	331c7e91b7	HTTP Public Key Pinning HTTP Public Key Pinning (HPKP) is a security mechanism which allows HTTPS websites to resist impersonation by attackers using mis-issued or otherwise fraudulent certificates. (For example, sometimes attackers can compromise certificate authorities, and then can mis-issue certificates for a web origin.) The HTTPS web server serves a list of public key hashes, and on subsequent connections clients expect that server to use 1 or more of those public keys in its certificate chain. This commit will add this new functionality. Fixes gh-3706	10 years ago
Rob Winch	8fbc7e0d2c	Fix SCryptPasswordEncoder javadoc Issue gh-3702	10 years ago
Rob Winch	fc75a679d9	Polish SCryptPasswordEncoder * JKD8 Base64 -> Spring Security's Base64 to continue to support older JDKs * Spaces to tabs * Javadoc cleanup * Remove of @Override to compile in Eclipse Issue gh-3702	10 years ago
Shazin	7d02e259df	Add SCryptPasswordEncoder Fixes gh-3702	10 years ago
Rob Winch	e208bdb915	Update CONTRIBUTING to specify tabs	10 years ago
Rob Winch	65a00751a7	Update to Spring 4.2.5 Fixes gh-3715	10 years ago
Rob Winch	d0dc47cb66	Remove logging for "Skip invoking on" response committed Fixes gh-3683	10 years ago
Andrei Ivanov	9008a7af1d	Allow override of SwitchUserFilter.ROLE_PREVIOUS_ADMINISTRATOR Fixes gh-3697	10 years ago
Rob Winch	2fac7dfb15	Update to GitHub issues and Gitter	10 years ago
drdamour	004bb8e577	Fix ` in documentation There were a few rendering issues within the documentation associated with ` This commit fixes those rendering issues Fixes gh-3699	10 years ago
Rob Winch	cf551f73c7	SEC-3209: Add Code of Conduct	10 years ago
Rob Winch	0deee65eb6	Merge pull request #250 from ziedzaiem/patch-1 fix typo in doc	10 years ago
Zied Zaïem	83992a7a27	fix typo in doc	10 years ago
Juzer Ali	1f32e96d31	SEC-3181: Fixed reference formatting The code ticks was broken.	10 years ago
Rob Winch	3480e3c05c	Remove check.dependsOn springSnapshotTest	10 years ago
Rob Winch	2ff38ccdc5	SEC-3179: Set springIoVersion to explicit version	10 years ago
Rob Winch	56fad169db	request.setMethod("POST")	10 years ago
Rob Winch	3a8aec0c2f	SEC-3178: Update to JUnit 4.12	10 years ago
Rob Winch	337f1885ea	SEC-3170: Polish * Prevent a null LogoutHandler from being set when RememberMeServices does not implement LogoutHandler * Fix test which invoked Mock from outside spock which failed * Add explicit test for adding null LogoutHandler to RememberMeConfigurer	10 years ago
Nikos Kastamoulas	b28c62a6fe	SEC-3170: Null check for Java Config of RememberMeServices Added a null check in LogoutConfigurer.addLogoutHandler() method to ensure that a logout handler is always provided..	10 years ago
Rob Winch	e66eb539cc	SEC-3173: Update to cas-client-3.4.1	10 years ago
Rob Winch	7d5af63510	Merge pull request #243 from panchenko/SEC-3158 SEC-3158 findRequiredWebApplicationContext() compatibility with spring framework 4.1	10 years ago
Rob Winch	81db6abbe0	SEC-3164: JDK6 compatability	10 years ago
Rob Winch	3cc085bcdd	Merge pull request #244 from panchenko/SEC-3164 SEC-3164 Optimization in DefaultRequiresCsrfMatcher	10 years ago
Alex Panchenko	cfa23b152e	SEC-3164 Optimization in DefaultRequiresCsrfMatcher	10 years ago
Alex Panchenko	3af4140742	SEC-3158 findRequiredWebApplicationContext() compatibility with spring framework 4.1.x	10 years ago
Rob Winch	ed01213a27	Merge pull request #240 from wgorder/SEC-3159 SEC-3159: Fix Javadoc	10 years ago
William Gorder	1182d35d3c	SEC-3159: Fix Javadoc The HttpSecurity#headers() Javadoc did not accurately reflect changes made to the HeadersConfigurer in Spring Security 4.x.	10 years ago
Kazuki Shimizu	b7360a803d	SEC-3152: Add @Retention to @WithMock documentation	10 years ago
Kazuki Shimizu	5c36c9f659	SEC-3151 Polishing reference document (springsoruce -> spring, etc..)	10 years ago
petaure	cf76e3c65e	SEC-3150: Escape ' character in messages_fr.properties Escape ' character, if not format doesn't work fine.	10 years ago
Kazuki Shimizu	205ef42cfb	SEC-3147: Add error parameter for default authentication-failure-url	10 years ago
Rob Winch	53f85e2151	SEC-2848: LogoutConfigurer allows setting clearAuthentication	10 years ago
Rob Winch	15b4406015	SEC-3135: antMatchers(<method>,new String[0]) now passive	10 years ago
Rob Winch	c93d6bc823	SEC-3120: Remove .and() from httpStrictTransportSecurity() doc	10 years ago
Rob Winch	4144de9376	SEC-3082: make SavedRequest parameters case sensitive	10 years ago
Rob Winch	0981cd975f	SEC-3120: Reference hsts() -> httpStrictTransportSecurity()	10 years ago
Rob Winch	be303b15d1	SEC-3128: RoleVoter supports null Authentication	10 years ago
Rob Winch	6f1bb705ac	SEC-3135: antMatchers now allows method and no pattern Previously, antMatchers(POST).authenticated() was not allowed. Instead users had to use antMatchers(POST, "/").authenticated(). Now we default the patterns to be "/" if it is null or empty.	10 years ago
Rob Winch	8f13beccb7	SEC-2190: Fix Javadoc	10 years ago
Rob Winch	8b641e5f79	SEC-2190: Support WebApplicationContext in ServletContext attribute	10 years ago
Rob Winch	5c73816a1a	SEC-3108: DigestAuthenticationFilter should use SecurityContextHolder.createEmptyContext()	10 years ago
Rob Winch	69274d9aa8	SEC-2521: Improve StandardPasswordEncoder performance	10 years ago
Rob Winch	a88ac0fcc1	SEC-3109: Fix web tests	10 years ago
Rob Winch	bd221739c7	SEC-3109: DelegatingSecurityContextExecutor fails with same Thread Previously DelegatingSecurityContextRunnable and DelegatingSecurityContextCallable would not setup the SecurityContext if it was on the same thread as it was created. This was intended to fix SEC-3031 but simply caused more problems. This commit changes the strategy to keep track of the previous SecurityContext and restore it (or clear it out if it was originally empty).	10 years ago
Rob Winch	95ea86b48d	SEC-3057: Include all .txt & .jar in dist zip	10 years ago
Rob Winch	861ec76991	SEC-3133: Correct test doc username parameter	10 years ago

1 2 3 4 5 ...

5540 Commits (b248eae416c46c29ca445248e090312a33880da8) All Branches Search

5540 Commits (b248eae416c46c29ca445248e090312a33880da8)

All Branches