spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	db7732dd4a	Merge remote-tracking branch 'origin/5.8.x'	3 years ago
Josh Cummings	59c4538798	Update What's New Closes gh-12021	3 years ago
Joe Grandja	753e113a13	RequestMatcherDelegatingAuthorizationManager defaults to deny Closes gh-11958	3 years ago
Josh Cummings	d0653afec3	Remove Duplicate Property	3 years ago
Steve Riesenberg	2407d07890	Default to Xor CSRF tokens in CsrfWebFilter Closes gh-11960	3 years ago
Steve Riesenberg	2a2051cd7b	Default to Xor CSRF tokens in CsrfFilter Issue gh-11960	3 years ago
Marcus Da Coregio	60aa799498	Merge branch '5.8.x'	3 years ago
Marcus Da Coregio	445833295b	Merge branch '5.7.x' into 5.8.x	3 years ago
Marcus Da Coregio	0c239813e5	Merge branch '5.6.x' into 5.7.x	3 years ago
Marcus Da Coregio	717320a9ba	Update org.springframework.data to 2021.2.4 Closes gh-12018	3 years ago
Marcus Da Coregio	601fafd3de	Update org.springframework to 5.3.23 Closes gh-12017	3 years ago
Marcus Da Coregio	0f5c23ab17	Update hibernate-entitymanager to 5.6.12.Final Closes gh-12016	3 years ago
Marcus Da Coregio	a73b8de0f4	Update org.eclipse.jetty to 9.4.49.v20220914 Closes gh-12015	3 years ago
Marcus Da Coregio	2d7813be6e	Update io.rsocket to 1.1.3 Closes gh-12014	3 years ago
Marcus Da Coregio	655a1e345e	Update io.projectreactor to 2020.0.24 Closes gh-12012	3 years ago
Marcus Da Coregio	4fc00b74a9	Update mockk to 1.12.8 Closes gh-12011	3 years ago
Marcus Da Coregio	0521bb1af5	Update jackson-bom to 2.13.4.20221012 Closes gh-12008	3 years ago
Marcus Da Coregio	4992e8ce62	Update org.springframework.data to 2021.1.8 Closes gh-12007	3 years ago
Marcus Da Coregio	c772daab92	Update org.springframework to 5.3.23 Closes gh-12006	3 years ago
Marcus Da Coregio	45a4a89960	Update hibernate-entitymanager to 5.6.12.Final Closes gh-12005	3 years ago
Marcus Da Coregio	b43c7e927f	Update org.eclipse.jetty to 9.4.49.v20220914 Closes gh-12004	3 years ago
Marcus Da Coregio	50d23622d0	Update io.rsocket to 1.1.3 Closes gh-12003	3 years ago
Marcus Da Coregio	2c2603ba0f	Update io.projectreactor to 2020.0.24 Closes gh-12001	3 years ago
Marcus Da Coregio	f7f53ea2b7	Update jackson-bom to 2.13.4.20221012 Closes gh-11997	3 years ago
Marcus Da Coregio	db7f52db4e	Add hints to invoke SecurityContextImpl#getAuthentication Closes gh-11987	3 years ago
Joe Grandja	6026f9f70f	Merge branch '5.8.x'	3 years ago
Joe Grandja	185991a606	Revert "Add default AuthorizationManager" This reverts commit `4ddec07d0e`.	3 years ago
Josh Cummings	fe96a62dfc	Document Observability Support Issue gh-10964	3 years ago
Josh Cummings	2713075d08	Mark Observations with Firewall Failures Closes gh-11994	3 years ago
Josh Cummings	46ab84684b	Mark Observations with CSRF Failures Closes gh-11993	3 years ago
Josh Cummings	d3d8f7d60f	Mark Observations with Security Context Events Closes gh-11992	3 years ago
Josh Cummings	99a87179dd	Instrument Filter Chain Closes gh-11911	3 years ago
Josh Cummings	8c610684f3	Instrument Authentication and Authorization Closes gh-11989 Closes gh-11990	3 years ago
Josh Cummings	827384e386	Add Micrometer Dependency	3 years ago
Steve Riesenberg	7c872cf7fd	Merge branch '5.8.x'	3 years ago
Steve Riesenberg	440748ec65	Add test support for Xor CSRF tokens Issue gh-4001	3 years ago
Steve Riesenberg	9b43950e13	Merge branch '5.8.x'	3 years ago
Steve Riesenberg	8bd25f90e4	Polish XorServerCsrfTokenRequestAttributeHandlerTests	3 years ago
Steve Riesenberg	804f20045e	Polish XorCsrfTokenRequestAttributeHandlerTests	3 years ago
Steve Riesenberg	05e4a1dd20	Cache Xor CsrfToken Closes gh-11988	3 years ago
Joe Grandja	bf1e622751	Update What's New in 6.0 for PasswordEncoders Issue gh-11985	3 years ago
Joe Grandja	716aa6df5c	Merge branch '5.8.x'	3 years ago
Joe Grandja	ffbcaca24a	Update reference for PasswordEncoders Issue gh-10506	3 years ago
Joe Grandja	ed6a7f7730	Remove deprecated constructors in PasswordEncoders Closes gh-11985	3 years ago
Joe Grandja	7af111cd33	Merge branch '5.8.x'	3 years ago
Joe Grandja	c50441b59f	Update default configuration for Pbkdf2PasswordEncoder The recommended minimums for PBKDF2, as per OWASP Cheat Sheet Series (https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html), are: If FIPS-140 compliance is required, use PBKDF2 with a work factor of 310,000 or more and set with an internal hash function of HMAC-SHA-256. Previous default configuration: algorithm=SHA1, iterations=185000, hashLength=256 New default configuration: algorithm=SHA256, iterations=310000, hashLength=256 The default salt length was also updated from 8 to 16. Closes gh-10506, Closes gh-10489	3 years ago
Joe Grandja	f8419003eb	Update default configuration for SCryptPasswordEncoder The recommended minimums for scrypt, as per OWASP Cheat Sheet Series (https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html), are: Use scrypt with a minimum CPU/memory cost parameter of (2^16), a minimum block size of 8 (1024 bytes), and a parallelization parameter of 1. Previous default configuration: cpuCost=16384, memoryCost=8, parallelism=1 New default configuration: cpuCost=65536, memoryCost=8, parallelism=1 The default salt length was also updated from 64 to 16. Issue gh-10506	3 years ago
Joe Grandja	2ea62d0f8b	Update default configuration for Argon2PasswordEncoder The recommended minimums for Argon2, as per OWASP Cheat Sheet Series (https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html), are: Use Argon2id with a minimum configuration of 15 MiB of memory, an iteration count of 2, and 1 degree of parallelism. Previous default configuration: memory=4, iterations=3, parallelism=1 New default configuration: memory=16, iterations=2, parallelism=1 Issue gh-10506	3 years ago
Josh Cummings	a453a71bed	Merge remote-tracking branch 'origin/5.8.x'	3 years ago
Josh Cummings	8d096554f8	Add AuthorizationEvent Closes gh-11972	3 years ago

1 2 3 4 5 ...

11603 Commits (db7732dd4a8b4f266bdf613bccaee0593f5753ac) All Branches Search

11603 Commits (db7732dd4a8b4f266bdf613bccaee0593f5753ac)

All Branches