spring-security

Commit Graph

Author	SHA1	Message	Date
Marcus Da Coregio	db7f52db4e	Add hints to invoke SecurityContextImpl#getAuthentication Closes gh-11987	3 years ago
Joe Grandja	6026f9f70f	Merge branch '5.8.x'	3 years ago
Joe Grandja	185991a606	Revert "Add default AuthorizationManager" This reverts commit `4ddec07d0e`.	3 years ago
Josh Cummings	fe96a62dfc	Document Observability Support Issue gh-10964	3 years ago
Josh Cummings	2713075d08	Mark Observations with Firewall Failures Closes gh-11994	3 years ago
Josh Cummings	46ab84684b	Mark Observations with CSRF Failures Closes gh-11993	3 years ago
Josh Cummings	d3d8f7d60f	Mark Observations with Security Context Events Closes gh-11992	3 years ago
Josh Cummings	99a87179dd	Instrument Filter Chain Closes gh-11911	3 years ago
Josh Cummings	8c610684f3	Instrument Authentication and Authorization Closes gh-11989 Closes gh-11990	3 years ago
Josh Cummings	827384e386	Add Micrometer Dependency	3 years ago
Steve Riesenberg	7c872cf7fd	Merge branch '5.8.x'	3 years ago
Steve Riesenberg	440748ec65	Add test support for Xor CSRF tokens Issue gh-4001	3 years ago
Steve Riesenberg	9b43950e13	Merge branch '5.8.x'	3 years ago
Steve Riesenberg	8bd25f90e4	Polish XorServerCsrfTokenRequestAttributeHandlerTests	3 years ago
Steve Riesenberg	804f20045e	Polish XorCsrfTokenRequestAttributeHandlerTests	3 years ago
Steve Riesenberg	05e4a1dd20	Cache Xor CsrfToken Closes gh-11988	3 years ago
Joe Grandja	bf1e622751	Update What's New in 6.0 for PasswordEncoders Issue gh-11985	3 years ago
Joe Grandja	716aa6df5c	Merge branch '5.8.x'	3 years ago
Joe Grandja	ffbcaca24a	Update reference for PasswordEncoders Issue gh-10506	3 years ago
Joe Grandja	ed6a7f7730	Remove deprecated constructors in PasswordEncoders Closes gh-11985	3 years ago
Joe Grandja	7af111cd33	Merge branch '5.8.x'	3 years ago
Joe Grandja	c50441b59f	Update default configuration for Pbkdf2PasswordEncoder The recommended minimums for PBKDF2, as per OWASP Cheat Sheet Series (https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html), are: If FIPS-140 compliance is required, use PBKDF2 with a work factor of 310,000 or more and set with an internal hash function of HMAC-SHA-256. Previous default configuration: algorithm=SHA1, iterations=185000, hashLength=256 New default configuration: algorithm=SHA256, iterations=310000, hashLength=256 The default salt length was also updated from 8 to 16. Closes gh-10506, Closes gh-10489	3 years ago
Joe Grandja	f8419003eb	Update default configuration for SCryptPasswordEncoder The recommended minimums for scrypt, as per OWASP Cheat Sheet Series (https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html), are: Use scrypt with a minimum CPU/memory cost parameter of (2^16), a minimum block size of 8 (1024 bytes), and a parallelization parameter of 1. Previous default configuration: cpuCost=16384, memoryCost=8, parallelism=1 New default configuration: cpuCost=65536, memoryCost=8, parallelism=1 The default salt length was also updated from 64 to 16. Issue gh-10506	3 years ago
Joe Grandja	2ea62d0f8b	Update default configuration for Argon2PasswordEncoder The recommended minimums for Argon2, as per OWASP Cheat Sheet Series (https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html), are: Use Argon2id with a minimum configuration of 15 MiB of memory, an iteration count of 2, and 1 degree of parallelism. Previous default configuration: memory=4, iterations=3, parallelism=1 New default configuration: memory=16, iterations=2, parallelism=1 Issue gh-10506	3 years ago
Josh Cummings	a453a71bed	Merge remote-tracking branch 'origin/5.8.x'	3 years ago
Josh Cummings	8d096554f8	Add AuthorizationEvent Closes gh-11972	3 years ago
Marcus Da Coregio	f9f41047cf	Merge branch '5.8.x' Closes gh-11981	3 years ago
Marcus Da Coregio	6e2e76978f	Merge branch '5.7.x' into 5.8.x Closes gh-11980	3 years ago
Marcus Da Coregio	b17ba7cdcc	Merge branch '5.6.x' into 5.7.x Closes gh-11979	3 years ago
Marcus Da Coregio	e0f8c711d8	Add default value for cloneOutputDirectory property Closes gh-11969	3 years ago
Marcus Da Coregio	c5e35bf32e	Merge branch '5.8.x' Closes gh-11978	3 years ago
Marcus Da Coregio	4b6fed0667	Add static factory method to AntPathRequestMather and RegexRequestMatcher Closes gh-11938	3 years ago
Daniel Garnier-Moiroux	27059ced87	Default X-Xss-Protection header value to "0" Closes gh-9631	3 years ago
Steve Riesenberg	dcda899c8c	Merge branch '5.8.x'	3 years ago
Steve Riesenberg	37fa49b32d	Polish gh-11952	3 years ago
Steve Riesenberg	6753f9745e	Merge branch '5.8.x' # Conflicts: # config/src/test/kotlin/org/springframework/security/config/web/server/ServerCsrfDslTests.kt # docs/modules/ROOT/pages/reactive/exploits/csrf.adoc	3 years ago
Steve Riesenberg	f462134e87	Add reactive support for BREACH Closes gh-11959	3 years ago
Steve Riesenberg	f4ca90e719	Add reactive interfaces for CSRF request handling Issue gh-11959	3 years ago
Marcus Da Coregio	398f5dee7f	Remove deprecated RequestMatcher methods from Java Configuration Closes gh-11939	3 years ago
Marcus Da Coregio	9fd195d419	Default to shouldFilterAllDispatcherTypes=true in XML Closes gh-11970	3 years ago
Marcus Da Coregio	146d3269bc	Merge branch '5.8.x' Closes gh-11971	3 years ago
Marcus Da Coregio	f3321c256c	Add XML support for shouldFilterAllDispatcherTypes Closes gh-11492	3 years ago
Rob Winch	06c879b61a	Add Reference to Security Reporting	3 years ago
Josh Cummings	3de55dbc8b	Update to Reactor Snapshots	3 years ago
Marcus Da Coregio	f650ebe545	Merge branch '5.8.x'	3 years ago
Marcus Da Coregio	8a5aed2983	Add deprecation warning to CsrfDsl#ignoringAntMatchers Issue gh-11347	3 years ago
Marcus Da Coregio	d6302aabbc	Merge branch '5.8.x'	3 years ago
Marcus Da Coregio	bc4ad52feb	Add deprecation warning to mvcMatchers methods Issue gh-11347	3 years ago
Josh Cummings	12b9f2e196	use-authorization-manager defaults to true Closes gh-11929	3 years ago
Marcus Da Coregio	1aa3f1414e	Start building against Spring Framework SNAPSHOTs	3 years ago

1 2 3 4 5 ...

11579 Commits (db7f52db4e373000e9e06e01a01b6a96dca51d22) All Branches Search

11579 Commits (db7f52db4e373000e9e06e01a01b6a96dca51d22)

All Branches