spring-security

Commit Graph

Author	SHA1	Message	Date
Lars Grefer	34dd5fea30	Remove redundant throws clauses Removes exceptions that are declared in a method's signature but never thrown by the method itself or its implementations/derivatives.	7 years ago
Lars Grefer	ff1070df36	remove redundant modifiers found by checkstyle	7 years ago
Simeon Macke	b3da1e466b	Add Argon2PasswordEncoder Add PasswordEncoder for the Argon2 hashing algorithm (Password Hashing Competition (PHC) winner). This implementation uses the BouncyCastle-implementation of Argon2. Fixes gh-5354	7 years ago
Lars Grefer	43737a56bd	Use foreach where possible	7 years ago
Rob Winch	e1f155ba89	Polish SCrypt Upgrade Support * Break up tests * Rename test methods to follow conventions * Fix checkstyle Issue gh-7057	7 years ago
Lars Grefer	e95effc839	Allow upgrading between different SCrypt encodings Fixes gh-7057	7 years ago
Rob Winch	742df2cd1d	Polish BCrypt upgrade Issue gh-7042	7 years ago
Lars Grefer	d3d6a8743e	Allow upgrading between different BCrypt encodings Fixes gh-7042	7 years ago
Léon van der Kaap	d2248d185b	Add extra salt length check for BCrypt If the salt length is 28 characters and the version is 2{a,x,y}, an IndexOutOfBoundsException is thrown. This commit adds an extra check that the salt length should be at least 29 characters long if the version is not equal to "2". Fixes: gh-6907	7 years ago
Spring Operator	b93528138e	URL Cleanup This commit updates URLs to prefer the https protocol. Redirects are not followed to avoid accidentally expanding intentionally shortened URLs (i.e. if using a URL shortener). # Fixed URLs ## Fixed Success These URLs were switched to an https URL with a 2xx status. While the status was successful, your review is still recommended. * http://www.apache.org/licenses/ with 1 occurrences migrated to: https://www.apache.org/licenses/ ([https](https://www.apache.org/licenses/) result 200). * http://www.apache.org/licenses/LICENSE-2.0 with 2691 occurrences migrated to: https://www.apache.org/licenses/LICENSE-2.0 ([https](https://www.apache.org/licenses/LICENSE-2.0) result 200). * http://www.apache.org/licenses/LICENSE-2.0.html with 2 occurrences migrated to: https://www.apache.org/licenses/LICENSE-2.0.html ([https](https://www.apache.org/licenses/LICENSE-2.0.html) result 200).	7 years ago
Rob Winch	ae0f330f98	Add BCrypt Test for Empty Raw Password Issue: gh-5548	7 years ago
Josh Cummings	9ee291e659	AesBytesEncryptorTests Check Key Strength Fixes: gh-6121	7 years ago
Josh Cummings	13de580632	AesBytesEncryptorTests Issue: gh-5099	7 years ago
linfeng	388a7b62b9	Add BCrypt Revision Support Fixes: gh-3320	7 years ago
Rob Winch	02b857d82a	Add PasswordEncoder.upgradeEncoding Issue: gh-2778	8 years ago
Johnny Lim	9b42831c70	Suppress deprecation warnings in spring-security-crypto	8 years ago
Rob Winch	22737dce7e	Polish DelegatingPasswordEncoder copies the provided Map. This ensures that references to the Map do not update the state of DelegatingPasswordEncoder and NullPointerException is avoided for implementations that do not allow a null key. Issue: gh-4936	8 years ago
Michael J. Simons	2b66793535	Catch possible NullPointerException Some maps may throw a NullPointerException when get is called with null. This commit catches the exceptions and just leaves the delegate null. Fixes gh-4936	8 years ago
Rob Winch	e5b41f30ea	Fix DelegatingPasswordEncoderTests Issue: gh-4872	8 years ago
Rob Winch	f558b5016c	DelegatingPasswordEncoder handles null encodedPassword Fixes: gh-4872	8 years ago
Johnny Lim	b6895e6359	Apply Checkstyle WhitespaceAfterCheck module	8 years ago
Johnny Lim	d900f2a623	Remove unused imports This commit also adds UnusedImportsCheck Checkstyle module.	8 years ago
Antoine	e0aca04a28	Polish AssertJ assertions Polish AssertJ assertions	8 years ago
Rob Winch	6532bac295	Update Md4PasswordEncoder Javadoc Include format and migration information. Issue: gh-4674	8 years ago
Rob Winch	870b8bf9b2	Pbkdf2PasswordEncoder supports Base64 encoding Fixes gh-4683	8 years ago
Rob Winch	fe8f3afbaf	Pbkdf2PasswordEncoder allows custom SecretKeyFactory Fixes gh-2742	8 years ago
Rob Winch	d832213c6c	Add ldap to PasswordEncoderFactories Issue: gh-4674	8 years ago
Rob Winch	d83f4c4aa5	Add SHA-256 to PasswordEncoderFactories Issue: gh-4674	8 years ago
Rob Winch	5f2785d39c	Add SHA-1 to PasswordEncoderFactories Issue: gh-4674	8 years ago
Rob Winch	63e061f4d1	Add MD5 to PasswordEncoderFactories Issue: gh-4674	8 years ago
Rob Winch	7fe41de5eb	Add MD4 to PasswordEncoderFactories Issue: gh-4674	8 years ago
Rob Winch	1ed1716df4	Add LdapShaPasswordEncoder to crypto Issue: gh-4674	8 years ago
Rob Winch	d9a594d039	Add Md4PasswordEncoder to crypto Issue: gh-4674	8 years ago
Rob Winch	8fda55e98f	Add MessageDigestPasswordEncoder to crypto Issue: gh-4674	8 years ago
Kazuki Shimizu	2937477405	Polishing See gh-4666	8 years ago
Rob Winch	d152a2e2c1	Add PasswordEncoderFactories Issue gh-4666	8 years ago
Rob Winch	d0332eb71a	Add DelegatingPasswordEncoder Fixes gh-4666	8 years ago
Rob Winch	d7d6400971	DefaultStateGenerator->Base64StringKeyGenerator Rename and move DefaultStateGenerator since it is more generic than just OAuth. Fixes gh-4645	8 years ago
Rob Winch	e16b8e7976	Fix logback-test.xml	9 years ago
Rob Winch	07c3123696	Deprecate crypto.codec.Base64 In commit `85719fc` Base64 was removed. However, this class was never deprecated properly. This commit adds it back and marks it as deprecated. Fixes gh-4421	9 years ago
Vedran Pavic	85719fcd64	Use Base64 implementation provided by Java 8	9 years ago
SendilKumar N	c31bdb6390	SCryptPasswordEncoder to take default keyLength value Fixes gh-4225 Closes gh-4231	9 years ago
Jan Brennenstuhl	09436649cc	handling null-values for salts properly now - fixes gh-4147	9 years ago
Kazuki Shimizu	a1f771251a	Improve exception message on Hex#decode Fixes gh-4043	10 years ago
Rob Winch	8f880aea0e	Polish Pbkdf2PasswordEncoder Issue gh-3930	10 years ago
Kim Saabye Pedersen	9fcfeaf225	BCryptPasswordEncoder validates strength Fixes gh-3862	10 years ago
Will Tran	b01437281d	Bouncy Castle 1.47 Support This forces us to avoid using CipherOutputStream, and instead use the BlockCiphers directly. As an extra measure for correctness, test the equivalence of the BC implementations against data sizes from 1 to 2048 bytes. Fixes gh-2917	10 years ago
Will Tran	44fa624b6b	Refactor test assumptions about JCE to common class. (#3817 ) Apply assumptions directly to test methods instead of checking for key length in crypto.gradle.	10 years ago
Will Tran	40208127e8	Skip tests when AesBytesEncryptor can't be created in CBC or GCM mode. (#3816 ) Tests would fail in cases where JCE unlimited strength was available but GCM wasn't, like on JDK7.	10 years ago
Will Tran	63b2cfe1cf	Bouncy Castle implementations of AES-256 Adds "AES/CBC/PKCS5Padding" and "AES/GCM/NoPadding" Fixes gh-2917	10 years ago

1 2

72 Commits (5.2.0.RELEASE)