spring-security

Commit Graph

Author	SHA1	Message	Date
Joe Grandja	b3250c06a9	Lock Dependencies	5 years ago
佚名	22d7043d01	Add null check in CsrfFilter and CsrfWebFilter Solve the problem that CsrfFilter and CsrfWebFilter throws NPE exception when comparing two byte array is equal in low JDK version. When JDK version is lower than 1.8.0_45, method java.security.MessageDigest#isEqual does not verify whether the two arrays are null. And the above two class call this method without null judgment. ZiQiang Zhao<1694392889@qq.com> Closes gh-9561	5 years ago
Rob Winch	71f9876c48	Revert "Lock dependencies" This reverts commit `dca4858d81`.	5 years ago
Rob Winch	dca4858d81	Lock dependencies	5 years ago
Rob Winch	419839d05c	Optimize HttpSessionSecurityContextRepository Closes gh-9387	5 years ago
Rob Winch	38e9e8ca52	Optimize HttpSessionSecurityContextRepository Closes gh-9387	5 years ago
Rob Winch	ec8f6014d4	Revert "Lock dependencies" This reverts commit `fa5f789beb`.	5 years ago
Rob Winch	fa5f789beb	Lock dependencies	5 years ago
Josh Cummings	10946e8153	Polish Tests Issue gh-9331	5 years ago
happier233	3cb98ebed0	Configure CurrentSecurityContextArgumentResolver BeanResolver Closes gh-9331	5 years ago
Rob Winch	e6d6b39767	Constant Time Comparison for CSRF tokens Closes gh-9291	5 years ago
Rob Winch	b08075a721	Fix CsrfWebFilter error message when expected CSRF not found Closes gh-9337	5 years ago
Josh Cummings	7c2010f507	Revert "Lock Dependencies for 5.3.6" This reverts commit `a153012056`.	5 years ago
Josh Cummings	a153012056	Lock Dependencies for 5.3.6	5 years ago
Josh Cummings	2dcfda7fac	Revert "Lock Dependencies for 5.3.5.RELEASE" This reverts commit `846a5a962c`.	5 years ago
Josh Cummings	846a5a962c	Lock Dependencies for 5.3.5.RELEASE	5 years ago
Tomoki Tsubaki	e44471331b	Create the CSRF token on the bounded elactic scheduler The CSRF token is generated by UUID.randomUUID() which is I/O blocking operation. This commit changes the subscriber thread to the bounded elactic scheduler. Closes gh-9018	5 years ago
Eleftheria Stein	d8bef76a0f	Unlock dependencies This reverts commit `b619d298aa`.	6 years ago
Eleftheria Stein	b619d298aa	Lock Dependencies for 5.3.4.RELEASE	6 years ago
Rob Winch	070706d948	LoginPageGeneratingWebFilter honors context path Closes gh-8807	6 years ago
Joe Grandja	38c1e3ffa8	OAuth2LoginAuthenticationWebFilter should handle OAuth2AuthorizationException Issue gh-8609	6 years ago
Josh Cummings	bbd2a9ebae	Revert "Lock Dependencies for 5.3.3.RELEASE" This reverts commit `116bfe01e6`.	6 years ago
Josh Cummings	116bfe01e6	Lock Dependencies for 5.3.3.RELEASE	6 years ago
Eleftheria Stein	2ebbb6f80a	Mock request with non-standard HTTP method in test Fixes gh-8594	6 years ago
cbornet	b6efd5ba76	Create the CSRF token on the bounded elactic scheduler The CSRF token is created with a call to UUID.randomUUID which is blocking. This change ensures this blocking call is done on the bounded elastic scheduler which supports blocking calls. Fixes gh-8128	6 years ago
Artyom Tarynin	9e665388d2	Update AntPathRequestMatcher.java Fixes gh-8512	6 years ago
Rob Winch	06a02ed4bb	Fix non-standard HTTP method for CsrfWebFilter Closes gh-8452	6 years ago
Joe Grandja	413dfc8679	Unlock dependencies This reverts commit `a61145f74c`.	6 years ago
Joe Grandja	a61145f74c	Lock dependencies for 5.3.2.RELEASE	6 years ago
Rob Winch	566c25aa10	Fix example in javadoc of FilterChainProxy Closes gh-8344	6 years ago
Joe Grandja	a78872f268	Unlock dependencies for 5.3.1.RELEASE This reverts commit `88c02684bb`.	6 years ago
Joe Grandja	88c02684bb	Lock dependencies for 5.3.1.RELEASE	6 years ago
Rob Winch	0e6e2b2a21	Fix HttpServlet3RequestFactory Logout Handlers Previously there was a problem with Servlet API logout integration when Servlet API was configured before log out. This ensures that logout handlers is a reference to the logout handlers vs copying the logout handlers. This ensures that the ordering does not matter. Closes gh-4760	6 years ago
Josh Cummings	034c23d46c	SwitchUserFilter Defaults to POST Fixes gh-4183	6 years ago
Zeeshan Adnan	dfa78804a8	Fix exception for empty basic auth header token fixes spring-projectsgh-7976	6 years ago
Josh Cummings	6eadf7b140	Unlock dependencies for 5.3.0.RELEASE This reverts commit `147d7dadd7`.	6 years ago
Josh Cummings	147d7dadd7	Lock dependencies for 5.3.0.RELEASE	6 years ago
AmitB	2ce9eef95e	Fix typo in AntPathRequestMatcher contructor comment	6 years ago
Joe Grandja	82cd203791	Remove unnecessary mocking Fixes gh-8012	6 years ago
Josh Cummings	5bdf57d1e5	Remove Groovy and Spock Dependencies Fixes gh-4939	6 years ago
Josh Cummings	bae50ecc05	AbstractSecurityWebApplicationInitializerTests groovy->java Issue gh-4939	6 years ago
Eleftheria Stein	84b8a5abd7	Unlock dependencies for next development version This reverts commit `064616f1ef`.	6 years ago
Eleftheria Stein	064616f1ef	Lock dependencies for 5.3.0.RC1	6 years ago
Josh Cummings	cb9fd09150	Change AuthenticationWebFilter's constructor Fixes gh-7872	6 years ago
Peter Keller	e62fb755e8	Set charset of BasicAuthenticationFilter converter Allow BasicAuthenticationFilter to pick up the given credentials charset. Fixes: gh-7835	6 years ago
Onur Kağan Özcan	1f6381d970	Set secure on cookie when logging out Mark cookie secure flag to ensure cookie identity is the same	6 years ago
Rob Winch	ffccec953f	Fix HttpHeaderWriterWebFilterTests Ensure setComplete() is subscribed to	6 years ago
Eleftheria Stein	fcc6457bef	Unlock dependencies for next development version This reverts commit `93acf8f0f1`.	6 years ago
Eleftheria Stein	93acf8f0f1	Lock dependencies for 5.3.0.M1	6 years ago
Onur Kağan Özcan	2015f392ef	Set secure when cancelling remember-me cookie AbstractRememberMeServices is setting remember-me cookie with checking request is secure or secure usage is independently set to a fixed flag. But when cancelling a cookie, cookie is not being marked secure or not. It produces an inconsistency when using secure flag as a part to identity of cookie.	6 years ago

1 2 3 4 5 ...

1018 Commits (5.3.9.RELEASE)