spring-security

Commit Graph

Author	SHA1	Message	Date
Marcus Da Coregio	3d4e90ba2a	Lock Dependencies for Release	4 years ago
Steve Riesenberg	0be66d2cc0	Update copyright year Issue gh-10557	4 years ago
Steve Riesenberg	414e096ae4	Fix case sensitive headers comparison Closes gh-10557	4 years ago
Marcus Da Coregio	e05c9f4bba	Improve log message when no CSRF token found Closes gh-10436	4 years ago
Marcus Da Coregio	89db1c37a3	Update DefaultWebInvocationPrivilegeEvaluator to use current ServletContext Closes gh-10208	4 years ago
Steve Riesenberg	0704c709dc	Revert "Lock Dependencies for Release" This reverts commit `03c2c49d66`.	4 years ago
Steve Riesenberg	03c2c49d66	Lock Dependencies for Release	4 years ago
Steve Riesenberg	c83bd075a2	Revert "Lock Dependencies for Release" This reverts commit `bedb569f0d`.	4 years ago
Steve Riesenberg	bedb569f0d	Lock Dependencies for Release	4 years ago
Josh Cummings	ba468c7e6e	Restructure SwitchUserFilter Logs Issue gh-6311	4 years ago
Joe Grandja	ec6b2203ca	Revert "Lock Dependencies for Release" This reverts commit `067bdd0dd9`.	5 years ago
Joe Grandja	067bdd0dd9	Lock Dependencies for Release	5 years ago
Steve Riesenberg	c17767883f	Revert "Lock Dependencies for Release" This reverts commit `d71be4ca28`.	5 years ago
Josh Cummings	d71be4ca28	Lock Dependencies for Release	5 years ago
Marcus Hert da Coregio	4d18d06d9c	Adjust createNewSessionIfAllowed to prevent NPE Ensure that isTransientAuthentication reuses the same authentication object from saveContext Closes gh-8947	5 years ago
Josh Cummings	2c625f30e0	Add NPE Guards - Like values, names are only validated if they are not null Closes gh-9598	5 years ago
Craig Andrews	b97e93a486	Add guard around logger.debug statement The log message involves string concatenation, the cost of which should only be incurred if debug logging is enabled Issue gh-9648	5 years ago
Joe Grandja	8850ccb1c6	Revert "Lock Dependencies" This reverts commit `924ceac681`.	5 years ago
Joe Grandja	924ceac681	Lock Dependencies	5 years ago
佚名	9570d0cada	Add null check in CsrfFilter and CsrfWebFilter Solve the problem that CsrfFilter and CsrfWebFilter throws NPE exception when comparing two byte array is equal in low JDK version. When JDK version is lower than 1.8.0_45, method java.security.MessageDigest#isEqual does not verify whether the two arrays are null. And the above two class call this method without null judgment. ZiQiang Zhao<1694392889@qq.com> Closes gh-9561	5 years ago
Josh Cummings	71e0967b53	Revert "Lock Dependencies for Release" This reverts commit `8c04074264`.	5 years ago
Josh Cummings	8c04074264	Lock Dependencies for Release	5 years ago
Josh Cummings	cf032d86d6	Revert "Lock Dependencies" This reverts commit `9535a41d5a`.	5 years ago
Josh Cummings	9535a41d5a	Lock Dependencies	5 years ago
Rob Winch	4b6b417d5a	Additional Test for HttpSessionSecurityContextRepository Issue gh-9387	5 years ago
Rob Winch	c72a6fac04	Optimize HttpSessionSecurityContextRepository Closes gh-9387	5 years ago
Josh Cummings	f449da8b78	Revert "Lock Dependencies" This reverts commit `d17ebf53f9`.	5 years ago
Josh Cummings	d17ebf53f9	Lock Dependencies	5 years ago
Josh Cummings	da7141eb5b	Polish Tests Issue gh-9331	5 years ago
happier233	e30d78086a	Configure CurrentSecurityContextArgumentResolver BeanResolver Closes gh-9331	5 years ago
Rob Winch	acb5ae607b	Constant Time Comparison for CSRF tokens Closes gh-9291	5 years ago
Rob Winch	77a1befcc2	Fix Checkstyle for CsrfWebFilter Issue gh-9337	5 years ago
Rob Winch	61b75bb2d6	Fix CsrfWebFilter error message when expected CSRF not found Closes gh-9337	5 years ago
Josh Cummings	1af21a9d02	Revert "Lock Dependencies for 5.4.2" This reverts commit `046bc9789f`.	5 years ago
Josh Cummings	046bc9789f	Lock Dependencies for 5.4.2	5 years ago
Eleftheria Stein	1d96579265	Fix CookieRequestCache for URL encoded query parameters Avoid populating the saved request parameters with encoded values. Since the query strings of the request and saved URL are compared and must be equal, we can just use the parameters from the incoming request. Closes gh-9203	5 years ago
Josh Cummings	84737e7b23	Revert "Lock Dependencies for 5.4.1" This reverts commit `48ac47418d`.	5 years ago
Josh Cummings	48ac47418d	Lock Dependencies for 5.4.1	5 years ago
Phillip Webb	c502312719	Replace expected @Test attributes with AssertJ Replace JUnit expected @Test attributes with AssertJ calls.	5 years ago
Phillip Webb	20baa7d409	Replace ExpectedException @Rules with AssertJ Replace JUnit ExpectedException @Rules with AssertJ calls.	5 years ago
Phillip Webb	910b81928f	Replace try/catch with AssertJ Replace manual try/catch/fail blocks with AssertJ calls.	5 years ago
Tomoki Tsubaki	65f788532e	Fix broken Mono chain This commit restore broken Mono chain in WebSessionServerCsrfTokenRepository.generateToken(ServerWebExchange). Closes gh-9017	5 years ago
Tomoki Tsubaki	2c297fbd63	Create the CSRF token on the bounded elactic scheduler The CSRF token is generated by UUID.randomUUID() which is I/O blocking operation. This commit changes the subscriber thread to the bounded elactic scheduler. Closes gh-9018	5 years ago
Joe Grandja	7b1f574769	Revert "Lock Dependency Versions for 5.4.0" This reverts commit `3d0e459182`.	5 years ago
Joe Grandja	3d0e459182	Lock Dependency Versions for 5.4.0	5 years ago
Eleftheria Stein-Kousathana	02d1516c56	Restructure BasicAuthenticationFilter Logs Issue gh-6311	5 years ago
Josh Cummings	fa7baf551d	Restructure Logs Followed common use cases based off of HelloWorld sample: - Public endpoint - Unauthorized endpoint - Undefined endpoint - Successful form login - Failed form login - Post-login redirect Issue gh-6311	5 years ago
Phillip Webb	319d3364aa	Migrate to assertThatExceptionOfType Consistently use `assertThatExceptionOfType(...).isThrownBy(...)` rather than `assertThatCode` or `assertThatThrownBy`. This aligns with Spring Boot and Spring Cloud. It also allows the convenience `assertThatIllegalArgument` and `assertThatIllegalState` methods to be used. Issue gh-8945	5 years ago
Phillip Webb	ef8f113619	Use assertThat instead of Java assert Fix `DefaultSavedRequestMixinTests` so that `assertThat` is used rather than Java's `assert` keyword. Issue gh-8945	5 years ago
Phillip Webb	a5aa6b3d7f	Remove blank lines from all tests Remove all blank lines from test code so that test methods are visually grouped together. This generally helps to make the test classes easer to scan, however, the "given" / "when" / "then" blocks used by some tests are now not as easy to discern. Issue gh-8945	5 years ago

1 2 3 4 5 ...

1109 Commits (5.4.10)