spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	547d174f3e	Fix Formatting	9 months ago
Roman Trapickin	d2d1275b39	Fix IllegalArgumentException message for unknown Argon2 types Array index 0 points to an empty string. Use index 1 instead. Signed-off-by: Roman Trapickin <8594293+rntrp@users.noreply.github.com>	9 months ago
Joe Grandja	c1aa99fdd2	Enforce BCrypt password length for new passwords only Closes gh-16802	10 months ago
James Howe	8d7f6acab6	Typo in Base64StringKeyGenerator exception message Signed-off-by: James Howe <675056+OrangeDog@users.noreply.github.com>	10 months ago
Rob Winch	adb303e152	Add testRuntimeOnly junit-platform-launcher Closes gh-16755	11 months ago
Joe Grandja	46f0dc6dfc	Enforce BCrypt password length	11 months ago
Christian	b56650100a	Removes the use of `StringUtils` from `DelegatingPasswordEncoder` Closes gh-16442 Signed-off-by: Christian Hösel <ChristianHoesel@users.noreply.github.com>	1 year ago
Josh Cummings	244fd2eb51	Support Serialization in Exceptions Issue gh-16276	1 year ago
Joe Grandja	a8c4d6cead	Require Locale argument for toLower/toUpperCase usage	1 year ago
Joe Grandja	a7bf8f7cc6	Require Locale argument for toLower/toUpperCase usage	1 year ago
Joe Grandja	0eaffb37e7	Require Locale argument for toLower/toUpperCase usage	1 year ago
Jonny Coddington	b90851d968	Improve Error Messages for PasswordEncoder Closes gh-14880 Signed-off-by: Jonny Coddington <bottlerocketjonny@protonmail.com>	1 year ago
Marcus Hert Da Coregio	08f11f06ab	Revert unnecessary commits from main Issue gh-15016	2 years ago
Josh Cummings	e5ee45d568	Fix Import Error Issue gh-14880	2 years ago
Abimael Sergio	3b9991fc89	Improve PasswordEncoder Error Messaging Closes gh-14880	2 years ago
Josh Cummings	8dd28b797a	Update to BouncyCastle 1.78 Closes gh-14910	2 years ago
Marcus Hert Da Coregio	93c2d1cc3c	Disable spring-security-rsa tests on Windows Issue gh-14202	2 years ago
Marcus Hert Da Coregio	6f7b9bbfde	Migrate spring-security-rsa into spring-security-crypto Closes gh-14202	2 years ago
Marcus Hert Da Coregio	00da9c9092	Use assertj assertions	2 years ago
Marcus Hert Da Coregio	e3ab1c94d7	Use assertj assertions	2 years ago
Marcus Hert Da Coregio	a7da9491d9	Use assertj assertions	2 years ago
Steve Riesenberg	9db33f33c7	Revert unnecessary merges on 6.0.x This commit removes unnecessary main-branch merges starting from `8750608b5b` and adds the following needed commit(s) that were made afterward: - `5dce82c48b`	2 years ago
Marcus Da Coregio	6c9cb47125	Fix code style	2 years ago
Marcus Da Coregio	64e2a2ff8b	Apply updated Code Style Closes gh-13881	2 years ago
Tim te Beek	9df9cb5aed	refactor: AssertJ best practices Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/bGVuS?organizationId=RGVmYXVsdA%3D%3D Co-authored-by: Moderne <team@moderne.io>	2 years ago
Krzysztof Krason	9b603b99ab	Using modern Java features	3 years ago
Marcus Da Coregio	d5603a944d	Avoid exception if PBKDF2WithHmacSHA256 is not available Issue gh-12873	3 years ago
Joe Grandja	ed6a7f7730	Remove deprecated constructors in PasswordEncoders Closes gh-11985	3 years ago
Joe Grandja	c50441b59f	Update default configuration for Pbkdf2PasswordEncoder The recommended minimums for PBKDF2, as per OWASP Cheat Sheet Series (https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html), are: If FIPS-140 compliance is required, use PBKDF2 with a work factor of 310,000 or more and set with an internal hash function of HMAC-SHA-256. Previous default configuration: algorithm=SHA1, iterations=185000, hashLength=256 New default configuration: algorithm=SHA256, iterations=310000, hashLength=256 The default salt length was also updated from 8 to 16. Closes gh-10506, Closes gh-10489	3 years ago
Joe Grandja	f8419003eb	Update default configuration for SCryptPasswordEncoder The recommended minimums for scrypt, as per OWASP Cheat Sheet Series (https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html), are: Use scrypt with a minimum CPU/memory cost parameter of (2^16), a minimum block size of 8 (1024 bytes), and a parallelization parameter of 1. Previous default configuration: cpuCost=16384, memoryCost=8, parallelism=1 New default configuration: cpuCost=65536, memoryCost=8, parallelism=1 The default salt length was also updated from 64 to 16. Issue gh-10506	3 years ago
Joe Grandja	2ea62d0f8b	Update default configuration for Argon2PasswordEncoder The recommended minimums for Argon2, as per OWASP Cheat Sheet Series (https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html), are: Use Argon2id with a minimum configuration of 15 MiB of memory, an iteration count of 2, and 1 degree of parallelism. Previous default configuration: memory=4, iterations=3, parallelism=1 New default configuration: memory=16, iterations=2, parallelism=1 Issue gh-10506	3 years ago
Rob Winch	d996c2a2c6	Remove unsafe/deprecated `Encryptors.querableText(CharSequence,CharSequence)` This method is insecure. Users should instead encrypt with their database. Closes gh-8980	3 years ago
Rob Winch	2fb625db84	Remove mockito deprecations Issue gh-11748	3 years ago
Josh Cummings	b0b4612609	Correct input validation for 31 rounds Closes gh-11470	4 years ago
Josh Cummings	28424f8ae5	Correct input validation for 31 rounds Closes gh-11470	4 years ago
Josh Cummings	37d856dca4	Correct input validation for 31 rounds Closes gh-11470	4 years ago
Josh Cummings	ba0f8ec3ef	Correct input validation for 31 rounds Closes gh-11470	4 years ago
Josh Cummings	3f13fa0285	Improve Upgrading Closes gh-11259	4 years ago
Josh Cummings	bc6f494af8	Correct input validation for 31 rounds Closes gh-11470	4 years ago
Marcus Da Coregio	b8b0661d73	Lock Dependencies for Release	4 years ago
Josh Cummings	e6297d3bf7	Improve Upgrading Closes gh-11259	4 years ago
Josh Cummings	5f7fc0eb26	Improve Upgrading Closes gh-11259	4 years ago
Josh Cummings	0bd7daf899	Improve Upgrading	4 years ago
Josh Cummings	a40f73521c	Improve Upgrading	4 years ago
Josh Cummings	1229b27b87	Improve Upgrading	4 years ago
Jihoon Cha	af7f943325	Prevent instantiation of DelegatingPasswordEncoder if idPrefix contains idSuffix Closes gh-10933	4 years ago
Steve Riesenberg	3bd160a71d	Polish gh-10933	4 years ago
Jihoon Cha	da606627b6	Prevent instantiation of DelegatingPasswordEncoder if idPrefix contains idSuffix Closes gh-10933	4 years ago
Eleftheria Stein	3389cf3ffc	Revert "Lock dependencies" This reverts commit `83bb4603f8`.	4 years ago
Marcus Da Coregio	cfbf28b8ba	Revert "Lock Dependencies for Release" This reverts commit `3d4e90ba2a`.	4 years ago

1 2 3 4 5 ...

287 Commits (6.5.1)