Commit Graph

9805 Commits

Author SHA1 Message Date
kevin 8ab7a27a20
Release ByteBuf
Closes gh-9661
2021-04-26 13:38:00 -06:00
kevin ec46ce08c9
Release ByteBuf
Closes gh-9661
2021-04-26 13:22:06 -06:00
Josh Cummings 2c625f30e0
Add NPE Guards
- Like values, names are only validated if they are not null

Closes gh-9598
2021-04-22 11:28:25 -06:00
Joe Grandja 99db0ca2c5 WebFlux httpBasic() matches on XHR requests
Closes gh-9660
2021-04-20 10:05:06 -04:00
Joe Grandja c8b6dc390d WebFlux httpBasic() matches on XHR requests
Closes gh-9660
2021-04-20 09:42:08 -04:00
Joe Grandja 6725b1324a WebFlux httpBasic() matches on XHR requests
Closes gh-9660
2021-04-20 09:09:42 -04:00
Craig Andrews ab34c0308c
Add guard around logger.debug statement
The log message involves string concatenation, the cost of which
should only be incurred if debug logging is enabled

Issue gh-9648
2021-04-16 10:57:53 -06:00
Craig Andrews a85ce9c91f
Add guard around logger.debug statement
The log message involves string concatenation, the cost of which
should only be incurred if debug logging is enabled

Issue gh-9648
2021-04-16 10:54:10 -06:00
Craig Andrews b97e93a486
Add guard around logger.debug statement
The log message involves string concatenation, the cost of which
should only be incurred if debug logging is enabled

Issue gh-9648
2021-04-16 10:37:48 -06:00
Rob Winch adf3e94c9f Fix HttpSecurity.addFilter* Ordering
Closes gh-9633
2021-04-14 21:18:51 -05:00
Rob Winch 6c5e92fb0b Fix HttpSecurity.addFilter* Ordering
Closes gh-9633
2021-04-14 21:01:09 -05:00
Rob Winch 26788a7309 Fix HttpSecurity.addFilter* Ordering
Closes gh-9633
2021-04-14 17:49:33 -05:00
Denis Washington 521706d496 Limit oauth2Login() links to redirect-based flows
This prevents the generated login page from showing links for
authorization grant types like "client_credentials" which are
not redirect-based, and thus not meant for interactive use in
the browser.

Closes gh-9457
2021-04-14 06:41:52 -04:00
Denis Washington d3af4f7354 Limit oauth2Login() links to redirect-based flows
This prevents the generated login page from showing links for
authorization grant types like "client_credentials" which are
not redirect-based, and thus not meant for interactive use in
the browser.

Closes gh-9457
2021-04-14 06:16:43 -04:00
Denis Washington 67d5520194 Limit oauth2Login() links to redirect-based flows
This prevents the generated login page from showing links for
authorization grant types like "client_credentials" which are
not redirect-based, and thus not meant for interactive use in
the browser.

Closes gh-9457
2021-04-14 05:36:57 -04:00
Joe Grandja a5117506a5 Next Development Version 2021-04-12 14:43:21 -04:00
Joe Grandja 26c6570b10 Revert "Lock Dependencies"
This reverts commit b3250c06a9.
2021-04-12 14:42:38 -04:00
Joe Grandja dd4e8eb36f Release 5.3.9.RELEASE 2021-04-12 14:24:06 -04:00
Joe Grandja b3250c06a9 Lock Dependencies 2021-04-12 14:19:19 -04:00
Joe Grandja aa0edfa1c7 Update to Spring Boot 2.2.13
Closes gh-9614
2021-04-12 14:19:01 -04:00
Joe Grandja c381503f7b Next Development Version 2021-04-12 13:47:56 -04:00
Joe Grandja 8850ccb1c6 Revert "Lock Dependencies"
This reverts commit 924ceac681.
2021-04-12 13:47:04 -04:00
Joe Grandja 321e6a8742 Release 5.4.6 2021-04-12 13:36:39 -04:00
Joe Grandja 924ceac681 Lock Dependencies 2021-04-12 13:36:39 -04:00
Joe Grandja 951cb844dd Update to Spring Boot 2.4.4 2021-04-12 13:36:28 -04:00
Eleftheria Stein ea19b31133 Next development version 2021-04-12 19:00:02 +02:00
Eleftheria Stein 46fdb250dc Release 5.2.10.RELEASE 2021-04-12 18:17:48 +02:00
Eleftheria Stein b500b3ea69 Update to OpenSAML 3.4.6
Closes gh-9607
2021-04-12 10:55:05 +02:00
Eleftheria Stein 59171434d5 Update to hibernate-entitymanager 5.4.30.Final
Closes gh-9606
2021-04-12 10:54:38 +02:00
Eleftheria Stein 5d18dd6d7d Update to Groovy 2.4.21
Closes gh-9605
2021-04-12 10:54:17 +02:00
Eleftheria Stein 41b0e51dbb Update to embedded Apache Tomcat 9.0.45
Closes gh-9604
2021-04-12 10:53:38 +02:00
Eleftheria Stein 310c1148ce Update blockhound to 1.0.6.RELEASE
Closes gh-9603
2021-04-12 10:53:11 +02:00
Eleftheria Stein 93defb2ff2 Update to RSocket 1.0.4
Closes gh-9602
2021-04-12 10:52:33 +02:00
Eleftheria Stein fb7efffad3 Update to Spring Data Moore-SR13
Closes gh-9601
2021-04-12 10:52:09 +02:00
Eleftheria Stein 6db79b70e6 Update to Spring Framework 5.2.13.RELEASE
Close gh-9600
2021-04-12 10:51:41 +02:00
Eleftheria Stein 78a618c260 Update to Reactor Dysprosium-SR18
Closes gh-9599
2021-04-12 10:51:11 +02:00
Eleftheria Stein cfc5256fad Update to GAE 1.9.88
Closes gh-9608
2021-04-12 10:50:46 +02:00
Eleftheria Stein 289b11b873 Update to nohttp 0.0.6.RELEASE
Closes gh-9609
2021-04-12 10:50:22 +02:00
佚名 8dc702c80f
Add null check in CsrfFilter and CsrfWebFilter
Solve the problem that CsrfFilter and CsrfWebFilter
throws NPE exception when comparing two byte array
is equal in low JDK version.

When JDK version is lower than 1.8.0_45, method
java.security.MessageDigest#isEqual does not verify
whether the two arrays are null. And the above two
class call this method without null judgment.

ZiQiang Zhao<1694392889@qq.com>

Closes gh-9561
2021-04-09 21:57:14 -06:00
佚名 22d7043d01
Add null check in CsrfFilter and CsrfWebFilter
Solve the problem that CsrfFilter and CsrfWebFilter
throws NPE exception when comparing two byte array
is equal in low JDK version.

When JDK version is lower than 1.8.0_45, method
java.security.MessageDigest#isEqual does not verify
whether the two arrays are null. And the above two
class call this method without null judgment.

ZiQiang Zhao<1694392889@qq.com>

Closes gh-9561
2021-04-09 21:55:30 -06:00
佚名 9570d0cada
Add null check in CsrfFilter and CsrfWebFilter
Solve the problem that CsrfFilter and CsrfWebFilter
throws NPE exception when comparing two byte array
is equal in low JDK version.

When JDK version is lower than 1.8.0_45, method
java.security.MessageDigest#isEqual does not verify
whether the two arrays are null. And the above two
class call this method without null judgment.

ZiQiang Zhao<1694392889@qq.com>

Closes gh-9561
2021-04-09 21:47:11 -06:00
Eleftheria Stein e7ee70384d Consider Order on SecurityFilterChain bean definitions
Closes gh-9154
2021-03-24 11:08:49 +02:00
Josh Cummings d192b3eb91
Next Development Version 2021-02-17 16:00:33 -07:00
Josh Cummings 71e0967b53
Revert "Lock Dependencies for Release"
This reverts commit 8c04074264.
2021-02-17 15:59:48 -07:00
Josh Cummings 45bca751c7
Release 5.4.5 2021-02-17 14:59:57 -07:00
Josh Cummings 8c04074264
Lock Dependencies for Release 2021-02-17 14:59:17 -07:00
Andy Wilkinson 7db6c9189e Downgrade to Nimbus JOSE JWT 8.+ 2021-02-12 10:56:35 +00:00
Josh Cummings f6a2850753
Next Development Version 2021-02-11 18:38:25 -07:00
Josh Cummings cf032d86d6
Revert "Lock Dependencies"
This reverts commit 9535a41d5a.
2021-02-11 18:38:07 -07:00
Josh Cummings abc523c063
Release 5.4.4 2021-02-11 18:00:01 -07:00