Spring Security
Go to file
Serdar Kuzucu 76e117a67a Allow maximum age of csrf cookie to be configured
Allows maxAge of the generated cookie by CookieCsrfTokenRepository
to be configurable.

Prior to this commit, maximum age was set with a value of -1.

After this commit, it will be configured by the user with an either
positive or negative value. If the user does not provide a value,
it will be set -1.

An IllegalArgumentException will be thrown when
this value is set to zero.

Closes gh-9195
2020-12-09 10:45:22 -06:00
.github Add artifactoryUsername/Password to other workflow steps 2020-11-16 13:11:07 -06:00
.idea Fix checkstyle rules could not be parsed 2020-11-23 14:33:18 -05:00
acl Revert "Lock dependencies for 5.5.0-M1" 2020-11-03 19:53:28 -05:00
aspects Revert "Lock dependencies for 5.5.0-M1" 2020-11-03 19:53:28 -05:00
bom Use spring-build-conventions Bom plugin 2018-01-09 11:27:34 -06:00
buildSrc Use parenthesis with single-arg lambdas 2020-08-24 17:33:08 -05:00
cas Revert "Lock dependencies for 5.5.0-M1" 2020-11-03 19:53:28 -05:00
config Fix typos 2020-12-03 11:05:22 +01:00
core Fix typos 2020-12-03 11:05:22 +01:00
crypto Fix javadoc in Pbkdf2PasswordEncoder 2020-11-25 11:45:21 -07:00
data Revert "Lock dependencies for 5.5.0-M1" 2020-11-03 19:53:28 -05:00
docs Fix Custom DSL sample in docs 2020-12-09 10:48:15 +01:00
etc Merge Formatting Changes 2020-08-24 17:33:23 -05:00
gradle Set rsocketVersion to 1.1.0 2020-10-29 15:43:52 -04:00
itest Revert "Lock dependencies for 5.5.0-M1" 2020-11-03 19:53:28 -05:00
ldap Revert "Lock dependencies for 5.5.0-M1" 2020-11-03 19:53:28 -05:00
messaging Revert "Lock dependencies for 5.5.0-M1" 2020-11-03 19:53:28 -05:00
oauth2 OidcIdToken cannot be serialized to JSON if token contains claim of type JSONArray or JSONObject 2020-12-03 09:58:30 -05:00
openid Revert "Lock dependencies for 5.5.0-M1" 2020-11-03 19:53:28 -05:00
remoting Revert "Lock dependencies for 5.5.0-M1" 2020-11-03 19:53:28 -05:00
rsocket Revert "Lock dependencies for 5.5.0-M1" 2020-11-03 19:53:28 -05:00
saml2/saml2-service-provider Revert "Lock dependencies for 5.5.0-M1" 2020-11-03 19:53:28 -05:00
samples Revert "Lock dependencies for 5.5.0-M1" 2020-11-03 19:53:28 -05:00
scripts Add custom release notes configuration file 2019-12-31 14:19:40 -05:00
taglibs Revert "Lock dependencies for 5.5.0-M1" 2020-11-03 19:53:28 -05:00
test WithSecurityContextTestExecutionListener Respects @NestedTestConfiguration 2020-11-06 15:11:50 -06:00
web Allow maximum age of csrf cookie to be configured 2020-12-09 10:45:22 -06:00
.editorconfig Use UTF-8 for Java sources and XML 2019-08-14 08:47:00 -05:00
.gitignore Ignore Lock Files 2020-02-07 13:59:05 -06:00
CONTRIBUTING.adoc Apply minor rewording and formatting 2020-10-12 13:18:02 -06:00
LICENSE.txt Add LICENSE.txt 2020-04-15 16:44:13 -05:00
README.adoc Build GitHub Actions CI pipeline 2020-11-10 10:25:16 -05:00
build.gradle Update to spring-build-conventions:0.0.35.BUILD-SNAPSHOT 2020-11-16 12:26:36 -06:00
class_mapping_from_2.0.x.txt SEC-1148: Simple classname mapping from 2.0 to 3.0 2009-12-02 22:44:30 +00:00
gradle.properties WithSecurityContextTestExecutionListener Respects @NestedTestConfiguration 2020-11-06 15:11:50 -06:00
gradlew Update to Gradle 6.6.1 2020-10-12 17:41:16 -06:00
gradlew.bat Update to Gradle 6.6.1 2020-10-12 17:41:16 -06:00
notice.txt URL Cleanup 2019-03-19 23:53:23 -05:00
settings.gradle Update to Gradle 6.6.1 2020-10-12 17:41:16 -06:00

README.adoc

image::https://badges.gitter.im/Join%20Chat.svg[Gitter,link=https://gitter.im/spring-projects/spring-security?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge]

image:https://github.com/spring-projects/spring-security/workflows/CI/badge.svg?branch=master["Build Status", link="https://github.com/spring-projects/spring-security/actions?query=workflow%3ACI"]

= Spring Security

Spring Security provides security services for the https://docs.spring.io[Spring IO Platform]. Spring Security 5.0 requires Spring 5.0 as
a minimum and also requires Java 8.

For a detailed list of features and access to the latest release, please visit https://spring.io/projects[Spring projects].

== Code of Conduct
Please see our https://github.com/spring-projects/.github/blob/master/CODE_OF_CONDUCT.md[code of conduct]

== Downloading Artifacts
See https://docs.spring.io/spring-security/site/docs/current/reference/html5/#getting[Getting Spring Security] for how to obtain Spring Security.

== Documentation
Be sure to read the https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/[Spring Security Reference].
Extensive JavaDoc for the Spring Security code is also available in the https://docs.spring.io/spring-security/site/docs/current/api/[Spring Security API Documentation].

== Quick Start
We recommend you visit https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/[Spring Security Reference] and read the "Getting Started" page.

== Building from Source
Spring Security uses a https://gradle.org[Gradle]-based build system.
In the instructions below, https://vimeo.com/34436402[`./gradlew`] is invoked from the root of the source tree and serves as
a cross-platform, self-contained bootstrap mechanism for the build.

=== Prerequisites
https://help.github.com/set-up-git-redirect[Git] and the https://www.oracle.com/technetwork/java/javase/downloads[JDK8 build].

Be sure that your `JAVA_HOME` environment variable points to the `jdk1.8.0` folder extracted from the JDK download.

=== Check out sources
[indent=0]
----
git clone git@github.com:spring-projects/spring-security.git
----

=== Install all spring-\* jars into your local Maven cache
[indent=0]
----
./gradlew install
----

=== Compile and test; build all jars, distribution zips, and docs
[indent=0]
----
./gradlew build
----

Discover more commands with `./gradlew tasks`.
See also the https://github.com/spring-projects/spring-framework/wiki/Gradle-build-and-release-FAQ[Gradle build and release FAQ].

== Getting Support
Check out the https://stackoverflow.com/questions/tagged/spring-security[Spring Security tags on Stack Overflow].
https://spring.io/services[Commercial support] is available too.

== Contributing
https://help.github.com/articles/creating-a-pull-request[Pull requests] are welcome; see the https://github.com/spring-projects/spring-security/blob/master/CONTRIBUTING.adoc[contributor guidelines] for details.

== License
Spring Security is Open Source software released under the
https://www.apache.org/licenses/LICENSE-2.0.html[Apache 2.0 license].