Spring Security
Go to file
佚名 87ed527023
Add null check in CsrfFilter and CsrfWebFilter
Solve the problem that CsrfFilter and CsrfWebFilter
throws NPE exception when comparing two byte array
is equal in low JDK version.

When JDK version is lower than 1.8.0_45, method
java.security.MessageDigest#isEqual does not verify
whether the two arrays are null. And the above two
class call this method without null judgment.

ZiQiang Zhao<1694392889@qq.com>
2021-04-09 21:43:19 -06:00
.github Remove test_alternative_jdks 2021-04-05 12:30:55 -05:00
.idea Fix checkstyle rules could not be parsed 2020-11-23 14:33:18 -05:00
acl add management platform(project(":spring-security-dependencies")) 2021-04-05 10:36:36 -05:00
aspects add management platform(project(":spring-security-dependencies")) 2021-04-05 10:36:36 -05:00
bom Use spring-build-conventions Bom plugin 2018-01-09 11:27:34 -06:00
buildSrc Add package-list 2021-04-09 08:41:59 -06:00
cas add management platform(project(":spring-security-dependencies")) 2021-04-05 10:36:36 -05:00
config Use Interceptors instead of Advice 2021-04-09 18:45:31 -06:00
core Use Interceptors instead of Advice 2021-04-09 18:45:31 -06:00
crypto Update javadoc for AesBytesEncrytor constructors 2021-04-05 13:49:29 -06:00
data add management platform(project(":spring-security-dependencies")) 2021-04-05 10:36:36 -05:00
dependencies Add coroutine support to pre/post authorize 2021-04-09 19:33:06 +02:00
docs Use Interceptors instead of Advice 2021-04-09 18:45:31 -06:00
etc Add Jwt Client Authentication support 2021-04-08 15:44:33 -04:00
gradle/wrapper Remove dependency-management.gradle 2021-04-05 10:36:36 -05:00
itest add management platform(project(":spring-security-dependencies")) 2021-04-05 10:36:36 -05:00
ldap add management platform(project(":spring-security-dependencies")) 2021-04-05 10:36:36 -05:00
messaging add management platform(project(":spring-security-dependencies")) 2021-04-05 10:36:36 -05:00
oauth2 Refactor AuthenticationDetailsSource support 2021-04-09 12:41:16 -06:00
openid add management platform(project(":spring-security-dependencies")) 2021-04-05 10:36:36 -05:00
remoting add management platform(project(":spring-security-dependencies")) 2021-04-05 10:36:36 -05:00
rsocket add management platform(project(":spring-security-dependencies")) 2021-04-05 10:36:36 -05:00
saml2/saml2-service-provider Restore spring-security-web Dependency 2021-04-09 12:42:04 -06:00
scripts Add custom release notes configuration file 2019-12-31 14:19:40 -05:00
taglibs add management platform(project(":spring-security-dependencies")) 2021-04-05 10:36:36 -05:00
test add management platform(project(":spring-security-dependencies")) 2021-04-05 10:36:36 -05:00
web Add null check in CsrfFilter and CsrfWebFilter 2021-04-09 21:43:19 -06:00
.editorconfig Use UTF-8 for Java sources and XML 2019-08-14 08:47:00 -05:00
.gitignore Ignore Lock Files 2020-02-07 13:59:05 -06:00
CONTRIBUTING.adoc Apply minor rewording and formatting 2020-10-12 13:18:02 -06:00
LICENSE.txt Add LICENSE.txt 2020-04-15 16:44:13 -05:00
README.adoc Update Build Section to Require JDK 11 2021-02-17 11:53:51 -07:00
build.gradle Add sagan(Create|Delete)Release 2021-04-08 17:56:21 -05:00
class_mapping_from_2.0.x.txt SEC-1148: Simple classname mapping from 2.0 to 3.0 2009-12-02 22:44:30 +00:00
gradle.properties Update org.jetbrains.kotlin to 1.4.32 2021-04-05 22:23:59 -05:00
gradlew Update to Gradle 6.6.1 2020-10-12 17:41:16 -06:00
gradlew.bat Update to Gradle 6.6.1 2020-10-12 17:41:16 -06:00
notice.txt URL Cleanup 2019-03-19 23:53:23 -05:00
settings.gradle Add mavenCentral to settings.gradle 2021-04-05 10:36:35 -05:00

README.adoc

image::https://badges.gitter.im/Join%20Chat.svg[Gitter,link=https://gitter.im/spring-projects/spring-security?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge]

image:https://github.com/spring-projects/spring-security/workflows/CI/badge.svg?branch=master["Build Status", link="https://github.com/spring-projects/spring-security/actions?query=workflow%3ACI"]

image:https://img.shields.io/badge/Revved%20up%20by-Gradle%20Enterprise-06A0CE?logo=Gradle&labelColor=02303A["Revved up by Gradle Enterprise", link="https://ge.spring.io/scans?search.rootProjectNames=spring-security"]

= Spring Security

Spring Security provides security services for the https://docs.spring.io[Spring IO Platform]. Spring Security 5.0 requires Spring 5.0 as
a minimum and also requires Java 8.

For a detailed list of features and access to the latest release, please visit https://spring.io/projects[Spring projects].

== Code of Conduct
Please see our https://github.com/spring-projects/.github/blob/master/CODE_OF_CONDUCT.md[code of conduct]

== Downloading Artifacts
See https://docs.spring.io/spring-security/site/docs/current/reference/html5/#getting[Getting Spring Security] for how to obtain Spring Security.

== Documentation
Be sure to read the https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/[Spring Security Reference].
Extensive JavaDoc for the Spring Security code is also available in the https://docs.spring.io/spring-security/site/docs/current/api/[Spring Security API Documentation].

== Quick Start
We recommend you visit https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/[Spring Security Reference] and read the "Getting Started" page.

== Building from Source
Spring Security uses a https://gradle.org[Gradle]-based build system.
In the instructions below, https://vimeo.com/34436402[`./gradlew`] is invoked from the root of the source tree and serves as
a cross-platform, self-contained bootstrap mechanism for the build.

=== Prerequisites
https://help.github.com/set-up-git-redirect[Git] and the https://www.oracle.com/technetwork/java/javase/downloads[JDK11 build].

Be sure that your `JAVA_HOME` environment variable points to the `jdk-11` folder extracted from the JDK download.

=== Check out sources
[indent=0]
----
git clone git@github.com:spring-projects/spring-security.git
----

=== Install all spring-\* jars into your local Maven cache
[indent=0]
----
./gradlew install
----

=== Compile and test; build all jars, distribution zips, and docs
[indent=0]
----
./gradlew build
----

Discover more commands with `./gradlew tasks`.
See also the https://github.com/spring-projects/spring-framework/wiki/Gradle-build-and-release-FAQ[Gradle build and release FAQ].

== Getting Support
Check out the https://stackoverflow.com/questions/tagged/spring-security[Spring Security tags on Stack Overflow].
https://spring.io/services[Commercial support] is available too.

== Contributing
https://help.github.com/articles/creating-a-pull-request[Pull requests] are welcome; see the https://github.com/spring-projects/spring-security/blob/master/CONTRIBUTING.adoc[contributor guidelines] for details.

== License
Spring Security is Open Source software released under the
https://www.apache.org/licenses/LICENSE-2.0.html[Apache 2.0 license].