Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
8,409 Commits 26 Branches 0 Tags
bae50ecc05daa436fb22f2afc6bb24a36eb0cbc7
Commit Graph

74 Commits

Author SHA1 Message Date
Rafael Garcia
65f5c29316 Check hashes of byte array passwords 
Fixes gh-7661
 2019-12-13 17:57:49 +01:00
Rafael Garcia
c71e84bdac Replace test vectors with list of objects 2019-12-12 12:42:44 +01:00
Lars Grefer
34dd5fea30 Remove redundant throws clauses 
Removes exceptions that are declared in a method's signature but never thrown by the method itself or its implementations/derivatives.
 2019-08-23 01:03:54 +02:00
Lars Grefer
ff1070df36 remove redundant modifiers found by checkstyle 2019-08-10 00:18:56 +02:00
Simeon Macke
b3da1e466b Add Argon2PasswordEncoder 
Add PasswordEncoder for the Argon2 hashing algorithm (Password Hashing
Competition (PHC) winner).
This implementation uses the BouncyCastle-implementation of Argon2.

Fixes gh-5354
 2019-08-05 13:54:29 -05:00
Lars Grefer
43737a56bd Use foreach where possible 2019-07-09 06:11:45 -06:00
Rob Winch
e1f155ba89 Polish SCrypt Upgrade Support 
* Break up tests
* Rename test methods to follow conventions
* Fix checkstyle

Issue gh-7057
 2019-07-03 15:50:51 -05:00
Lars Grefer
e95effc839 Allow upgrading between different SCrypt encodings 
Fixes gh-7057
 2019-07-03 15:48:42 -05:00
Rob Winch
742df2cd1d Polish BCrypt upgrade 
Issue gh-7042
 2019-07-03 14:08:21 -05:00
Lars Grefer
d3d6a8743e Allow upgrading between different BCrypt encodings 
Fixes gh-7042
 2019-07-03 14:08:04 -05:00
Léon van der Kaap
d2248d185b Add extra salt length check for BCrypt 
If the salt length is 28 characters and the
version is 2{a,x,y}, an IndexOutOfBoundsException
is thrown. This commit adds an extra check that
the salt length should be at least 29 characters long
if the version is not equal to "2".

Fixes: gh-6907
 2019-06-24 14:11:30 -06:00
Spring Operator
b93528138e URL Cleanup 
This commit updates URLs to prefer the https protocol. Redirects are not followed to avoid accidentally expanding intentionally shortened URLs (i.e. if using a URL shortener).

# Fixed URLs

## Fixed Success
These URLs were switched to an https URL with a 2xx status. While the status was successful, your review is still recommended.

* http://www.apache.org/licenses/ with 1 occurrences migrated to:
  https://www.apache.org/licenses/ ([https](https://www.apache.org/licenses/) result 200).
* http://www.apache.org/licenses/LICENSE-2.0 with 2691 occurrences migrated to:
  https://www.apache.org/licenses/LICENSE-2.0 ([https](https://www.apache.org/licenses/LICENSE-2.0) result 200).
* http://www.apache.org/licenses/LICENSE-2.0.html with 2 occurrences migrated to:
  https://www.apache.org/licenses/LICENSE-2.0.html ([https](https://www.apache.org/licenses/LICENSE-2.0.html) result 200).
 2019-03-14 15:46:20 -05:00
Rob Winch
ae0f330f98 Add BCrypt Test for Empty Raw Password 
Issue: gh-5548
 2019-01-08 11:54:36 -06:00
Josh Cummings
9ee291e659 AesBytesEncryptorTests Check Key Strength 
Fixes: gh-6121
 2018-11-20 11:45:45 -07:00
Josh Cummings
13de580632 AesBytesEncryptorTests 
Issue: gh-5099
 2018-11-13 16:03:47 -07:00
linfeng
388a7b62b9 Add BCrypt Revision Support 
Fixes: gh-3320
 2018-10-22 11:13:55 -05:00
Rob Winch
02b857d82a Add PasswordEncoder.upgradeEncoding 
Issue: gh-2778
 2018-07-14 22:52:15 -05:00
Johnny Lim
9b42831c70 Suppress deprecation warnings in spring-security-crypto 2018-05-04 21:02:57 -05:00
Rob Winch
22737dce7e Polish 
DelegatingPasswordEncoder copies the provided Map. This ensures that
references to the Map do not update the state of DelegatingPasswordEncoder
and NullPointerException is avoided for implementations that do not allow
a null key.

Issue: gh-4936
 2018-01-03 10:11:04 -06:00
Michael J. Simons
2b66793535 Catch possible NullPointerException 
Some maps may throw a NullPointerException when get is called with null. This commit catches the exceptions and just leaves the delegate null.

Fixes gh-4936
 2018-01-03 09:46:58 -06:00
Rob Winch
e5b41f30ea Fix DelegatingPasswordEncoderTests 
Issue: gh-4872
 2017-11-27 12:01:31 -06:00
Rob Winch
f558b5016c DelegatingPasswordEncoder handles null encodedPassword 
Fixes: gh-4872
 2017-11-27 11:42:56 -06:00
Johnny Lim
b6895e6359 Apply Checkstyle WhitespaceAfterCheck module 2017-11-16 11:18:31 -06:00
Johnny Lim
d900f2a623 Remove unused imports 
This commit also adds UnusedImportsCheck Checkstyle module.
 2017-11-14 14:41:08 -06:00
Antoine
e0aca04a28 Polish AssertJ assertions 
Polish AssertJ assertions
 2017-10-29 22:22:34 -05:00
Rob Winch
6532bac295 Update Md4PasswordEncoder Javadoc 
Include format and migration information.

Issue: gh-4674
 2017-10-24 10:23:38 -05:00
Rob Winch
870b8bf9b2 Pbkdf2PasswordEncoder supports Base64 encoding 
Fixes gh-4683
 2017-10-24 08:47:04 -05:00
Rob Winch
fe8f3afbaf Pbkdf2PasswordEncoder allows custom SecretKeyFactory 
Fixes gh-2742
 2017-10-24 08:34:30 -05:00
Rob Winch
d832213c6c Add ldap to PasswordEncoderFactories 
Issue: gh-4674
 2017-10-24 07:56:28 -05:00
Rob Winch
d83f4c4aa5 Add SHA-256 to PasswordEncoderFactories 
Issue: gh-4674
 2017-10-24 07:56:28 -05:00
Rob Winch
5f2785d39c Add SHA-1 to PasswordEncoderFactories 
Issue: gh-4674
 2017-10-24 07:56:28 -05:00
Rob Winch
63e061f4d1 Add MD5 to PasswordEncoderFactories 
Issue: gh-4674
 2017-10-24 07:56:28 -05:00
Rob Winch
7fe41de5eb Add MD4 to PasswordEncoderFactories 
Issue: gh-4674
 2017-10-24 07:56:28 -05:00
Rob Winch
1ed1716df4 Add LdapShaPasswordEncoder to crypto 
Issue: gh-4674
 2017-10-23 22:27:16 -05:00
Rob Winch
d9a594d039 Add Md4PasswordEncoder to crypto 
Issue: gh-4674
 2017-10-23 22:27:16 -05:00
Rob Winch
8fda55e98f Add MessageDigestPasswordEncoder to crypto 
Issue: gh-4674
 2017-10-23 22:27:16 -05:00
Kazuki Shimizu
2937477405 Polishing 
See gh-4666
 2017-10-23 08:36:24 -05:00
Rob Winch
d152a2e2c1 Add PasswordEncoderFactories 
Issue gh-4666
 2017-10-20 13:26:17 -05:00
Rob Winch
d0332eb71a Add DelegatingPasswordEncoder 
Fixes gh-4666
 2017-10-20 13:26:17 -05:00
Rob Winch
d7d6400971 DefaultStateGenerator->Base64StringKeyGenerator 
Rename and move DefaultStateGenerator since it is more generic than just
OAuth.

Fixes gh-4645
 2017-10-18 11:29:04 -05:00
Rob Winch
e16b8e7976 Fix logback-test.xml 2017-08-17 16:42:01 -05:00
Rob Winch
07c3123696 Deprecate crypto.codec.Base64 
In commit 85719fc Base64 was removed. However, this class was never
deprecated properly. This commit adds it back and marks it as deprecated.

Fixes gh-4421
 2017-06-26 09:21:00 -05:00
Vedran Pavic
85719fcd64 Use Base64 implementation provided by Java 8 2017-05-10 00:27:36 -05:00
SendilKumar N
c31bdb6390 SCryptPasswordEncoder to take default keyLength value 
Fixes gh-4225
Closes gh-4231
 2017-03-01 23:11:52 -06:00
Jan Brennenstuhl
09436649cc handling null-values for salts properly now - fixes gh-4147 2016-12-06 08:43:19 -06:00
Kazuki Shimizu
a1f771251a Improve exception message on Hex#decode 
Fixes gh-4043
 2016-08-29 15:10:39 -04:00
Rob Winch
8f880aea0e Polish Pbkdf2PasswordEncoder 
Issue gh-3930
 2016-06-21 11:47:50 -05:00
Kim Saabye Pedersen
9fcfeaf225 BCryptPasswordEncoder validates strength 
Fixes gh-3862
 2016-05-20 14:54:26 -05:00
Will Tran
b01437281d Bouncy Castle 1.47 Support 
This forces us to avoid using CipherOutputStream, and instead use the
BlockCiphers directly. As an extra measure for correctness, test the
equivalence of the BC implementations against data sizes from 1 to 2048
bytes.

Fixes gh-2917
 2016-04-18 08:35:57 -05:00
Will Tran
44fa624b6b Refactor test assumptions about JCE to common class. (#3817) 
Apply assumptions directly to test methods instead of checking for key
length in crypto.gradle.
 2016-04-14 17:02:31 -05:00