Commit Graph

69 Commits

Author SHA1 Message Date
Stéphane Nicoll
185a637bca Polish 2025-05-06 09:04:18 +02:00
Stéphane Nicoll
03b5f0057f Harmonize visibility of test classes and methods
Closes gh-1550
2025-04-21 17:36:00 +02:00
Stéphane Nicoll
772549084e Harmonize suffix of test classes
Closes gh-1528
2025-04-18 11:40:44 +02:00
Stéphane Nicoll
37504f00f5 Review checkstyle rules of spring-ws-security
See gh-1479
2025-03-07 15:36:50 +01:00
Stéphane Nicoll
ae5b46018f Reorder Javadoc tags consistently
See gh-1479
2025-03-07 15:36:50 +01:00
Stéphane Nicoll
00e1e68062 Mark private classes final
See gh-1479
2025-03-07 15:36:50 +01:00
Stéphane Nicoll
60ec66ce79 Add 'this.' for field access
See gh-1479
2025-03-07 15:36:49 +01:00
Stéphane Nicoll
bc0168f4b2 Format XML code consistently
In particular, this commit uses tabs consistently, rather than spaces.
2025-03-06 18:20:12 +01:00
Stéphane Nicoll
10f4a3bd1e Review reference guide
Closes gh-1475
2025-03-05 16:23:00 +01:00
Stéphane Nicoll
ae1029ea4f Review Javadoc infrastructure 2025-03-05 10:11:44 +01:00
Stéphane Nicoll
d0800f1ae6 Optimize imports 2025-03-05 10:11:44 +01:00
Stéphane Nicoll
a395d8215c Clean logging configuration in tests
Use log4j (2) consistently and remove old log4j 1 configuration.

Closes gh-1476
2025-03-04 17:56:22 +01:00
Stéphane Nicoll
3a60f3638e Polish 2025-02-27 15:32:54 +01:00
Stéphane Nicoll
4ffe014733 Fix Javadoc errors
See gh-1467
2025-02-27 14:12:39 +01:00
Stéphane Nicoll
5a1e5028cb Adapt to deprecation 2025-02-27 09:50:04 +01:00
Andy Wilkinson
fb4ab827c5 Name test classes consistently
Closes gh-1468
2025-02-26 16:02:07 +01:00
Stéphane Nicoll
da47205e58 Review Javadoc
Closes gh-1467
2025-02-26 15:28:51 +01:00
Andy Wilkinson
61c375c905 Use package-info.java instead of package.html
Closes gh-1460
2025-02-22 09:27:15 +01:00
Stéphane Nicoll
00aca5b677 Harmonize copyright headers 2025-02-19 14:34:27 +01:00
Stéphane Nicoll
fdede99aa0 Format code with spring-javaformat
This commit configures the build to use spring-javaformat and makes a
first pass to format the code of the project. As part of this, imports
have been optimized, and the license header has been harmonized.

Closes gh-1458
2025-02-19 14:17:06 +01:00
cachescrubber
37662a05e4 Wss4jHandler: override securement password using the message context (#1408)
* Allow to override securementPassword via MessageContext

* amend @author tags
2024-04-10 16:33:53 +02:00
Jamin Hitchcock
ffe5ccbdb5 Propagate TTL in Wss4jSecurityInterceptor.
Ensure TTL values are propagated properly through Wss4j's security interceptor.

Resolves #1150.
Original pull request: #1185.
2023-04-05 15:52:21 -05:00
hduelme
d260339814 Use StandardCharsets.UTF_8 instead of a string value.
Resolves #1335.
2023-04-05 15:10:13 -05:00
EliuX
52c7ee0ff0 Adds UserDetails to Authentication.
Add the `UserDetails` object to the `Authentication` during Spring Security password callbacks.

Resolves #109.
2023-04-05 13:59:14 -05:00
Greg L. Turnquist
1fa1365817 Polishing.
All of these instanceof checks can also take advantage of Java 17's pattern matching instanceof operator.

Related: #1326.
2023-02-06 16:20:11 -05:00
hduelme
a7a2726194 Remove null checks from instanceof checks.
As of Java 11, the Jave language officially declares that instanceof checks include a null check, hence no need to do them in our code.

Resolves #1326.
2023-02-06 16:13:43 -05:00
Greg L. Turnquist
7ae57b583e Polishing.
Related: #1300.
2023-01-25 12:57:24 -06:00
Rob Leland
bd7ba3be41 Add ability to override Wss4j's addInclusivePrefixes.
Resolves #1300.
Related: #1212.
2023-01-25 12:50:05 -06:00
Greg L. Turnquist
67422e348d Polishing.
Related: #1248.
2022-11-16 11:01:18 -06:00
hdulme
bde18f52af Collapse identical catch branches.
Also take advantage of Java's try-with-resources feature.

Resolves #1248.
2022-11-16 11:00:16 -06:00
Greg L. Turnquist
5beca4627e Update copyright headers. 2022-11-02 10:40:23 -05:00
Greg L. Turnquist
84a1b79436 Upgrade to Jakarta EE 9.
Resolves #1213.
2021-11-01 14:39:35 -05:00
Rafal Kural
8813abaa7e Fixed skip validation in handleResponse.
Fix skip validation in AbstractWsSecurityInterceptor.handleResponse.

Resolves #157.
2020-12-01 15:29:11 -06:00
Jialin Shao
eb6da139ae Fix flaky test in SpringSecurityPasswordValidationCallbackHandlerTest and SpringDigestPasswordValidationCallbackHandlerTest 2020-12-01 15:19:36 -06:00
Greg L. Turnquist
2254b0f789 #1159 - Upgrade to JUnit 5 and AssertJ.
Also upgrade XMLUnit to the 2.x version, using its AssertJ integration.
2020-10-20 14:55:57 -05:00
Greg L. Turnquist
d24b4fb5d5 #1160 - Update code style. 2020-09-29 20:40:54 -05:00
Greg Turnquist
1f05307d61 SWS-1049 - Replace direct API usage with better defaults. 2019-01-09 22:37:41 -06:00
Greg Turnquist
40c84470b9 SWS-1033 - Introduce Spring-based X.509 cache support
Deprecate EhCache-based X.509 caching and provide a path to migrate toward Spring-based caching.
2018-09-13 10:48:47 -05:00
Greg Turnquist
186bb2462b SWS-955 - Polishing 2017-10-30 11:12:19 -05:00
Jamin Hitchcock
e34fb937d1 SWS-955 - Add method for configuring SAML callback. 2017-10-30 11:02:00 -05:00
Greg Turnquist
f776609c63 SWS-1008 - Remove NO_SECURITY check in 3.x 2017-10-27 12:37:38 -05:00
Andreas Veithen
f36e8ca50c SWS-1007 - Fix invalid test cases that close the InputStream too early
Since Axiom uses deferred parsing, the underlying InputStream must not be closed before the message has been fully processed or the detach() method on the builder has been called. That constraint was violated by a few test cases. This doesn't cause problems with Axiom 1.2.x (presumably because the test messages are small enough), but the build fails with Axiom 1.3.0-SNAPSHOT.
2017-10-27 11:41:30 -05:00
Jamin Hitchcock
8c3df71531 SWS-972 - Handle UserDetailsService not finding user
SpringSecurityPasswordValidationCallbackHandler throws NPE when UserDetailsService does not find user. This adds a null check and additional test cases.
2017-10-27 11:31:44 -05:00
Andreas Veithen
dcc8b8deb0 SWS-1003 - Eliminate some usages of deprecated Axiom APIs
This change only addresses some trivial cases. There are other cases that require more work.
2017-10-24 19:52:19 -05:00
Greg Turnquist
6f9efb7e91 SWS-994 - Upgrade to Java 8, Spring 5, and everything else
Move Spring Web Services to 3.0.0.BUILD-SNAPSHOT

Key updates include:

* Rebase against Java 8
* Spring 5
* Smack 4.2
* Removal of wss4j 1.x support
* Gradle 4.0
* Plugins
2017-10-05 11:02:18 -05:00
Alexandru-Constantin Bledea
2398d6c648 SWS-989 - Skip validation if validation actions is empty or NO_SECURITY 2017-07-10 13:39:40 -05:00
Uxio
420e795607 SWS-948 Fix typo (duplicated the) 2016-02-11 14:28:44 -06:00
Greg Turnquist
346a53da29 SWS-890 Make WSSecurityEngine injectable to Wss4jSecurityInterceptor 2016-02-09 09:34:58 -06:00
Greg Turnquist
2906b1af5c SWS-945 Deprecate wss4j module
* Allow warnings through (don't break the build).
2016-02-09 08:19:45 -06:00
Arjen Poutsma
f9de2577a0 SWS-943 Upgraded from WSS4J 2.0 to 2.1 2016-02-03 11:38:20 -06:00