A efficient security framework focus on protection of API.
APACHE-2.0 License
Bot releases are hidden (Show)
Full Changelog: https://github.com/dromara/sureness/compare/sureness-root-1.0.7...v1.0.8
Published by tomsun28 over 2 years ago
[core]make classpath:/config/ is first scan sureness.yml path.
add more issueJwt.
fix #I4RVO9.
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>1.0.7</version>
</dependency>
Published by tomsun28 almost 3 years ago
[starter] publish new Sureness-SpringBoot-Starter thanks @ChineseTony
[solon] solon 相关示例:升级到 solon 1.6.1 thanks @noear
[samples] fix starter-example dependency
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>1.0.6</version>
</dependency>
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>spring-boot-starter-sureness</artifactId>
<version>1.0.6</version>
</dependency>
Published by tomsun28 about 3 years ago
[docs] use jsdelivr cdn (#130)
Misjudging diff permission configurations as same config bug #133
Bump jfinal from 4.9.10 to 4.9.11 in /samples/jfinal-sureness (#127)
Bump path-parse from 1.0.6 to 1.0.7 in /home #126
Bump prismjs from 1.23.0 to 1.24.0 in /home #119
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>1.0.5</version>
</dependency>
Published by tomsun28 about 3 years ago
new sureness spring-boot-starter beta, thanks to @ChineseTony ,hope you like it! #120
Optimize some methods to reduce temporary memory usage #121
update spring-starter-sureness, opti config properties (#124)
springboot starter fix npe (#123)
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>1.0.4-beta.2</version>
</dependency>
Published by tomsun28 about 3 years ago
new sureness spring-boot-starter beta, thanks to @ChineseTony ,hope you like it! #120
Optimize some methods to reduce temporary memory usage #121
update spring-starter-sureness, opti config properties (#124)
springboot starter fix npe (#123)
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>1.0.4-beta.1</version>
</dependency>
Published by tomsun28 over 3 years ago
new sureness website !!!! #106 - see https://usthe.com/sureness or https://su.usthe.com, hope you like it!
support example use sureness protect jfinal #93
support example use sureness protect solon
support example use sureness protect spring gateway #97
support example use sureness protect zuul #98
remove unnecessary clearTree() in function rebuildTree (#111)
samples fix information exposure through a stack trace bug (#113)
Fix spring-gateway-sureness running error (#118)
docs update: step-by-step bugfix (#104)
Bump prismjs from 1.23.0 to 1.24.0 in /home (#119)
Bump normalize-url from 4.5.0 to 4.5.1 in /home (#110)
Bump dns-packet from 1.3.1 to 1.3.4 in /home (#108)
Bump ws from 6.2.1 to 6.2.2 in /home (#107)
remove ProcessorNotFoundException, UnsupportedSubjectException in filter example due not used often
simplify sureness demo's api,auth data
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>1.0.4</version>
</dependency>
Published by tomsun28 over 3 years ago
support spring5 reactive in sureness-core #91
support micronaut sample
use SurenessConstant instead of common str #90
add tutorial and update sample for javalin #89
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>1.0.3</version>
</dependency>
Published by tomsun28 over 3 years ago
support http session #86
add support session sample #87
add support redis cache session sample #88
remove sql inject pattern (--) #85
Fix the problem that authentication is still needed when the resource… #84
fix api can be accessed by any role when accessRole not config #83
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>1.0.2</version>
</dependency>
Published by tomsun28 over 3 years ago
support filter xss, sql inject #74
feature ignore http method #81
docs update and more
no security module in sureness-core the latest version bug #75
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>1.0.1</version>
</dependency>
Published by tomsun28 over 3 years ago
support websocket jwt auth feature #71
feature: storage subject info in websocket session #72
add more issueJwt method
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>1.0.0</version>
</dependency>
Published by tomsun28 over 3 years ago
Feature support subject principal map #66
implement authorized default in BaseProcessor #68
docs: update docs and add emojy
update benchmark test
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>0.4.6</version>
</dependency>
Published by tomsun28 over 3 years ago
jwt adds authentication parameter information in the request header to facilitate users to extend parameters #62
update docs
process authorized can not match roles when role name is upper #65
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>0.4.5</version>
</dependency>
Published by tomsun28 over 3 years ago
feature - Feature multi principal #61
feature - change subject getCredentials() to getCredential(),make credential single #59
feature - add benchmark test and report #58
change contextPathRef to CONTEXT_PATH_REF
delete unused code in sample-bootstrap, simplify the demo
bugfix - fix basic creator error when base64 error, fix digest creator error create when request is basic or jwt auth (#57)
bugfix - fix code analysis bug #56
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>0.4.4</version>
</dependency>
Published by tomsun28 almost 4 years ago
feature - update junit5 and add more test case #52
feature - split provider, support multi path tree resource provider #54
feature - add **.icon in excluded resource #53
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>0.4.3</version>
</dependency>
Published by tomsun28 almost 4 years ago
feature - only match subject supportRoles once #47
bugfix - fix #50, can not get principal in jwt proc #51
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>0.4.2</version>
</dependency>
Published by tomsun28 almost 4 years ago
no
bugfix#45,use currentThread classLoader find resource again when file not found #46
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>0.4.1</version>
</dependency>
Published by tomsun28 almost 4 years ago
Feature support one ant match rule strstr,eg:.html #44
Feature support simultaneous loading of multiple path data sources #43
Feature context path #42
Feature general code explain #41
bugfix-not return when digest auth want try again
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>0.4</version>
</dependency>
Published by tomsun28 almost 4 years ago
feature - support a custom token process flow #34
feature - add issues-translate-action
bugfix - throw uncatched exception when request jwt is not base64 #30
bugfix - PMD Failure- Rule:ConstantFieldShouldBeUpperCaseRule, Rule:UndefineMagicConstantRule
bugfix - fix can not run sample package jar
bugfix - Deprecated SurenessCommonUtil.findUserAgent #37
bugfix-@RequiresRoles can not support one more role #38
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>0.3</version>
</dependency>
Published by tomsun28 almost 4 years ago
feature - add support digest auth with servlet http #28
feature - add support digest auth with jax-rs #29
feature - update jwt util, set hmac algorithm as default #27
bugfix - fix sureness-tom can not access auth api
<dependency>
<groupId>com.usthe.sureness</groupId>
<artifactId>sureness-core</artifactId>
<version>0.2</version>
</dependency>