sureness

What's Changed

• Upgrade Docusaurus by @tomsun28 in https://github.com/dromara/sureness/pull/163
• support config your custom jwt secret need by @tomsun28 in https://github.com/dromara/sureness/pull/167
• fix auth permission bypass due to special request uri path by @tomsun28 in https://github.com/dromara/sureness/pull/168
• support not case-sensitive for salt password by @tomsun28 in https://github.com/dromara/sureness/pull/169

Full Changelog: https://github.com/dromara/sureness/compare/sureness-root-1.0.7...v1.0.8

Features

[core]make classpath:/config/ is first scan sureness.yml path.
add more issueJwt.

BugFix

fix #I4RVO9.

Others

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.7</version>
</dependency>

Features

[starter] publish new Sureness-SpringBoot-Starter thanks @ChineseTony
[solon] solon 相关示例：升级到 solon 1.6.1 thanks @noear

Bugfix.

[samples] fix starter-example dependency

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.6</version>
</dependency>

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>spring-boot-starter-sureness</artifactId>
    <version>1.0.6</version>
</dependency>

Features

[docs] use jsdelivr cdn (#130)

BugFix

Misjudging diff permission configurations as same config bug #133
Bump jfinal from 4.9.10 to 4.9.11 in /samples/jfinal-sureness (#127)
Bump path-parse from 1.0.6 to 1.0.7 in /home #126
Bump prismjs from 1.23.0 to 1.24.0 in /home #119

Others

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.5</version>
</dependency>

Features

new sureness spring-boot-starter beta, thanks to @ChineseTony ,hope you like it! #120

Optimize some methods to reduce temporary memory usage #121
update spring-starter-sureness, opti config properties (#124)

BugFix

springboot starter fix npe (#123)

Others

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.4-beta.2</version>
</dependency>

Features

new sureness spring-boot-starter beta, thanks to @ChineseTony ,hope you like it! #120

Optimize some methods to reduce temporary memory usage #121
update spring-starter-sureness, opti config properties (#124)

BugFix

springboot starter fix npe (#123)

Others

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.4-beta.1</version>
</dependency>

Features

new sureness website !!!! #106 - see https://usthe.com/sureness or https://su.usthe.com, hope you like it!

support example use sureness protect jfinal #93
support example use sureness protect solon
support example use sureness protect spring gateway #97
support example use sureness protect zuul #98
remove unnecessary clearTree() in function rebuildTree (#111)

BugFix

samples fix information exposure through a stack trace bug (#113)
Fix spring-gateway-sureness running error (#118)
docs update: step-by-step bugfix (#104)
Bump prismjs from 1.23.0 to 1.24.0 in /home (#119)
Bump normalize-url from 4.5.0 to 4.5.1 in /home (#110)
Bump dns-packet from 1.3.1 to 1.3.4 in /home (#108)
Bump ws from 6.2.1 to 6.2.2 in /home (#107)

Others

remove ProcessorNotFoundException, UnsupportedSubjectException in filter example due not used often
simplify sureness demo's api,auth data

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.4</version>
</dependency>

Features

support spring5 reactive in sureness-core #91
support micronaut sample
use SurenessConstant instead of common str #90
add tutorial and update sample for javalin #89

BugFix

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.3</version>
</dependency>

Features

support http session #86
add support session sample #87
add support redis cache session sample #88
remove sql inject pattern (--) #85

BugFix

Fix the problem that authentication is still needed when the resource… #84
fix api can be accessed by any role when accessRole not config #83

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.2</version>
</dependency>

Features

support filter xss, sql inject #74
feature ignore http method #81
docs update and more

BugFix

no security module in sureness-core the latest version bug #75

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.1</version>
</dependency>

Features

support websocket jwt auth feature #71
feature: storage subject info in websocket session #72
add more issueJwt method

BugFix

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.0</version>
</dependency>

Features

Feature support subject principal map #66
implement authorized default in BaseProcessor #68
docs: update docs and add emojy
update benchmark test

BugFix

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>0.4.6</version>
</dependency>

Features

jwt adds authentication parameter information in the request header to facilitate users to extend parameters #62

update docs

BugFix

process authorized can not match roles when role name is upper #65

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>0.4.5</version>
</dependency>

Features

feature - Feature multi principal #61
feature - change subject getCredentials() to getCredential(),make credential single #59
feature - add benchmark test and report #58

change contextPathRef to CONTEXT_PATH_REF
delete unused code in sample-bootstrap, simplify the demo

BugFix

bugfix - fix basic creator error when base64 error, fix digest creator error create when request is basic or jwt auth (#57)
bugfix - fix code analysis bug #56

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>0.4.4</version>
</dependency>

Features

feature - update junit5 and add more test case #52
feature - split provider, support multi path tree resource provider #54
feature - add **.icon in excluded resource #53

BugFix

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>0.4.3</version>
</dependency>

Features

feature - only match subject supportRoles once #47

BugFix

bugfix - fix #50, can not get principal in jwt proc #51

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>0.4.2</version>
</dependency>

Features

no

BugFix

bugfix#45,use currentThread classLoader find resource again when file not found #46

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>0.4.1</version>
</dependency>

Features

Feature support one ant match rule strstr,eg:.html #44
Feature support simultaneous loading of multiple path data sources #43
Feature context path #42
Feature general code explain #41

BugFix

bugfix-not return when digest auth want try again

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>0.4</version>
</dependency>

Features

feature - support a custom token process flow #34
feature - add issues-translate-action

BugFix

bugfix - throw uncatched exception when request jwt is not base64 #30
bugfix - PMD Failure- Rule:ConstantFieldShouldBeUpperCaseRule, Rule:UndefineMagicConstantRule
bugfix - fix can not run sample package jar
bugfix - Deprecated SurenessCommonUtil.findUserAgent #37
bugfix-@RequiresRoles can not support one more role #38

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>0.3</version>
</dependency>

Features

feature - add support digest auth with servlet http #28
feature - add support digest auth with jax-rs #29
feature - update jwt util, set hmac algorithm as default #27

BugFix

bugfix - fix sureness-tom can not access auth api

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>0.2</version>
</dependency>