diff --git a/Dockerfile b/Dockerfile index 61545e0..6cc0270 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,6 @@ ############################################################################ # # -# Copyright 2020 Vincenzo De Notaris # +# Copyright 2021 Vincenzo De Notaris # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # diff --git a/Dockerfile.mvn b/Dockerfile.mvn index a850b1e..e00e5ec 100644 --- a/Dockerfile.mvn +++ b/Dockerfile.mvn @@ -1,6 +1,6 @@ ############################################################################ # # -# Copyright 2020 Vincenzo De Notaris # +# Copyright 2021 Vincenzo De Notaris # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # diff --git a/LICENSE b/LICENSE index d75475e..b02e17d 100755 --- a/LICENSE +++ b/LICENSE @@ -186,7 +186,7 @@ Apache License same "printed page" as the copyright notice for easier identification within third-party archives. - Copyright 2020 Vincenzo De Notaris + Copyright 2021 Vincenzo De Notaris Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. diff --git a/README.md b/README.md index 5899366..63632dd 100755 --- a/README.md +++ b/README.md @@ -20,8 +20,8 @@ This project represents a sample implementation of a **SAML 2.0 Service Provider - **Author:** Vincenzo De Notaris ([dev@vdenotaris.com](mailto:dev@vdenotaris.com)) - **Website:** [www.vdenotaris.com](http://www.vdenotaris.com) -- **Version:** ` 2.3.1.RELEASE` -- **Last update**: February 15th, 2020 +- **Version:** ` 2.4.0.RELEASE` +- **Last update**: December 19th, 2021 Thanks to *Vladimír Schäfer* ([github.com/vschafer](https://github.com/vschafer)) for supporting my work. @@ -39,6 +39,18 @@ Thanks to *Vladimír Schäfer* ([github.com/vschafer](https://github.com/vschafe --------- +## Changelog [new] + +- Version `2.4.0.RELEASE`: +-- Update to Spring Boot `2.6.1` +-- Update to JUnit `5` +-- Update to Log4J `2.17.0` (see: [CVE-2021-44228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228)) +-- Update to Jackson `2.13.0` +-- Update to Apache Commons `4.4` +-- A circular reference exists between the beans `samlEntryPoint` and `samlIDPDiscovery` that depends on the original design of the core *Spring SAML extension* library. + +--------- + ## Walkthrough ### Run as Docker container @@ -56,7 +68,7 @@ docker run -it --rm -p 8080:8080 -t vdenotaris/spring-saml-sp:latest or compile the code and run the application with Maven: ``` -docker run -it --rm -p 8080:8080 -t vdenotaris/spring-saml-sp:2.3.1-mvn-jdk-8 +docker run -it --rm -p 8080:8080 -t vdenotaris/spring-saml-sp:2.4.0-mvn-jdk-8 ``` *Note: the related Docker image is publicly available on [Docker Hub](https://hub.docker.com/r/vdenotaris/spring-saml-sp/).* @@ -108,7 +120,7 @@ To update the SSOCircle certificates within the keystore, just run: ### License - Copyright 2020 Vincenzo De Notaris + Copyright 2021 Vincenzo De Notaris Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. diff --git a/pom.xml b/pom.xml index d4f0285..b8eb3e0 100644 --- a/pom.xml +++ b/pom.xml @@ -3,7 +3,7 @@ 4.0.0 com.vdenotaris.spring spring-boot-security-saml-sample - 2.3.1.RELEASE + 2.4.0.RELEASE jar Spring Boot sample SAML 2.0 Service Provider @@ -31,19 +31,21 @@ http://www.apache.org/licenses/LICENSE-2.0.html - 2020 + 2021 1.8 UTF-8 UTF-8 com.vdenotaris.spring.boot.security.saml.web.Application - 2.9.10 + 2.13.0 + 2.17.0 - org.springframework.boot - spring-boot-starter-parent - 2.2.4.RELEASE + org.springframework.boot + spring-boot-starter-parent + 2.6.1 + @@ -110,9 +112,9 @@ - commons-collections - commons-collections - 3.2.2 + org.apache.commons + commons-collections4 + 4.4 diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/Application.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/Application.java index 131ed7b..8902d16 100755 --- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/Application.java +++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/Application.java @@ -1,5 +1,5 @@ /* - * Copyright 2020 Vincenzo De Notaris + * Copyright 2021 Vincenzo De Notaris * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/MvcConfig.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/MvcConfig.java index 3deba10..ab149f9 100755 --- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/MvcConfig.java +++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/MvcConfig.java @@ -1,5 +1,5 @@ /* - * Copyright 2020 Vincenzo De Notaris + * Copyright 2021 Vincenzo De Notaris * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/WebSecurityConfig.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/WebSecurityConfig.java index e15c1e3..876bfe2 100755 --- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/WebSecurityConfig.java +++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/WebSecurityConfig.java @@ -1,5 +1,5 @@ /* - * Copyright 2020 Vincenzo De Notaris + * Copyright 2021 Vincenzo De Notaris * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. @@ -473,7 +473,7 @@ public AuthenticationManager authenticationManagerBean() throws Exception { * @param http It allows configuring web based security for specific http requests. * @throws Exception */ - @Override + @Override protected void configure(HttpSecurity http) throws Exception { http .httpBasic() diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/LandingController.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/LandingController.java index f22b18e..e858a81 100755 --- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/LandingController.java +++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/LandingController.java @@ -1,5 +1,5 @@ /* - * Copyright 2020 Vincenzo De Notaris + * Copyright 2021 Vincenzo De Notaris * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/SSOController.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/SSOController.java index 9964d8b..9fc1f0b 100755 --- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/SSOController.java +++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/SSOController.java @@ -1,5 +1,5 @@ /* - * Copyright 2020 Vincenzo De Notaris + * Copyright 2021 Vincenzo De Notaris * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/CurrentUserHandlerMethodArgumentResolver.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/CurrentUserHandlerMethodArgumentResolver.java index 59fc274..ee622a0 100755 --- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/CurrentUserHandlerMethodArgumentResolver.java +++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/CurrentUserHandlerMethodArgumentResolver.java @@ -1,5 +1,5 @@ /* - * Copyright 2020 Vincenzo De Notaris + * Copyright 2021 Vincenzo De Notaris * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/SAMLUserDetailsServiceImpl.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/SAMLUserDetailsServiceImpl.java index 335d3dd..9254dfb 100755 --- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/SAMLUserDetailsServiceImpl.java +++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/SAMLUserDetailsServiceImpl.java @@ -1,5 +1,5 @@ /* - * Copyright 2020 Vincenzo De Notaris + * Copyright 2021 Vincenzo De Notaris * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/stereotypes/CurrentUser.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/stereotypes/CurrentUser.java index 94c321f..ca9d216 100755 --- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/stereotypes/CurrentUser.java +++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/stereotypes/CurrentUser.java @@ -1,5 +1,5 @@ /* - * Copyright 2020 Vincenzo De Notaris + * Copyright 2021 Vincenzo De Notaris * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. diff --git a/src/main/resources/application.properties b/src/main/resources/application.properties index c0ec440..cf94c35 100755 --- a/src/main/resources/application.properties +++ b/src/main/resources/application.properties @@ -1,4 +1,5 @@ logging.level.org.springframework.security.saml=DEBUG logging.level.org.opensaml=DEBUG logging.level.com.vdenotaris.spring.boot.security.saml=DEBUG -logging.file=logs/file.log \ No newline at end of file +logging.file=logs/file.log +spring.main.allow-circular-references=TRUE \ No newline at end of file diff --git a/src/main/resources/templates/layout.html b/src/main/resources/templates/layout.html index 13936c9..d5819ed 100644 --- a/src/main/resources/templates/layout.html +++ b/src/main/resources/templates/layout.html @@ -1,6 +1,6 @@ @@ -32,7 +32,7 @@
Spring Boot — SAML 2.0 Service Provider
- github.com/vdenotaris/spring-boot-security-saml-sample/tree/2.3.1.RELEASE + github.com/vdenotaris/spring-boot-security-saml-sample/tree/2.4.0.RELEASE @@ -47,7 +47,7 @@
Spring Boot — SAML 2.0 Service Provider