diff --git a/Dockerfile b/Dockerfile
index 61545e0..6cc0270 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
############################################################################
# #
-# Copyright 2020 Vincenzo De Notaris #
+# Copyright 2021 Vincenzo De Notaris #
# #
# Licensed under the Apache License, Version 2.0 (the "License"); #
# you may not use this file except in compliance with the License. #
diff --git a/Dockerfile.mvn b/Dockerfile.mvn
index a850b1e..e00e5ec 100644
--- a/Dockerfile.mvn
+++ b/Dockerfile.mvn
@@ -1,6 +1,6 @@
############################################################################
# #
-# Copyright 2020 Vincenzo De Notaris #
+# Copyright 2021 Vincenzo De Notaris #
# #
# Licensed under the Apache License, Version 2.0 (the "License"); #
# you may not use this file except in compliance with the License. #
diff --git a/LICENSE b/LICENSE
index d75475e..b02e17d 100755
--- a/LICENSE
+++ b/LICENSE
@@ -186,7 +186,7 @@ Apache License
same "printed page" as the copyright notice for easier
identification within third-party archives.
- Copyright 2020 Vincenzo De Notaris
+ Copyright 2021 Vincenzo De Notaris
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/README.md b/README.md
index 5899366..63632dd 100755
--- a/README.md
+++ b/README.md
@@ -20,8 +20,8 @@ This project represents a sample implementation of a **SAML 2.0 Service Provider
- **Author:** Vincenzo De Notaris ([dev@vdenotaris.com](mailto:dev@vdenotaris.com))
- **Website:** [www.vdenotaris.com](http://www.vdenotaris.com)
-- **Version:** ` 2.3.1.RELEASE`
-- **Last update**: February 15th, 2020
+- **Version:** ` 2.4.0.RELEASE`
+- **Last update**: December 19th, 2021
Thanks to *Vladimír Schäfer* ([github.com/vschafer](https://github.com/vschafer)) for supporting my work.
@@ -39,6 +39,18 @@ Thanks to *Vladimír Schäfer* ([github.com/vschafer](https://github.com/vschafe
---------
+## Changelog [new]
+
+- Version `2.4.0.RELEASE`:
+-- Update to Spring Boot `2.6.1`
+-- Update to JUnit `5`
+-- Update to Log4J `2.17.0` (see: [CVE-2021-44228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228))
+-- Update to Jackson `2.13.0`
+-- Update to Apache Commons `4.4`
+-- A circular reference exists between the beans `samlEntryPoint` and `samlIDPDiscovery` that depends on the original design of the core *Spring SAML extension* library.
+
+---------
+
## Walkthrough
### Run as Docker container
@@ -56,7 +68,7 @@ docker run -it --rm -p 8080:8080 -t vdenotaris/spring-saml-sp:latest
or compile the code and run the application with Maven:
```
-docker run -it --rm -p 8080:8080 -t vdenotaris/spring-saml-sp:2.3.1-mvn-jdk-8
+docker run -it --rm -p 8080:8080 -t vdenotaris/spring-saml-sp:2.4.0-mvn-jdk-8
```
*Note: the related Docker image is publicly available on [Docker Hub](https://hub.docker.com/r/vdenotaris/spring-saml-sp/).*
@@ -108,7 +120,7 @@ To update the SSOCircle certificates within the keystore, just run:
### License
- Copyright 2020 Vincenzo De Notaris
+ Copyright 2021 Vincenzo De Notaris
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
diff --git a/pom.xml b/pom.xml
index d4f0285..b8eb3e0 100644
--- a/pom.xml
+++ b/pom.xml
@@ -3,7 +3,7 @@
4.0.0
com.vdenotaris.spring
spring-boot-security-saml-sample
- 2.3.1.RELEASE
+ 2.4.0.RELEASE
jar
Spring Boot sample SAML 2.0 Service Provider
@@ -31,19 +31,21 @@
http://www.apache.org/licenses/LICENSE-2.0.html
- 2020
+ 2021
1.8
UTF-8
UTF-8
com.vdenotaris.spring.boot.security.saml.web.Application
- 2.9.10
+ 2.13.0
+ 2.17.0
- org.springframework.boot
- spring-boot-starter-parent
- 2.2.4.RELEASE
+ org.springframework.boot
+ spring-boot-starter-parent
+ 2.6.1
+
@@ -110,9 +112,9 @@
- commons-collections
- commons-collections
- 3.2.2
+ org.apache.commons
+ commons-collections4
+ 4.4
diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/Application.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/Application.java
index 131ed7b..8902d16 100755
--- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/Application.java
+++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/Application.java
@@ -1,5 +1,5 @@
/*
- * Copyright 2020 Vincenzo De Notaris
+ * Copyright 2021 Vincenzo De Notaris
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/MvcConfig.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/MvcConfig.java
index 3deba10..ab149f9 100755
--- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/MvcConfig.java
+++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/MvcConfig.java
@@ -1,5 +1,5 @@
/*
- * Copyright 2020 Vincenzo De Notaris
+ * Copyright 2021 Vincenzo De Notaris
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/WebSecurityConfig.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/WebSecurityConfig.java
index e15c1e3..876bfe2 100755
--- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/WebSecurityConfig.java
+++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/config/WebSecurityConfig.java
@@ -1,5 +1,5 @@
/*
- * Copyright 2020 Vincenzo De Notaris
+ * Copyright 2021 Vincenzo De Notaris
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
@@ -473,7 +473,7 @@ public AuthenticationManager authenticationManagerBean() throws Exception {
* @param http It allows configuring web based security for specific http requests.
* @throws Exception
*/
- @Override
+ @Override
protected void configure(HttpSecurity http) throws Exception {
http
.httpBasic()
diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/LandingController.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/LandingController.java
index f22b18e..e858a81 100755
--- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/LandingController.java
+++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/LandingController.java
@@ -1,5 +1,5 @@
/*
- * Copyright 2020 Vincenzo De Notaris
+ * Copyright 2021 Vincenzo De Notaris
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/SSOController.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/SSOController.java
index 9964d8b..9fc1f0b 100755
--- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/SSOController.java
+++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/controllers/SSOController.java
@@ -1,5 +1,5 @@
/*
- * Copyright 2020 Vincenzo De Notaris
+ * Copyright 2021 Vincenzo De Notaris
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/CurrentUserHandlerMethodArgumentResolver.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/CurrentUserHandlerMethodArgumentResolver.java
index 59fc274..ee622a0 100755
--- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/CurrentUserHandlerMethodArgumentResolver.java
+++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/CurrentUserHandlerMethodArgumentResolver.java
@@ -1,5 +1,5 @@
/*
- * Copyright 2020 Vincenzo De Notaris
+ * Copyright 2021 Vincenzo De Notaris
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/SAMLUserDetailsServiceImpl.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/SAMLUserDetailsServiceImpl.java
index 335d3dd..9254dfb 100755
--- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/SAMLUserDetailsServiceImpl.java
+++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/core/SAMLUserDetailsServiceImpl.java
@@ -1,5 +1,5 @@
/*
- * Copyright 2020 Vincenzo De Notaris
+ * Copyright 2021 Vincenzo De Notaris
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
diff --git a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/stereotypes/CurrentUser.java b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/stereotypes/CurrentUser.java
index 94c321f..ca9d216 100755
--- a/src/main/java/com/vdenotaris/spring/boot/security/saml/web/stereotypes/CurrentUser.java
+++ b/src/main/java/com/vdenotaris/spring/boot/security/saml/web/stereotypes/CurrentUser.java
@@ -1,5 +1,5 @@
/*
- * Copyright 2020 Vincenzo De Notaris
+ * Copyright 2021 Vincenzo De Notaris
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
diff --git a/src/main/resources/application.properties b/src/main/resources/application.properties
index c0ec440..cf94c35 100755
--- a/src/main/resources/application.properties
+++ b/src/main/resources/application.properties
@@ -1,4 +1,5 @@
logging.level.org.springframework.security.saml=DEBUG
logging.level.org.opensaml=DEBUG
logging.level.com.vdenotaris.spring.boot.security.saml=DEBUG
-logging.file=logs/file.log
\ No newline at end of file
+logging.file=logs/file.log
+spring.main.allow-circular-references=TRUE
\ No newline at end of file
diff --git a/src/main/resources/templates/layout.html b/src/main/resources/templates/layout.html
index 13936c9..d5819ed 100644
--- a/src/main/resources/templates/layout.html
+++ b/src/main/resources/templates/layout.html
@@ -1,6 +1,6 @@
@@ -32,7 +32,7 @@
Spring Boot — SAML 2.0 Service Provider
- github.com/vdenotaris/spring-boot-security-saml-sample/tree/2.3.1.RELEASE
+ github.com/vdenotaris/spring-boot-security-saml-sample/tree/2.4.0.RELEASE
@@ -47,7 +47,7 @@ Spring Boot — SAML 2.0 Service Provider