What's Changed

• Upgrade Docusaurus by @tomsun28 in https://github.com/dromara/sureness/pull/163
• support config your custom jwt secret need by @tomsun28 in https://github.com/dromara/sureness/pull/167
• fix auth permission bypass due to special request uri path by @tomsun28 in https://github.com/dromara/sureness/pull/168
• support not case-sensitive for salt password by @tomsun28 in https://github.com/dromara/sureness/pull/169

Full Changelog: https://github.com/dromara/sureness/compare/sureness-root-1.0.7...v1.0.8

Features

[core]make classpath:/config/ is first scan sureness.yml path.
add more issueJwt.

BugFix

fix #I4RVO9:低级代码错误，更正一下吧.

Others

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.7</version>
</dependency>

Sureness 是一个面向REST API的高性能认证鉴权框架，致力于管理保护API安全

Gitee Github

Features

[starter] publish new Sureness-SpringBoot-Starter thanks @ChineseTony
[solon] solon 相关示例：升级到 solon 1.6.1 thanks @noear

Bugfix.

[samples] fix starter-example dependency

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.6</version>
</dependency>

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>spring-boot-starter-sureness</artifactId>
    <version>1.0.6</version>
</dependency>

如果您喜欢Sureness，不妨在Gitee Github 给我们个star鼓励。
QQ群：390083213 欢迎一起交流探讨学习。

Sureness 是一个面向REST API的高性能认证鉴权框架，致力于管理保护API安全

Gitee Github

Features

发布了全新的官网和文档 #106 地址： https://usthe.com/sureness 或 https://su.usthe.com ， 希望能喜欢，欢迎一起完善或给点意见。

提供了Sureness对国产框架Jfinal的认证鉴权支持保护样例，#93 参见： Jfinal-Sureness-Demo

提供了Sureness对国产框架Solon的认证鉴权支持保护样例和适配器，这里感谢 @刘西东 大佬贡献 参见： Solon-Sureness-Demo

Sureness原生适合在网关层面进行API的认证鉴权保护，这里我们也提供了两个网关的支持样例，供大家参考极速集成进去。

对Spring gateway 网关进行API粒度的认证鉴权保护的样例，参见： Spring Gateway-Sureness Demo

对Netfix Zuul 网关进行API粒度的认证鉴权保护的样例，参见： Netflix Zuul-Sureness Demo

更多网关(shenyu)的支持我们也在计划中。

remove unnecessary clearTree() in function rebuildTree (#111)

BugFix

samples fix information exposure through a stack trace bug (#113)
Fix spring-gateway-sureness running error (#118)
docs update: step-by-step bugfix (#104)
Bump prismjs from 1.23.0 to 1.24.0 in /home (#119)
Bump normalize-url from 4.5.0 to 4.5.1 in /home (#110)
Bump dns-packet from 1.3.1 to 1.3.4 in /home (#108)
Bump ws from 6.2.1 to 6.2.2 in /home (#107)

Others

remove ProcessorNotFoundException, UnsupportedSubjectException in filter example due not used often
simplify sureness demo's api,auth data

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.4</version>
</dependency>

如果您喜欢Sureness，不妨在Gitee Github 给我们个star鼓励。
QQ群：390083213 欢迎一起交流探讨学习。

Features

在sureness-core里原生支持 spring5 reactive #91
支持sureness集成micronaut样例，由 @tom 贡献，PR
将之前零散的公告常量串统一到 SurenessConstant #90
新增sureness集成javalin的详细教程(此为javalin的大佬需要，之后合入官网) #89

BugFix

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.3</version>
</dependency>

Features

support http session #86
add support session sample #87
add support redis cache session sample #88
remove sql inject pattern (--) #85

BugFix

Fix the problem that authentication is still needed when the resource… #84
fix api can be accessed by any role when accessRole not config #83

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.2</version>
</dependency>

Features

support filter xss, sql inject #74
feature ignore http method #81
docs update and more

BugFix

no security module in sureness-core the latest version bug #75

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.1</version>
</dependency>

Features

support websocket jwt auth feature #71
feature: storage subject info in websocket session #72
add more issueJwt method

BugFix

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>1.0.0</version>
</dependency>

Features

Feature support subject principal map #66
implement authorized default in BaseProcessor #68
docs: update docs and add emojy
update benchmark test

BugFix

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>0.4.6</version>
</dependency>

Features

jwt adds authentication parameter information in the request header to facilitate users to extend parameters #62

update docs

BugFix

process authorized can not match roles when role name is upper #65

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>0.4.5</version>
</dependency>

Features

feature - Feature multi principal #61
feature - change subject getCredentials() to getCredential(),make credential single #59
feature - add benchmark test and report #58

change contextPathRef to CONTEXT_PATH_REF
delete unused code in sample-bootstrap, simplify the demo

BugFix

bugfix - fix basic creator error when base64 error, fix digest creator error create when request is basic or jwt auth (#57)
bugfix - fix code analysis bug #56

Use

<dependency>
    <groupId>com.usthe.sureness</groupId>
    <artifactId>sureness-core</artifactId>
    <version>0.4.4</version>
</dependency>