Google Git Google Git
Sign in
apache/ws-wss4j/HEAD
  1. d98780e Bump actions/setup-java from 6.1.0 to 6.2.0 (#780) by dependabot[bot] · 25 hours ago master
  2. 8ec37fa Bump the codeql-action group with 3 updates (#779) by dependabot[bot] · 25 hours ago
  3. 6a7289f [maven-release-plugin] prepare for next development iteration by Colm O hEigeartaigh · 2 days ago
  4. eb1ad2c [maven-release-plugin] prepare release wss4j-4.0.3 by Colm O hEigeartaigh · 2 days ago wss4j-4.0.3
  5. 1e70a03 Removing ChangeLog by Colm O hEigeartaigh · 2 days ago
  6. cc39e86 Require a processed Timestamp for IncludeTimestamp (StAX policy) (#778) by Colm O hEigeartaigh · 2 days ago
  7. 10d62c8 Check an EncryptedKey embedded in an EncryptedData's KeyInfo (StAX) (#777) by Colm O hEigeartaigh · 3 days ago
  8. e9580da Bump com.google.guava:guava from 33.7.2-jre to 33.8.0-jre (#776) by dependabot[bot] · 3 days ago
  9. 5ef20da Don't key the signature replay cache on the SignatureValue (#775) by Colm O hEigeartaigh · 3 days ago
  10. 59a0513 Request unmasked errors in AttachmentTest failure-path tests (#774) by Colm O hEigeartaigh · 6 days ago
  11. c021fd8 Enforce the required symmetric algorithm on encrypted attachments (StAX) (#773) by Colm O hEigeartaigh · 6 days ago
  12. 25b31d0 Cache a OneTimeUse SAML Assertion ID only once the Assertion is trusted (#772) by Colm O hEigeartaigh · 6 days ago
  13. f93a1c0 Keep OneTimeUse identifiers cached for as long as the assertion is valid (#771) by Colm O hEigeartaigh · 7 days ago
  14. 46c3a8f Fail negative policy tests when nothing throws (#770) by Sharang Gupta · 7 days ago
  15. 70c3209 Cache nonces and signatures for as long as their token is accepted (#769) by Colm O hEigeartaigh · 8 days ago
  16. b9616ae WSS-734 - Don't depend on SHA1PRNG for Jasypt salt and IV generation (#768) by Colm O hEigeartaigh · 9 days ago
  17. e923119 WSS-736 - Only remove security providers on cleanUp that WSS4J registered (#767) by Colm O hEigeartaigh · 9 days ago
  18. 14e0095 Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.3 to 3.7.0 (#766) by dependabot[bot] · 10 days ago
  19. 8c48211 WSS-697 - Don't override an existing OpenSAML configuration in OpenSAMLUtil.initSamlEngine (#765) by Colm O hEigeartaigh · 13 days ago
  20. b4ee62a Bump the codeql-action group with 3 updates (#764) by dependabot[bot] · 2 weeks ago
  21. 13628b8 Bump org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1 (#763) by dependabot[bot] · 2 weeks ago
  22. ebaa575 Make ReplayCache atomic by adding addIfAbsent (#762) by Colm O hEigeartaigh · 3 weeks ago
  23. 82012ac Rename DerivedKeyTests so Surefire runs it (#761) by Sharang Gupta · 3 weeks ago
  24. 651b2d9 Bump ossf/scorecard-action from 2.4.4 to 2.5.0 (#760) by dependabot[bot] · 3 weeks ago
  25. a9479c1 Bump the codeql-action group with 3 updates (#758) by dependabot[bot] · 3 weeks ago
  26. 69ca76e Bump actions/setup-java from 6.0.1 to 6.1.0 (#759) by dependabot[bot] · 3 weeks ago
  27. 83015b5 Downgrading scorecards to run twice weekly by Colm O hEigeartaigh · 3 weeks ago
  28. d27f522 Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#756) by dependabot[bot] · 4 weeks ago
  29. e65de96 Bump the codeql-action group with 3 updates (#757) by dependabot[bot] · 4 weeks ago
  30. 8c73e3c Some remaining codeql fixes (#755) by Colm O hEigeartaigh · 4 weeks ago
  31. fbdf0d3 More test codeql fixes (#754) by Colm O hEigeartaigh · 4 weeks ago
  32. 158961c Fix build version comment (#753) by Colm O hEigeartaigh · 4 weeks ago
  33. f1d8d7c Fixing some useless parameter warnings in the tests (#752) by Colm O hEigeartaigh · 4 weeks ago
  34. 042edea Bump com.fasterxml.woodstox:woodstox-core from 7.2.2 to 7.3.0 (#740) by dependabot[bot] · 4 weeks ago
  35. 4cf53a0 Javadoc test fixes (#751) by Colm O hEigeartaigh · 4 weeks ago
  36. 695d637 WSS-721 - Search the truststore before the keystore when verifying trust (#750) by Colm O hEigeartaigh · 4 weeks ago
  37. cc151c6 WSS-712 - SignatureDigestAlgorithm of SAMLCallback not taken into account (#749) by Colm O hEigeartaigh · 4 weeks ago
  38. 00c53f3 [WSS-733] Fall back to URL/classpath lookup when the file system probe is denied (#746) by Colm O hEigeartaigh · 4 weeks ago
  39. 2cf22b4 WSS-688 - Signatures created with Merlin start being invalid after changing key-store a few times (#748) by Colm O hEigeartaigh · 4 weeks ago
  40. 10fad7d WSS-713 - Support SubjectConfirmationData for SAML-SV v1 (#747) by Colm O hEigeartaigh · 4 weeks ago
  41. a0994ee WSS-731 - StAX SignedElements policy rejects a SAML assertion signed through STR-Transform (#745) by Colm O hEigeartaigh · 5 weeks ago
  42. 96e587b Bump org.apache.commons:commons-secure-xml from 1.0.0 to 1.1.0 (#743) by dependabot[bot] · 5 weeks ago
  43. cc19ac3 Bump com.google.guava:guava from 33.7.1-jre to 33.7.2-jre (#739) by dependabot[bot] · 5 weeks ago
  44. f3fe152 IBM JRE > 8 doesn't have IBM JGSS anymore (#741) by Andreas Martens · 5 weeks ago
  45. 2bfa60e Bump the codeql-action group with 3 updates (#742) by dependabot[bot] · 5 weeks ago
  46. 952c4cc Updating website for release by Colm O hEigeartaigh · 6 weeks ago
  47. 1450557 Bump org.apache:apache from 39 to 40 (#732) by dependabot[bot] · 6 weeks ago
  48. f6b6954 Bump slf4j.version from 2.0.19 to 2.0.20 (#737) by dependabot[bot] · 6 weeks ago
  49. 1e1a0b0 Bump xmlunit.version from 2.13.0 to 2.14.0 (#734) by dependabot[bot] · 6 weeks ago
  50. dd6a549 Bump the codeql-action group with 3 updates (#733) by dependabot[bot] · 6 weeks ago
  51. ea22fc0 WSS4J messages now render correctly even if Santuario is never initialised at all. (#731) by Colm O hEigeartaigh · 7 weeks ago
  52. f3aa317 [maven-release-plugin] prepare for next development iteration by Colm O hEigeartaigh · 7 weeks ago
  53. 9d5d7b3 [maven-release-plugin] prepare release wss4j-4.0.2 by Colm O hEigeartaigh · 7 weeks ago wss4j-4.0.2
  54. 57b4294 Fix regression with KeyUtils by Colm O hEigeartaigh · 7 weeks ago
  55. 3a31b65 Revert "[maven-release-plugin] prepare release wss4j-4.0.2" by Colm O hEigeartaigh · 7 weeks ago
  56. 8053e71 Revert "[maven-release-plugin] prepare for next development iteration" by Colm O hEigeartaigh · 7 weeks ago
  57. a14046a [maven-release-plugin] prepare for next development iteration by Colm O hEigeartaigh · 7 weeks ago
  58. e2546cd [maven-release-plugin] prepare release wss4j-4.0.2 by Colm O hEigeartaigh · 7 weeks ago
  59. fa77967 Updating NOTICE year by Colm O hEigeartaigh · 7 weeks ago
  60. 96a9a91 Using AttachmentUtil as well for attachment signature transform by Colm O hEigeartaigh · 7 weeks ago
  61. 1e2ec39 WSS-727 - Minor cleanup (#730) by Colm O hEigeartaigh · 7 weeks ago
  62. 75a28f6 Fixing AKI bug (#729) by Colm O hEigeartaigh · 7 weeks ago
  63. 6726da9 WSS-727 Do not cache SwA attachment References when verifying a Signature (#640) by shunkica · 7 weeks ago
  64. 3b402c9 Xop hardening fix (#728) by Colm O hEigeartaigh · 7 weeks ago
  65. 347cead Backwards compatibly sig-conf fix by Colm O hEigeartaigh · 7 weeks ago
  66. add6d92 Finishing DER work (#727) by Colm O hEigeartaigh · 7 weeks ago
  67. 32887ed Follow-on from last DER patch (#726) by Colm O hEigeartaigh · 7 weeks ago
  68. 2d4a0e7 Switch to use BASE-64 encoding rather than 32 bit hash values for signature confirmation (#725) by Colm O hEigeartaigh · 7 weeks ago
  69. 291c723 StAX SAML subject confirmation skipped for an empty SOAP Body (#724) by Colm O hEigeartaigh · 7 weeks ago
  70. 2816faf Remove Bouncy Castle from key identifier parsing (#647) by araiprof · 7 weeks ago
  71. e12589e Check CertificateStore for validity by Colm O hEigeartaigh · 7 weeks ago
  72. 48ca363 Bump bcprov.version from 1.84 to 1.86 (#694) by dependabot[bot] · 7 weeks ago
  73. 9629b62 Update certs that are failing with the Bouncycastle update (#723) by Colm O hEigeartaigh · 7 weeks ago
  74. 11bd693 Fix timestamp parsing (#722) by Colm O hEigeartaigh · 7 weeks ago
  75. c7284e7 Bump org.apache.felix:maven-bundle-plugin from 6.1.2 to 6.2.0 (#716) by dependabot[bot] · 7 weeks ago
  76. d84b482 Revert "Align StaX sender vouches with DOM layer (#720)" by Colm O hEigeartaigh · 7 weeks ago
  77. 6de1f27 Revert "Fix SenderVouches EncryptedKey case (#718)" by Colm O hEigeartaigh · 7 weeks ago
  78. 6b4ebdf Fix SAML Conditions parsing (#721) by Colm O hEigeartaigh · 7 weeks ago
  79. d656ae4 Docs update for SAML audience by Colm O hEigeartaigh · 7 weeks ago
  80. 2044186 Align StaX sender vouches with DOM layer (#720) by Colm O hEigeartaigh · 7 weeks ago
  81. 79cc522 More docs updates by Colm O hEigeartaigh · 7 weeks ago
  82. 4fc06f5 Extend the EncryptedKey random-key fallback beyond decryptDataRef (#719) by Colm O hEigeartaigh · 7 weeks ago
  83. 4050df2 Fix SenderVouches EncryptedKey case (#718) by Colm O hEigeartaigh · 7 weeks ago
  84. 240c68a Improving kerberos docs by Colm O hEigeartaigh · 7 weeks ago
  85. 2a67fc3 Properly wire UsernameToken + RSA15 flags for the streaming layer (#717) by Colm O hEigeartaigh · 7 weeks ago
  86. a8fb5fe Better document REQUIRE_SIGNED_ENCRYPTED_DATA_ELEMENTS by Colm O hEigeartaigh · 7 weeks ago
  87. 623bfb8 Stricter policy enforcement (#715) by Colm O hEigeartaigh · 7 weeks ago
  88. d2a7450 Updating threat model with bounds by Colm O hEigeartaigh · 7 weeks ago
  89. c9cddda Document streaming policy enforcement (#714) by Colm O hEigeartaigh · 7 weeks ago
  90. efbcbfc Bound the encrypted data nesting depth (#713) by Colm O hEigeartaigh · 7 weeks ago
  91. 77d665e Redact passwords from UsernameToken toString (#711) by Colm O hEigeartaigh · 8 weeks ago
  92. d7d6fb0 Javadoc updates by Colm O hEigeartaigh · 8 weeks ago
  93. 277e554 Updating Neethi to 3.2.4 (#710) by Colm O hEigeartaigh · 8 weeks ago
  94. 720a401 Additional Bleichenbacher fix (#709) by Colm O hEigeartaigh · 8 weeks ago
  95. 3ae19b5 Adding some derived key tests by Colm O hEigeartaigh · 8 weeks ago
  96. d6323f3 Set trust when there is no KeyInfo and the certificate comes from a local keystore (#708) by Colm O hEigeartaigh · 8 weeks ago
  97. a52aaee Putting max on UsernameToken stax iterations (#707) by Colm O hEigeartaigh · 8 weeks ago
  98. d2939c8 Adding docs about trust credentials for BST (#706) by Colm O hEigeartaigh · 8 weeks ago
  99. aa028e6 Only set trust validation for Signature when we have a trusted source (#705) by Colm O hEigeartaigh · 8 weeks ago
  100. e2fdad6 Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.2 to 2.9.3 (#700) by dependabot[bot] · 8 weeks ago