48 Commits

Author SHA1 Message Date
Sean Mullan
e13206d3a1 8345065: Cleanup DomainCombiner, SubjectDomainCombiner, Subject, and PrivilegedAction specifications
Reviewed-by: weijun
2024-12-04 12:44:23 +00:00
Sean Mullan
65c98e577f 8344420: Remove Security Manager dependencies from javax.security package
Reviewed-by: alanb, rriggs, wetmore
2024-11-26 17:24:22 +00:00
Sean Mullan
86d527f987 8344949: javax.security.auth.Subject.SecureSet.writeObject does not do a security check anymore
Reviewed-by: alanb
2024-11-26 14:21:01 +00:00
Sean Mullan
6aec2dcf76 8344788: Specify that the access control context parameters of Subject.doAsPrivileged are ignored
Reviewed-by: alanb
2024-11-22 19:14:02 +00:00
Sean Mullan
db85090553 8338411: Implement JEP 486: Permanently Disable the Security Manager
Co-authored-by: Sean Mullan <mullan@openjdk.org>
Co-authored-by: Alan Bateman <alanb@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Co-authored-by: Aleksei Efimov <aefimov@openjdk.org>
Co-authored-by: Brian Burkhalter <bpb@openjdk.org>
Co-authored-by: Daniel Fuchs <dfuchs@openjdk.org>
Co-authored-by: Harshitha Onkar <honkar@openjdk.org>
Co-authored-by: Joe Wang <joehw@openjdk.org>
Co-authored-by: Jorn Vernee <jvernee@openjdk.org>
Co-authored-by: Justin Lu <jlu@openjdk.org>
Co-authored-by: Kevin Walls <kevinw@openjdk.org>
Co-authored-by: Lance Andersen <lancea@openjdk.org>
Co-authored-by: Naoto Sato <naoto@openjdk.org>
Co-authored-by: Roger Riggs <rriggs@openjdk.org>
Co-authored-by: Brent Christian <bchristi@openjdk.org>
Co-authored-by: Stuart Marks <smarks@openjdk.org>
Co-authored-by: Ian Graves <igraves@openjdk.org>
Co-authored-by: Phil Race <prr@openjdk.org>
Co-authored-by: Erik Gahlin <egahlin@openjdk.org>
Co-authored-by: Jaikiran Pai <jpai@openjdk.org>
Reviewed-by: kevinw, aivanov, rriggs, lancea, coffeys, dfuchs, ihse, erikj, cjplummer, coleenp, naoto, mchung, prr, weijun, joehw, azvegint, psadhukhan, bchristi, sundar, attila
2024-11-12 17:16:15 +00:00
Andrew Haley
3fab8e37bb 8341903: Implementation of Scoped Values (Fourth Preview)
Reviewed-by: alanb
2024-11-05 17:12:17 +00:00
Jonathan Gibbons
873f8a696f 8305406: Add @spec tags in java.base/java.* (part 2)
Co-authored-by: Daniel Jeliński <djelinski@openjdk.org>
Co-authored-by: Hannes Wallnöfer <hannesw@openjdk.org>
Reviewed-by: valeriep
2024-10-26 06:57:45 +00:00
Valerie Peng
369c573383 8302111: Serialization considerations
Reviewed-by: skoivu, rhalade, weijun, wetmore
2024-10-15 17:04:27 +05:30
Nizar Benalla
92de2b2d5f 8336039: Doccheck: HTML warnings, broken links and missing files in java.base documentation
Reviewed-by: liach, djelinski
2024-07-22 13:27:12 +00:00
Alan Bateman
707154235b 8331189: Implementation of Scoped Values (Third Preview)
Reviewed-by: aph, jpai, mcimadamore
2024-05-30 15:41:56 +00:00
Weijun Wang
d32746ef4a 8296244: Alternate implementation of user-based authorization Subject APIs that doesn’t depend on Security Manager APIs
Reviewed-by: mullan
2024-03-20 21:25:41 +00:00
Sean Mullan
c4845f01d2 8317431: Implement simpler Comparator when building certification paths
Reviewed-by: kdriver, weijun
2024-03-08 15:20:37 +00:00
Bradford Wetmore
adca97b659 8286503: Enhance security classes
Reviewed-by: rhalade, mullan, skoivu, weijun
2023-10-17 22:45:06 +00:00
Pavel Rappo
19ae62ae2c 8311170: Simplify and modernize equals and hashCode in security area
Reviewed-by: djelinski, rriggs, valeriep
2023-08-09 12:34:40 +00:00
Weijun Wang
d450314bd3 8297276: Remove thread text from Subject.current
Reviewed-by: xuelei, rriggs, mullan
2022-11-28 22:02:54 +00:00
Mark Powers
8480f87044 8291974: PrivateCredentialPermission should not use local variable to enable debugging
Reviewed-by: mullan
2022-10-31 19:55:47 +00:00
Jayashree Huttanagoudar
3c2289d651 8215916: The failure reason of an optional JAAS LoginModule is not logged
Reviewed-by: weijun
2022-08-24 15:47:12 +00:00
Weijun Wang
74d3330e10 8292682: Code change of JDK-8282730 not updated to reflect CSR update
Reviewed-by: xuelei, hchao
2022-08-19 19:57:42 +00:00
Mark Powers
08274e6fea 8290975: Minor cleanup could be done in javax.security
Reviewed-by: wetmore, mullan
2022-08-08 17:30:22 +00:00
Weijun Wang
554f44ecb1 8282730: LdapLoginModule throw NPE from logout method after login failure
Reviewed-by: mullan
2022-08-01 22:28:30 +00:00
Weijun Wang
d991ec4f9f 8282676: Improve subject handling
Reviewed-by: ahgross, mullan, rhalade
2022-07-19 20:55:27 +00:00
Andrey Turbanov
87aa3ce03e 8289274: Cleanup unnecessary null comparison before instanceof check in security modules
Reviewed-by: mullan
2022-07-09 17:59:43 +00:00
Xue-Lei Andrew Fan
89fd6d34f8 8284910: Buffer clean in PasswordCallback
Reviewed-by: mullan
2022-04-28 02:48:20 +00:00
Andrey Turbanov
8e58d4a589 8284415: Collapse identical catch branches in security libs
Reviewed-by: coffeys, xuelei, wetmore
2022-04-07 10:00:08 +00:00
Luis Pinto
63fec5da27 8283525: http://tools.ietf.org/html/* URLs return 404
Reviewed-by: coffeys
2022-04-01 13:26:20 +00:00
Weijun Wang
10db0e4163 8277932: Subject:callAs() not throwing NPE when action is null
Reviewed-by: rriggs
2021-12-07 01:37:55 +00:00
Weijun Wang
a5c160c711 8267108: Alternate Subject.getSubject and doAs APIs that do not depend on Security Manager APIs
Reviewed-by: mullan
2021-11-10 19:35:17 +00:00
Ilarion Nakonechnyy
c0cda1db4f 8273026: Slow LoginContext.login() on multi threading application
Reviewed-by: weijun
2021-10-29 11:37:45 +00:00
Andrey Turbanov
1459180f35 8274079: Cleanup unnecessary calls to Throwable.initCause() in java.base module
Reviewed-by: weijun
2021-10-05 13:36:37 +00:00
Andrey Turbanov
56b8b35286 8273261: Replace 'while' cycles with iterator with enhanced-for in java.base
Reviewed-by: dfuchs, rriggs, iris, mullan
2021-09-23 20:04:36 +00:00
Weijun Wang
6765f90250 8266459: Implement JEP 411: Deprecate the Security Manager for Removal
Co-authored-by: Sean Mullan <mullan@openjdk.org>
Co-authored-by: Lance Andersen <lancea@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Reviewed-by: erikj, darcy, chegar, naoto, joehw, alanb, mchung, kcr, prr, lancea
2021-06-02 11:57:31 +00:00
Bradford Wetmore
32cbd193d9 8263105: security-libs doclint cleanup
Reviewed-by: iris, darcy, dfuchs, mullan
2021-03-11 00:26:26 +00:00
Sergey Tsypanov
f55dd9d40e 8251548: Remove unnecessary explicit initialization of volatile variables in security-libs code
Reviewed-by: mullan
2020-09-18 21:26:59 +00:00
Joe Darcy
5db58348f8 8250246: Address reliance on default constructors in security libs
Reviewed-by: mullan
2020-07-24 13:49:38 -07:00
Mikael Vidstedt
1f5e21a16e Merge 2020-07-15 21:24:39 -07:00
Mark Reinhold
55039aa1c6 8249205: Remove unnecessary trademark symbols
Reviewed-by: darcy, lancea, bpb, prr, jjg, cjplummer, iris, dfuchs, weijun, joehw, wetmore, bchristi
2020-07-15 14:21:54 -07:00
Weijun Wang
fc1b24e4e8 8243592: Subject$SecureSet::addAll should not call contains(null)
Reviewed-by: mullan
2020-07-09 09:22:01 +08:00
Weijun Wang
8cd9241448 8242330: Arrays should be cloned in several JAAS Callback classes
Reviewed-by: mullan
2020-04-14 10:04:05 +08:00
Ivan Gerasimov
3790e58090 8241761: Typos: empty lines in javadoc, inconsistent indents, etc. (security-libs only)
Reviewed-by: weijun
2020-04-01 18:38:05 -07:00
Pavel Rappo
17ff85d4ad 8241014: Miscellaneous typos in documentation comments
Reviewed-by: igerasim, prappo, psandoz, rriggs, weijun
2020-03-20 20:54:56 +00:00
Joe Darcy
fbb4093562 8231262: Suppress warnings on non-serializable instance fields in security libs serializable classes
Reviewed-by: mullan, chegar
2019-10-09 09:57:41 -07:00
Joe Darcy
6d4ef5aaf3 8229999: Apply java.io.Serial annotations to security types in java.base
Reviewed-by: rriggs, mullan
2019-08-29 10:52:21 -07:00
Xue-Lei Andrew Fan
42cb9bf51a 8160247: Mark deprecated javax.security.cert APIs with forRemoval=true
Reviewed-by: weijun
2019-03-13 07:14:50 -07:00
Andrey Turbanov
cfeb359800 8218022: Repeated words typos in java.base
Reviewed-by: alanb, lancea, mchung
2019-01-30 00:24:32 +00:00
Claes Redestad
a3df1d618e 8215281: Use String.isEmpty() when applicable in java.base
Reviewed-by: dfuchs, alanb
2018-12-13 15:31:05 +01:00
Weijun Wang
50484af54b 8191139: Remove deprecated javax.security.auth.Policy API
Reviewed-by: mullan
2018-03-08 12:20:26 +08:00
Weijun Wang
2dfe7fb8ab 8159535: Mark deprecated javax.security.auth.Policy API with forRemoval=true
Reviewed-by: mullan
2017-10-27 21:10:56 +08:00
Erik Joelsson
3789983e89 8187443: Forest Consolidation: Move files to unified layout
Reviewed-by: darcy, ihse
2017-09-12 19:03:39 +02:00