Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump cn.dev33:sa-token-core from 1.25.0 to 1.37.0 #131

Open
wants to merge 1 commit into
base: v5.x-mini
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2023

Bumps cn.dev33:sa-token-core from 1.25.0 to 1.37.0.

Release notes

Sourced from cn.dev33:sa-token-core's releases.

Sa-Token v1.37.0 发布,轻量级权限认证框架

  • 修复:修复路由拦截鉴权可被绕过的问题。 [漏洞修复]
  • 重构:未登录时调用鉴权 API 抛出未登录异常而不再是无权限异常。
  • 优化:优化 SaTokenDao 组件更换时的逻辑。
  • 文档:提供 SpringBoot3.x 路由匹配出错的解决方案。

Sa-Token v1.36.0 发布,轻量级权限认证框架

  • sa-token-core:
    • 修复:API接口签名校验参数接口NPE问题,增加必须参数的非空校验处理。
    • 新增:加密工具类新增 sha384、sha512 实现。 感谢 @若初995 提交的pr。 [重要]
    • 修复:SaFoxUtil.vagueMatch() 正则匹配的一些问题。 [漏洞修复]
    • 修复:SaRouter.match() 路由匹配的一些问题。 [漏洞修复]
  • 其它:
    • 优化:sa-token-alone-redis 去掉不必要的配置项判断。
    • 新增:sa-token-solon-plugin 增加对 solon 网关的支持。
    • 新增:新增第三方插件专用仓库:sa-token-three-plugin
    • 升级:sa-token-solon-plugin 增加对 solon 网关的支持。
  • 文档:
    • 新增:新增开启全局懒加载时不能注入上下文处理器的处理方案 。
    • 新增:新增 RefreshToken 示例。 [重要]
    • 新增:文档新增 sa-token 小助手,可在线实时技术提问。 [重要]
    • 优化:其它一些优化。
  • 新增插件:
    • sa-token-redisson-jackson2:通用 redisson 集成方案 (spring, solon, jfinal 等都可用)

Sa-Token v1.34.0 发布,适配 SpringBoot3

  • 新增:新增 SpringBoot3.x 集成插件,感谢 @jry 提供的参考思路。 [重要]
  • 新增:新增 sa-token-dao-redisson-jackson 插件,感谢 @疯狂的狮子Li 提交的pr。 [重要]
  • 新增:Alone-Redis 新增集群配置能力,感谢 @appleOfGray 提交的pr。 [重要]
  • 升级:升级 Sign 签名模块,增加部分重载方法。
  • 重构:SaSignTemplate#joinParams 更名为 joinParamsDictSort[不向下兼容]
  • 升级:升级临时 Token 认证模块,可指定 service 参数。
  • 删除:彻底删除过期类 SaAnnotationInterceptorSaRouteInterceptor
  • 删除:SSO 模块移除过期类 SaSsoHandle 类。
  • 新增:SSO 模块增加 ticket 的 client 锁定功能,解决部分场景下的 ticket 劫持问题。 [重要]
  • 修复:修复 SSO 模式2,在 client 端配置 is-share=false 时无法单点注销的问题。
  • 修复:修复 SSO 模式3 部分场景下注销时无法正常回退页面的问题。
  • 修复:修复 OAuth2 模块示例 getClientModel 方法 clientId 写错的问题。
  • 重构:使用 jwt-simple 模式后 is-share 恒等于 false,无论是否有设定 setExtra 数据。
  • 修复:修复源码注释和文档的部分不合适之处。

Sa-Token v1.33.0 发布,新增全局 Log 模块

  • 重构:重构异常状态码机制。 [重要]
  • 重构:重构 sa-token-sso 模块异常码改为 300 开头,sa-token-jwt 异常码改为 302 开头。 [不向下兼容]
  • 新增:新增全局 Log 模块。 [重要]
  • 重构:SaTokenListenerForConsolePrint 改名 SaTokenListenerForLog。 [不向下兼容]
  • 修复:修复多线程下 SaFoxUtil.getRandomString() 随机数重复问题。
  • 文档:文档优化。

Sa-Token v1.32.0 发布,新增 vue2 & vue3 对接 SSO 认证中心示例

... (truncated)

Commits
  • e076c71 v1.37.0 update
  • f5307a2 提供SpringBoot3.x路由匹配出错的解决方案
  • da22832 优化包结构
  • 6977d3d 优化 SaTokenDao 组件更换时的逻辑
  • 0f7e1e9 Merge branch 'dev' of https://gitee.com/dromara/sa-token into dev
  • e918f61 未登录时调用鉴权 API 抛出未登录异常而不再是无权限异常。
  • 106a710 !286 SaTokenDao 新增默认方法 onChange
  • 4607f51 !284 解决jfinal5开启兼容json请求解析功能后报类转换异常问题
  • 954efeb 修复路由拦截鉴权可被绕过的问题 fix #515
  • 8db78e0 SaTokenDao 新增默认方法 onChange,当 SaManager.saTokenDao 变更时,调用该方法
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [cn.dev33:sa-token-core](https://github.com/dromara/sa-token) from 1.25.0 to 1.37.0.
- [Release notes](https://github.com/dromara/sa-token/releases)
- [Commits](dromara/Sa-Token@v1.25.0...v1.37.0)

---
updated-dependencies:
- dependency-name: cn.dev33:sa-token-core
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 27, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants