Antonio Muniz b7020adab9 [JENKINS-64465] Fix race condition on HudsonFilter#reset (#5131) ...

If `Jenkins#setSecurityRealm` is called concurrently from multiple threads there is a
potential race condition on the authentication filters registration.

`Jenkins#setSecurityRealm` calls `filter.reset()`, `HudsonFilter#reset` is not
synchronized however it is replacing the old filter with the new filter (if there was one)
 which is not a thread safe operation.

The effect of this race condition is the wrong auth filter being registered.

2020-12-21 09:03:21 +00:00

..

captcha

[JENKINS-57678] - Change getInstance() (deprecated) to get() (#4042)

2019-06-27 17:24:45 +02:00

csrf

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

AbstractPasswordBasedSecurityRealm.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

AccessControlled.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

AccessDeniedException2.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

AccessDeniedException3.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

AccessDeniedHandlerImpl.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

AccountCreationFailedException.java

[JENKINS-45387] Fix validation error displaying in setup wizard's "create first admin" form (#3116)

2018-03-08 00:06:57 +01:00

ACL.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

ACLContext.java

Fix unresolvable symbol in Javadoc

2020-12-11 21:34:22 -08:00

AuthenticationManagerProxy.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

AuthenticationProcessingFilter2.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

AuthorizationStrategy.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

BasicAuthenticationFilter.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

ChainedServletFilter.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

CliAuthenticator.java

Removing code to support the Remoting-based CLI.

2019-01-08 22:39:07 -05:00

ContainerAuthentication.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

FederatedLoginService.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

FederatedLoginServiceUserProperty.java

Java 7: omit explit type in favor of <>

2019-02-20 21:51:03 -05:00

FullControlOnceLoggedInAuthorizationStrategy.java

Add missing @Deprecated annotations

2019-10-19 14:02:59 -07:00

GlobalSecurityConfiguration.java

s/javax.annotation.Nonnull/edu.umd.cs.findbugs.annotations.NonNull/g

2020-03-26 11:14:41 +00:00

GroupDetails.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

HttpSessionContextIntegrationFilter2.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

HudsonAuthenticationEntryPoint.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

HudsonFilter.java

[JENKINS-64465] Fix race condition on HudsonFilter#reset (#5131)

2020-12-21 09:03:21 +00:00

HudsonPrivateSecurityRealm.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

LegacyAuthorizationStrategy.java

More symbol names

2016-03-19 13:54:18 -07:00

LegacySecurityRealm.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

NoopFilter.java

Added a mechanism to bypass basic authentication.

2011-07-02 14:07:43 -07:00

package.html

Fixing link again, and moving to package Javadoc.

2012-08-08 07:26:16 -04:00

Permission.java

s/javax.annotation.CheckForNull/edu.umd.cs.findbugs.annotations.CheckForNull/g

2020-03-26 16:12:35 +00:00

PermissionAdder.java

Fix Javadoc generation on JDK 8.

2017-04-11 09:26:45 -04:00

PermissionGroup.java

s/javax.annotation.CheckForNull/edu.umd.cs.findbugs.annotations.CheckForNull/g

2020-03-26 16:12:35 +00:00

PermissionScope.java

COMPUTER-scoped permissions are in fact often checked on Node.

2016-02-25 15:04:31 -05:00

RememberMeServicesProxy.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

SecurityMode.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

SecurityRealm.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

SidACL.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

SparseACL.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

TokenBasedRememberMeServices2.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

UnwrapSecurityExceptionFilter.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

UserDetailsServiceProxy.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

UserMayOrMayNotExistException2.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

UserMayOrMayNotExistException.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00

WhoAmI.java

[JEP-227] Replace Acegi Security with Spring Security & upgrade Spring Framework (#4848)

2020-11-06 11:30:25 -07:00