asmhatre/spring-auth-demo
1
0
Fork 0
Code Activity

security-7-migration: add javap inspection output, link the article

Browse Source 
Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01YPgGH6aMbSLANL3E2HHmS6
This commit is contained in:
asmhatre
2026-10-25 19:04:59 +00:00
co-authored by Claude Sonnet 5.5
parent e47787ecaa
commit 760fbc2d09
4 changed files with 31 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1 -1
View File
@@ -10,7 +10,7 @@ Runnable companion code for six articles on [ankurm.com](https://ankurm.com):
| 4 | [Passkeys and WebAuthn with Spring Security 7](https://ankurm.com/passkeys-webauthn-spring-security-7/) | [`passkeys/`](passkeys) |
| 5 | [Keycloak with Spring Boot 4.1: Roles, Resource Server and Admin API](https://ankurm.com/keycloak-spring-boot-4-1-roles-resource-server-admin-api/) | [`keycloak/`](keycloak) |
| 6 | [Spring Security hasPermission() with PermissionEvaluator and @EnableMethodSecurity](https://ankurm.com/spring-security-haspermission-permissionevaluator-method-security/) | [`permission-evaluator/`](permission-evaluator) &mdash; Spring Boot 4.1.2 / Security 7.1.2 |
| 7 | Spring Security 6 to 7 migration guide (post pending) | [`security-7-migration/`](security-7-migration) &mdash; Security 6.5.11 vs 7.1.2 |
| 7 | [Spring Security 6 to 7 Migration Guide: Removed APIs, Moved Modules and What Breaks](https://ankurm.com/spring-security-6-to-7-migration-guide/) | [`security-7-migration/`](security-7-migration) &mdash; Security 6.5.11 vs 7.1.2 |
Five Maven projects. The first four share one [`docs/`](docs) tree; `keycloak/` keeps its explanations in the article. The first mints and verifies its own
tokens with a hand-written filter. The second verifies tokens minted by somebody else &mdash;
security-7-migration/output/08-javap-encoder-and-manager.txt
+15
View File
@@ -0,0 +1,15 @@
== Spring Security 6.5.11: BCryptPasswordEncoder
public java.lang.String encode(java.lang.CharSequence);
public boolean matches(java.lang.CharSequence, java.lang.String);
public boolean upgradeEncoding(java.lang.String);
== Spring Security 6.5.11: AuthorizationManager
public abstract authorization.AuthorizationDecision check(java.util.function.Supplier<core.Authentication>, T);
public default authorization.AuthorizationResult authorize(java.util.function.Supplier<core.Authentication>, T);
== Spring Security 7.1.2: BCryptPasswordEncoder
protected java.lang.String encodeNonNullPassword(java.lang.String);
protected boolean matchesNonNull(java.lang.String, java.lang.String);
protected boolean upgradeEncodingNonNull(java.lang.String);
== Spring Security 7.1.2: AuthorizationManager
public abstract authorization.AuthorizationResult authorize(java.util.function.Supplier<? extends core.Authentication>, T);
security-7-migration/scripts/inspect-jars.sh
Executable
+14
View File
@@ -0,0 +1,14 @@
#!/usr/bin/env bash
# Shows two signatures that api_diff.py reports as "removed", straight from javap, so the report can be read correctly.
set -u
cd "$(dirname "$0")/.."
J=target/jars
{
for v in 6.5.11 7.1.2; do
echo "== Spring Security $v: BCryptPasswordEncoder"
javap -protected -cp $J/spring-security-crypto-$v.jar org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder 2>/dev/null | grep -E "encode|matches|upgradeEncoding"
echo "== Spring Security $v: AuthorizationManager"
javap -protected -cp $J/spring-security-core-$v.jar org.springframework.security.authorization.AuthorizationManager 2>/dev/null | grep -E "check|authorize"
echo
done
} | sed 's/org\.springframework\.security\.//g' > output/08-javap-encoder-and-manager.txt
security-7-migration/scripts/run-all.sh
+1
View File
@@ -5,3 +5,4 @@ cd "$(dirname "$0")/.."
python3 scripts/api_diff.py
./scripts/compile-old-apis.sh
./scripts/run-probes.sh
./scripts/inspect-jars.sh