Analysis Overview Article Management Draft Management Picture Management Site Management Main Site About Logout Handwriting Operating System Project—-Process

Hello everyone, my name is Xu Jintong, and my personal blog address is www.xujintong.com. I usually record the knowledge gained in the process of learning computers, as well as the daily tossing experience. Everyone is welcome to visit. Recorded here is the process part of the handwritten operating system project. Four elements of process First […]

[SpringSecurity] 12. Integrate JWT with Redis to implement logout

Article directory 1. The implementation idea of logging out 2. Integrate Redis 3. Authentication success processor 4. Exit the success handler 5. Modify the token verification filter 6. Debugging 1. Implementation ideas of logout This is the current token implementation diagram: Because of the statelessness of JWT, the server cannot actively revoke a token or […]

Spring Security does not save empty SecurityContext correctly after logout Vulnerability CVE-2023-20862

Article directory 0.Preface loopholes Introduction to Spring Security 1. Reference documents 2.Basic introduction 3.Solution 3.1. Upgrade version 3.2. Temporary alternatives 4. Spring Security usage tutorial simple code example 0.Foreword Background: The company project scanned the Spring-security component and the empty SecurityContext was not saved correctly after logout CVE-2023-20862 Vulnerability High risk | April 17, 2023 […]