From 089a947794641ae03d07b5f15317573ef173a6f0 Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Mon, 12 Oct 2026 13:37:14 +0000 Subject: [PATCH] bug: upgrade Spring Boot 1.5.4 -> 2.7.18 to clear spring-security-core CVE-2021-22112 (sfind-88c741b8) --- UserFront/pom.xml | 6 +++--- .../main/java/com/userFront/config/SecurityConfig.java | 4 ++-- .../UserServiceImpl/AppointmentServiceImpl.java | 2 +- UserFront/src/main/resources/application.properties | 10 ++++++++++ .../java/com/userFront/UserFrontApplicationTests.java | 5 +---- 5 files changed, 17 insertions(+), 10 deletions(-) diff --git a/UserFront/pom.xml b/UserFront/pom.xml index 902ec2b3..87830a4e 100644 --- a/UserFront/pom.xml +++ b/UserFront/pom.xml @@ -14,7 +14,7 @@ org.springframework.boot spring-boot-starter-parent - 1.5.4.RELEASE + 2.7.18 @@ -46,8 +46,8 @@ - mysql - mysql-connector-java + com.mysql + mysql-connector-j diff --git a/UserFront/src/main/java/com/userFront/config/SecurityConfig.java b/UserFront/src/main/java/com/userFront/config/SecurityConfig.java index 40b10417..3931511f 100644 --- a/UserFront/src/main/java/com/userFront/config/SecurityConfig.java +++ b/UserFront/src/main/java/com/userFront/config/SecurityConfig.java @@ -67,8 +67,8 @@ protected void configure(HttpSecurity http) throws Exception { - @Autowired - public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception { + @Override + protected void configure(AuthenticationManagerBuilder auth) throws Exception { // auth.inMemoryAuthentication().withUser("user").password("password").roles("USER"); //This is in-memory authentication auth.userDetailsService(userSecurityService).passwordEncoder(passwordEncoder()); } diff --git a/UserFront/src/main/java/com/userFront/service/UserServiceImpl/AppointmentServiceImpl.java b/UserFront/src/main/java/com/userFront/service/UserServiceImpl/AppointmentServiceImpl.java index 838ad223..0d62b84c 100644 --- a/UserFront/src/main/java/com/userFront/service/UserServiceImpl/AppointmentServiceImpl.java +++ b/UserFront/src/main/java/com/userFront/service/UserServiceImpl/AppointmentServiceImpl.java @@ -24,7 +24,7 @@ public List findAll() { } public Appointment findAppointment(Long id) { - return appointmentDao.findOne(id); + return appointmentDao.findById(id).orElse(null); } public void confirmAppointment(Long id) { diff --git a/UserFront/src/main/resources/application.properties b/UserFront/src/main/resources/application.properties index d7e04942..3d9cc11c 100644 --- a/UserFront/src/main/resources/application.properties +++ b/UserFront/src/main/resources/application.properties @@ -1,3 +1,10 @@ +# =============================== +# = SPRING +# =============================== + +# UserServiceImpl <-> AccountServiceImpl depend on each other; Spring Boot 2.6+ rejects circular references by default. +spring.main.allow-circular-references = true + # =============================== # = DATA SOURCE # =============================== @@ -30,6 +37,9 @@ spring.jpa.show-sql = true # the project spring.jpa.hibernate.ddl-auto = update +# Keep Boot 1.5 id generation (MySQL AUTO_INCREMENT) for GenerationType.AUTO; Boot 2 defaults to a hibernate_sequence table. +spring.jpa.hibernate.use-new-id-generator-mappings = false + # Allows Hibernate to generate SQL optimized for a particular DBMS spring.jpa.properties.hibernate.dialect = org.hibernate.dialect.MySQL5Dialect diff --git a/UserFront/src/test/java/com/userFront/UserFrontApplicationTests.java b/UserFront/src/test/java/com/userFront/UserFrontApplicationTests.java index 81fed97b..3e51f21d 100644 --- a/UserFront/src/test/java/com/userFront/UserFrontApplicationTests.java +++ b/UserFront/src/test/java/com/userFront/UserFrontApplicationTests.java @@ -1,11 +1,8 @@ package com.userFront; -import org.junit.Test; -import org.junit.runner.RunWith; +import org.junit.jupiter.api.Test; import org.springframework.boot.test.context.SpringBootTest; -import org.springframework.test.context.junit4.SpringRunner; -@RunWith(SpringRunner.class) @SpringBootTest public class UserFrontApplicationTests {