All remainder guava usage uses standard java routines.Replaced guava with caffeine for caching.Moved servlet on Examples to servlet 4.0.#631: Added excludeBearerAuthorization and excludeCorsPreflight #627 #636: DisableSso flag, Delete option, skip when running on non windows [ Updates.

Resume filter chain when not in a windows environment.

Added check for DELETE action in isNtlmType1PostAuthorizationHeader as IE will strip the body on challenge.

Add ability to disable SSO through servlet config parameter.

Added some tests for NegotiateSecurityFilter.

( #649): Bring dependencies up-to-date including JNA 5.x breaking changes ().

JNA 5.2.0 support (breaking internal changes resulting in beta release for waffle).

Add spring boot and spring security 5 modules to distro.

Fix spring boot modules as JNA alignment was broken.

Fix sonar issues including prevention of XML entity attacks and other security related items.

Moved onto Spring 5.2.x (no compatibility changes over 5.1.x).

Moved onto Spring boot 2.2.x (no compatibility changes over 2.1.x).

Add JPMS automatic module naming throughout.Add build environment entries to jar, source, and war modules.It was defined and confirmed but not setup. Note that first request will still require popup to get data primed but all subsequent after logging out and back in save the hit. By catching the negotiation result and forcing a redirect to error page as intended (similar to security check), the browser and tomcat are able to successfully negotiate the communication without unnecessary popup to the user. Negotiate Check in tomcat valves performs half the necessary negotiation which is resulting in popup to log into windows.This is not required to finish the chain and causes an underlying error when servletPath returns empty string. Security Check in tomcat valves performs a redirect to servletPath when successful.Fixed checkstyle configuration that failed 2.2.0 release.

The waffle lab download