Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
2,632 Commits 26 Branches 0 Tags
1490fe0b0a62ffa4e1f66c1308bf0b2a4339834e
Commit Graph

669 Commits

Author SHA1 Message Date
Luke Taylor
43b51ca64d SEC-689: Session Fixation protection should be available to all authentication mechanisms. 
http://jira.springframework.org/browse/SEC-689. Added support to namespace.
 2008-03-26 12:00:58 +00:00
Luke Taylor
2af2f299cb SEC-689: Further tests, logging improvements. 2008-03-26 00:00:56 +00:00
Luke Taylor
a29842a467 SEC-689: Tests for SessionFixationProtectionFilter 2008-03-25 23:24:38 +00:00
Ben Alex
f4eb15b08b SEC-428: Tests to prove proxy-target-class="true" works. 2008-03-24 23:10:01 +00:00
Luke Taylor
f8b5000d40 SEC-428: Make sure context is cleared before running test. 2008-03-24 22:56:43 +00:00
Luke Taylor
18fef571c3 Import cleaning. 2008-03-24 22:44:42 +00:00
Luke Taylor
028af06d61 SEC-428: Security interceptor does not work with schema based aop:config 
http://jira.springframework.org/browse/SEC-428. Fixed broken test method.
 2008-03-24 22:43:08 +00:00
Luke Taylor
a375d8e59e SEC-428: Added test 2008-03-24 20:50:58 +00:00
Ben Alex
9a4977ebd1 SEC-99/428/429/563: Various refactoring of method security metadata support. 2008-03-24 09:40:13 +00:00
Luke Taylor
fe0e05a6c8 SEC-725: PasswordEncoderParser: <security:password-encoder> element does not pick up 'base64' attribute value 
http://jira.springframework.org/browse/SEC-725. Added fix as recommended in issue.
 2008-03-23 22:38:13 +00:00
Luke Taylor
2ea94e2cc9 Tidying imports etc 2008-03-22 11:44:28 +00:00
Luke Taylor
9871685ea3 SEC-722: Fixed problem with empty loginpage string (rather than null) preventing default login page filter from being added to the stack. 2008-03-21 21:50:26 +00:00
Ben Alex
16ea8faa0d SEC-727: Ensure SecurityConfig cannot be constructed unsafely; also update SecurityConfigTests to JUnit 4. 2008-03-21 02:15:47 +00:00
Luke Taylor
2df2eaa169 SEC-719: Introduced base class for J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource to extract non-http specific functionality (for use in portlet version). 2008-03-18 17:22:02 +00:00
Luke Taylor
8f7b216de3 Import cleaning, removal of unnecessary constructors etc based on eclipse warnings 2008-03-17 14:10:22 +00:00
Luke Taylor
abd5e384fe removed unused eh-cache config file 2008-03-17 14:07:19 +00:00
Luke Taylor
60de6314d4 Replaced casting to check validity of provider list with call to Assert.isInstanceof. 2008-03-17 13:50:37 +00:00
Ben Alex
6bc0585e4a SEC-717: Resolve UserDetails.getAuthorities() sort logic issue. 2008-03-16 04:02:55 +00:00
Luke Taylor
5743763599 SEC-625: Remove references to FilterToBeanProxy 2008-03-13 18:52:31 +00:00
Luke Taylor
712f1770d9 SEC-714: Refactor PreAuthenticatedGrantedAuthoritiesSetter and PreAuthenticatedGrantedAuthoritiesRetriever 
http://jira.springframework.org/browse/SEC-714
 2008-03-13 16:03:18 +00:00
Luke Taylor
42a80931c1 SEC-671: Changed AuthenticationDetailsSource to take an object as argument instead of an HttpServletRequest and renamed AuthenticationDetailsSourceImpl to WebAuthenticationDetailsSource. Also removed some preauth dependencies on commons lang 2008-03-13 14:42:38 +00:00
Luke Taylor
089bffa10f SEC-712: HttpSessionContextIntegrationFilter "context" property should be renamed 
http://jira.springframework.org/browse/SEC-712
 2008-03-11 14:16:40 +00:00
Luke Taylor
ed08ba10ba Added test file for CustomAuthenticationProviderBeanDefinitionDecorator 2008-03-11 13:50:53 +00:00
Luke Taylor
f7ae070b2f SEC-705: Extend ldap-authentication-provider namespace elt to support user searches and multiple authentication strategies 
http://jira.springframework.org/browse/SEC-705
 2008-03-09 19:26:34 +00:00
Luke Taylor
5ec8aa797c SEC-694: Add check to LdapShaPasswordEncoder to detect use with non-SHA passwords 
http://jira.springframework.org/browse/SEC-694
 2008-03-05 13:29:26 +00:00
Luke Taylor
6c8adfc982 SEC-640: Test class for FilterInvocationDefinitionSourceParser 2008-02-28 19:36:22 +00:00
Luke Taylor
33023565a8 SEC-640: Add namespace support for FilterInvocationDefinitionSource configuration 
http://jira.springframework.org/browse/SEC-640
 2008-02-28 19:29:33 +00:00
Luke Taylor
93432b7626 SEC-680: Missed some additional method, method parameter & field names, JavaDoc 
http://jira.springframework.org/browse/SEC-680
 2008-02-28 12:28:17 +00:00
Luke Taylor
709f78e481 SEC-688: java.lang.NullPointerException in AbstractAuthenticationToken.equals() 
http://jira.springframework.org/browse/SEC-688
 2008-02-28 11:44:15 +00:00
Luke Taylor
e6e1f2586f SEC-213: Allow custom redirects based on "redirect" parameter in AbstractProcessingFilter. successfulAuthentication() 
http://jira.springframework.org/browse/SEC-213
 2008-02-28 11:03:05 +00:00
Luke Taylor
439b0be58e SEC-462: 302 redirect is not usable for SOAP clients 
http://jira.springframework.org/browse/SEC-462
 2008-02-26 14:54:29 +00:00
Luke Taylor
5187f89fe8 SEC-679: Removed use of MockApplicationContext and improved use of ehcache (shutting down cache managers after tests are run). Upgraded ehcache version to 1.3 as used in Spring pom. 2008-02-22 13:34:20 +00:00
Luke Taylor
ca9e64f857 SEC-674: Moved cas "ui" package to new module 2008-02-22 11:11:56 +00:00
Luke Taylor
2dd9faabc0 SEC-674: Created new project modules for cas, captcha, acls and taglibs 2008-02-19 20:30:53 +00:00
Luke Taylor
3c011685cd SEC-536: Added account status checking to pre-auth provider. 2008-02-18 12:15:30 +00:00
Andrei Stefan
84282ffabb SEC-532: added test method for SEC-655 2008-02-15 22:27:14 +00:00
Luke Taylor
04e187d1a7 Tiding up code in acl package (formatting, reduction onf nesting etc). 2008-02-15 18:09:26 +00:00
Luke Taylor
5e204e23f3 SEC-536: Introduced UserDetailsChecker strategy to extract code for checking status of accounts and allowing variation in pre/post authentication checks made by AbstractUserDetailsAuthenticationProvider 2008-02-15 18:05:12 +00:00
Luke Taylor
985818ae2c SEC-581: Copy authentication details to CAS result token 2008-02-15 14:11:56 +00:00
Andrei Stefan
afca3d8adc tidying up changes 2008-02-15 10:56:05 +00:00
Andrei Stefan
24ff891fea tidying up changes 2008-02-15 10:55:27 +00:00
Andrei Stefan
69c2f31aa7 SEC-532: AclImpl tests class 2008-02-15 10:53:23 +00:00
Andrei Stefan
b84c812305 SEC-532: added method that reproduces bug in SEC-590 2008-02-12 16:28:33 +00:00
Andrei Stefan
0dae2a2dfc SEC-532: added test methods; one method reproduces bug in SEC-590 2008-02-12 16:20:48 +00:00
Luke Taylor
10ab4136d1 SEC-309: Patch for Authentication tag to use property of authentication object, rather than invoking an operation on the principal. Allows use of nested properties. 2008-02-09 13:41:05 +00:00
Luke Taylor
e0d0cc20c7 SEC-665: Missed a method name... 2008-02-08 18:19:27 +00:00
Luke Taylor
bd5a64825d SEC-552: Replaced authorites populators in CAS and OpenID with a plain UserDetailsService 2008-02-08 13:23:43 +00:00
Luke Taylor
842c49c890 SEC-665: Renaming of rolemapping package to authoritymapping, and corresponding refactoring of classes. 2008-02-08 12:01:10 +00:00
Luke Taylor
6e93ec92eb Added db creation message. 2008-02-07 13:35:27 +00:00
Luke Taylor
28153f2c7f Added TestDataSource class to cut down verbosity of in-memory test databases and to implement DisposableBean, so the database is destroyed when the application context containing it is closed. 2008-02-07 13:33:15 +00:00