Ben Alex
9b6c798a52
SEC-496: <annotation-driven> element.
2007-12-04 14:14:17 +00:00
Ben Alex
949205b369
Correction of equals(Object) and hashCode() methods.
2007-12-04 12:44:40 +00:00
Ben Alex
85085abf9e
Add namespace support for Servlet API integration.
2007-12-04 12:23:41 +00:00
Ben Alex
8e7c540b16
General refactorings and improvements to namespace support, including
...
autoDetect="true" attribute for <http> element.
2007-12-04 10:35:08 +00:00
Ben Alex
2441ab6d9a
Move "realm" attribute to be on <http> element rather than <http-basic>.
...
This faciltiates reuse with other mechanisms (like Digest) whilst also
moving towards the <http-auto-configure> element (which benefits from
having shared configuration in <http> as opposed to mechanism-specific
elements).
2007-12-04 08:02:40 +00:00
Ben Alex
d9ec944579
Refactor strings to static fields. To facilitate unit testing, package
...
protected visibility was adopted for all element names, attribute names,
and attribute default values. A public access modifier was used for all
bean IDs assigned to bean definitions created by the
BeanDefinitionParsers.
2007-12-04 07:12:08 +00:00
Ben Alex
9b4bb0ffd8
<repository> element and JdbcUserDetailsManager support.
2007-12-04 05:58:54 +00:00
Ben Alex
0b0b174eda
Support <repository> and JbcUserDetailsManager.
2007-12-04 05:27:17 +00:00
Luke Taylor
248d97c9d6
SEC-513: Added support for cache flushing after updating or deleting data in JdbcUserDetailsManager.
2007-12-03 22:12:02 +00:00
Ben Alex
a53357778f
Remove superfluous method.
2007-12-03 07:32:23 +00:00
Ben Alex
47229be5cb
Make samples and tests use username "rod".
2007-12-03 02:56:52 +00:00
Luke Taylor
843a20e691
Changed default namespace in config files to "security" for clarity.
2007-11-29 13:14:15 +00:00
Luke Taylor
09c588a138
Removed unecessary check in additionalAuthenticationChecks() for null credentials in authentication object. Previous line already throws an exception if null is found.
2007-11-28 19:20:33 +00:00
Luke Taylor
88e01624eb
SEC-560: Removed local password comparison form PasswordComparisonAuthenticator.
2007-11-28 18:29:04 +00:00
Luke Taylor
9e2f372bad
SEC-607: Deprecated InitialDirContextFactory and replaced it with SpringSecurityContextSource.
...
Also some refactoring of LdapUserDetailsManager to use a strategy for creating DNs from usernames.
2007-11-20 20:54:48 +00:00
Luke Taylor
3e3dac4050
SEC-600: Added extra test assertions on authentication details object after password change.
2007-11-13 17:17:25 +00:00
Luke Taylor
cb237055ac
SEC-600: Added Jdbc implementation of UserDetailsManager
2007-11-13 17:11:29 +00:00
Luke Taylor
b681952933
SEC-545: Added utility methods for checking if user has a particular role to existing AuthorityUtils class. Class may be renamed at some point as more functionality is added.
2007-11-11 23:37:32 +00:00
Luke Taylor
315d4a247f
Added method to clear datasource field after use.
2007-11-11 23:10:21 +00:00
Luke Taylor
910e63f83c
SEC-586: Implemented secure channel support in namespace configuration.
2007-11-11 22:07:46 +00:00
Luke Taylor
c214f4a9bc
Simplified initialization of datasource.
2007-11-11 22:06:22 +00:00
Luke Taylor
756be6fed3
Removed unnecessary constructor.
2007-11-11 19:10:47 +00:00
Luke Taylor
2856a6ba43
Allow configuration of embedded ldap server port through ldap namespace configuration. Changed default port from 3389 to avoid conflict with windows remote desktop (as reported by Ray Krueger in dev list).
2007-11-11 16:10:30 +00:00
Luke Taylor
0e7dac6ca5
SEC-565: Refactoring of TokenBasedRememberMeServices. Changed arguments to makeValidSignature so that it could be used from both places where a signature is required and refactored the class to extend AbstractRememberMeServices. The method processAutoLoginCookie now returns a UserDetails, rather than username, as the UserDetails is needed in TokenBasedRememberMeServices.
2007-11-10 19:20:36 +00:00
Luke Taylor
7caa1587b3
SEC-588: Completed JdbcTokenRepositoryImpl and added extra update method to PersistentTokenRepository interface.
2007-11-10 15:42:21 +00:00
Scott Battaglia
87a864619d
SEC-592
...
fixed failing test due to thinking a null value should be provided.
2007-11-07 21:44:15 +00:00
Scott Battaglia
981f185575
SEC-592
...
implemented NullStatelessTicketCache and test cases and made it the default for CasAuthenticationProvider.
2007-11-07 18:46:35 +00:00
Luke Taylor
9f2bc9a842
SEC-582: Namespace configuration implementation for remember-me support.
2007-11-06 23:20:25 +00:00
Luke Taylor
7ad8e2acf0
SEC-591: Removed default NullRememberMeServices in RememberMeProcessingFilter
2007-11-06 21:43:37 +00:00
Luke Taylor
4c44bd782f
SEC-588: Added extra tests to check cookie values.
2007-11-04 12:07:49 +00:00
Luke Taylor
55b1f9348d
SEC-588: PersistentTokenBasedRememberMeServices implementation.
2007-11-03 22:11:26 +00:00
Luke Taylor
43fc8e2660
Added Id keyword for all java files
2007-10-27 00:45:30 +00:00
Luke Taylor
d3b165749f
SEC-583: Implementation of namespace config for concurrent session support.
...
Also some minor adjustments to ordering of different http features in schema.
2007-10-27 00:28:24 +00:00
Luke Taylor
3d9ea49d19
SEC-585: Made expiredUrl optional.
...
Also implemented Ordered interface for use in namespace configuration.
2007-10-26 23:32:40 +00:00
Luke Taylor
55ef50a4df
Added checking of path ordering to FilterChainProxy to detect misplaced universal match ("/**").
2007-10-26 13:51:32 +00:00
Luke Taylor
1bcb62af2e
Remove use of autoconfig, as it was really just a conveniece for creating default access and authentication managers.
2007-10-26 13:05:31 +00:00
Luke Taylor
acf3966651
SEC-578: Refactored to remove FilterChainMap and use a LinkedHashMap instead to maintain the path ordering. Also made use of Springs ManagedList and ManagedMap to preform resolution of bean names to Filter objects at runtime, replacing the unnecessary bean which was performing this task for the filter lists.
2007-10-22 23:52:29 +00:00
Luke Taylor
2d3d5ceb8d
Tidying.
2007-10-20 23:17:56 +00:00
Luke Taylor
cffd3131f0
Added building of filter chain in post-processing, support for basic authentication and automatic generation of login page, if no loginUrl supplied.
2007-10-20 23:17:01 +00:00
Luke Taylor
2b14d2da98
Make Spring Security filters implement the Ordered interface, for use when post-processing the application context
2007-10-20 23:09:23 +00:00
Luke Taylor
9b8c06e9f6
SEC-568: Introduced FilterChainMap as a simpler option for configuring FilterChainProxy and introduced a namespace-based for configuring it. The Url pattern matching is factored out into a separate strategy with ant and regex versions.
2007-10-20 23:05:03 +00:00
Luke Taylor
c51bcd9c1f
Changed method protection config to make it compatible with MethodDefinitionMap for the time being.
2007-10-14 14:29:15 +00:00
Luke Taylor
a4b522351f
Added "unprotected" method for tests
2007-10-14 14:15:51 +00:00
Luke Taylor
627b0b38ad
Intermediate checkin of experimental namespace config work.
2007-10-13 16:24:24 +00:00
Luke Taylor
e561b87987
Switched testOperation method to use unicode escaped characters.
2007-10-13 11:40:16 +00:00
Luke Taylor
75bc838ae8
Switched testOperation method to use French locale to prevent use of default machine locales such as Chinese (see previous commit sg).
2007-10-11 16:18:28 +00:00
Luke Taylor
0a214e4930
Removed locale-specific message value assertions which will cause tests to fail if run with a different standard locale for which we have a message file (e.g. Chinese).
2007-10-11 15:23:01 +00:00
Luke Taylor
92bc57eefd
Switch test to use a specific locale for which we have a message file (french). The default ResourceBundle behaviour is to attempt to load the platform locale if the specified one isn't found before using the default. We don't have a messages_en.properties file, hence trying to use "en" locale on a Chinese computer will result in Chinese messages being used (and test failing).
2007-10-11 15:16:06 +00:00
Luke Taylor
3f2b9cd6fb
SEC-562: More changes of Acegi name in comments, docs etc.
2007-10-03 14:02:39 +00:00
Luke Taylor
438dc44004
Minor changes to improve robustess of LDAP tests.
2007-10-02 14:50:08 +00:00
