Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 85807fdfd0 Removed @Overrides from method that implements interface instead of overriding superclass to resolve Java 1.5 error Rob Winch 2011-06-20 22:39:02 -05:00
  • c3a3a5bfbf Updated core.gradle to include crypto as referenced project in eclipse Rob Winch 2011-06-20 22:30:13 -05:00
  • cb7a94af88 SEC-1768: Use AopProxyUtils.ultimateTargetClass to cater for situation where security interceptor is applied to a proxy. Luke Taylor 2011-06-18 14:46:28 +01:00
  • 9b8d2719a6 SEC-1686: Up required minimum version to 3.0.6 in version check. Luke Taylor 2011-06-18 14:45:23 +01:00
  • d253f5e109 SEC-1768: Use AopProxyUtils.ultimateTargetClass() to cater for the situation where the security interceptor is being applied to a proxy. Luke Taylor 2011-06-18 14:35:56 +01:00
  • 5a1ddc660b SEC-1768: Added tests to reproduce "double-proxying" issue combining intercept-methods and tx-annotation-driven. Problem is caused by use of ProxyFactoryBean with auto-proxying. Luke Taylor 2011-06-18 14:32:11 +01:00
  • 73b67da3a8 SEC-1762: Fix input value assertion check for targetUrlParameter. Luke Taylor 2011-06-17 13:43:15 +01:00
  • b0a60a7ff2 Reset to snapshot version. Luke Taylor 2011-06-17 11:49:18 +01:00
  • 926be1ca78 Intermediate crypto release version. Luke Taylor 2011-06-17 11:46:19 +01:00
  • 2861a951aa Minor FAQ update on version info. Luke Taylor 2011-06-17 11:45:49 +01:00
  • 1f1faa6da0 Use getClass() in logger instantiation in AbstractLdapAuthenticationProvider. Luke Taylor 2011-06-15 14:06:57 +01:00
  • d9ccebd565 Add crypto module to LDAP bundlor template Luke Taylor 2011-06-15 11:47:29 +01:00
  • 89b7b2b935 SEC-1764: Remove use of Java 6 method Arrays.copyOfRange. Luke Taylor 2011-06-15 11:22:17 +01:00
  • b5546d1d29 SEC-1764: Remove use of Java 6 method Arrays.copyOfRange. Luke Taylor 2011-06-15 11:18:26 +01:00
  • 70ca0d1a39 SEC-1764: Ensure password encoders use UTF-8 charset when creating strings from byte arrays. Luke Taylor 2011-06-14 17:42:59 +01:00
  • 7a5a062cd0 SEC-1764: Backport Utf8 encoder to 3.0.x Luke Taylor 2011-06-14 20:11:03 +01:00
  • 571bfc4869 Refactoring to use Utf8 encoder instead of String.getBytes("UTF-8"). Luke Taylor 2011-06-14 18:34:48 +01:00
  • 361b77685d Add crypto as an exported dependency of core in IDEA configuration. Luke Taylor 2011-06-14 18:31:56 +01:00
  • 2b8d4684a1 SEC-1764: Ensure password encoders use UTF-8 charset when creating strings from byte arrays. Luke Taylor 2011-06-14 17:42:59 +01:00
  • dc92baa257 Remove truststore settings from tutorial sample as they aren't required. Luke Taylor 2011-06-13 15:03:51 +01:00
  • e4ecdd55f6 Enable https in tutorial sample. Luke Taylor 2011-06-13 13:45:09 +01:00
  • 52c0ee6756 Improve error reporting of missing web classes in namespace handler. Now catches and logs the class-loading error. Luke Taylor 2011-06-13 13:39:55 +01:00
  • e27f655e9d SEC-1689: Re-instate crypto as separate library (for use in non-Spring Security apps), as well as packaging with core. Luke Taylor 2011-06-10 00:01:25 +01:00
  • ecfffaaa3f Make aspectj dependencies optional throughout and spring-jdbc/tx optional in core poms. Reduces exclusions required in third-party poms (e.g. spring-social). Luke Taylor 2011-06-09 22:57:49 +01:00
  • 977da0da1f SEC-1733: Support explicit zero netmask correctly. Luke Taylor 2011-06-07 12:15:07 +01:00
  • 80fd96df6d SEC-1650: Updates and corrections to tutorial sample to fit better with new tutorial. Luke Taylor 2011-05-03 22:23:55 +01:00
  • 685f12c5a0 SEC-1733: Support explicit zero netmask correctly. Luke Taylor 2011-06-07 12:15:07 +01:00
  • dfbc938e99 Added note in namespace docs on mismatch between using filters="none" and other attributes. Luke Taylor 2011-06-06 12:37:52 +01:00
  • d5f1f6cbff SEC-1757: Updated tutorial sample to state that listing of accounts is allowed by anyone and to display accounts for the different types of access to posting to Accounts Rob Winch 2011-06-02 21:19:01 -05:00
  • c9b328d8c7 SEC-1757: Updated tutorial sample to state that listing of accounts is allowed by anyone and to display accounts for the different types of access to posting to Accounts Rob Winch 2011-06-02 21:19:01 -05:00
  • 132163ec2e Add FAQ on accessing password from a UserDetailsService. Luke Taylor 2011-05-26 18:38:45 +01:00
  • f5f410ae3b Clean unused imports. Luke Taylor 2011-05-25 20:39:16 +01:00
  • ec97b70df9 SEC-1668: Allow customization of username parameter in SwitchUserFilter. Luke Taylor 2011-05-25 20:01:52 +01:00
  • 6d04670f87 SEC-1695: Allow customization of the session key under which the SecurityContext is stored. Luke Taylor 2011-05-25 19:51:47 +01:00
  • 42e0e158b4 Simplify Digester utility class. Luke Taylor 2011-05-25 19:09:08 +01:00
  • 84902ebb50 Javadoc correction. Luke Taylor 2011-05-24 12:01:04 +01:00
  • b53d430798 Doc update to reflect change in cas integration module name since 3.0. Luke Taylor 2011-05-23 21:29:40 +01:00
  • 21295a58e5 SEC-1751: Applied patch to use zero-IV for queryable text encryption. Luke Taylor 2011-05-23 20:10:16 +01:00
  • 5a4aed238c SEC-1752: Fixed Utf8 codec to take account of the limit of the ByteBuffer returned by CharsetEncoder.encode(). Luke Taylor 2011-05-23 18:55:25 +01:00
  • e8a1a6e40b Added spring-expression to config module testCompile to fix build. Luke Taylor 2011-05-19 23:50:35 +01:00
  • 27caecd53f SEC-1452: Added namespace support for custom expression handler for use with web access expressions. Luke Taylor 2011-05-19 15:26:44 +01:00
  • 63f160dc72 SEC-1749: Add support for PageContext lookup of objects and use of PermissionEvaluator when using web access expressions. Luke Taylor 2011-05-19 14:35:37 +01:00
  • c758f36629 Forgot to add version information test previously Luke Taylor 2011-05-17 23:54:43 +01:00
  • a2cdbab50c SEC-1747: Upgrade to Spring LDAP 1.3.1 Luke Taylor 2011-05-17 23:40:07 +01:00
  • 3e18be1478 SEC-1747: Upgrade to Spring LDAP 1.3.1 Luke Taylor 2011-05-17 23:39:19 +01:00
  • ce19b470e2 SEC-1560: Change AccessControlListTag to use PermissionEvaluator rather than explicit ACL classes. Luke Taylor 2011-05-17 22:55:20 +01:00
  • 3541099634 Correct typo in FAQ. Luke Taylor 2011-05-17 18:22:04 +01:00
  • 3de0041874 Reverted cas Readme.txt from instructing to run from samples/cas/sample Rob Winch 2011-05-16 22:09:58 -05:00
  • 076a75d8c3 Cleaned up cas task dependency declarations Rob Winch 2011-05-15 21:28:20 -05:00
  • 11dc3363cc Moved cas server and cas sample into common parent folder (samples/cas) Rob Winch 2011-05-15 21:21:45 -05:00
  • 1b8eee6f07 Improve "missing web classes" message in SecurityNamespaceHandler, by indicating that a missing transitive dependency may also be the problem. Luke Taylor 2011-05-15 23:28:02 +01:00
  • 295ea27526 SEC-1743: Separate remoting from core into separate module. Luke Taylor 2011-05-14 11:57:30 +01:00
  • 1c1ffe2f0f Added CA's to server.jks from cacerts included with Sun JDK - Allow handshake to succeed for the build to upload to amazon - Allows the same trust store to work for openid and CAS sample applications Rob Winch 2011-05-13 18:05:16 -05:00
  • e1f4c3d325 Created a casserver module to better isolate it from the cas sample application now that an overlay is being done Rob Winch 2011-05-12 21:46:29 -05:00
  • 4d786d74cf Reworded CASSampleSpec test method to reflect single logout Rob Winch 2011-05-11 21:50:16 -05:00
  • 4c43bde064 Set log levels to ERROR level when running CAS integration tests Rob Winch 2011-05-11 21:47:40 -05:00
  • 9525403385 Added CAS Server overlay to make single logout be synchronous and enabled itests for the cas sample Rob Winch 2011-05-11 21:18:56 -05:00
  • d1cbaf609c Ignore *.log.* since cas uses a rolling log Rob Winch 2011-05-01 17:14:40 -05:00
  • be974b398d Added bin/ to ignored files for Eclipse users Rob Winch 2011-05-01 17:13:27 -05:00
  • 92face623a SEC-1738: removed accidental commit of writeNewPom task Rob Winch 2011-05-10 23:23:13 -05:00
  • 3d24d6f672 SEC-1738: Changed openid4java to be testCompile dependency of spring security config Rob Winch 2011-05-10 23:17:36 -05:00
  • 6e91786f92 SEC-1734: AbstractRememberMeServices will now default to using a secure cookie if the connection is secure. The behaviour can be overridden by setting the useSecureCookie property in which case the cookie will either always be secure (true) or never (false). Luke Taylor 2011-05-09 13:36:23 +01:00
  • 396eced291 Add test to check version information. Luke Taylor 2011-05-07 17:15:02 +01:00
  • 6a2a636fd7 Update Javadoc for UserDetailsManager to reflect that the new password doesn't need to be stored in the security context (and probably shouldn't be). Luke Taylor 2011-05-07 16:20:12 +01:00
  • 12121dcc54 SEC-1732: Raise an exception if more than one LDIF resource is found. Luke Taylor 2011-05-03 18:19:31 +01:00
  • d7344254ec Revert "SEC-1732: Implement loading of multiple LDIF resources." Luke Taylor 2011-05-03 18:13:54 +01:00
  • 491ca545ae SEC-1732: Implement loading of multiple LDIF resources. Luke Taylor 2011-05-03 12:44:57 +01:00
  • 25ebc5e5f4 Fix openid dep in config.gradle. Should be a testCompile dep. Luke Taylor 2011-04-29 14:04:32 +01:00
  • 71c879bb16 Reset to post-release snapshot version Luke Taylor 2011-04-28 19:41:47 +01:00
  • 513f08707d Set project release version to 3.1.0.RC2 Luke Taylor 2011-04-28 19:32:35 +01:00
  • d2175468ee Disable CAS interation tests until CI problems are resolved. Luke Taylor 2011-04-28 19:17:29 +01:00
  • 06faea8cfc Typos. Luke Taylor 2011-04-28 18:55:38 +01:00
  • 1618bf1168 Upgrade to logback 0.9.28 Luke Taylor 2011-04-28 18:48:40 +01:00
  • 28444978e5 Change to using pom 'builder' syntax for adding commons logging dep. Luke Taylor 2011-04-28 13:45:01 +01:00
  • f37f5d43bc gradle 1.0-M3 update - AspectJPlugin to integrate with GenerateEclipseProject instead of GenerateEclipseClasspath Rob Winch 2011-04-27 20:21:33 -05:00
  • 767f5b2423 Upgrade to gradle 1.0-M3. Luke Taylor 2011-04-27 16:21:46 +01:00
  • 6c9ab570a2 SEC-1729: Fix openid4java guice dependencies to use Maven Central. Luke Taylor 2011-04-27 22:08:34 +01:00
  • a2858240f1 SEC-1728: Remove references to SUN provider and incorrect seeding of SecureRandom in SecureRandomBytesKeyGenerator. Luke Taylor 2011-04-27 17:34:54 +01:00
  • 855ea73117 SEC-1729: Updated gradle to reference guice maven repo for all projects Rob Winch 2011-04-27 00:19:58 -05:00
  • bd74185e41 SEC-1729: Updated openid module and sample to openid4java 0.9.6 and httpclient 4.1.1 Rob Winch 2011-04-26 23:14:58 -05:00
  • ae5b402651 SEC-1729: Revert "SEC-1710: Added shutdown method to OpenID4JavaConsumer that invokes MultiThreadedHttpConnectionManager.shutdownAll()" since it is superseded by SEC-1729 Rob Winch 2011-04-26 19:47:44 -05:00
  • a6b0c265db SEC-1729: Revert "SEC-1711: Support verifying that attribute exchange parameters were signed" since it is superseded by SEC-1729 Rob Winch 2011-04-26 19:39:19 -05:00
  • 73fb1764b8 SEC-1730: Fix broken KeyGenerators method. Luke Taylor 2011-04-26 19:06:45 +01:00
  • e473897fd9 SEC-1181: Add docs for ActiveDirectoryLdapAuthenticationProvider. Minor fix to initialization checks. Luke Taylor 2011-04-26 18:39:01 +01:00
  • c4a1ce9f1a SEC-1725: Update docs to remove references to filter-chain-map. Luke Taylor 2011-04-25 23:38:44 +01:00
  • b5924db74d SEC-1725: Add option to filter-chain to use an explicit request-matcher-ref instead of a "path" attribute. Luke Taylor 2011-04-25 23:20:15 +01:00
  • f883c6e579 SEC-1723: Fix use of bean names in integration test app context. Luke Taylor 2011-04-25 22:30:51 +01:00
  • 04dc65c8fe SEC-1657: Corresponding namespace updates to use SecurityFilterChain list in place of filterChainMap. Luke Taylor 2011-04-23 22:28:19 +01:00
  • 37d0454fd7 SEC-1657: Create SecurityFilterChain class for use in configuring FilterChinProxy. Encapsulates a RequestMatcher and List<Filter>. Luke Taylor 2011-04-23 21:37:57 +01:00
  • 614d8c0321 SEC-1723: Use standard SpEL syntax for accessing beans in the app context by name. Luke Taylor 2011-04-22 13:33:56 +01:00
  • 1833b234a5 SEC-1722: Correct javadoc Luke Taylor 2011-04-22 11:49:48 +01:00
  • dd108041a0 SEC-1722: Correct javadoc Luke Taylor 2011-04-22 11:49:48 +01:00
  • 8178371927 SEC-1700: Add fixed serializationVersionUID values to security context, authentication tokens and related classes Luke Taylor 2011-04-21 19:55:32 +01:00
  • ac96f27136 Gradle refactoring. Create separate S3 upload task and extract ide customization into a separate file. Luke Taylor 2011-04-21 11:57:18 +01:00
  • 6c97fccc91 SEC-1700: Allow for case where JAAS config is not a simple file, but may be a jar resource, for example. Luke Taylor 2011-04-20 14:35:09 +01:00
  • 5a9aa6d1aa SEC-1700: Allow for case where JAAS config is not a simple file, but may be a jar resource, for example. Luke Taylor 2011-04-20 14:35:09 +01:00
  • 1b2fdf8b02 Fix gradle IDEA code for git selection as VCS. Luke Taylor 2011-04-20 14:20:56 +01:00
  • 2888f2b86f SEC-1720: Avoid bean-creation side-effects in ContextSourceSettingPostProcessor. Luke Taylor 2011-04-20 11:58:00 +01:00
  • 71ed6d7964 SEC-1720: Avoid bean-creation side-effects in ContextSourceSettingPostProcessor. Luke Taylor 2011-04-20 11:58:00 +01:00
  • 23df97f44a Added missing HttpClient version information to openid bundlor template file. Luke Taylor 2011-04-20 11:38:26 +01:00