Commit Graph

  • 65712f5cbc SEC-1549: AclPermissionCacheOptimizer now does nothing if passed an empty collection of domain objects. Luke Taylor 2010-08-28 14:39:43 +01:00
  • 20988c8cf6 Minor refactoring of debug filter and tidying up tests. Luke Taylor 2010-08-27 01:49:30 +01:00
  • 9c6a5135a3 SEC-1532: Patch applied to 2.0.x branch Luke Taylor 2010-08-26 14:13:01 +01:00
  • 566328fea4 Minor tweaking of IDEA deps. Luke Taylor 2010-08-24 22:36:42 +01:00
  • ba890cf7e5 Removed invalid test method. Luke Taylor 2010-08-24 21:03:33 +01:00
  • d1e8b8e29d More tests. Minor refactoring. Luke Taylor 2010-08-24 20:57:45 +01:00
  • bf9d4a9747 Remove unnecessary local variable. Luke Taylor 2010-08-24 20:29:25 +01:00
  • 5902c6b262 Adjustments to coverage generation (enable debug logging when coverage on). Luke Taylor 2010-08-24 18:27:44 +01:00
  • f71d9df7fe Deprecate unnecessary method in SecurityConfig Luke Taylor 2010-08-24 18:26:38 +01:00
  • 42721d407b Added tests for acls/afterinvocation package Luke Taylor 2010-08-24 18:22:54 +01:00
  • bdb906e588 Enable parameterization for log levels in logback files to allow the use of command-line options for controlling log output. Luke Taylor 2010-08-24 18:24:19 +01:00
  • c1418c7536 Minor change in doc information about samples since these are no longer in maven repo. Luke Taylor 2010-08-23 14:58:27 +01:00
  • 35335e84b3 Reset post-release build version. Luke Taylor 2010-08-23 00:13:20 +01:00
  • 23c4d1ec28 Set version to 3.1.0.M1. Luke Taylor 2010-08-22 23:54:33 +01:00
  • b39b63bf3d Add logback configuration for contacts sample. Luke Taylor 2010-08-22 22:43:49 +01:00
  • b2fc1d8491 Fix namespace schema version in CAS sample. Luke Taylor 2010-08-22 22:43:10 +01:00
  • 837771537f Tweak docs build to only prevent "assemble" from depending on the archive/upload tasks. Luke Taylor 2010-08-22 22:42:54 +01:00
  • 98108d2694 Add support for ant.scp to TarUpload task. Luke Taylor 2010-08-22 22:41:41 +01:00
  • 07d8275ee6 Modify order of saxon and xerces deps in dependency list to prevent Aelfred parser from being used in build. Luke Taylor 2010-08-22 22:31:01 +01:00
  • b9dfc69d62 Apply idea and eclipse plugins to java projects only. Luke Taylor 2010-08-22 22:29:11 +01:00
  • 5fe589e360 Added project property to enable test coverage. Luke Taylor 2010-08-22 14:29:31 +01:00
  • 2c219f7a66 Bringing readme file up to date. Luke Taylor 2010-08-22 12:44:15 +01:00
  • 68b11854ac Fix emma coverage to also include config LDAP tests (which are run in a separate Test instance) Luke Taylor 2010-08-21 18:45:13 +01:00
  • 6c96a7b025 Add emma coverage support. Luke Taylor 2010-08-21 15:58:59 +01:00
  • 9e5189c8ba Upgrade to Spring 3.0.4 and adjust IDEA plugin customization. Luke Taylor 2010-08-21 14:15:54 +01:00
  • 1db83fc81e Minor BD parser tidying. Luke Taylor 2010-08-20 21:12:46 +01:00
  • d04e37c0c4 Minor changes to doc on version numbering. It's not true that minor versions are source/binary compatible. Luke Taylor 2010-08-19 23:24:12 +01:00
  • 102bc2d6a0 Reduce unnecessary use of aspectj as a build dependency Luke Taylor 2010-08-19 23:23:03 +01:00
  • c37ca1c2a9 Sample app build adjustments to remove unwanted deps such as jsp-api, tidy up use of JSTL, make sure all are using servlet 2.5 etc. Luke Taylor 2010-08-19 22:41:51 +01:00
  • 1680807470 Added eclipse plugin to build. Some minor fixes to remove eclipse warnings. Luke Taylor 2010-08-18 14:11:06 +01:00
  • 45674a16ea SEC-1540: Apply patch to support HTTP method matching for requires-channel namespace attribute. Luke Taylor 2010-08-18 13:17:21 +01:00
  • 5f6bcc0e1e SEC-1540: Fix to add HTTP-method specific support for namespace requires-channel attribute. Luke Taylor 2010-08-18 13:01:16 +01:00
  • 3c02989d67 Removal of jmock test dependency and upgrading of mockito version to 1.8.5. Minor adjustments to other build deps and configurations (e.g. prevent groovy from being used as a transitive dep, since we only use it for tests). Luke Taylor 2010-08-18 02:32:43 +01:00
  • aafc5f9038 File rename to correct case. Luke Taylor 2010-08-17 02:27:36 +01:00
  • 1f520b691f SEC-1469: Initial support for debugging filter. Luke Taylor 2010-08-17 02:23:34 +01:00
  • 591bd532bd Polishing FilterChainProxy and its tests. Luke Taylor 2010-08-17 02:20:34 +01:00
  • 6abfa2e887 Update minimum required schema to 3.1. Luke Taylor 2010-08-17 02:19:55 +01:00
  • e7883024d9 Set compile encoding to UTF-8 Luke Taylor 2010-08-17 02:16:12 +01:00
  • 4bd41cbf72 SEC-1133: Support for setting of authenticationDetailsSource property for form-login, openid-login, http-basic and x509 namespace elements. These elements now support an additional 'authentication-details-source-ref' attribute. Luke Taylor 2010-08-14 15:10:03 +01:00
  • 992566b6cb SEC-1527: Internationalization of contacts sample (Adding message resource bundle and RequestContextFilter). Re-working of L12n section of manual to mention existing localized message files and use of RequestContextFilter. Luke Taylor 2010-08-14 01:07:51 +01:00
  • 281d77271e SEC-1486, SEC-1538, SEC-1537: Generification of AuthenticationDetailsSource. Deprecation of non-web pre-authentication classes and other unnecessary classes. Removal of reflection in WebAuthenticationDetailsSource. Luke Taylor 2010-08-12 19:28:48 +01:00
  • 4935aa07c7 SEC-1535: Added suggested doc fixes. Luke Taylor 2010-08-11 14:25:39 +01:00
  • a1b124def5 SEC-1532: Add cache of previously matched beans to ProtectPointcutPostProcessor to ensure that it doesn't perform pointcut matching every time a new prototype bean is created. Luke Taylor 2010-08-09 16:54:32 +01:00
  • 2222a7be07 Use Integer.valueOf() in preference to new Integer() Luke Taylor 2010-08-11 18:17:23 +01:00
  • db6da77a5f SEC-1413: Add RedirectStrategy to AbstractRetryEntryPoint. Luke Taylor 2010-08-10 17:39:12 +01:00
  • dca0fd871c SEC-1532: Add cache of previously matched beans to ProtectPointcutPostProcessor to ensure that it doesn't perform pointcut matching every time a new prototype bean is created. Luke Taylor 2010-08-09 16:54:32 +01:00
  • 183333d189 SEC-1430: Forgot to commit changes to new ExceptionMappingAuthenticationFailureHandlerTests. Luke Taylor 2010-08-09 16:55:30 +01:00
  • 2e98b84494 SEC-1430: internalize session key for SavedRequest. This should be accessed using the RequestCache interface if required. Additional refactoring of related tests which were still in AbstractAuthenticationProcessingFilterTests for historical reasons, but should be in their respective success/failure handler test classes. Luke Taylor 2010-08-08 17:49:06 +01:00
  • bb7165ac6e SEC-1530: Added information on calling getAllPrincipals() on SessionRegistry for direct use in an application to provide currently logged in users. Luke Taylor 2010-08-07 15:43:55 +01:00
  • 1a838c2049 SEC-1533: AclAuthorizationStrategyImpl can now take either one or three GrantedAuthority arguments. If only one is supplied, it will be used for all 3 of the permissions supported by the class. Luke Taylor 2010-08-07 14:41:25 +01:00
  • acad848690 Update aspectj to 1.6.9 Luke Taylor 2010-08-06 13:34:30 +01:00
  • 85c4c91e0e IDEA inspection refactorings. Luke Taylor 2010-08-05 22:47:42 +01:00
  • a3d27a9863 SEC-1314: cloneFromHttpSession accidentally go left behind, even though it is always false. Luke Taylor 2010-08-05 21:21:09 +01:00
  • a2bd1bc9af SEC-1498: Allow use of absolute URL fopr login form in LoginUrlAuthenticationEntryPoint. Luke Taylor 2010-08-05 21:09:34 +01:00
  • f6abc24ed6 SEC-1529: More user-friendly expression @PreAuthorize expression in EL chapter. Luke Taylor 2010-08-05 18:17:25 +01:00
  • e2ba500c3c SEC-1529: More user-friendly expressions on method annotations in EL chapter. Luke Taylor 2010-08-05 18:14:11 +01:00
  • 413b2a06e3 Improvements in up-to-date checking and use of parallel tests where possible. Luke Taylor 2010-08-05 02:11:00 +01:00
  • 64375484a1 More build and logging tuning. Luke Taylor 2010-08-04 22:55:17 +01:00
  • c9b0bc1bd9 Added gradle wrapper support. Luke Taylor 2010-08-04 21:35:57 +01:00
  • c4ee46824c Removing log4j.properties files and adding logback config ones. Luke Taylor 2010-08-04 21:16:05 +01:00
  • 74b66591e9 Build refactoring. Luke Taylor 2010-08-04 02:04:40 +01:00
  • 6e831d6504 Adding bundlor template for aspects project, plus minor build updates. Luke Taylor 2010-08-03 03:01:53 +01:00
  • 63734cfcf9 SEC-1528: Remove logic which checks if context in the session is the same as the current context to make sure that session.setAttribute() is called when the value in the session has been modified directly. Luke Taylor 2010-08-02 22:41:57 +01:00
  • d1279aeda2 Logging adjustments for gae sample. Luke Taylor 2010-08-02 19:51:24 +01:00
  • 6ba8257cab Renamed file to fix case-sensitivity issue. Luke Taylor 2010-08-02 12:13:58 +01:00
  • ab248b2583 SEC-1454: Added use of Spring's new AopProxyUtils.ultimateTargetClass() method when resolving the target class in MethodSecurityEvaluationContext. Luke Taylor 2010-07-30 14:36:41 +01:00
  • 52edf115ce Workaround for repeated attempt to download CAS server poms (GRADLE-1072) Luke Taylor 2010-07-28 20:04:15 +01:00
  • b5269625af Incorporate Chris's improvements to the bundlor build file (proper integration with incremental build support). Luke Taylor 2010-07-28 16:10:00 +01:00
  • 2d9a848265 Added missing gradle build files for remaining samples. Some related reordering, dependency fixing etc. CAS sample no longer requires two separate subprojects as both client and server app can be run from a single gradle build. Luke Taylor 2010-07-27 02:16:39 +01:00
  • b854e67952 SEC-1522: Treat empty attribute collection the same as null when returned by SecurityMetadataSource. Both are now treated as public invocations. Luke Taylor 2010-07-27 02:18:18 +01:00
  • a74077f9b1 SEC-1490: Minor changes to GAE sample. Simplification of redirect to registration page (only needs to be done after authentication). Luke Taylor 2010-07-25 20:46:00 +01:00
  • 5de68cb18f SEC-1499: Additional doc paragraph that escaped the commit. Luke Taylor 2010-07-23 23:03:54 +01:00
  • 97bc240602 SEC-1519: Added extra constructor to make sure strategy objects are initialized before the first attempt to retrieve an object from the Acl cache. Luke Taylor 2010-07-23 17:57:57 +01:00
  • 9dd6a5eb8f SEC-1499: Added some Javadoc and doc on the problems of using session-fixation protection with attributes that implement HttpSessionBindingListener. Luke Taylor 2010-07-23 16:27:57 +01:00
  • d7d8448120 SEC-1521: Add check for null SecurityContextRepository and clarify related docs on use of null implementation (NullSecurityContextRepository). Luke Taylor 2010-07-23 15:59:53 +01:00
  • e659e15f90 Tidying. Luke Taylor 2010-07-23 01:57:45 +01:00
  • 2afccfc633 Remove commons-logging dependency properly and switch tutorial sample to logback/slf4j. Luke Taylor 2010-07-23 01:57:15 +01:00
  • 1a9b7e1b6f SEC-1520: Close NamingEnumeration in LDAP compare implementation. Luke Taylor 2010-07-21 16:54:44 +01:00
  • 118af45b8e SEC-1520: Close NamingEnumeration in LDAP compare implementation. Luke Taylor 2010-07-21 16:54:44 +01:00
  • 8b5c70951d SEC-1518: Fix element ordering in security.tld Luke Taylor 2010-07-21 16:16:15 +01:00
  • 36e0fb6d91 SEC-1518: Fix element ordering in security.tld Luke Taylor 2010-07-21 16:16:15 +01:00
  • 7ce29d3e3d Don't set GAE location unless property available Luke Taylor 2010-07-21 15:40:29 +01:00
  • a681dee0e1 Minor sample build changes. JSTL dependency update. Luke Taylor 2010-07-20 23:45:20 +01:00
  • e5a302b5c4 SEC-1490: Correct loggedout URL. Luke Taylor 2010-07-20 23:43:43 +01:00
  • 5d35919ca3 SEC-1490: Code for GAE Sample webapp Luke Taylor 2010-07-06 23:52:11 +01:00
  • c1c8fd1874 SEC-1171: Changed attribute name/value from secured="false" to security="none" to allow future extension by adding extra options (e.g. contextOnly to provide security context information during the request). Luke Taylor 2010-07-20 19:46:47 +01:00
  • a4fd191499 Added check for use of "ref" with other attributes in <authentication-provider>. Luke Taylor 2010-07-20 14:31:52 +01:00
  • c891ab45ec Remove optional qualifier from apacheds dependencies in LDAP sample. Luke Taylor 2010-07-13 02:08:44 +01:00
  • ea5f2088b5 Comment out OpenLDAP tests to allow running in IDEA, and reduce default load configuration of performance test class. Luke Taylor 2010-07-12 12:31:46 +01:00
  • 4683273c2c Correct message in namespace handler when web classes are missing. Luke Taylor 2010-07-12 12:30:54 +01:00
  • 69a10c48ae Switch to using slf4j/logback for logging. Luke Taylor 2010-07-12 12:30:21 +01:00
  • ed447f63f6 Added intellij plugin to gradle build. Luke Taylor 2010-07-07 22:40:17 +01:00
  • 6894544122 Fixed serialization issue with gradle TarUpload task Luke Taylor 2010-07-07 15:19:24 +01:00
  • ae7fbf69e1 Added intellij files to .gitignore Luke Taylor 2010-07-07 15:16:31 +01:00
  • d704a3bb4a Prevent source jars from being included in the gradle 'default' configuration and thus being included as dependencies in war files etc. Luke Taylor 2010-07-06 23:56:31 +01:00
  • 443ac0487a SEC-1093: Namespace support for jee element. Luke Taylor 2010-07-05 19:16:46 +01:00
  • 565ef7383d SEC-1513 Scott Battaglia 2010-07-06 22:09:24 -04:00
  • 080710e023 Minor doc updates on default filters created by namespace. Luke Taylor 2010-07-06 13:29:11 +01:00
  • 06368f956a Minor doc/javadoc updates to clarify use of UserDetailsContextapper. Luke Taylor 2010-07-04 15:10:08 +01:00
  • 657a69b906 Minor doc/javadoc updates to clarify use of UserDetailsContextapper. Luke Taylor 2010-07-04 15:10:08 +01:00