Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 8c605516b3 SEC-1463: Change namespace user-service parser to store username in lower-case when building map for in-memory UserDetailsService. Lookups are supposed to be case-insensitive with this class. Luke Taylor 2010-04-24 16:41:51 +01:00
  • 82bbd09b71 SEC-1460: Documentation of changes. Luke Taylor 2010-04-22 16:15:43 +01:00
  • dada047e04 SEC-1456: Set rtexprvalue=true for "url" attribute in access tag to allow dynamic values (such as URL of current page). Luke Taylor 2010-04-21 17:29:27 +01:00
  • e6e168f127 SEC-1456: Set rtexprvalue=true for "url" attribute in access tag to allow dynamic values (such as URL of current page). Luke Taylor 2010-04-21 17:29:27 +01:00
  • def5f88c8c SEC-1431: Added openid-selector to openid sample, plus AX configuration for myopenid.com. Luke Taylor 2010-04-21 17:16:03 +01:00
  • 2f025fba6c SEC-1460: Added AxFetchListFactory which matches OpenID identifiers to lists of attributes to use in a fetch-request. Luke Taylor 2010-04-20 23:44:58 +01:00
  • 3af75afec1 Clarify that multiple authentication-provider elements can be used in combination. Luke Taylor 2010-04-17 19:37:27 +01:00
  • ee1fd1bc50 SEC-1431: Modify OpenID sample to use a custom UserDetailsService which allows any user to authenticate, allocating them a standard role and "registers" their ID in a map, allowing it to be retrieved in subsequent logins. Luke Taylor 2010-04-15 23:21:09 +01:00
  • f5468087c2 Remove cached DiscoveryInformation from session in OpenID4JavaConsumer's endConsumption method. Luke Taylor 2010-04-15 23:18:11 +01:00
  • d3d9c5db59 Refactoring of UserDetailsService injection (for X509, OpenID and RememberMeServices) to use a factory bean rather than a post-processor. Luke Taylor 2010-04-15 01:51:29 +01:00
  • 74896f217b SEC-1459: Generifying AuthenticationUserDetailsService. Now parameterized with <? extends Authentication>. Luke Taylor 2010-04-15 01:47:29 +01:00
  • 0acf262546 SEC-1462: Added suggested patch (effectively the same as changes in 3.0.x and master branches). Luke Taylor 2010-04-20 18:16:45 +01:00
  • 6ad652ae97 Update 2.0 branch pom versions. Luke Taylor 2010-04-20 18:15:51 +01:00
  • 6d6c2d31ef SEC-1462: Only apply session fixation protection strategy if request.isRequestedSessionIdValid() returns true. We don't need to create a new session if the current one already has a different Id from the client. Luke Taylor 2010-04-20 18:04:22 +01:00
  • a45d2a4fb2 SEC-1462: Only apply session fixation protection strategy if request.isRequestedSessionIdValid() returns true. We don't need to create a new session if the current one already has a different Id from the client. Luke Taylor 2010-04-20 18:04:22 +01:00
  • 8f6aecac9b Clarify that multiple authentication-provider elements can be used in combination. Luke Taylor 2010-04-17 15:25:37 +01:00
  • 0760bb947b SEC-1458: Remove logger field in HttpSessionEventPublisher in favour of direct lookup. Prevents early initialization of logging system when listener is initialized. Luke Taylor 2010-04-16 16:12:38 +01:00
  • 93deec8d40 SEC-1458: Remove logger field in HttpSessionEventPublisher in favour of direct lookup. Prevents early initialization of logging system when listener is initialized. Luke Taylor 2010-04-16 16:12:38 +01:00
  • 068b3d48ec Add .gitignore to 2.0.x branch Luke Taylor 2010-04-16 15:15:54 +01:00
  • d6f6a54455 SEC-1444: Backport of changes to 2.0.x Luke Taylor 2010-04-16 15:14:01 +01:00
  • 0521d10069 SEC-1294: Enable access to beans from ApplicationContext in EL expressions. Luke Taylor 2010-03-31 22:37:22 +01:00
  • 9d2e2ca11d SEC-1232: Add config dependency to maven build for aspectj sample. Luke Taylor 2010-03-31 19:58:59 +01:00
  • 12a6ae2ffa SEC-1232: Add config dependency to maven build for aspectj sample. Luke Taylor 2010-03-31 19:58:59 +01:00
  • a5a95a8ebc Upgrade jython and disable cachedir. Luke Taylor 2010-03-31 19:11:00 +01:00
  • a3ef8255d8 SEC-1232: GlobalMethodSecurityBeanDefinitionParser support for mode='aspectj' Luke Taylor 2010-03-31 16:55:02 +01:00
  • 6354c7e052 SEC-1232: GlobalMethodSecurityBeanDefinitionParser support for mode='aspectj' Luke Taylor 2010-03-31 16:55:02 +01:00
  • 42cdaa0ce2 Latest gradle syntax updates. Luke Taylor 2010-03-28 23:54:41 +01:00
  • 020e0aa49a SEC-1448: Fixed failure to resolve generic method argument names in MethodSecurityEvaluationContext. Luke Taylor 2010-03-27 17:22:03 +00:00
  • d334f6fa09 Latest gradle syntax updates. Luke Taylor 2010-03-28 23:54:41 +01:00
  • eda60b72b1 SEC-1448: Fixed failure to resolve generic method argument names in MethodSecurityEvaluationContext. Luke Taylor 2010-03-27 17:22:03 +00:00
  • 0d198d42ae SEC-1444: Fix JNDI escaping problems in LDAP authentication. Luke Taylor 2010-03-27 15:30:15 +00:00
  • 2b9beffd08 SEC-1444: Fix JNDI escaping problems in LDAP authentication. Luke Taylor 2010-03-27 15:30:15 +00:00
  • 977bc2b164 SEC-1433: Reduce the number of direct dependencies on DataAccessException from spring-tx. Luke Taylor 2010-03-26 18:05:28 +00:00
  • f000aaa7e8 SEC-1440: Implement support for separate entry-point-ref on htt-basic namespace element. Changes ported from master branch. Luke Taylor 2010-03-26 14:00:21 +00:00
  • 634e340d80 Update schema version to 3.0.3 Luke Taylor 2010-03-26 13:00:52 +00:00
  • 57150a6717 SEC-1440: Add entry-point-ref to http-basic element to allow setting a separate AuthenticationEntryPoint for the BasicAuthenticationFilter. Luke Taylor 2010-03-26 12:47:24 +00:00
  • 2a0aae1904 SEC-524: Document addition of "var" attribute in authorization tags. Luke Taylor 2010-03-25 19:48:26 +00:00
  • 4c8e9e2d7e SEC-1450: Replace use of ClassUtils.getMostSpecificMethod() in AbstractFallbackMethodDefinitionSource with AopUtils.getMostSpecificMethod() equivalent. Luke Taylor 2010-03-24 20:57:03 +00:00
  • 0849dd93e9 Minor correction to namespace appendix Luke Taylor 2010-03-24 21:02:12 +00:00
  • 472c1fac84 SEC-1450: Replace use of ClassUtils.getMostSpecificMethod() in AbstractFallbackMethodDefinitionSource with AopUtils.getMostSpecificMethod() equivalent. Luke Taylor 2010-03-24 20:57:03 +00:00
  • bf91f2ca67 SEC-524: Added "var" attribute to authorize and accesscontrollist JSP tags. Luke Taylor 2010-03-24 18:35:17 +00:00
  • 2e2625873c SEC-1446: Modified BasicAuthenticationFilter to treat invalid base64 and invalid Basic authentication tokens as a failed authentication (raising a BadCredentialsException, without calling the AuthenticationManager). Luke Taylor 2010-03-23 00:45:06 +00:00
  • e518adbef1 SEC-1443: Modify Jsr250Voter to handle multiple "RolesAllowed" roles. Luke Taylor 2010-03-22 16:26:04 +00:00
  • e60108ca8c SEC-1443: Modify Jsr250Voter to handle multiple "RolesAllowed" roles. Luke Taylor 2010-03-22 16:26:04 +00:00
  • 59b69f6f48 SEC-1434: Remove use of BeanDefinition of type java.lang.String which causes problems in Google App Engine. Luke Taylor 2010-03-16 02:22:36 +00:00
  • b8e50c0933 SEC-1439: Make getters and setters public on HttpRequestResponseHolder. Luke Taylor 2010-03-12 15:53:05 +00:00
  • d5df53f1db SEC-1439: Make getters and setters public on HttpRequestResponseHolder. Luke Taylor 2010-03-12 15:53:05 +00:00
  • 111d49d68a Added build file for itest-context. Luke Taylor 2010-03-12 01:40:27 +00:00
  • 9e049dfef4 SEC-1438: Removed JoinPoint support from AbstractMethodSecurityMetadataSource Luke Taylor 2010-03-11 21:51:19 +00:00
  • 1be44ecd18 SEC-1262: Added extra test for PostFilter with AspectJ interceptor. Luke Taylor 2010-03-11 20:55:06 +00:00
  • 677576ea8b SEC-1429: Fix test. Wasn't setting allowSessionCreation=false on failure handler. Luke Taylor 2010-03-11 02:30:17 +00:00
  • 91153df78d SEC-1262: Added new (replacement) AspectJ interceptor which wraps the JoinPoint in a MethodInvocation adapter to provide compatibility with classes which only support MethodInvocation instances. Luke Taylor 2010-03-09 23:39:07 +00:00
  • 1b0ac9c785 Porting of gradle changes from master. Luke Taylor 2010-03-05 23:20:15 +00:00
  • c09cd3a9cb Remove unused inner class in MethodSecurityMetadataSourceAdvisor Luke Taylor 2010-03-11 01:50:55 +00:00
  • 55de2cfcb1 SEC-1262: Added new (replacement) AspectJ interceptor which wraps the JoinPoint in a MethodInvocation adapter to provide compatibility with classes which only support MethodInvocation instances. Luke Taylor 2010-03-09 23:39:07 +00:00
  • 2b8b8819e4 Added gradle support for aspects project. Luke Taylor 2010-03-09 19:22:50 +00:00
  • 6fcaba2c46 Moved setting of 'provided' scope mapping on pom out of whenConfigured() so that the mapping is in place when the pom dependencies are assembled. Added 'skipTests' option. Luke Taylor 2010-03-07 23:53:33 +00:00
  • f3264ba9ab Addition of commons-logging exclusions and adjustments to pom generation. Luke Taylor 2010-03-07 21:58:25 +00:00
  • 8c9159f273 Added repo for aws-maen 3.0.0 dep Luke Taylor 2010-03-06 01:41:38 +00:00
  • b64a3fa725 Hans Dockter's refactoring of gradle build, plus simplification of docbook plugin. Hans Dockter 2010-03-03 16:40:57 +01:00
  • d66ff32a1d Added taglib dependency to itest-web project. Needed by additional test for SEC-1420. Luke Taylor 2010-03-05 23:20:15 +00:00
  • b7aaa3447c Updated aws-maven to 3.0.0.RELEASE Luke Taylor 2010-03-05 23:10:15 +00:00
  • 4c8b0faa88 Upgrade aws-maven to 3.0.0.RELEASE (mvn 2.2.x compatible) Luke Taylor 2010-03-05 18:03:13 +00:00
  • b38b8e55ac SEC-1432: Convert map keys to lower-case in UserMap.setUsers(). Luke Taylor 2010-03-05 17:55:29 +00:00
  • 5a5b62e2cb SEC-1429: Removed cached authentication from session after successful authentication.(cherry picked from commit 43f0e11106) Luke Taylor 2010-03-05 00:07:35 +00:00
  • 43f0e11106 SEC-1429: Removed cached authentication from session after successful authentication. Luke Taylor 2010-03-05 00:07:35 +00:00
  • 89d8c8cc83 Additional test classes for authentication and logout success/failure handling. Luke Taylor 2010-03-04 23:18:46 +00:00
  • 6ac8588144 Fix to Javadoc for AbstractAuthenticationProcessingFilter.(cherry picked from commit a3263753d9) Luke Taylor 2010-03-04 22:06:04 +00:00
  • a3263753d9 Fix to Javadoc for AbstractAuthenticationProcessingFilter. Luke Taylor 2010-03-04 22:06:04 +00:00
  • 5690f1c581 SEC-1428: Check if response has been committed before redirecting to target URL in AbstractAuthenticationTargetUrlRequestHandler. Luke Taylor 2010-03-04 22:00:37 +00:00
  • 87cf27ab7c SEC-1429: Move logic for saving of AuthenticationException into the SimpleUrlAuthenticationFailurehandler from AbstractAuthenticationProcessingFilter. It will also now use request scope if configured to do a forward instead of a redirect. Luke Taylor 2010-03-04 21:21:07 +00:00
  • 530ab3ae30 SEC-1429: Move logic for saving of AuthenticationException into the SimpleUrlAuthenticationFailurehandler from AbstractAuthenticationProcessingFilter. It will also now use request scope if configured to do a forward instead of a redirect. Luke Taylor 2010-03-04 21:21:07 +00:00
  • 41e06152b3 SEC-1420: JSP for itest of authentication tags with and without escaping. Luke Taylor 2010-03-04 01:44:27 +00:00
  • 4d70f88285 SEC-1420: JSP for itest of authentication tags with and without escaping. Luke Taylor 2010-03-04 01:44:27 +00:00
  • a7e21318bf SEC-1425: Replace use of Java 1.6 String.isEmpty(). Luke Taylor 2010-03-01 13:49:42 +00:00
  • bc6aae132b SEC-1420: Add htmlEscape attribute to authentication JSP tag. Luke Taylor 2010-03-04 00:47:22 +00:00
  • 0551dd89ac SEC-1420: Add htmlEscape attribute to authentication JSP tag. Luke Taylor 2010-03-04 00:47:22 +00:00
  • 43f3568b16 SEC-1407: Removed original URL matching classes and updated Javadoc of new RequestMatcher versions. Luke Taylor 2010-03-03 23:11:49 +00:00
  • 90caf1bb37 Manual formatting. Luke Taylor 2010-03-03 23:08:05 +00:00
  • ae8027fa47 SEC-1425: Replace use of Java 1.6 String.isEmpty(). Luke Taylor 2010-03-01 13:49:42 +00:00
  • e5a875d752 SEC-1407: Correct logger category in MatcherType. Luke Taylor 2010-03-01 02:03:32 +00:00
  • 90a7f1f00e SEC-1383: Namespace support for MethodSecurityMetadataSource. Initial commit. Luke Taylor 2010-01-27 01:49:05 +00:00
  • 93438defff SEC-1407: Use RequestMatcher instances as the FilterInvocationSecurityMetadataSource keys and in the FilterChainMap use by FilterChainProxy. Luke Taylor 2010-03-01 00:59:46 +00:00
  • 962a2d5272 Tone down Apache DS log level in itest-web Luke Taylor 2010-03-01 01:19:42 +00:00
  • d39e93ec23 Add maven pom customization options to build.gradle Luke Taylor 2010-03-01 01:17:57 +00:00
  • b147652193 Make hsqldb a testRuntime/runtime dependency. Luke Taylor 2010-02-27 00:41:16 +00:00
  • cb0f3f677f SEC-1425: Add check for empty cookie in AbstractRememberMeServices. Luke Taylor 2010-02-28 14:00:06 +00:00
  • b46ae6ac62 SEC-1425: Add check for empty cookie in AbstractRememberMeServices. Luke Taylor 2010-02-28 14:00:06 +00:00
  • f0466b6488 SEC-1424: Added support for "stateless" option for create-session attribute, designed for applications which do not use sessions at all. Luke Taylor 2010-02-27 00:22:21 +00:00
  • 317da55cd0 SEC-1423: Cache PointcutExpression instances in ProtectPointcutPostProcessor for more efficient startup. Luke Taylor 2010-02-26 17:21:25 +00:00
  • 9e751e22c8 Refactoring to remove remaining circular dependencies indicated by structure101. Luke Taylor 2010-02-22 01:48:22 +00:00
  • 4d65b35827 Minor gradle 0.9 syntax change. Luke Taylor 2010-02-21 20:42:32 +00:00
  • 6a34807a07 SEC-1423: Cache PointcutExpression instances in ProtectPointcutPostProcessor for more efficient startup. Luke Taylor 2010-02-26 17:21:25 +00:00
  • e2f9be9015 SEC-1307: Modify context saving logic in HttpSessionSecurityContextRepository to check the SecurityContext and its contents (the Authentication) against the respective values when the request first arrived at the SecurityContextPersistenceFilter. As explained in the issue, this allows a definite decision to be made about whether the current thread has modified the context information during the request, indicating that it should be saved. Luke Taylor 2010-02-25 21:51:46 +00:00
  • 9831980bc2 Update versions to 3.0.3.CI-SNAPSHOT. Luke Taylor 2010-02-26 14:55:37 +00:00
  • 5aae545949 SEC-1232: Re-enable aspects module and aspectj sample in maven build. Luke Taylor 2010-02-25 20:09:01 +00:00
  • 4dd10cd266 Refactor overly large doFilter() method in DigestAuthenticationFilter. Luke Taylor 2010-02-22 01:48:53 +00:00
  • 2f1479785e Refactoring to remove remaining circular dependencies indicated by structure101. Luke Taylor 2010-02-22 01:48:22 +00:00
  • f3f84da625 Increase upper bounds of Spring and Spring Security versions in bundlor templates to 3.2.0. Luke Taylor 2010-02-21 23:25:36 +00:00
  • b0bea8356f Minor gradle 0.9 syntax change. Luke Taylor 2010-02-21 20:42:32 +00:00