Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 5546698fef SEC-1253: Decouple spring-security-config module from spring-security-web. Added ClassUtils.isPresent() check for FilterChainProxy before attempting to register web-related parsers and decorators. Added use of namespace to dms sample for testing. Luke Taylor 2009-11-17 23:39:42 +00:00
  • 4d8956a227 SEC-1288: Changed claimedIdentityFieldName in OpenIDAuthenticationFilter to "openid_identifier", as recommended by the 2.0 spec. Luke Taylor 2009-11-17 22:05:38 +00:00
  • 693d2bce03 SEC-1286: Fixed toString() output. Luke Taylor 2009-11-17 21:44:52 +00:00
  • 66b1b1957c SEC-1298: Deleted custom-filter BeanDefinitionDecorator Luke Taylor 2009-11-17 21:36:11 +00:00
  • 9b49dce8b5 SEC-1297: Added bundlor support to taglibs jar Luke Taylor 2009-11-17 17:58:51 +00:00
  • 3444b31615 SEC-1291: Add logout namespace support for custom success handler. Added attribute "success-handler-ref" to <logout> element in namespace. Luke Taylor 2009-11-17 17:29:43 +00:00
  • f0a5572188 SEC-1228 Scott Battaglia 2009-11-17 16:26:53 +00:00
  • 9eae7b899c SEC-1284: Added proxy-target-class attribute to method security namespace Luke Taylor 2009-11-17 16:19:05 +00:00
  • d84542cf88 SEC-1285: minor vulnerability in BasicProcessingFilter. Changed logging of Basic authentication information. Luke Taylor 2009-11-17 15:29:07 +00:00
  • afdd80235c SEC-1272: <authentication-manager> does not register default event handler DefaultAuthenticationEventPublisher. Fixed Spring RC1 - RC2 regression problem with test (addApplicationListener() behaviour has changed). Luke Taylor 2009-11-17 14:34:43 +00:00
  • b39db5b711 Removed jaxen from template.mf Luke Taylor 2009-11-17 14:25:20 +00:00
  • c922021d28 SEC-1287: Regression with fix SEC-1022 - cannot register custom permissions w/BasicLookupStrategy. Added setter method for PermissionFactory field. Luke Taylor 2009-11-17 13:13:54 +00:00
  • d4d5012035 SEC-1272: <authentication-manager> does not register default event handler DefaultAuthenticationEventPublisher. Update AuthenticationManagerBeanDefinitionParser to register a DefaultAuthenticationeventPublisher and set it on the registered ProviderManager. Luke Taylor 2009-11-17 12:55:53 +00:00
  • 1898b4df52 Updated scope of commons collections to 'test' Luke Taylor 2009-11-17 00:00:59 +00:00
  • ea8d5a8897 Update spring version to RC2 Luke Taylor 2009-11-17 00:00:28 +00:00
  • fdf46b99eb Corrected sample code for request-header authentication. Luke Taylor 2009-11-14 15:20:19 +00:00
  • 9d85168a10 Fix apache-ds shard-ldap version in template.mf (should be 0.9.15) Luke Taylor 2009-11-04 18:18:46 +00:00
  • a2468c523a SEC-1283: AuthenticationConfigBuilder.createAnonymousFilter uses httpElt instead of anonymousElt. Corrected element name. Luke Taylor 2009-11-04 17:39:26 +00:00
  • 617e517e5e SEC-1280: NullPointerException in PersistentTokenBasedRememberMeServices when logging out twice. Added check for null authentication in logout method. Luke Taylor 2009-11-04 17:20:13 +00:00
  • 197737a2b4 SEC-1281: make sure correct 'key' value is used for RememberMeAuthenticationProvider when external RememberMeServices is used Luke Taylor 2009-11-04 14:55:58 +00:00
  • 248e826342 SEC-1282: Clarified javadoc Luke Taylor 2009-11-03 16:31:55 +00:00
  • 0b1d0d11d7 Update bundlor to 1.0.0.M6 Luke Taylor 2009-11-03 15:33:18 +00:00
  • 8f5c414b00 Improve cleanup in sample script Luke Taylor 2009-10-17 13:00:24 +00:00
  • ce8ac8a5e6 Corrected Spring Version Luke Taylor 2009-10-17 12:49:18 +00:00
  • f02f5a1891 Updated mockito to 1.8.0 Luke Taylor 2009-10-16 15:17:34 +00:00
  • e94c7739d2 Remove dependency on MockAuthenticationManager Luke Taylor 2009-10-14 22:14:01 +00:00
  • 930c1b6b53 Coverted to Junit 4 test. Luke Taylor 2009-10-14 21:48:30 +00:00
  • 11e476c486 Added issue numbers in comment. Luke Taylor 2009-10-14 14:23:34 +00:00
  • d4d45e1311 Make getHeader() methods check case-insensitive matching on header name. Luke Taylor 2009-10-14 14:12:27 +00:00
  • 7282eed197 Import cleaning. Luke Taylor 2009-10-14 00:30:55 +00:00
  • 799b96520b SEC-1269: Combining <form-login> and <open-id> fails to find entry point. Fixed entry point choice conditions when using openID and/or form-login Luke Taylor 2009-10-14 00:30:28 +00:00
  • 12d825e557 Removed src-readme.txt (out of date) Luke Taylor 2009-10-11 22:12:44 +00:00
  • 3f963ef8ca Restore versions and svn URLs in trunk (release plugin fail) Luke Taylor 2009-10-11 21:59:38 +00:00
  • af563e826c [maven-release-plugin] prepare release spring-security-3.0.0.RC1 Luke Taylor 2009-10-11 21:43:42 +00:00
  • 5f3ff97ce0 Disable aspectj sample Luke Taylor 2009-10-11 21:39:14 +00:00
  • 16de9920a0 Disable aspects module for release Luke Taylor 2009-10-11 21:24:47 +00:00
  • d0c3b5717b Updated version to RC1 Luke Taylor 2009-10-11 20:56:12 +00:00
  • 768264d717 Enabled bundlor in OpenID and CAS Luke Taylor 2009-10-11 20:17:51 +00:00
  • 4dc231b3bc Enabled bundlor in OpenID and CAS Luke Taylor 2009-10-11 20:17:18 +00:00
  • 7fd03409fc Updating dependency versions to match spring RC1 ones Luke Taylor 2009-10-11 19:58:52 +00:00
  • 73df14c912 Allow any ordering of authentication-provider elements within authentication-manager Luke Taylor 2009-10-11 19:58:04 +00:00
  • 5d3aa1a144 Formatting Luke Taylor 2009-10-11 19:41:13 +00:00
  • 021f650f3d Tidying up ldap pom Luke Taylor 2009-10-11 15:28:00 +00:00
  • 735ecac215 SEC-1255: Forot dispathcer-servlet context Luke Taylor 2009-10-11 15:27:09 +00:00
  • bf7d691c45 Update and fix tests Luke Taylor 2009-10-11 15:24:42 +00:00
  • c9e2121504 SEC-1255: Replace file with controller to avoid windows filename problems Luke Taylor 2009-10-11 15:24:17 +00:00
  • 881632cc08 SEC-1250: Removed duplicate property. Luke Taylor 2009-10-11 15:20:24 +00:00
  • cf5e713812 Fixes to samples and improved test workout script Luke Taylor 2009-10-10 23:50:33 +00:00
  • 0615b94f55 Converted expression test to use static method. Luke Taylor 2009-10-09 23:42:23 +00:00
  • ed2ddf9323 SEC-1263: Add FactoryBean for namespace AuthenticationManager. <http> now uses AuthenticationManagerFactoryBean. Method security already uses a delegate object to lookup the AuthenticationManager. This now uses the same error message if the bean isn't found, rather than allowing the BeanFactory NoSuchBeanDefinitionException to be thrown directly. Luke Taylor 2009-10-09 14:41:34 +00:00
  • ac5237c127 SEC:1263: Added FactoryBean for AuthenticationManager Luke Taylor 2009-10-09 12:11:45 +00:00
  • 217cffbdbc Minor doc updates Luke Taylor 2009-10-09 12:06:32 +00:00
  • 0da99171da SEC-1250: RequestHeaderPreAuthenticatedProcessingFilter cannot be use to fail back to another authentication type. Added exceptionIfHeaderMissing property. Luke Taylor 2009-10-08 16:37:53 +00:00
  • e398922f85 Removing elements that are no longer supported from the namespace Luke Taylor 2009-10-08 14:40:52 +00:00
  • 7f658f7a53 Updated faq to reflect changes for SEC-1259 Luke Taylor 2009-10-08 14:16:54 +00:00
  • 73905b9ebd Updated docs to reflect changes for SEC-1259 Luke Taylor 2009-10-08 14:14:40 +00:00
  • 80eb47c6fe SEC-1261: Convert FilterChainOrder to an enum (SecurityFilters). Luke Taylor 2009-10-08 13:18:32 +00:00
  • 908e88b802 Import cleaning. Luke Taylor 2009-10-08 12:27:41 +00:00
  • 523d5eac10 Added info on project jars and downloads to manual Luke Taylor 2009-10-08 00:15:49 +00:00
  • 0e9452c17c SEC-1074: Customized interceptor list for DefaultDirectoryService, including removal of SchemaInterceptor. Luke Taylor 2009-10-07 22:04:18 +00:00
  • cb643f73de Tidying up. Luke Taylor 2009-10-07 21:08:57 +00:00
  • 3f72983a1e SEC-1257: Some additional API changes to use Collection instead of List... Luke Taylor 2009-10-07 21:08:41 +00:00
  • 4dcb9de67a SEC-1257: Some additional API changes to use Collection instead of List... Luke Taylor 2009-10-07 21:08:20 +00:00
  • 9bece3bc9a Ref manual updates and correction Luke Taylor 2009-10-07 19:48:32 +00:00
  • 2b99c6331e Javadoc. Luke Taylor 2009-10-07 19:07:22 +00:00
  • 6aee4f0ee4 Removed commented out method. Luke Taylor 2009-10-07 15:45:32 +00:00
  • 1286741c7c SEC-1259: Improve consistency of authentication filter names. Luke Taylor 2009-10-07 14:43:55 +00:00
  • f213cc5d9e SEC-1257: APIs using List<ConfigAttribute> should use a Collection instead. Converted. Luke Taylor 2009-10-06 19:46:44 +00:00
  • 5d486a51b6 SEC-1256: Added support for expression attributes in filter-security-metadata-source configuration. Luke Taylor 2009-10-06 16:39:56 +00:00
  • caff3ee9ba SEC-1231: Authentication.getAuthorities should be of type Collection<GrantedAuthority> and not List<GrantedAuthority>. Refactored the interface and related classes to match (UserDetails etc). Luke Taylor 2009-10-05 19:28:53 +00:00
  • 07d7c0ddae Renamed form and openID filters to shorten names Luke Taylor 2009-10-05 17:33:34 +00:00
  • 949759c31a Renamed form and openID filters to shorten names Luke Taylor 2009-10-05 17:31:12 +00:00
  • 1042305cfe Renamed web.wrapper to web.servletapi. Added some package.html files. Luke Taylor 2009-10-05 16:59:37 +00:00
  • 673cf300fb SEC-1229: Refactoring to remove package cycles. Luke Taylor 2009-10-05 16:40:32 +00:00
  • acf13c74ca SEC-1229: Refactored authentication.concurrent in core, moving classes into core.session Luke Taylor 2009-10-05 15:51:00 +00:00
  • 2b89ebdfbb SEC-1229: Further doc and mods to namespace config/naming to make it more consistent Luke Taylor 2009-10-03 16:08:51 +00:00
  • dd3b9553a0 SEC-1229: Partial doc update Luke Taylor 2009-10-02 18:48:19 +00:00
  • 073198886d SEC-1255: Modified UrlUtils. Full request URL for redirects uses the requestURI (which is encoded). The URL for path comparsions is built using the servletpath, as before. Luke Taylor 2009-10-02 17:29:43 +00:00
  • df9e2eac9e NOJIRA Scott Battaglia 2009-10-01 16:50:00 +00:00
  • abba569282 Tidying. Luke Taylor 2009-09-30 15:53:46 +00:00
  • 40759ab232 SEC-925: BasicLookupStrategy - support for schema qualifier. Added setters for ACL SQL statements. Luke Taylor 2009-09-30 12:32:22 +00:00
  • c34d719004 SEC-1252: Remove 2.0.x schemas from 3.0. Removed files and updated spring.schemas to remove 2.0.x versions Luke Taylor 2009-09-29 17:56:01 +00:00
  • 2a1430f1ce SEC-1229: Removed legacy concurrency classes Luke Taylor 2009-09-29 16:18:25 +00:00
  • 7247902911 SEC-1229: Updated sample and itest namespace concurrency configs. Luke Taylor 2009-09-29 16:18:01 +00:00
  • ebada9fd12 SEC-1229: Added support for parsing error URL in session-management Luke Taylor 2009-09-29 16:17:05 +00:00
  • 203cc5a8dc SEC-1229: Added error-url to concurrency-control element and changed "exception-if-max-exceeded" to "error-if-max-exceeded" Luke Taylor 2009-09-29 16:16:06 +00:00
  • 1ead8472d1 SEC-1229: Added failure handler to the SessionManagementFilter to deal with concurrent login errors. Luke Taylor 2009-09-29 16:14:31 +00:00
  • bf39a5bb36 Added extra logging. Luke Taylor 2009-09-29 16:13:16 +00:00
  • 7109b7e183 Import cleaning. Luke Taylor 2009-09-29 00:30:29 +00:00
  • aa153681bf SEC-1229: Added session-management element to namespace and refactored existing session-related attributes and concurrency control. Refactored <http> parsing code to split it up into more manageable units. Luke Taylor 2009-09-29 00:29:09 +00:00
  • b8c0bb71f1 Updated to Spring 3 RC1 Luke Taylor 2009-09-29 00:27:39 +00:00
  • 9639340fef SEC-1049: RoleHierarchy in SidRetrievalStrategy. Added optional RoleHierarchy injection to SidRetrievalStrategyImpl Luke Taylor 2009-09-16 19:59:37 +00:00
  • 9374bddceb Added test class for AccessControlListTag. Luke Taylor 2009-09-16 19:20:07 +00:00
  • 9f76db0606 SEC-1022: Remove use of static methods/initializers in Acl Permissions. Added extra constructors to DefaultPermissionFactory to allow injection of custom permissions to the registry. Luke Taylor 2009-09-16 18:42:44 +00:00
  • 24155d4abe SEC-1022: Remove use of static methods/initializers in Acl Permissions. Added setter for PermissionFactory to AclPermissionEvaluator Luke Taylor 2009-09-16 15:32:17 +00:00
  • 80dc0388c7 Fork compiler to attempt to stop build server errors Luke Taylor 2009-09-16 13:50:57 +00:00
  • 937e370fb4 SEC-1022: Minor reformatting. Luke Taylor 2009-09-16 12:51:11 +00:00
  • 3f70d79df5 SEC-1022: Remove use of static methods/initializers in Acl Permissions. Converted PermissionFactory to a strategy which is used to convert integers and names to Permission instances. Luke Taylor 2009-09-16 12:45:53 +00:00
  • 731402e9f5 SEC-525: [PATCH] Add AccessCheckerTag based on URL resource access permissions. Added functionality to "authorize" tag to allow evaluation of whether a particual url is accessible to the user. Uses a WebInvocationPrivilegeEvaluator registered in the application context. Luke Taylor 2009-09-16 00:23:13 +00:00
  • 1c4a809e09 SEC-1245: Add role hierarchy support to expression handlers. Done. Luke Taylor 2009-09-15 17:17:21 +00:00