Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • b531a81176 SEC-1246: Introduce EL-based authorization tag. Added optional access expression to authorize tag. Luke Taylor 2009-09-15 16:34:05 +00:00
  • 283aa1b34b Fixed section boundaries in core-filters doc Luke Taylor 2009-09-15 15:58:05 +00:00
  • e7486fc203 Removed Ordered interface from Http403EntryPoint (unused). Luke Taylor 2009-09-14 16:06:15 +00:00
  • 897960cd70 Add expression string to failed expression evaluation exception message to help clarify the context. Luke Taylor 2009-09-13 22:29:07 +00:00
  • 27be04f5be SEC-1223: Remove ntlm module from pom Luke Taylor 2009-09-13 22:13:24 +00:00
  • d52a806a1d SEC-1233: Removed NTLM support for 3.0 Luke Taylor 2009-09-13 21:55:14 +00:00
  • 40cf50fc98 SEC-1148: Javadoc. Luke Taylor 2009-09-13 21:51:54 +00:00
  • ff78ec00f7 SEC-1226: Additional Javadoc. Luke Taylor 2009-09-13 21:22:17 +00:00
  • 23c8f479b8 SEC-1226: Renamed useRelativeContext to contextRelative to match corresponding flag name in Spring Framework. Luke Taylor 2009-09-13 20:45:38 +00:00
  • 593d2e227a SEC-1226: Renamed useRelativeContext to contextRelative to match corresponding flag name in Spring Framework. Luke Taylor 2009-09-13 20:44:52 +00:00
  • 9c7423599e SEC-1167: Extended SavedRequest interface to allow it to be used by wrapper. Removed null checks in wrapper, as the SavedRequest cannot now be null. Luke Taylor 2009-09-13 16:27:35 +00:00
  • 4064b7b4f6 SEC-1167: Introduce more flexible SavedRequest handling. Introduced interface for SavedRequest. Luke Taylor 2009-09-13 15:03:14 +00:00
  • 71ab83255d SEC-1242: Check that RememberMeServices is an instance of AbstractRememberMeServices before attempting to inject a UserDetailsService. Luke Taylor 2009-09-11 21:10:16 +00:00
  • acd10dd716 SEC-1243: Make determineTargetUrl protected. Luke Taylor 2009-09-11 20:48:41 +00:00
  • fa7404741b SEC-1167: Introduce more flexible SavedRequest handling. Add namespace support for a custom RequestCache through the request-cache element. Luke Taylor 2009-09-09 21:40:12 +00:00
  • aa2999caec SEC-1238: Removed portlet module Luke Taylor 2009-09-09 20:54:10 +00:00
  • 1d00b92d25 Removed portlet sample Luke Taylor 2009-09-09 20:53:19 +00:00
  • aec730ae7e SEC-1238: Disable portlet module Luke Taylor 2009-09-09 20:03:00 +00:00
  • 6851655ea9 SEC-1177: MethodInvocationUtils Returns Null With Valid Method String and Class. Added very simple checking of declared methods on class. Luke Taylor 2009-09-09 19:49:44 +00:00
  • ef2df77889 SEC-1239: Special characters in JAAS config file location. Fix - convert Resource to a File before obtaining the URL from it. The URL.toString() obtained this way is different from the one obtained from Resource.getURL().toString(). Luke Taylor 2009-09-09 17:41:35 +00:00
  • 6640eab9dc SEC-1240: Added {ssha} support to PasswordEncoderParser. Luke Taylor 2009-09-09 12:12:29 +00:00
  • ac4e7bbadb SEC-1241: Make sure saved request is removed after a match. Luke Taylor 2009-09-09 10:11:45 +00:00
  • 9d26527f30 SEC-1237-Re-enabled maven source plugin Luke Taylor 2009-09-06 13:16:43 +00:00
  • f518da9d8b SEC-1236: Using HTTP Method-specific intercept-urls causes patterns with no method to be ignored. Fixed by also checking null key in map if no method-specific attributes are found. Luke Taylor 2009-09-05 15:26:07 +00:00
  • 5bdfd8cd77 Tidying imports etc to remove compiler warnings. Luke Taylor 2009-09-05 14:14:58 +00:00
  • d099d14e9b SEC-1235: Added test to attempt to verify (failed to reproduce). Luke Taylor 2009-09-05 14:14:12 +00:00
  • 8632946f30 SEC-1213: Added "order" atrribute to global-method-security Luke Taylor 2009-09-04 15:54:42 +00:00
  • ed0686cacf Upgraded to AspectJ 1.6.5 and fixes some maven plugin config bugs Mike Wiesner 2009-09-04 15:25:23 +00:00
  • a1751aec2c SEC-1232: Added the aspect library needed for <global-method-security mode="aspectj"/> and a small sample Mike Wiesner 2009-09-04 13:53:55 +00:00
  • 002b788a8c Minor refactoring. Luke Taylor 2009-09-04 12:15:19 +00:00
  • 8081a1a3cc Set Id svn keyword. Luke Taylor 2009-09-03 19:55:18 +00:00
  • 5623c13038 SEC-1047: Added an option to DigestProcessingFilter that the created Authentication object is now marked as "authenticated" Mike Wiesner 2009-09-02 16:12:19 +00:00
  • e14a904306 SEC-1181: fixed recursive import in template.mf Mike Wiesner 2009-09-02 15:31:22 +00:00
  • 660b408e6e SEC-1181: added import to template.mf for the DNS classes Mike Wiesner 2009-09-02 15:20:26 +00:00
  • 58ee9a364e SEC-1181: DNS helper classes, will primarily be use for lookup of Active Directory servers. Mike Wiesner 2009-09-02 14:29:35 +00:00
  • 245fc96137 SEC-1075: Update the embedded LDAP server to use Apache DS 1.5. Updated to use the new 1.5.5 release for the embedded server. Luke Taylor 2009-09-01 23:21:44 +00:00
  • 53baac2fd9 SEC-1228 Scott Battaglia 2009-09-01 19:53:19 +00:00
  • bfd421016e SEC-1228 Scott Battaglia 2009-09-01 19:52:43 +00:00
  • 936326f4ab SEC-1180: Unreachable code inside UrlUtils.buildRequestUrl(...). Removed code block. Luke Taylor 2009-09-01 18:13:28 +00:00
  • f6f5855b52 SEC-1222: Provide a constructor for LdapUserDetailsService that does not require an LdapAuthoritiesPopulator. Done. Luke Taylor 2009-09-01 16:42:11 +00:00
  • 32dbb7e8bd import cleaning Luke Taylor 2009-09-01 16:41:53 +00:00
  • 2039200617 SEC-1217: AbstractRememberMeServices should set 'secure' attribute on remember-me cookie if in secure context. Added "useSecureCookie" configuration property and corresponding use-secure-cookie attribute in namespace. Luke Taylor 2009-09-01 16:08:20 +00:00
  • b2c2b93545 SEC-1190: Added "invalidateSessionOnPrincipalChange" property to AbstactPreAuthenticatedProcessingFilter. If set to true (the default) and a new principal is detected, the existing session will be invalidated before proceeding to authenticate the user. Luke Taylor 2009-09-01 00:18:48 +00:00
  • 3cc47c9c4d SEC-1190: Added "checkForPrincipalChanges" property to AbstactPreAuthenticatedProcessingFilter. Luke Taylor 2009-08-31 23:28:40 +00:00
  • dbcb13ad14 SEC-1229: Redesign Concurrent Session Control implementation. Renamed session strategy interface and introduced SessionAuthenticationException for rejection of session/Authentication combination. Luke Taylor 2009-08-31 22:48:49 +00:00
  • 0d7b990e0a SEC-1184: Moved ACL cache classes and interface out of jdbc package. Luke Taylor 2009-08-31 22:15:37 +00:00
  • 6236858356 SEC-951: Acl Serialization Errors that cohere with parent-child-structure of Acls. Modified tests to reproduce the issue and applied suggested fix (recursive call to set transient fields on parent). Luke Taylor 2009-08-31 19:15:13 +00:00
  • 98ffda85e0 minor doc update Luke Taylor 2009-08-30 14:35:33 +00:00
  • a4ccc4ac21 Make WebSecurityExpressionRoot public to allow reuse. Luke Taylor 2009-08-28 14:02:02 +00:00
  • 471206a29d SEC-1229: Redesign Concurrent Session Control implementation. Added ConcurrentSessionControlAuthenticatedSessionStrategy Luke Taylor 2009-08-27 10:43:01 +00:00
  • ab0d66071a SEC-1226: Introduce RedirectStrategy to replace RedirectUtils. Implemented strategy and applied throughout relevant classes. Luke Taylor 2009-08-27 10:42:11 +00:00
  • 092d7b5c2b Fix CAS filter configuration. Luke Taylor 2009-08-25 20:26:12 +00:00
  • d55c86bea9 SEC-1169: Added relevant attribute docs to namespace appendix Luke Taylor 2009-08-24 12:18:02 +00:00
  • c6fa690d2e Fixed some docbook links Luke Taylor 2009-08-24 11:40:28 +00:00
  • fe33f08b73 SEC-1201: Allow requires-channel attribute to take placeholders. Luke Taylor 2009-08-23 16:42:06 +00:00
  • 00352227ac Tidying. Luke Taylor 2009-08-23 16:03:40 +00:00
  • ea01e9cdf7 SEC-1201: PropertyPlaceholderConfigurer does not work for intercept-url attributes. Ensure that channel processing handles paths which are placeholders. Luke Taylor 2009-08-23 15:57:59 +00:00
  • 9bf8656d66 SEC-1201: PropertyPlaceholderConfigurer does not work for intercept-url attributes. Added use of ManagedMaps and BeanDefinitions to support placeholders in the pattern and access attributes. Luke Taylor 2009-08-22 21:09:34 +00:00
  • 0b5160d155 Javadoc correction. Luke Taylor 2009-08-22 18:02:39 +00:00
  • bb4d818862 SEC-1188: Added "getContexHolderStrategy" method to SecurityContextHolder. Luke Taylor 2009-08-22 13:31:13 +00:00
  • c59f786919 SEC-1212: Added info on password encoding to the namespace appendix Luke Taylor 2009-08-22 13:09:23 +00:00
  • 579644fa95 SEC-1225: Use bean references for authentication providers. Updated AuthenticationManagerBDP to regsiter the providers as top level beans. Luke Taylor 2009-08-22 12:37:14 +00:00
  • 24911eb606 Corrected links in manual, comment in schema file. Luke Taylor 2009-08-22 01:54:31 +00:00
  • 5a8772df5b Reset pom versions post release Luke Taylor 2009-08-21 12:02:49 +00:00
  • 0e5aa7008d [maven-release-plugin] prepare release spring-security-3.0.0.M2 Luke Taylor 2009-08-20 15:51:26 +00:00
  • d6e51b8428 Doc updates describing namespace changes Luke Taylor 2009-08-20 15:47:36 +00:00
  • 984b2835d6 Update CAS sample to use new namespace syntax for authentication providers. Luke Taylor 2009-08-20 14:58:59 +00:00
  • 2443cf6615 Disable itest module prior to release Luke Taylor 2009-08-20 14:47:15 +00:00
  • d47abbc35f SEC-1223: Added break to bindWithDnLoop when non-null use is returned. Luke Taylor 2009-08-19 21:34:05 +00:00
  • 2f9a98c7ce SEC-214: Update keywords. Luke Taylor 2009-08-18 23:39:33 +00:00
  • 8ed9f8a057 Remove wrongly named file Luke Taylor 2009-08-18 23:32:40 +00:00
  • 4df370b100 SEC-214: Add functionality to be able to use LDAP password policy request/response controls. Added PasswordPolicyAwareContextSource, ppolicy control implementations (from Sandbox) and modified BindAuthenticator to check for the presence of the response control, adding the control to the retured DirContextAdapter if appropriate. LdapUserDetailsImpl also contains the data for grace logins remaining and time till password expiry. Added OpenLDAP startup script with test data and integration test which operates against the data (must be run manually). Luke Taylor 2009-08-18 23:09:16 +00:00
  • 48988bde84 SEC-935: Support for OpenID attribute exchange and changes to namespace syntax to allow simple configuration of attributes to request. Luke Taylor 2009-08-13 23:55:25 +00:00
  • 5e4743d8f2 Updated to Spring 3 M4 prior to M2 release Luke Taylor 2009-08-11 17:48:46 +00:00
  • e6631be778 Import cleaning Luke Taylor 2009-08-10 16:07:05 +00:00
  • faa6be2011 SEC-935: Updated to OpenID4Java 0.9.5 release Luke Taylor 2009-08-10 16:06:19 +00:00
  • 6f76fe6fbb Import cleaning Luke Taylor 2009-08-10 16:04:54 +00:00
  • eb059cfd12 SEC-1211: removed SessionUtils (no longer used) Luke Taylor 2009-08-10 14:30:17 +00:00
  • f536c80020 SEC-1202: Removed SpringSecurityFilter and replaced with use of GenericFilterBean from spring-web Luke Taylor 2009-08-10 14:18:18 +00:00
  • b807f7cbdd Added comment to pom to explain spring-web requirement Luke Taylor 2009-08-10 14:05:16 +00:00
  • 972cd0a53c javadoc Luke Taylor 2009-08-10 12:10:04 +00:00
  • d65b1b3581 SEC-1200: Ukranian messages file Luke Taylor 2009-08-10 11:41:24 +00:00
  • 966f3e4101 SEC-1182: Added tst to confirm that this is no longer an issue due to other changes Luke Taylor 2009-08-10 11:32:02 +00:00
  • b4bb489638 SEC-1164: Further registering on bean components for tooling and removal of global ids. Luke Taylor 2009-08-08 21:08:12 +00:00
  • b387d63aba Removing unnecessary global bean names. Luke Taylor 2009-08-08 18:57:51 +00:00
  • a67448c867 SEC-1216: Remove unused code. Luke Taylor 2009-08-08 18:51:15 +00:00
  • 229866e293 SEC-1142: Support for session timeout detection. Added namespace support for invalid-session-url Luke Taylor 2009-08-07 23:57:10 +00:00
  • c12e5b4d0b SEC-1142: Renamed setter argument to match property. Luke Taylor 2009-08-07 22:55:14 +00:00
  • ea73fd0130 SEC-1142: Simplified implementation by removing template method. Luke Taylor 2009-08-07 22:54:07 +00:00
  • 90d76373cc SEC-1142: Support for session timeout detection. Added redirect to invalidSessionUrl in SessionManagementFilter when an invalid session Id is supplied in the request. Luke Taylor 2009-08-07 17:12:12 +00:00
  • 0f6642d3ab SEC-1216: Replacement of custom-after-invocation-provider with after-invocation-provider element. Some changes to help prevent proxying of aop infrastructure classes (use of AopInfrastructureBean marker interface) Luke Taylor 2009-08-04 00:18:07 +00:00
  • eaa0dc4fce typo Luke Taylor 2009-08-03 16:30:26 +00:00
  • e40b9fbc75 SEC-1196: Introduce AuthenticationManagerDelegator is MethodSecurityInterceptor which is configured by global-method-security. Prevents regression of SEC-933 caused by eager init of AuthenitcationManager and dependent beans Luke Taylor 2009-08-03 01:44:49 +00:00
  • 997faabe1e SEC-1196: Removed ConfigUtils (no longer used). Luke Taylor 2009-08-03 00:22:47 +00:00
  • 5953af0f6b SEC-1196: Change use of <authentication-manager> to actually register the global ProviderManager instance. This element now registers the global ProviderManager instance and must contain any authentication-provider elements (or ldap-authentication-provider elements). Luke Taylor 2009-08-03 00:21:11 +00:00
  • c5d6484b54 SEC-1210: RememberMe filter misses UserDetailsService in default <http /> tag config when it is declared in parent app context. Fixed by getting the UserDetailsServiceInjectionPostProcessor to check ancestor bean factories for a UserDetailsService if one isn't found in the current bean factory. Luke Taylor 2009-07-31 19:40:20 +00:00
  • 160aa512a1 Remove "infrastructure" type from authentication provider bean. Luke Taylor 2009-07-31 19:38:16 +00:00
  • 6ae61f95db Minor updates to test XML context implementation. Luke Taylor 2009-07-31 19:37:05 +00:00
  • a4a0aab66f SEC-1164: Add additional component definitions so that Spring IDE picks them up and doesn;t report missing bean definitions Luke Taylor 2009-07-31 00:18:16 +00:00
  • 06e393a171 Update bundlor to M5 Luke Taylor 2009-07-31 00:15:25 +00:00