Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • ecbacddc7c SEC-1146: Add some information on using authority groups Luke Taylor 2009-07-29 16:30:15 +00:00
  • 5d5df0c63d Added extra 'manual' security interceptor config Luke Taylor 2009-07-29 16:08:04 +00:00
  • 68364f06a2 Minor itest updates Luke Taylor 2009-07-29 16:05:47 +00:00
  • 3e6054b69f SEC-1211: Rename SessionFixationProtectionFilter to SessionManagementFilter, since it no longer performs session-fixation protection directly, but just executes the AuthenticatedSessionStrategy. Luke Taylor 2009-07-29 00:52:30 +00:00
  • 5e285b3692 SEC-1211: Set the default AuthenticatedSessionStrategy to a null implementation to preserve existing behaviour. Luke Taylor 2009-07-28 23:57:46 +00:00
  • 609a68b12a SEC-1077: Added DefaultAuthenticatedSessionStrategy test to check that saved request attribute is retained when migrateAttributes is false. Luke Taylor 2009-07-28 23:47:26 +00:00
  • db90122179 SEC-1211: Create strategy for session handling on successful authentication. Added AuthenticatedSessionStrategy interface and default implementation which encapsulates the functionality that was previously in SessionFixationProtectionFilter and AbstractAuthentictationProcessingFilter. Updated the namespace to make use of these. Luke Taylor 2009-07-28 18:00:24 +00:00
  • 4a12b80470 Minor updates to x509 doc and update of remember-me doc (no longer part of auto-config) Luke Taylor 2009-07-27 22:27:48 +00:00
  • fdb7325cbc Javadoc update Luke Taylor 2009-07-24 15:21:59 +00:00
  • 9c27bced5b Corrected typo Luke Taylor 2009-07-23 20:42:04 +00:00
  • 40efe6db57 Minor doc updates Luke Taylor 2009-07-22 17:24:05 +00:00
  • 0a37aed4b9 SEC-1207. Fixed class name in jsp Luke Taylor 2009-07-22 16:37:22 +00:00
  • 719a5e09d8 SEC-1205: Added comment to Javadoc for PasswordComparisonAuthenticator to indicate that it won't work with SSHA passwords Luke Taylor 2009-07-22 16:11:24 +00:00
  • 931cf90dbb SEC-1203: Allow configuration of X509 subject-dn-regex attribute using PropertyPlaceholderConfigurer. Modified parser to use a BeanDefinition for the SubjectPrincipalDnExtractor to allow property subsititution. Luke Taylor 2009-07-21 00:14:57 +00:00
  • 8b115e2a21 SEC-1167: Added setRequestCache to SavedRequestAwareAuthenticationSuccessHandler and updated namespace parsing to set PortResolver on created HttpRequestCache. Luke Taylor 2009-07-20 22:52:48 +00:00
  • f404bb3d74 SEC-1167: Introduce more flexible SavedRequest handling. Separated the concept of SavedRequest from SecurityContextHolderAwareFilter since the two are orthogonal requirements. This no longer takes a wrapper class property or uses reflection. SavedRequest functionality is accessed through the RequestCache interface, with the default implementation being HttpSessionRequestCache. A separate filter RequestCacheAwareFilter is now responsible for reconstituting the SavedRequest if it matches the current request. The functionality for matching and returning the wrapper is contained in the RequestCache method though. Luke Taylor 2009-07-20 22:34:40 +00:00
  • efd1dbf54a Removed public modifier from getSessionController() method on ProviderManager. Luke Taylor 2009-07-17 23:37:45 +00:00
  • 491837ae34 SEC-1197: Moved support from session-controller-ref from authentication-manager to concurrent-session-control element. Plus refactoring of config classes into separate packages. Luke Taylor 2009-07-17 23:36:35 +00:00
  • 83da7be2ea Remove (ticket) cache package from CAS module. Unnecesary and has a circular reference. Luke Taylor 2009-07-17 23:33:55 +00:00
  • 1afa67c954 SEC-1195: Added internal AuthenticationManager for use by beans which are generated by the <http> block. Luke Taylor 2009-07-15 23:09:47 +00:00
  • 6346e31517 SEC-1195: Change <http> parsing behaviour to use an internal AuthenticationManager instance. Implemented "parent" AuthenticationManager in ProviderManager which is delegated to when no authentication is returned by the instances list of authentication providers. Extracted the Authentication success/failure publishing into a separate strategy. Luke Taylor 2009-07-15 01:28:28 +00:00
  • 4361211c21 Change release from milestone to release Luke Taylor 2009-07-14 12:29:51 +00:00
  • 71adc26b0f [maven-release-plugin] prepare release spring-security-2.0.5.RELEASE Luke Taylor 2009-07-14 00:29:53 +00:00
  • eb3288ca34 Removing unnecessary repository declarations Luke Taylor 2009-07-13 23:53:12 +00:00
  • f3f4cfe804 Minor changes to readme Luke Taylor 2009-07-13 23:48:55 +00:00
  • 40fa884860 Updated release plugin version Luke Taylor 2009-07-13 23:47:53 +00:00
  • 3e393c9df6 Tidying test class Luke Taylor 2009-07-13 23:47:33 +00:00
  • 1ca2e6e6fc Tidying. Luke Taylor 2009-07-13 23:12:32 +00:00
  • 5d389d953d RoleVoter test class. Luke Taylor 2009-07-13 23:11:15 +00:00
  • 946f3d1067 Converted to use mockito. Luke Taylor 2009-07-13 23:10:52 +00:00
  • a61aca1abf Update to bundlor M5 Luke Taylor 2009-07-13 13:07:44 +00:00
  • 52d2c904f9 Disable adapters build Luke Taylor 2009-07-09 12:38:59 +00:00
  • 149fd5d8de Add bundlor templates Luke Taylor 2009-07-09 12:26:11 +00:00
  • f3f02d8aed Update sec-2.0.x branch to use bundlor Luke Taylor 2009-07-09 11:51:26 +00:00
  • e63fba3a36 Tidying Luke Taylor 2009-07-08 23:55:42 +00:00
  • d59bdc0cbc Reducing use of global bean Ids as part of SEC-1186 Luke Taylor 2009-07-08 23:54:26 +00:00
  • 7622dfe092 SEC-1194: Added support for services-alias to remember-me Luke Taylor 2009-07-08 23:53:47 +00:00
  • b795d22e51 Upgraded junit and bundlor deps Luke Taylor 2009-07-08 23:46:15 +00:00
  • 3b1cdc3ab4 Tidying. Luke Taylor 2009-07-08 23:27:53 +00:00
  • 8a3930e673 Refactoring of ProviderManager to ensure that any AuthenticationException from the ConcurrentSessionController will prevent further polling of providers. Luke Taylor 2009-07-08 23:20:46 +00:00
  • d02bbbf560 import cleaning. Luke Taylor 2009-07-08 17:17:45 +00:00
  • 43dab4c3b3 SEC-1186: Additional changes to remove custom-filter decorator functionality. Luke Taylor 2009-07-08 16:50:47 +00:00
  • abddcb044a SEC-1186: Remove functionality from CustomFilterBeanDefinitionDecorator and report a warning instead. Luke Taylor 2009-07-08 16:49:30 +00:00
  • b3366a1646 SEC-1186: Tidying up changes to http parsing Luke Taylor 2009-07-08 16:19:26 +00:00
  • df7c734450 SEC-1192: Fix incorrect classname in preauth chapter Luke Taylor 2009-07-08 14:53:40 +00:00
  • 6b53703e37 SEC-1187: Moved pre-authentication status check inside try/catch block and repeated the call after reloading the user during the "cacheWasUsed" logic. Luke Taylor 2009-07-07 17:09:44 +00:00
  • eae670269d Tidying Luke Taylor 2009-07-06 10:33:57 +00:00
  • be12d93f7a Manual updates Luke Taylor 2009-07-06 10:33:14 +00:00
  • 853b4c8753 SEC-1186: Make sure an Element is always supplied when registering the AuthenticationManager. Fixes broken tests. Luke Taylor 2009-06-28 13:36:54 +00:00
  • 980b9b73b8 deprecate property editor Luke Taylor 2009-06-26 12:49:23 +00:00
  • 3e9983c744 SEC-1186: Removed 'order' from openid filter Luke Taylor 2009-06-26 12:48:36 +00:00
  • af0c5f9e7f SEC-1186: Removed 'order' from ntlm and cas filters Luke Taylor 2009-06-26 12:47:36 +00:00
  • d5bf5d7adc SEC-1186: validator for filter chain beans Luke Taylor 2009-06-26 12:47:03 +00:00
  • 8ddd96af2b SEC-1186: intermediate commit of namespace changes for improved tooling support Luke Taylor 2009-06-26 12:44:46 +00:00
  • f6e2e36346 Remove use of property editor internally. Luke Taylor 2009-06-18 23:37:36 +00:00
  • 074fa7d629 SEC-1186: Refactoring to bring all filter registrations into the HttpBDP parse method in preparation for building the filter chain and map at that point, rather than in a post-processor Luke Taylor 2009-06-18 22:33:16 +00:00
  • 44487293f0 Minor faq updates Luke Taylor 2009-06-18 13:35:02 +00:00
  • 408e982b96 Minor JSP classname fixes etc in samples Luke Taylor 2009-06-18 13:28:44 +00:00
  • 67a90b36ee SEC-1178: New manual chapters Luke Taylor 2009-06-16 12:47:26 +00:00
  • c6b9371029 Updated to latest Spring build snapshot. Required minor EL changes to parser class name Luke Taylor 2009-06-15 23:41:20 +00:00
  • e92aac225f Minor javadoc. Luke Taylor 2009-06-15 13:53:56 +00:00
  • db3f08cce4 SEC-1156: Added check for enableAuthorities setting in deleteUser method of JdbcUserDetailsManager. Luke Taylor 2009-06-14 22:31:14 +00:00
  • ab7f06c108 SEC-1156: Modified JdbcUserDetailsManager to only save/update authorities if enableAuthorities is set Luke Taylor 2009-06-14 22:26:44 +00:00
  • 37d3401d0c SEC-1016: Rollback changes. Luke Taylor 2009-06-14 21:10:02 +00:00
  • 05ba2ff3f3 Improved Javadoc Luke Taylor 2009-06-14 20:50:29 +00:00
  • 65d83faef2 SEC-1178: More ref manual updates Luke Taylor 2009-06-12 23:14:20 +00:00
  • ff5b90ef9d Delete unused docbook file Luke Taylor 2009-06-12 10:46:16 +00:00
  • 8d4c09c191 Intermediate ref manual commits Luke Taylor 2009-06-12 10:45:21 +00:00
  • d5aec71fac manual updates Luke Taylor 2009-06-11 16:45:41 +00:00
  • 3f603dfdd8 Removed invalid Javadoc reference to HttpSCIF Luke Taylor 2009-06-10 12:44:06 +00:00
  • 72af366a72 SEC-1172: Added extra constructor which allows setting of the config attribute name. Luke Taylor 2009-06-09 14:21:42 +00:00
  • 4e0d3c644f Committed deletion of previous AuthorityUtilsTests Luke Taylor 2009-06-09 01:50:35 +00:00
  • 4768e4b13c Removed methods relating to current context from AuthorityUtils, making it a simple factory for GrantedAuthority lists etc. Luke Taylor 2009-06-09 01:42:37 +00:00
  • a963be4719 SEC-1095: Register AuthenticationManager from GlobalMethodSecurityBDP. Luke Taylor 2009-06-09 01:38:53 +00:00
  • ab69a0a101 SEC-884: As per discussion in this issue. Added Javadoc to specify that Authentication object passed to decide method must not be null. Luke Taylor 2009-06-09 01:14:55 +00:00
  • d2a8e43a55 SEC-1170: Some updates to UserDetails-related Javadoc. Luke Taylor 2009-06-09 00:57:34 +00:00
  • 39d76d5b5f SEC-1165: Relax the requirement that the ObjectIdentity "type" be a Java class. Modified ObjectIdentity, changing the javaType property to "type" which is now a plain String. Also removes the requirement that the class be present on the classpath when creating the ObjectIdentityImpl instance (e.g. in the case of a permissions administration app which doesn't actually use the domain classes itself). Luke Taylor 2009-06-09 00:17:45 +00:00
  • 0473cfbfc0 SEC-1137: Added support for an external UserDetailsContextMapper using the attribute user-context-mapper-ref. Luke Taylor 2009-06-08 23:35:05 +00:00
  • bfa2806034 Add component definition registration for tooling. Luke Taylor 2009-06-08 22:27:55 +00:00
  • a838cf15be Minor changes Luke Taylor 2009-06-08 19:22:13 +00:00
  • 956d3c79a2 Added encoding for reports Luke Taylor 2009-06-08 19:21:42 +00:00
  • cb6aa81701 Forgot to remove file Luke Taylor 2009-06-08 19:21:22 +00:00
  • 5808da12ff SEC-1094: Simplified WebXml attribute mapping. Removed generic jaxen-based implementation on which it was based in favour of simple DOM model traversal. Updated sample. Luke Taylor 2009-06-08 15:23:41 +00:00
  • aa511bb1f4 SEC-1175: Changed default anonymous username to match that in the schema docs. Luke Taylor 2009-06-08 13:09:07 +00:00
  • 33eef5ec7a Javadoc updates Luke Taylor 2009-06-08 13:04:31 +00:00
  • 66f7e8bcc8 SEC-1168: Added filter-security-metadat-source to namespace. Luke Taylor 2009-06-08 12:59:13 +00:00
  • b50d37fa66 updates to faq and codebase article Luke Taylor 2009-06-07 21:01:49 +00:00
  • 31e2319f8a manual reorganization Luke Taylor 2009-06-07 21:00:50 +00:00
  • 01b8def455 SEC-1145: Added test to confirm that there is no pooling issue in the trunk. There are already checks for the presence of the pooling flag. Luke Taylor 2009-06-03 17:13:33 +00:00
  • 781c99f257 SEC-1145: Updated LDAP code to make sure pooling flag is removed when binding as a specific user (for real this time) Luke Taylor 2009-06-03 16:57:33 +00:00
  • b77f780993 SEC-1145: Updated LDAP code to make sure pooling flag is removed when binding as a specific user Luke Taylor 2009-06-03 16:12:54 +00:00
  • 6a18254ded Updated website link as original node has gone Luke Taylor 2009-06-01 15:34:57 +00:00
  • 43144cd75d Javadoc updates. Luke Taylor 2009-05-31 21:29:36 +00:00
  • 67ad0456a1 Javadoc updates. Luke Taylor 2009-05-31 21:28:50 +00:00
  • 9993a7f6e4 Added newlines to filter list to test use of xsd:token. Luke Taylor 2009-05-31 21:28:16 +00:00
  • bb7ef1fa8b Added HTML tags Luke Taylor 2009-05-31 21:27:23 +00:00
  • 0134a5646d Changed to use expressions in commented-out XML instead of outdated syntax. Luke Taylor 2009-05-31 21:26:52 +00:00
  • 206598172c Javadoc updates. Luke Taylor 2009-05-31 21:26:03 +00:00
  • d1efb4eeed generifying RowMappers in JdbcDaoImpl. Luke Taylor 2009-05-30 13:52:39 +00:00
  • 4a1f5a7623 Fixed name of cas jar Luke Taylor 2009-05-27 14:07:38 +00:00