Commit Graph

  • 3b6d5316cc SEC-1090: Set bg and fg colour in site.css Luke Taylor 2009-04-20 07:19:09 +00:00
  • fbb42b100b SEC-997: Updated spring-aws-maven. Also some misc plugin version upates. Luke Taylor 2009-04-20 07:12:47 +00:00
  • 11393d76fd SEC-1122: Fixed Jaas doc on AuthorityGranter. Luke Taylor 2009-04-20 07:05:56 +00:00
  • c7baeab172 SEC-1117: Moved check for empty password from LdapAuthenticationProvider to BindAuthenticator to allow use with Ntlm. Luke Taylor 2009-04-20 06:08:00 +00:00
  • 350f75f7f3 SEC-1084: Retain Authentication.details when authenticating in LdapAuthenticationProvider. Luke Taylor 2009-04-20 05:02:42 +00:00
  • 2ff089af62 Restructure to standard layout. Luke Taylor 2009-04-20 04:17:59 +00:00
  • 56ec1b4b05 Tidying beforeInvocation method. Luke Taylor 2009-04-20 01:01:34 +00:00
  • c21300d3ad Tidying imports. Luke Taylor 2009-04-19 02:29:16 +00:00
  • 6b3d0eac40 SEC-1111: Fix for "java.io.CharConversionException: Not an ISO 8859-1 character". Use response.getWriter() instead of printing to ServletOutputStream. Luke Taylor 2009-04-18 07:35:34 +00:00
  • 13af4b95a2 Sample package name updates Luke Taylor 2009-04-18 06:04:56 +00:00
  • ace6d225b4 SEC-1131: Correct portlet API version (again). Luke Taylor 2009-04-17 05:26:14 +00:00
  • 446bcb9b1d SEC-1131: Correct portlet API version. Luke Taylor 2009-04-17 04:56:59 +00:00
  • 23c23c6f3f Remove unused import. Luke Taylor 2009-04-16 04:03:18 +00:00
  • 292926518b SEC-1136: Converted base exceptions to extend RuntimeException rather than NestedRuntimeException. Luke Taylor 2009-04-15 10:19:37 +00:00
  • 101203b44d SEC-1132: Updates to samples to reflect ACL refactoring. Luke Taylor 2009-04-15 10:07:23 +00:00
  • d5f5b0860e SEC-1132: Refactoring to remove package cycles in ACL module. Luke Taylor 2009-04-15 10:04:45 +00:00
  • 93bdcccaee SEC-1132: Moved userdetails into core and added core/authority sub-package Luke Taylor 2009-04-15 07:39:21 +00:00
  • 5d0d1bd404 Fixed Javadoc typo. Luke Taylor 2009-04-14 12:56:16 +00:00
  • db9afc36ab Refactored internal context holder strategy implementations to be package private and final and refactored getContext() methods to use a single call to ThreadLocal.get(). Luke Taylor 2009-04-14 11:04:49 +00:00
  • c770998d92 SEC-1132: Move authoritymapping to core as it is actually used in loading authorities for a use, not in making access decisions. Luke Taylor 2009-04-14 04:22:57 +00:00
  • 769041474e SEC-1136: Missed an import. Luke Taylor 2009-04-14 02:35:13 +00:00
  • 550715e73f SEC-1136: Removed SpringSecurityException and last import. Luke Taylor 2009-04-14 01:51:22 +00:00
  • 10673780db OPEN - issue SEC-1136: Removed SpringSecurityException. Introduced new AclException as base class for Acl module. Refactored JAAS authentication to map to AuthenticationExcpetions rather than SpringSecurityException. Modified ExceptionTranslationFilter to look explicitly for AuthenticationException or AccessDeniedException (which it should do since these are the only two it handles). Luke Taylor 2009-04-13 14:56:49 +00:00
  • ca7d055c2b SEC-1132: Created core and authentication packages within core module. Luke Taylor 2009-04-13 13:43:23 +00:00
  • 9efb5a7007 SEC-1132: Moved access-control/authorization specific code to org.sf.security.access package. Created provisioning package for user management classes to remove cyclical deps. Some other moving of classes to remove code tangles. Restructuring of portlet module under org.sf.security.portlet Luke Taylor 2009-04-12 12:23:23 +00:00
  • 7c4d54f356 SEC-1131: Applied patch for portlet upgrade Luke Taylor 2009-04-12 05:52:20 +00:00
  • 365ae3936e Moved MockAuthenticationManager to test package. Luke Taylor 2009-04-12 05:13:18 +00:00
  • 1b43e3661a SEC-1132: Moved switch user event class to web module as it is only used by SwitchUserProcessingFilter. Luke Taylor 2009-04-12 04:16:46 +00:00
  • 32ebd277d4 SEC-1132: Deleted empty packages Luke Taylor 2009-03-27 07:01:42 +00:00
  • f746a20ab4 SEC-1132: package refactoring of non-core modules Luke Taylor 2009-03-27 05:01:03 +00:00
  • bec84f874a SEC-1125: Further refactoring of web packages following creation of web module. Fixing samples. Luke Taylor 2009-03-26 07:18:36 +00:00
  • 2a9a8a41db SEC-1125: Created separate web module spring-security-web Luke Taylor 2009-03-25 06:28:18 +00:00
  • 2c985a1c36 SEC-1126: separated out spring-security-config module containing namespace configuration classes and resources Luke Taylor 2009-03-23 04:23:48 +00:00
  • a45ba138f7 SEC-1121: InMemoryResource.equals() is wrong. Corrected as suggested. Luke Taylor 2009-03-20 04:44:39 +00:00
  • 4aff4b2350 SEC-1123: Renamed ObjectDefinitionSource to SecurityMetadataSourceand performed related refactoring Luke Taylor 2009-03-20 04:32:06 +00:00
  • 9b52e7bf69 SEC-1124: Added extra refactored class. Luke Taylor 2009-03-19 06:34:20 +00:00
  • 4aae5ec42e SEC-1124: Refactored LDAP code into separate module Luke Taylor 2009-03-19 06:30:32 +00:00
  • 69b86fd045 SEC-1124: Create LDAP module. Added maven subproject Luke Taylor 2009-03-19 03:31:02 +00:00
  • a0f3015ac6 SEC-1086: AccessDecisionManager implementations now log debug messages giving the results returned by each voter polled. Luke Taylor 2009-03-19 02:01:24 +00:00
  • d163cd7d18 SEC-1099: Translation of message.properties in Brazilian Portuguese. Added file. Luke Taylor 2009-03-19 01:47:34 +00:00
  • c0638e9c8d SEC-1110: Localization (messages_ko_KR.properties). Added. Luke Taylor 2009-03-19 01:46:05 +00:00
  • 591681c180 Upgrade to Spring M2 and correct expression classes and pom files to match changes Luke Taylor 2009-03-19 01:17:16 +00:00
  • 98593b7c78 SEC-1120: Added Portuguese messages file Luke Taylor 2009-03-19 01:02:32 +00:00
  • b940afe1e2 SEC-1089: Fix ACLs link in appendix and update title of domain object security chpter to include "ACLs" Luke Taylor 2009-03-17 00:26:37 +00:00
  • 744ed17f84 SEC-1073: Correct class name in docbook namespace chapter. Luke Taylor 2009-03-16 10:30:53 +00:00
  • 28af6bb4dc SEC-1079: Corrected context filename Luke Taylor 2009-03-16 10:26:23 +00:00
  • 3d8bb44dd1 SEC-1088: Fix link. Luke Taylor 2009-03-16 10:16:55 +00:00
  • 89f925cdca SEC-1091: Fix svn URL in pom Luke Taylor 2009-03-16 10:11:22 +00:00
  • 766aca885b SEC-1054: Add method "clear" to interface AclCache. As requested. Luke Taylor 2009-03-16 09:31:52 +00:00
  • ccf422af5a SEC-1070: AbstractRetryEntryPoint always uses RetryWithHttpEntryPoint logger. Converted to protected (non-static) and used getClass(). Luke Taylor 2009-03-16 08:32:16 +00:00
  • 9de9f638fe SEC-1083: Removed unnecessary import Luke Taylor 2009-03-16 08:07:18 +00:00
  • 30748e8615 SEC-1083: PersistentTokenBasedRememberMeServices does not clear tokens on logout. Override logout method to remove tokens for user. Luke Taylor 2009-03-16 08:05:02 +00:00
  • b7557d017e Corrected Javadoc typo. Luke Taylor 2009-03-16 07:10:12 +00:00
  • ef3ea65fdb Switching back to 2.5.0-SNAPSHOT after tagging M1 release Luke Taylor 2009-01-03 07:42:19 +00:00
  • 62f1b6c110 Updated pom versions to M1 following aborted mvn release:prepare Luke Taylor 2009-01-03 07:25:36 +00:00
  • fc5f50501e [maven-release-plugin] prepare release 2.5.0.M1 Luke Taylor 2009-01-03 07:08:25 +00:00
  • 4eb4d08825 Added -o to mven:jetty-run in runall.sh to speed up script Luke Taylor 2009-01-03 06:45:41 +00:00
  • d6ee9a9a93 Commented out hessian and burlap remoting beans to avoid missing class exceptions on startup Luke Taylor 2009-01-03 05:51:45 +00:00
  • 12d8e14a61 Reinstated parent for itest module, to prevent problems during mvn:deploy on build server Luke Taylor 2009-01-03 05:45:08 +00:00
  • 0ead104b86 Update CAS server information to latest version Luke Taylor 2009-01-03 05:20:22 +00:00
  • 9ca9b4da8e SEC-1066: Update cas client to 3.1.5 Luke Taylor 2008-12-29 01:34:24 +00:00
  • 65a78ce4a4 SEC-745: updated cas sample filter bean configuration Luke Taylor 2008-12-29 01:33:27 +00:00
  • ddffdf1699 SEC-745: Renamed failureHandler and successHandler to have prefix 'authentication' Luke Taylor 2008-12-28 17:32:25 +00:00
  • 6a0da5fe67 Fixed sandbox build Luke Taylor 2008-12-27 02:00:48 +00:00
  • fc9a1f0242 Remove parent from itest module - force explicit Spring 2.5 dependency Luke Taylor 2008-12-27 00:02:15 +00:00
  • 22964837e9 SEC-1066 Scott Battaglia 2008-12-22 19:37:50 +00:00
  • 4a41416c9b Tidying up and removing compiler warnings. Luke Taylor 2008-12-21 16:36:16 +00:00
  • 6003291a68 Updated to use new Sprig test classes and to remove data dependencies between tests. Luke Taylor 2008-12-21 16:34:26 +00:00
  • f5d2e7a7ce Make error message when multiple UserDetailsServices are found more explicit. Luke Taylor 2008-12-21 13:29:42 +00:00
  • 0d7002e322 SEC-1012: Extra fixes to dependent modules following changes to Acl APIs. Luke Taylor 2008-12-21 02:06:55 +00:00
  • 14c50a9c96 SEC-1012: Java-5-ifying the ACL package. Luke Taylor 2008-12-21 01:41:30 +00:00
  • 9cb361e88a SEC-745: Added LogoutSuccessHandler strategy for use in LogoutFilter. Luke Taylor 2008-12-20 23:25:29 +00:00
  • 66e586ec67 Added Id keyword. Luke Taylor 2008-12-20 15:41:51 +00:00
  • cc5966bc7e Tidying up, removing compiler warnings etc. Luke Taylor 2008-12-20 00:16:49 +00:00
  • 8154161ef5 SEC-1035: Updated build to use Spring 3.0.0.M1 Release Luke Taylor 2008-12-18 02:37:00 +00:00
  • 8f598e9b11 SEC-1052: Add support for the namespace option 'disable-url-rewriting'. Luke Taylor 2008-12-17 01:28:29 +00:00
  • 171456a26c SEC-1018: Changes to allow external reference to SaltSource bean from the namespace. Luke Taylor 2008-12-17 01:11:43 +00:00
  • 00125cddee SEC-1016: Moved the MapBasedDefinitionSource to the top of the list of delegates (before expressions), but changed the code to only add it if there are pointcuts defined, so there should be no unnecessary overhead. Luke Taylor 2008-12-17 00:48:32 +00:00
  • 585e5f393a Added warning suppression for deprecation. Luke Taylor 2008-12-17 00:32:21 +00:00
  • d8b5f770e9 Added warning suppression for deprecation. Luke Taylor 2008-12-17 00:31:17 +00:00
  • e86c76f555 Updated Spring version. Luke Taylor 2008-12-17 00:20:55 +00:00
  • db5f1e69f1 SEC-949: Added the option of specifying -1 as the token-validity-seconds value in order to set the cookie maxAge to expire when the browser closes. Luke Taylor 2008-12-17 00:14:48 +00:00
  • c2e688610c SEC-1011: Introduced methods for extracting the remember-me cookie and for creating the returned token. Luke Taylor 2008-12-16 23:25:44 +00:00
  • 7fa9a959b5 Added webAppRootKey context-param to samples to prevent conflicts when run together in Tomcat. Luke Taylor 2008-12-16 21:13:03 +00:00
  • 998f0b3ea1 SEC-993: Updated retrievePassword method to return null if an Authentication object with null credentials is presented (e.g. with OpenID). Prevents NPE when toString() is called. Luke Taylor 2008-12-16 20:35:18 +00:00
  • d0fcbd9baf Tidying up Javadoc. Luke Taylor 2008-12-16 20:29:53 +00:00
  • a1bd48733a Minor Javadoc correction. Luke Taylor 2008-12-16 20:16:56 +00:00
  • 681f1ee00c Fix duplicate logging. Luke Taylor 2008-12-16 19:07:31 +00:00
  • 74fd5fe8a4 Finish refactoring JdbcDaoIml to remove MappingSqlQuery objects. Updated Javadoc to avoid user confusion. Luke Taylor 2008-12-16 18:55:38 +00:00
  • b24cc17dea SEC-1052: Added "disableUrlRewriting" parameter to HttpSessionSecurityContextRepository. Luke Taylor 2008-12-16 17:35:34 +00:00
  • 7566802a08 SEC-1046 Scott Battaglia 2008-12-16 14:50:04 +00:00
  • 717fdcfec3 SEC-1046 Scott Battaglia 2008-12-16 13:22:21 +00:00
  • bf409b5b25 Improvements to Javadoc. Luke Taylor 2008-12-16 02:06:26 +00:00
  • 55cc98ab54 SEC-1006: Fixed Javadoc. Luke Taylor 2008-12-16 00:06:56 +00:00
  • f54d7ee6bc SEC-535: Added "postOnly" flag to AuthenticationProcessingFilter, defaulting to "true" so that only POST requests are allowed by default. Luke Taylor 2008-12-15 23:58:40 +00:00
  • 224c86a0b3 Tidying. Luke Taylor 2008-12-15 23:51:46 +00:00
  • 898ef36d02 SEC-959: Converted SwitchUserFilter to use new Authentication success and failure strategies from SEC-745 for managing redirects. Luke Taylor 2008-12-15 19:50:53 +00:00
  • c3181d9db0 SEC-1063: Moved the justUseSavedRequestOnGet property to ExceptionTranslationFilter. If set, it will not store the SavedRequest for unless the request is a GET. Luke Taylor 2008-12-15 02:48:32 +00:00
  • c564a879d4 Some tests used for obtaining performance data. Luke Taylor 2008-12-15 01:34:37 +00:00
  • 40ccd3be11 SEC-1058: Further refactoring to remove use of getDefaultTargetUrl(). Subclasses now pass the default value as a constructor argument. Luke Taylor 2008-12-15 01:25:12 +00:00