Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 31375b7212 SEC-1012: Futher generification. Also changed method signature of ObjectDefinitionSource.getAllConfigAtributes to return a single collection Luke Taylor 2008-11-15 09:35:11 +00:00
  • f3b3004085 Removed references to Acegi in contacts sample home page Luke Taylor 2008-11-15 06:28:01 +00:00
  • 78065ba47c Fixed up contacts sample: removed casfailed page, corrected debug.jsp errors and fixed incorrect bean reference in context files. Luke Taylor 2008-11-15 03:38:49 +00:00
  • 5c1f4e60e3 Tidying stuff Luke Taylor 2008-11-14 07:16:49 +00:00
  • 3261fcb174 Tidying stuff Luke Taylor 2008-11-14 07:16:30 +00:00
  • fa630a430d Removed unused test files Luke Taylor 2008-11-14 06:23:34 +00:00
  • 3ce5ea7710 Add missing @Test attributes Luke Taylor 2008-11-14 06:22:43 +00:00
  • 236a4790c2 delete old clover license Luke Taylor 2008-11-14 06:21:51 +00:00
  • df26b2447c SEC-1035: Switch to using spring-el from the Spring 3 build Luke Taylor 2008-11-14 06:21:24 +00:00
  • bd9b199599 Import cleaning. Luke Taylor 2008-11-14 00:28:54 +00:00
  • 648ba1c43a SEC-1034: Fix broken tests. Luke Taylor 2008-11-13 08:57:43 +00:00
  • ae05e74085 Replace use of deprecated Spring methods (addConstructorArg) with non-deprecated versions. Luke Taylor 2008-11-13 08:56:59 +00:00
  • 7a8bd8a673 SEC-1034: Removed FilterInvocationDefinitionSourceEditor. Luke Taylor 2008-11-13 07:46:21 +00:00
  • 464da0f0df SEC-999: Refactored namespace to take an expression handler instead of a permission evaluator, allowig fo greater cusomtomization and for a single handler to be used in both web and method security expressions. Luke Taylor 2008-11-13 07:41:21 +00:00
  • ee13be47b7 Call setAuthenticated() in constructor with authorities to mimic behaviour of UsernamePasswordAuthenticationToken Luke Taylor 2008-11-13 07:29:43 +00:00
  • 3ef34122fc Converted to using JMock. Luke Taylor 2008-11-13 06:50:55 +00:00
  • e18971fdf0 Fix test. BasicProcessingFilter doesn't work with TestingAuthenticationToken. Luke Taylor 2008-11-13 06:30:39 +00:00
  • 3acd515c6c SEC-999: Refactored expression security classes for better separation of concerns and of method vs web authorization expressions. Luke Taylor 2008-11-12 04:07:56 +00:00
  • 790c3e6f79 Updated FAQ to add variant of "redirecting to entry point" debug message when no AnonymousProcessingFilter is in use and an AuthenticationCredentialsNotFoundException is thrown instead of AccessDeniedException. Luke Taylor 2008-11-12 00:44:34 +00:00
  • 4c3867718e SEC-1031: Ported change from trunk. Luke Taylor 2008-11-11 23:36:47 +00:00
  • 0bbab88504 SEC-1031: LdapShaPasswordEncoder.isPasswordValid startOfHash off by one http://jira.springframework.org/browse/SEC-1031. Fixed startOfHash value and added tests to check full length of password is used. Luke Taylor 2008-11-11 23:34:40 +00:00
  • 0ba690fb0e SEC-1015: Removed acl package from core and also related taglib declaration and implementation class (AclTag). Luke Taylor 2008-11-11 09:21:51 +00:00
  • e5b1073501 SEC-1012: Added more generics and warning suppression Luke Taylor 2008-11-11 09:06:50 +00:00
  • be34724207 Matchers for use with JMock expectations Luke Taylor 2008-11-11 08:43:17 +00:00
  • 7731a3df57 Typo. Luke Taylor 2008-11-11 03:41:50 +00:00
  • 62986c700b SEC-1027: Removed bnd plugin and 'bundle' package types from pom.xml files Luke Taylor 2008-11-11 01:09:37 +00:00
  • e11114ce77 SEC-1023: Add hasPermission() support to SecurityExpressionRoot http://jira.springframework.org/browse/SEC-1023. Luke Taylor 2008-11-10 04:27:25 +00:00
  • fa6f57e3dd Fixed TestVoter to match recent API updates Luke Taylor 2008-11-10 04:12:53 +00:00
  • d6cd392a9e Tidying up some stuff in tutorial app Luke Taylor 2008-11-07 06:55:00 +00:00
  • 4bbc015e4c Removed chackstyle file Luke Taylor 2008-11-06 01:12:01 +00:00
  • d6bb6ccbf5 Removed .cvsignore files Luke Taylor 2008-11-06 01:11:08 +00:00
  • da8a97b516 SEC-1024: Updated svn usage page Luke Taylor 2008-11-06 00:27:53 +00:00
  • d33b13e52e SEC-1023: Added support for hasPermission() based on Id and type Luke Taylor 2008-11-05 22:44:46 +00:00
  • d601301de6 SEC-1023: Fix broken test. Luke Taylor 2008-11-05 04:14:29 +00:00
  • 1c3b576d91 SEC-1023: PermissionEvaluator based on the Acl module. Luke Taylor 2008-11-05 03:45:50 +00:00
  • a207acf7cb SEC-999: Fix broken test which was failing due to use of incorrect authentication object. Luke Taylor 2008-11-05 01:09:14 +00:00
  • 56141e9c5f SEC-999: Refactoring out specific dependencies on Spring EL into SecurityExpressionHandler. SEC:1023: Updates to expression root to allow evaluationof permissions. Luke Taylor 2008-11-04 23:30:56 +00:00
  • dabb719456 SEC-1023: Add hasPermission() support to SecurityExpressionRoot http://jira.springframework.org/browse/SEC-1023. PermissionEvaluator interface for use by expressions when evaluating hasPermisson() expressions. Luke Taylor 2008-11-04 22:46:21 +00:00
  • 7ff5602dbc Convert AclImplTests to use JMock mocks. Luke Taylor 2008-11-04 06:43:08 +00:00
  • 04e2fc7daf Tidying. Luke Taylor 2008-11-04 06:36:49 +00:00
  • b42fc7221f Upgraded to jmock 2.5.1 Luke Taylor 2008-11-04 05:37:56 +00:00
  • 514bca669f SEC-999: Introduced custom SecurityExpressionEvaluationContext which is responsible for lazy initialization of parameter values in the context. Also some further conversion of code using GrantedAuthority arrays. Luke Taylor 2008-10-31 11:40:11 +00:00
  • ec44f2bdfe SEC-1012: Refactoring of use of GrantedAuthority[] to generified collections Luke Taylor 2008-10-31 03:53:00 +00:00
  • e891b334e6 SEC-1009: removed additional container adapter specific code Luke Taylor 2008-10-30 05:45:13 +00:00
  • 09cc58d7ac SEC-1009: removed additional container adapter specific code Luke Taylor 2008-10-30 05:44:38 +00:00
  • 3521af4cae Added missing test class. Luke Taylor 2008-10-30 04:32:22 +00:00
  • a7d046357b SEC-1013: Refactored out use of ConfigAttributeDefinition from remaining interfaces Luke Taylor 2008-10-30 04:10:54 +00:00
  • c7abdadc06 SEC-999: Moved caching from AbstractFallbackMethodDefinitionSource to DelegatingMethodDefinitionSource, to allow ExpressionBasedMethodDefinitionSource to take advantage of it. The latter no-longer uses the fallback approach as it requires its own strategy to combine annotations which may be defined at method-on-class, class, method-on-interface or interface level. Luke Taylor 2008-10-28 06:37:04 +00:00
  • f2ec8c978a Moved MethodDefinitionSource to standalone class. Luke Taylor 2008-10-27 21:51:58 +00:00
  • f592357c27 SEC-999,SEC-1013: removed ConfigAtributeDefinition from ObjectDefinitionSource and implementations. Modified el-authz to allow methods which use an annotation without explicitly specifying a PreAuthorize condition Luke Taylor 2008-10-27 09:04:22 +00:00
  • 5174693c64 SEC-999: Expression language based access decision support http://jira.springframework.org/browse/SEC-999. Added missing test class. Luke Taylor 2008-10-24 00:57:52 +00:00
  • 4aa32f7d06 SEC-999: First commit of expression-based authorization implementation Luke Taylor 2008-10-24 00:38:36 +00:00
  • 0dd82cb91a Temporary addition of spring-el to security source tree until binary is available Luke Taylor 2008-10-24 00:35:25 +00:00
  • 91c44a47fd SEC-999: Added spel-annotations to newly created 2.5 schema file. http://jira.springframework.org/browse/SEC-999 Luke Taylor 2008-10-21 05:54:42 +00:00
  • b031124f61 SEC-991: Removed deprecated getAttributes() method from LdapUserDetails interface Luke Taylor 2008-10-17 05:12:11 +00:00
  • b589f78918 SEC-954: Deprecate AbstractMethodDefinitionSource Luke Taylor 2008-10-17 01:06:21 +00:00
  • 7f35f56f40 Added link to db schema appendix when discussing jdbc provider Luke Taylor 2008-10-16 05:58:31 +00:00
  • c947d42146 SEC-1010: Moved TestingAuthenticationProvider and token to main core src tree and updated poms to match Luke Taylor 2008-10-15 06:35:11 +00:00
  • 6c8a82fa13 Updated poms to Spring 2.5 and fixed up sandbox to work with latest build Luke Taylor 2008-10-15 05:52:40 +00:00
  • a62eae4587 Script for running all the sample apps Luke Taylor 2008-10-15 05:49:31 +00:00
  • 6a7bade049 SEC-1009: Removed adapters from main pom Luke Taylor 2008-10-15 00:03:03 +00:00
  • ce93197cda SEC-1009: Removed chapter on adapters Luke Taylor 2008-10-14 23:51:58 +00:00
  • 6183b7ec28 SEC-1009: Deleted container adapters Luke Taylor 2008-10-14 23:49:51 +00:00
  • 6364238aa2 Added id for dependencies faq Luke Taylor 2008-10-04 12:47:34 +00:00
  • 2d827f87ab SEC-1000: Updated itest module to 2.5.0 Luke Taylor 2008-10-03 15:37:05 +00:00
  • e46f47c170 SEC-1001: Delete core tiger module Luke Taylor 2008-10-03 15:27:05 +00:00
  • 7cc0965383 SEC-1001: Move core tiger code into core and adjust pom files Luke Taylor 2008-10-03 15:23:31 +00:00
  • ad4b5c487f Temporarily store webflow test sample in sandbox Luke Taylor 2008-10-02 23:24:58 +00:00
  • 48013b2c93 typo Luke Taylor 2008-10-02 15:26:20 +00:00
  • 03b21494bc Corrected typo Luke Taylor 2008-10-02 14:53:24 +00:00
  • ac54976f9e Added appendices to end of doc Luke Taylor 2008-10-02 14:50:58 +00:00
  • 7594e1ae2f SEC-984 Scott Battaglia 2008-10-01 18:49:52 +00:00
  • 97381fb448 SEC-974: Made getExceptionMappings() protected. Luke Taylor 2008-10-01 16:25:20 +00:00
  • af3c77f56f [SEC-997] Remove unnecessary repository Carlos Sanchez 2008-10-01 00:52:52 +00:00
  • 4542f00b14 SEC-975: Namespace security syntax does not interpret properties http://jira.springframework.org/browse/SEC-975. Changed creation of AccessDeniedHandler to use a BeanDefinition to make sure placeholders work OK. Luke Taylor 2008-09-12 19:06:53 +00:00
  • 5e4634d216 Minor Javadoc improvement. Luke Taylor 2008-09-12 14:57:21 +00:00
  • d291def963 Removed invalid comment. Luke Taylor 2008-09-12 10:18:40 +00:00
  • df59cb9dcd Import cleaning. Luke Taylor 2008-09-11 14:41:00 +00:00
  • ef0389ae79 SEC-976: Removed checks for presence of core-tiger classes. Luke Taylor 2008-09-11 14:37:55 +00:00
  • 5b9bb8ba54 [maven-release-plugin] prepare for next development iteration Luke Taylor 2008-09-05 19:04:22 +00:00
  • 73eed2656d [maven-release-plugin] prepare release spring-security-parent-2.0.4 Luke Taylor 2008-09-05 18:57:43 +00:00
  • f935830cdf Class index generation files Luke Taylor 2008-09-05 14:26:26 +00:00
  • ee04b189b7 Updated schema verisions to 2.0.4 Luke Taylor 2008-09-05 14:23:42 +00:00
  • 8661e17df9 OPEN - issue SEC-960: DN Encoding in LDAPUserDetailsManager.changePassword() causes bind errors http://jira.springframework.org/browse/SEC-960. Replaced call to toUrl() with toString() to prevent URL encoding when setting up principal name for reconnect() in changePassword() method. Luke Taylor 2008-09-05 13:49:38 +00:00
  • c45b4e0989 SEC-951: Overcome serialization error caused by BasicLookupStrategy failing to modify AccessControlEntryImpl.acl field to the replacement AclImpl (previously old references to StubAclParent were retained). Ben Alex 2008-09-05 05:33:41 +00:00
  • 0f8ea229c2 SEC-908: Correct issue with BasePermission static initialization failure. Ben Alex 2008-09-05 04:33:52 +00:00
  • 5102be3a59 SEC-971: getter for cookieName in AbstractRememberMeServices http://jira.springframework.org/browse/SEC-971. Added getCookieName() method. Luke Taylor 2008-09-04 16:05:34 +00:00
  • de379dc2ac Converted literals to classname/interfacename docbook tags for easier indexing Luke Taylor 2008-09-02 01:05:57 +00:00
  • 09c70bb28e SEC-970: Corrected link in docbook html banner Luke Taylor 2008-09-01 16:56:50 +00:00
  • 4e2d6f8b2e SEC-967: TextUtils.java does not escape ampersand character http://jira.springframework.org/browse/SEC-967. Added escaping of '&' character Luke Taylor 2008-08-29 12:01:45 +00:00
  • d781deffe7 OPEN - issue SEC-966: Consider adding escapeXml attribute to security:authentication http://jira.springframework.org/browse/SEC-966. Added escaping of rendered text as default. Luke Taylor 2008-08-26 16:21:29 +00:00
  • a4e4120443 SEC-963: LDAP Group Search Root http://jira.springframework.org/browse/SEC-963. Changed namespace instances of DefaultAuthoritiesPopulator to use the root as the default search location. Luke Taylor 2008-08-26 13:51:01 +00:00
  • 83868a7334 SEC-955: ability to externalize port mapping for secured channel to a property file http://jira.springframework.org/browse/SEC-955. Changed schema to make port-mapping type xsd:string to allow placeholders. Luke Taylor 2008-08-26 13:20:01 +00:00
  • 150f3d97d0 SEC-832: NamingEnumeration.hasMore fails on MS AD with PartialResultException http://jira.springframework.org/browse/SEC-832. Changed searchForSingleEntry method to ignore PartialResultException, similar to Spring LDAP's approach. Luke Taylor 2008-08-26 12:49:37 +00:00
  • 7f28a8bc5d Refactored DefaultLdapAuthoritiesPopulator to remove contextSource field and setter method. Luke Taylor 2008-08-26 12:38:02 +00:00
  • 1cfd886517 SEC-922: Spring Security should respect Spring XML boolean operators for AJ pointcut http://jira.springframework.org/browse/SEC-922. Added method to substitute boolean operators "and, not, or" with aspectj versions "&&, !, ||". Luke Taylor 2008-08-18 23:31:14 +00:00
  • bb457e1d07 SEC-957: logger.debug without guard causing massive performance hit http://jira.springframework.org/browse/SEC-957. Added debug logging guard as requested. Luke Taylor 2008-08-18 18:20:48 +00:00
  • 09cf90258f SEC-758: Both AspectJSecurityInterceptor and AspectJAnnotationSecurityInterceptor not usable with @AspectJ notation http://jira.springframework.org/browse/SEC-758. Added "throws Throwable" to AspectJAnnotationCallback signature. Luke Taylor 2008-08-18 14:47:28 +00:00
  • e15d7a78cd SEC-956: Remove MapBasedMethodDefinitionSource.lookupAttributes http://jira.springframework.org/browse/SEC-956. Done. Luke Taylor 2008-08-18 13:13:18 +00:00
  • 3bf5e406b7 SEC-936: NPE in AbstractFallbackMethodDefinitionSource http://jira.springframework.org/browse/SEC-936. Changed to check if the value of MethodInvocation.getThis() is null to prevent NPE. MapBasedMethodDefinitionSource now ignores calls to findAttributes() with a null target class (all its entries require a class) and the fallback option in AbstractFallbackMethodDefinitionSource is used if the targetClass is null (i.e. Method.getDeclaringClass() will be used as the Class) Luke Taylor 2008-08-16 02:31:36 +00:00