Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 6a68a2531c SEC-904: Moved test module out of sandbox Luke Taylor 2008-08-16 02:24:32 +00:00
  • 959cdd8335 SEC-936: Tests Luke Taylor 2008-08-16 01:58:45 +00:00
  • 8e0a6b9d1a SEC-904: Test module updates Luke Taylor 2008-08-15 23:54:16 +00:00
  • 827d0e1ebf OPEN - issue SEC-865: Re-Challenge NTLM Clients after Authentication Failure http://jira.springframework.org/browse/SEC-865. Changed NTLM filter to re-challenge if retryOnAuthFailure is set and the Smb logon call fails. Updated JCIFS version in pom. Luke Taylor 2008-08-15 22:44:22 +00:00
  • 55d357f42d OPEN - issue SEC-905: <protect-pointcut /> pointcuts do not respect method arguments http://jira.springframework.org/browse/SEC-905. Added extra registration method to MapBasedMethodDefinitionSource which takes a Method instance rather than the method name. Luke Taylor 2008-08-12 17:11:38 +00:00
  • d9ab0758ee SEC-954: Removed test dependency on AbstractMethodDefinitionSource. Luke Taylor 2008-08-12 17:08:55 +00:00
  • 36b35e3b1f CLOSED - issue SEC-953: Query string isn't ignored while url - filterchain pattern matching http://jira.springframework.org/browse/SEC-953. Fixed autoboxing issue. Luke Taylor 2008-08-11 21:15:09 +00:00
  • 39a656eb78 OPEN - issue SEC-953: Query string isn't ignored while url - filterchain pattern matching http://jira.springframework.org/browse/SEC-953. Added stripQueryStringFromUrls parameter to FilterChainProxy which works the same as the one on DefaultFilterInvocationDefinitionSource. This defaults to true when used with ant path matching. Luke Taylor 2008-08-11 19:15:33 +00:00
  • b6dec19e90 SEC-932: Added supplied class and test class. Luke Taylor 2008-08-11 16:36:01 +00:00
  • 69e776f581 Fixed invalid tags in faq.fml Luke Taylor 2008-08-11 16:18:26 +00:00
  • 3ab9fcdcaf Tidying. Luke Taylor 2008-08-11 15:05:16 +00:00
  • 5e3204a5cb Typo Luke Taylor 2008-08-09 11:22:35 +00:00
  • 6409f140e0 SEC-902: Changed Ntlm entry point to send 403 if no failure URL set Luke Taylor 2008-08-08 16:44:13 +00:00
  • 130e70373f SEC-936: Initial test which fails to reproduce the problem Luke Taylor 2008-08-08 16:41:23 +00:00
  • 3a9eb018ba SEC-950: Added test to attempt to reproduce problem. Luke Taylor 2008-08-08 15:41:14 +00:00
  • 8b376ccdeb SEC-910: Finished LDAP ns reference Luke Taylor 2008-08-08 14:59:44 +00:00
  • b3a23b4377 Some minor improvements to schema comments Luke Taylor 2008-08-07 19:15:13 +00:00
  • 7461d0e5f1 Added authentication, method security and start of LDAP ns info Luke Taylor 2008-08-07 19:12:56 +00:00
  • 566f656eba Added ldap-server xml:id Luke Taylor 2008-08-07 19:11:43 +00:00
  • e5d2578aec Added example of @Secured use and some extra explanation Luke Taylor 2008-08-07 19:10:53 +00:00
  • fb3d0b7f25 Fixed link Luke Taylor 2008-08-07 19:09:49 +00:00
  • 2d0b594a97 Fixed missing section closing tag Luke Taylor 2008-08-07 15:21:25 +00:00
  • 42af39a59e Some corrections to explicit FilterChainProxy information Luke Taylor 2008-08-07 13:33:36 +00:00
  • 930be9338b Added info on default target options when using form-login Luke Taylor 2008-08-07 12:41:12 +00:00
  • c1a6ae0832 Added faq on required dependencies Luke Taylor 2008-08-07 12:40:25 +00:00
  • c49bc7ffbb SEC-910: Finishing off http part of namespace appendix Luke Taylor 2008-08-07 10:47:59 +00:00
  • 25814d341d Tidying. Luke Taylor 2008-08-06 16:18:05 +00:00
  • 21eb70c576 Corrected context file name in petclinic tutorial Luke Taylor 2008-08-06 15:40:01 +00:00
  • e951c42c2b Improved javadoc. Some tidying up. Luke Taylor 2008-08-06 15:28:04 +00:00
  • 7258d30e13 Reinstated missing author tag and some minor tidying (de-jalopying). Removed unused logger. Luke Taylor 2008-08-06 13:41:01 +00:00
  • 22a64c1555 Added faq on missing session listener Luke Taylor 2008-08-06 11:03:53 +00:00
  • ff13df03ac SEC-910: More updates to namespace appendix Luke Taylor 2008-08-06 00:21:46 +00:00
  • ecd63cabda Added use of ANY_CHANNEL attribute to channel-security docbook Luke Taylor 2008-08-06 00:20:58 +00:00
  • f31bcbee07 Minor formatting Luke Taylor 2008-08-06 00:19:46 +00:00
  • 3ee3591feb SEC-947: Added check on "before" and "after" values to make sure they don't overflow when decremented/incremented respectfully. Luke Taylor 2008-08-05 23:26:01 +00:00
  • fbeb47d559 SEC-947: Added clarification to docs that FIRST and LAST should be used with position attribute Luke Taylor 2008-08-05 23:24:49 +00:00
  • 1c9c8f0883 SEC-910: Updates to ns appendix Luke Taylor 2008-08-05 12:03:50 +00:00
  • f821b0f0f8 Fix issues with move of TestingAuthenticationToken Luke Taylor 2008-08-04 20:42:48 +00:00
  • 4165e15861 Fix issues with move of TestingAuthenticationToken Luke Taylor 2008-08-04 20:14:20 +00:00
  • aa75b2fa6d Fixes to match TestingAuthenticationToken changes Luke Taylor 2008-08-04 13:50:27 +00:00
  • d6918c88a7 Fixes to match TestingAuthenticationToken changes Luke Taylor 2008-08-04 13:48:44 +00:00
  • b6d088e40d SEC-944: Minor updates to schema appendix Luke Taylor 2008-08-04 13:29:42 +00:00
  • 069a75b8fc minor change to wording Luke Taylor 2008-08-04 13:29:06 +00:00
  • 1af7eed433 SEC-883: RoleHierarchyVoter http://jira.springframework.org/browse/SEC-883. Added RoleHierarchyVoter and deprecated existing approach. Also moved TestingAuthenticationToken to test package structure. Luke Taylor 2008-08-04 13:08:03 +00:00
  • e982e91846 SEC-944: Added db schema reference (and start of namespace appendix) Luke Taylor 2008-08-01 13:57:42 +00:00
  • 54ac7b3e46 SEC-935: Updated schema to include OpenID filter name. Also updated some doc comments and added default schema name (spring-security.xsd) to schemas. Luke Taylor 2008-08-01 12:51:31 +00:00
  • 3049b933d9 Moved XML test snippet to ConfigTestUtils class and removed context files from core-tiger tests in favour of in-memory XML Luke Taylor 2008-07-31 21:35:29 +00:00
  • c8b22d8e36 SEC-923: Fixed broken build due to missing test class. Luke Taylor 2008-07-31 21:22:19 +00:00
  • 1d96283876 Removed commented out line. Luke Taylor 2008-07-31 20:45:25 +00:00
  • ef44bd91f2 SEC-933: Added test for security pointcut applied to a UserDetailsService. Luke Taylor 2008-07-31 20:32:43 +00:00
  • d7926f3557 SEC-943: Forgot to commit tests. Luke Taylor 2008-07-31 20:30:56 +00:00
  • e5d86b13b7 SEC-941: Embedded ldap-server uses hard-coded ldap url for importing ldif files http://jira.springframework.org/browse/SEC-941. Changed LdapUtils.parseRootDnFromUrl to use URI.getRawPath() so the returned root value still contains the escaping. I think this should be Ok. Luke Taylor 2008-07-31 19:50:08 +00:00
  • 3393ea7aaa SEC-923: Realm support for discovering relying parties. A new "realmMapping" property can be configured on the OpenIDAuthenticationProcessingFilter to map the "return_to" url to a realm. If there is no mapping present the "return_to" url will be parsed and the protocol, hostname and port will be used with a trailing "/" Ray Krueger 2008-07-31 19:23:12 +00:00
  • 67e5afbb79 OPEN - issue SEC-881: PreAuthenticatedFilter continues filter chain after unsuccessfulAuthentication(...) http://jira.springframework.org/browse/SEC-881. Updated Javadoc. Luke Taylor 2008-07-31 15:56:37 +00:00
  • 000bb1cbed OPEN - issue SEC-881: PreAuthenticatedFilter continues filter chain after unsuccessfulAuthentication(...) http://jira.springframework.org/browse/SEC-881. Added test class. Luke Taylor 2008-07-31 15:42:04 +00:00
  • 243c4f22d4 OPEN - issue SEC-899: GrantedAuthorityImpl.compareTo should handle null roles http://jira.springframework.org/browse/SEC-899. Changed to return -1 when compared to custom auhority which returns null from getAuthority() Luke Taylor 2008-07-31 13:01:22 +00:00
  • d4c105d8ba OPEN - issue SEC-934: security:intercept-url throws NPE if defined twice with the same url http://jira.springframework.org/browse/SEC-934. Added log warning when the same url is used multiple times. Luke Taylor 2008-07-30 15:03:47 +00:00
  • f6ff958411 Renamed rnc file. Luke Taylor 2008-07-30 11:05:44 +00:00
  • 4bb3eb12c3 SEC-933: global-method-security and aop:aspectj-autoproxy throws NullPointerException in some situations http://jira.springframework.org/browse/SEC-933. Removed the setting of the attributeSource field from the interceptor in MethodDefinitionSourceAdvisor as this was overwriting the version supplied with the constructor with null (causing the NPE). Also implemented lazy initialization of the authentication provider list from the bean factory in a custom NamespaceAuthenticationManager (extends ProviderManager and introspects the BeanFactory when getProviders() is first called). This should prevent the perennial problem of the eager initialization of UserDetailsService and other beans when the interceptor is eagerly initialized by something like aspectj-autoproxy. Luke Taylor 2008-07-30 11:01:23 +00:00
  • f538a36cd3 SEC-939: Changed XML header to include schema locations for clarification. Luke Taylor 2008-07-29 10:40:50 +00:00
  • 6e06789a28 SEC-937: Added CAS logout filter to sample application Luke Taylor 2008-07-28 10:53:55 +00:00
  • 6b45eda37c SEC-877, SEC-553: Added code to sandbox/other Luke Taylor 2008-07-17 17:46:11 +00:00
  • f453264bde SEC-909: custom remember me services doesn't get registered as logout handler http://jira.springframework.org/browse/SEC-909. HttpSecurityBeanDefinitionParser now passes the resolved RememberMeServices bean name to the LogoutBeanDefinitionparser so that it an use it explicitly. Luke Taylor 2008-07-15 18:22:53 +00:00
  • 1ddc033fe5 SEC-903: Wrong attribute mapping when using jdbc-user-service bean http://jira.springframework.org/browse/SEC-903. Corrected property name set by JdbcUserServiceBeanDefinitionParser (was setting authorities query rather than groups one). Luke Taylor 2008-07-15 16:43:57 +00:00
  • e303e8b71a SEC-924: Implement automatic injection of namespace created RememberMeServices into custom AbstractProcessingFilter based beans. http://jira.springframework.org/browse/SEC-924. Delayed setting of NullRememberMeServices in AbstractProcessingFilter until afterPropertiesSet method is called, allowing the null value to be read by the namespace and the confgiured RememberMeServices bean injected. Luke Taylor 2008-07-15 14:52:13 +00:00
  • bf5896600e OPEN - issue SEC-913: SwitchUserProcessingFilter modifies the switchFailureUrl member variable on failure http://jira.springframework.org/browse/SEC-913. Applied patch as suggested (use sendRedirect method for failure URL). Luke Taylor 2008-07-15 13:42:30 +00:00
  • b4c63db680 SEC-921: Improved messages_zh_CN.properties for Chinese http://jira.springframework.org/browse/SEC-921. Added contributed file. Luke Taylor 2008-07-15 11:11:21 +00:00
  • a56c13fb22 SEC-912: Added callback methods to BasicProcessingFilter for successful and unsuccessful authentication. Luke Taylor 2008-07-12 17:40:39 +00:00
  • 697c7c5f48 SEC-918: Added more info on DB schema to javadoc Luke Taylor 2008-07-12 15:21:24 +00:00
  • b32a418175 Added mmore info on 'springSecurityFilter' chain and warning not to use this bean name explicitly Luke Taylor 2008-07-12 15:14:43 +00:00
  • 4cebc67088 Added example config for JDBCDaoImpl and user-service-ref in namespace Luke Taylor 2008-07-11 19:33:15 +00:00
  • fbc7c31b5e SEC-918: Added DDL or user and authorities tables to section on JDBC UserDetailsService Luke Taylor 2008-07-11 19:21:00 +00:00
  • 7dc998196a Added faq on JDK and Spring version requirements Luke Taylor 2008-07-11 14:43:36 +00:00
  • 768219af81 Added exta sub-headings to facilitate searching for particular topics from content page Luke Taylor 2008-07-11 13:27:19 +00:00
  • 7039bfdfbe Minor text spacing correction Luke Taylor 2008-07-11 13:11:35 +00:00
  • d13b32c77f Clarified that paths are relative to the checked out source tree Luke Taylor 2008-07-11 12:19:19 +00:00
  • dce709a669 Minor code formatting in docbookk Luke Taylor 2008-07-11 12:14:00 +00:00
  • d9634bcb39 SEC-920: Update preauth sample to make use of internal authentication manager http://jira.springframework.org/browse/SEC-920. Updated context file to use <custom-authentication-provider>. Luke Taylor 2008-07-11 10:56:57 +00:00
  • 8fe1b4b402 SEC-914: Slight modification of tld description text for readability. Luke Taylor 2008-07-11 08:14:28 +00:00
  • 30f1e5729a SEC-914: Corrected tagllib descriptor documentation for var attribute in authentication tag. Luke Taylor 2008-07-11 07:52:52 +00:00
  • 6d179122d3 SEC-916: Added Spanish messages contribution. Luke Taylor 2008-07-10 15:32:01 +00:00
  • bd4ed794ea SEC-904: Renamed SessionRegistryImplMultithreadedTests Luke Taylor 2008-07-02 19:25:28 +00:00
  • 2cda6242c8 SEC-904: Moved multi-threaded tests into sandbox Luke Taylor 2008-07-02 19:19:21 +00:00
  • 479693ced7 SEC-900: Added extra checks on expiry time Luke Taylor 2008-07-02 18:40:55 +00:00
  • d5df35f739 Update sandbox poms post-release Luke Taylor 2008-07-02 16:27:02 +00:00
  • b99a5dec29 Various mods to heavyduty app Luke Taylor 2008-07-02 16:25:18 +00:00
  • e1fcacbca5 Added general question on other security concerns Luke Taylor 2008-07-01 21:00:30 +00:00
  • bf45ff94e7 SEC-901: Improve docs on custom-filter and avoiding conflicts with namespace filters Luke Taylor 2008-07-01 14:20:18 +00:00
  • c372c2df87 SEC-896: Changed result.toString() to String.valueOf(result) in tag class to prevent NPE when value of property is null Luke Taylor 2008-06-30 21:02:23 +00:00
  • dd5edbcce9 Added labels to faqs Luke Taylor 2008-06-30 20:59:27 +00:00
  • 3a25766da1 Adding sub-headings etc to 'secure objects' section Luke Taylor 2008-06-27 13:12:27 +00:00
  • 6ff0b969d5 Corrected ldap sample config (traditional bean version was wrong) Luke Taylor 2008-06-23 23:43:48 +00:00
  • 775a6c3939 [maven-release-plugin] prepare for next development iteration Luke Taylor 2008-06-23 14:10:35 +00:00
  • 87d50aecce [maven-release-plugin] prepare release spring-security-parent-2.0.3 Luke Taylor 2008-06-23 14:05:36 +00:00
  • 125f5911c0 Heavyduty sample additions to check multiple-parameter values Luke Taylor 2008-06-23 13:27:08 +00:00
  • 57558de3ec Added error page URL to openid login sample Luke Taylor 2008-06-23 13:18:35 +00:00
  • 456e737d31 Corrections to readme Luke Taylor 2008-06-23 13:16:50 +00:00
  • 66008817c4 Changed OSGi version prior to 2.0.3 release Luke Taylor 2008-06-23 13:14:42 +00:00
  • 5ec06778f5 removed optional scope from jaxen dependecy in preauth sample as it breaks war file Luke Taylor 2008-06-23 13:00:03 +00:00
  • 2fa991c44f Some reorganization of itest module Luke Taylor 2008-06-22 21:42:25 +00:00