Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • d78a021fe1 Added basic intro to preauth Luke Taylor 2008-05-10 16:07:39 +00:00
  • e1c17450b3 Updated faqs to add infinite loop and access denied debug message Luke Taylor 2008-05-10 12:31:14 +00:00
  • add2649397 Javadoc typo. Luke Taylor 2008-05-09 18:09:56 +00:00
  • 781d88bd30 OPEN - issue SEC-825: Query string isn't beig stripped from URLs when ant matcher is in use (regression issue) http://jira.springframework.org/browse/SEC-825. Make sure the property is set on DefaultFilterInvocationDefinitionSource when ant paths are in use. Luke Taylor 2008-05-09 18:08:32 +00:00
  • 1030dca353 SEC-786: Added information on the need ofor a UserDetailsService if using auto-config/remember-me Luke Taylor 2008-05-09 15:01:39 +00:00
  • b99f9d343d SEC-624: Added some info on use of role-prefix Luke Taylor 2008-05-09 14:25:42 +00:00
  • c0e829a41d SEC-700: Added info on new remember-me imlementation and namespace config examples Luke Taylor 2008-05-08 15:59:01 +00:00
  • 5a1258a4ca Corrected references to parts and reading order Luke Taylor 2008-05-08 15:54:27 +00:00
  • 883b92e7bd SEC-822: Converted to long arithmetic to prevent integer overflowing with long token validity periods Luke Taylor 2008-05-08 15:07:40 +00:00
  • 301d021bf5 SEC-817: NPE in org.springframework.security.config.FilterChainProxyPostProcessor Reversed order of beanName.equals() call as suggested. Luke Taylor 2008-05-07 13:58:53 +00:00
  • 8ad2d681ab SEC-818: Changed redirect URL validation to ignore potential property placeholders at parsing time and report a warning through the parser context rather than an error. Also validated the URLs in the beans themselves using Asserts, so an exception will occur later when the beans have been created rather than while assembling the bean definitions. Luke Taylor 2008-05-07 13:49:20 +00:00
  • 5cf0c84e2f SEC-814: Added standard bean config to ldap example and updated doc to provide some pointers to DefaultLdapAuthoritiesPopulator Luke Taylor 2008-05-06 14:50:14 +00:00
  • afc757e618 Removed reference to LdapDataAccessException since it isn't actually mentioned except in javadoc Luke Taylor 2008-05-06 14:43:52 +00:00
  • c333070fe3 Javadoc tidying Luke Taylor 2008-05-06 13:59:46 +00:00
  • fca3a2a709 SEC-812: Added missing TextUtils file Luke Taylor 2008-05-05 19:09:09 +00:00
  • fa44c74993 SEC-812: Added entity-escaping of username stored under last username key, to prevent problems if it is rendered in a page without escaping the text. Luke Taylor 2008-05-05 18:37:02 +00:00
  • 06719053f1 Removed commons lang dependency. Luke Taylor 2008-05-05 17:18:47 +00:00
  • e7b6fe09e1 Corrected css for 'poweredBy' Luke Taylor 2008-05-03 16:18:19 +00:00
  • 9961c7f867 Moved to correct build location. Ben Alex 2008-05-02 10:52:57 +00:00
  • 7a2e1e13d3 SEC-811: Provide a mechanism to allocate and rebuild cryptographically strong, randomised tokens. Ben Alex 2008-05-02 10:38:56 +00:00
  • a599ef5398 [maven-release-plugin] prepare for next development iteration Luke Taylor 2008-05-01 20:09:03 +00:00
  • 3e808335a4 [maven-release-plugin] prepare release spring-security-parent-2.0.1 Luke Taylor 2008-05-01 20:07:46 +00:00
  • 054e2f6c38 SEC-624: Start of preauth document Luke Taylor 2008-05-01 19:51:35 +00:00
  • 79ca0d1612 Set correct 'test' scope on core-tests dependency Luke Taylor 2008-05-01 19:47:47 +00:00
  • 18a9965b80 Moved dummy file out of default package for easy exclusion from javadoc Luke Taylor 2008-05-01 19:45:36 +00:00
  • de179c3e46 Fixed javadoc links Luke Taylor 2008-05-01 19:44:34 +00:00
  • fc498954c6 Updated sample context files to point at 2.0.1 schema Luke Taylor 2008-05-01 17:51:48 +00:00
  • 014f21ee85 Deleted attributes sample Luke Taylor 2008-05-01 17:50:47 +00:00
  • 6ecfa0541f SEC-806: Osgi-ified more modules Luke Taylor 2008-05-01 17:11:31 +00:00
  • 4984d4be65 OPEN - issue SEC-757: Add validation of redirect URLs on namespace http://jira.springframework.org/browse/SEC-757. Added validation method to ConfigUtils and calls to it for url attributes. Luke Taylor 2008-05-01 16:39:31 +00:00
  • af3dc22586 added Ruud S. to contributors list Luke Taylor 2008-05-01 16:37:33 +00:00
  • 26d2b03667 Updates to heavyduty sample Luke Taylor 2008-05-01 16:36:16 +00:00
  • e7e256a9d5 SEC-787: Consistently use lowercase in all ACL module SQL statements. Ben Alex 2008-05-01 07:48:10 +00:00
  • 0df9dee9dd SEC-806: Improved OSGi bundle version information support Luke Taylor 2008-04-30 18:02:47 +00:00
  • 81ebd094ff OPEN - issue SEC-808: Switch namespace schema version to 2.0.1 and update spring.schemas http://jira.springframework.org/browse/SEC-808. Replaced 2.0 text with that from the 2.0 release, rather than the website schema. Luke Taylor 2008-04-29 18:59:25 +00:00
  • 473f6a32c6 OPEN - issue SEC-808: Switch namespace schema version to 2.0.1 and update spring.schemas http://jira.springframework.org/browse/SEC-808. Created new 2.0.1 schema files and updated tests to use them. Luke Taylor 2008-04-29 18:53:33 +00:00
  • 8281aeb0da SEC-807: Allow mapping to a standard Ldap UserDetails through the namespace http://jira.springframework.org/browse/SEC-807. Added extra test for Ldap provider parser. Luke Taylor 2008-04-29 18:01:59 +00:00
  • e4b32b8d29 OPEN - issue SEC-807: Allow mapping to a standard Ldap UserDetails through the namespace http://jira.springframework.org/browse/SEC-807. Added support for user-details-class attribute to ldap-authentication-provider and ldap-user-service. Luke Taylor 2008-04-29 16:53:24 +00:00
  • 104716fedb SEC-805: Add extra fields to InetOrgPerson http://jira.springframework.org/browse/SEC-805. Added a substantial number of new fields to the class. Luke Taylor 2008-04-29 14:39:58 +00:00
  • 49bec559a9 SEC-804: Added notes to LDAP section to explain how to customize returned UserDetails Luke Taylor 2008-04-29 10:57:52 +00:00
  • f96fa66a60 Added Michael Mayr to contributors list Luke Taylor 2008-04-29 10:56:47 +00:00
  • ef112f7967 Fixed autoboxing problem. Luke Taylor 2008-04-28 15:26:20 +00:00
  • 341455cde4 SEC-799: Import cleaning following other changes. Luke Taylor 2008-04-28 15:19:25 +00:00
  • 2d692718e0 SEC-799: Add better detection of missing server-ref element for <ldap-user-service> and <ldap-authentication-provider /> http://jira.springframework.org/browse/SEC-799. Updated ContextSourceSettingPostProcessor to set the standard ContextSource as an alias if it is needed by a bean but has not been set (because the user specified their own server id on <ldap-server />). Luke Taylor 2008-04-28 15:01:20 +00:00
  • 270fa92780 Improved Javadoc comment Luke Taylor 2008-04-28 09:20:37 +00:00
  • 0c28845d4e SEC-787: Converted SQL in BasicLookupStrategy to lower case to make it consistent with other classes. Luke Taylor 2008-04-26 13:08:31 +00:00
  • d3a0f05de9 SEC-783: GlobalMethodSecurityBeanDefinitionParser should support AfterInvocationProviders http://jira.springframework.org/browse/SEC-783. Added support for custom-after-invocation-provider Luke Taylor 2008-04-25 12:28:30 +00:00
  • 348d211b8c SEC-797: Minor javadoc correction. Luke Taylor 2008-04-24 23:12:55 +00:00
  • d1e23b3d2c SEC-783: Added custom-after-invocation-provider element to namespace. Luke Taylor 2008-04-24 02:02:23 +00:00
  • 1090072fff SEC-795: Add check for protected login page when using namespace http://jira.springframework.org/browse/SEC-795. I've added checks for the various scenarios which will result in a protected login page and suitable warning messages. Luke Taylor 2008-04-24 01:59:19 +00:00
  • 882509fb2a Renamed context file Luke Taylor 2008-04-24 00:27:37 +00:00
  • 5d51b35cfa SEC-792: Filters should only be added to the default stack if they are labelled using custom-filter. http://jira.springframework.org/browse/SEC-792. Updated FilterChainProxyPostProcessor to raise an exception if two filters have the same order, and also to unwrap wrapped filters once the sorting by order has been performed. Luke Taylor 2008-04-23 23:19:44 +00:00
  • eba18675fc Removed old acegi file from tutorial sample as it's causing confusion with users. Luke Taylor 2008-04-23 21:08:41 +00:00
  • 38774ec94f SEC-792: Filters should only be added to the default stack if they are labelled using custom-filter. http://jira.springframework.org/browse/SEC-792. The filters are now maintained as a list in the context and have to be stored there explicitly on registration. Luke Taylor 2008-04-23 16:06:54 +00:00
  • 80cd7f4acc Removed accidental commit of tutorial context file Luke Taylor 2008-04-23 13:13:56 +00:00
  • c184d2d8c5 Added 'heavyduty' sample to sandbox for testing Luke Taylor 2008-04-23 13:11:26 +00:00
  • 01185475a1 OPEN - issue SEC-793: ldap-authentication-provider element parser ignores hash attribute. http://jira.springframework.org/browse/SEC-793. Added support for hash attribute. password-encoder still takes precendence with a warning if both are present. Luke Taylor 2008-04-23 12:50:09 +00:00
  • 7e63fe7357 SEC-790: DefaultLoginPageGeneratingFilter should be a better HTTP citizen http://jira.springframework.org/browse/SEC-790. Applied submitted patch. Luke Taylor 2008-04-23 00:41:52 +00:00
  • 8ea7487ec3 Removed unused method. Luke Taylor 2008-04-22 23:20:49 +00:00
  • ec81e780b2 Import cleaning. Luke Taylor 2008-04-22 22:27:51 +00:00
  • 599d9fea04 Minor improvements to toString() methods for logging. Luke Taylor 2008-04-22 22:21:20 +00:00
  • a845a69cb7 Updated surefire plugin to 2.4.2 Luke Taylor 2008-04-22 22:01:28 +00:00
  • 0cf745b85f Updated clean plugin to 2.2 Luke Taylor 2008-04-22 21:59:40 +00:00
  • b2e9e82727 Fixed typo in message. Luke Taylor 2008-04-22 21:54:54 +00:00
  • 63decfeb93 SEC-761: HttpSessionContextIntegrationFilter.contextObject should be created in afterPropertiesSet(), not the constructor http://jira.springframework.org/browse/SEC-761. Added call to generateNewContext() in the afterPropertiesSet() method to take account of custom security context classes. Luke Taylor 2008-04-22 21:51:12 +00:00
  • 1ae167434a SEC-756: Add checks for duplicate use of namespace elements such as global-method-security http://jira.springframework.org/browse/SEC-756. Refactored HttpSecurityBDP and added check for duplicate usage of the element. Luke Taylor 2008-04-22 21:25:35 +00:00
  • 083644f2fe SEC-756: Refactored GlobalMethodSecurityDefinitionParser and added check for duplicate registration. Luke Taylor 2008-04-22 18:25:35 +00:00
  • eec62e9760 Removed reference in petclinic tutorial to acegisecurity.org Luke Taylor 2008-04-22 18:17:20 +00:00
  • c5f6cbb8f5 Removed corrupt character in author name which was causing build problems with bamboo. Luke Taylor 2008-04-22 15:10:11 +00:00
  • 1258fa854e SEC-788: x509 authentication does not work properly http://jira.springframework.org/browse/SEC-788. Added check for X509 element when choosing entry point, if nothing else is available. Luke Taylor 2008-04-22 14:53:11 +00:00
  • e12b6afefa SEC-776: Http Session created for Anonymous request http://jira.springframework.org/browse/SEC-776. Added AuthenticationtrustResolver to HttpSCIF to check for anonymous authentication. Luke Taylor 2008-04-22 13:22:38 +00:00
  • 88ea87642a SEC-791: RequestKey.equals throws NPE if method is null http://jira.springframework.org/browse/SEC-791. Fixed handling of equals when one http method is null. Luke Taylor 2008-04-22 12:32:33 +00:00
  • 9eaa1cbbdd OPEN - issue SEC-789: Add support for optional role-prefix attribute to namespace http://jira.springframework.org/browse/SEC-789. Added role-prefix attribute to ldap provider and jdbc/ldap user-service elements. Luke Taylor 2008-04-21 18:29:54 +00:00
  • aba5a22b6c SEC-789: Add support for optional role-prefix attribute to namespace http://jira.springframework.org/browse/SEC-789. Added support for role-prefix to jdbc-user-service element. Luke Taylor 2008-04-21 17:44:32 +00:00
  • 1a4130528a SEC-782: Incorrect UrlMatcher initialization in FilterChainProxy results in wrong lowercase/uppercase matching http://jira.springframework.org/browse/SEC-782. I've updated FilterChainProxy to make sure the same UrlMatcher is used throughout when converting a legacy configuration. Luke Taylor 2008-04-21 16:51:06 +00:00
  • 5bb558bd6a SEC-777: The disabled status cannot be set in <user-service> http://jira.springframework.org/browse/SEC-777. Added the disabled flag to the relax grammar file. Luke Taylor 2008-04-21 15:59:08 +00:00
  • 993fdd7a32 Added better toString() method to OrderedFilterDecorator to make it report the delegate filter information. Luke Taylor 2008-04-21 12:53:54 +00:00
  • 1663142cf1 SEC-784: removed 'optional' tag on dependencies Luke Taylor 2008-04-19 12:40:17 +00:00
  • 469f55ce05 SEC-773: global-method-security fails with JPA http://jira.springframework.org/browse/SEC-773. Added extra constructor to MethodDefinitionSourceAdvisor to allow for lazy initialization of the advice (MethodSecurityInterceptor), and in turn the AuthenticationManager and ay referenced UserDetailsService implementations. Luke Taylor 2008-04-18 13:15:56 +00:00
  • 4d347cfdb5 Updated surefire plugin versions Luke Taylor 2008-04-15 19:59:15 +00:00
  • 2cc3068de7 Minor site css adjustments Luke Taylor 2008-04-15 19:58:53 +00:00
  • 09ccc35119 Updated index file to include release features Luke Taylor 2008-04-15 18:45:09 +00:00
  • 7238097310 OPEN - issue SEC-775: CLONE -impossible to specify "observeOncePerRequest" property in the namespace based configuration. http://jira.springframework.org/browse/SEC-775. Corrected check for value of observe-once-per-request attribute. Should be a check for "false" as it is true by default. Luke Taylor 2008-04-15 16:57:47 +00:00
  • 55fbfc5285 Updated site index page 1.0.x Luke Taylor 2008-04-15 15:53:38 +00:00
  • b75ea4e622 [maven-release-plugin] copy for tag acegi-security-parent-1.0.7 Luke Taylor 2008-04-15 11:38:16 +00:00
  • 31a9fa553d added section on maven repo downloads Luke Taylor 2008-04-14 14:20:11 +00:00
  • 680b2d3b74 Updated version number for reference manual Luke Taylor 2008-04-14 14:09:06 +00:00
  • d2ddbc1ee3 Removed references to packaged docs Luke Taylor 2008-04-14 14:05:42 +00:00
  • 35698edc04 Website URL updates in readme file Luke Taylor 2008-04-14 13:00:57 +00:00
  • b5dc523041 [maven-release-plugin] prepare for next development iteration Ben Alex 2008-04-14 07:06:44 +00:00
  • 0c42670431 [maven-release-plugin] prepare release spring-security-parent-2.0.0 Ben Alex 2008-04-14 07:05:46 +00:00
  • 4d714b33e0 SEC-770: Mark old org.springframework.security.acl module as @deprecated. Ben Alex 2008-04-14 06:50:01 +00:00
  • ce34ef366d SEC-426: Provide better ACL documentation. Ben Alex 2008-04-14 06:15:28 +00:00
  • 9dea82773c Added clear:both to programlisting to stop it overlapping with sidebars Luke Taylor 2008-04-13 23:39:15 +00:00
  • 57b5f38df1 OPEN - issue SEC-769: Remember-Me functionality not available in namespace configuration http://jira.springframework.org/browse/SEC-769. I've added a check in FormLoginBeanDefintionParser to see if RememberMeServices is registered. If so, it will inject the bean into the filter. Also added a check in HttpSecurityBeanDefinitionParserTests that the field has been set. Luke Taylor 2008-04-13 22:11:09 +00:00
  • 8f52c6a79c Corrected name in cas samples pom Luke Taylor 2008-04-13 21:26:43 +00:00
  • 2c85f61091 Tidied root pom Luke Taylor 2008-04-13 21:25:32 +00:00
  • 4ae40150c9 SEC-752: ClassLoading in GlobalMethodSecurityBeanDefinitionParser doesn't work in tooling http://jira.springframework.org/browse/SEC-752. Removed check for JSR-250 class. Luke Taylor 2008-04-13 20:59:39 +00:00
  • 552dc6486a SEC-703: Expose customization of SQL used by <jdbc-user-service> http://jira.springframework.org/browse/SEC-703. Added suggested attributes for sql queries. Luke Taylor 2008-04-13 20:51:40 +00:00
  • d6e5dbbcfd SEC-767: Added override for flushBuffer in response wrapper. Luke Taylor 2008-04-13 20:22:31 +00:00