Commit Graph

  • 239fd05d37 Mark the unused Servlet Container callback methods as final to ensure subclasses do not rely upon them. Ben Alex 2007-12-03 07:33:18 +00:00
  • a53357778f Remove superfluous method. Ben Alex 2007-12-03 07:32:23 +00:00
  • cb765bc34b SEC-615: Automatically focus on login name HTML element on page load. Ben Alex 2007-12-03 06:34:43 +00:00
  • 7aa28ea742 SEC-614: Use DelegatingFilterProxy instead of FilterToBeanProxy. Ben Alex 2007-12-03 06:31:03 +00:00
  • 86fb6f2dea Remove OrderedUtils (was used for old namespace testing). Ben Alex 2007-12-03 05:06:11 +00:00
  • 724b9e23ba Remove OrderedUtils (was used for old namespace testing). Ben Alex 2007-12-03 05:05:30 +00:00
  • 9cf146ecf1 Broaden list of names used and correct URL. Ben Alex 2007-12-03 04:39:17 +00:00
  • 3e48b52cdf Make name consistent with other MVN modules. Ben Alex 2007-12-03 04:17:31 +00:00
  • d57f6c070d Change username in samples and DocBook to "rod". Ben Alex 2007-12-03 04:10:57 +00:00
  • f04f9097b1 Make name consistent with other MVN modules. Ben Alex 2007-12-03 04:10:19 +00:00
  • c079d125aa Make case consistent with other MVN modules. Ben Alex 2007-12-03 04:09:33 +00:00
  • 0e51eb1bd2 Make NTLM appear earlier in reactor order. Ben Alex 2007-12-03 04:08:02 +00:00
  • 1694242855 Make project name consistent with other MVN modules. Ben Alex 2007-12-03 04:07:21 +00:00
  • 56edae4f14 Make DMS Sample work post-Spring Security 2 refactor. Ben Alex 2007-12-03 04:05:51 +00:00
  • b44b748452 Make DMS Sample work post-Spring Security 2 refactor. Ben Alex 2007-12-03 04:05:33 +00:00
  • 47229be5cb Make samples and tests use username "rod". Ben Alex 2007-12-03 02:56:52 +00:00
  • 3123d24337 SEC-613: Rename tag libraries. Ben Alex 2007-12-03 01:46:11 +00:00
  • c24958d7b8 Spelling correction. Ben Alex 2007-12-03 01:33:19 +00:00
  • 0bb0a0e717 SEC-611: Missed a letter in the link. Ben Alex 2007-12-02 03:26:22 +00:00
  • a2bd210dd0 SEC-611: Add details of other authentication solutions. Ben Alex 2007-12-02 03:25:36 +00:00
  • ed6c1cc0a3 Add information on Crowd and JOSSO. Ben Alex 2007-12-02 03:08:07 +00:00
  • 99c5479f9a SEC-584: Require user to explicitly set SessionRegistry, so the implementation can benefit from application context services. Ben Alex 2007-12-02 03:00:26 +00:00
  • 08db4a1358 SEC-610: Reauthenticate even if AnonymousAuthenticationToken is present. Ben Alex 2007-12-02 02:15:43 +00:00
  • c3dc3a3a4f SEC-610: Reauthenticate even if AnonymousAuthenticationToken is present. Ben Alex 2007-12-02 02:15:18 +00:00
  • 859ce607cd Now using mvn eclipse:eclipse instead; do not check these back in. Ben Alex 2007-12-02 00:47:38 +00:00
  • e2db910b06 Moved to /spring-security-core project Ben Alex 2007-12-02 00:20:35 +00:00
  • d6fd9980bd Remove configuration from sandbox; this support exists in 2.0 trunk. Ben Alex 2007-12-01 23:52:52 +00:00
  • 435959a850 Remove .classpath and .project; users should use mvn eclipse:eclipse in the future and not check files of this name in again. Ben Alex 2007-12-01 22:22:49 +00:00
  • 38284a1117 Corrections to product name. Ben Alex 2007-11-30 02:40:59 +00:00
  • 843a20e691 Changed default namespace in config files to "security" for clarity. Luke Taylor 2007-11-29 13:14:15 +00:00
  • 09c588a138 Removed unecessary check in additionalAuthenticationChecks() for null credentials in authentication object. Previous line already throws an exception if null is found. Luke Taylor 2007-11-28 19:20:33 +00:00
  • 88e01624eb SEC-560: Removed local password comparison form PasswordComparisonAuthenticator. Luke Taylor 2007-11-28 18:29:04 +00:00
  • 0e1ae11fca Tidying. Luke Taylor 2007-11-28 18:00:43 +00:00
  • 292320bd33 SEC-607: Changed NtlmUsernamePasswordAuthenticationToken to make authenticated=true the default state when an instance is created. NtlmAwareLdapAuthenticator now rejects tokens with authenticated=false (e.g. if the token has been passed remotely). Luke Taylor 2007-11-24 20:13:29 +00:00
  • 4f3a1739aa Changed Ntlm filter to use SpringSecurityFilter base class. Luke Taylor 2007-11-24 20:08:17 +00:00
  • 31b65dde52 Javadoc typo. Luke Taylor 2007-11-24 19:45:47 +00:00
  • f4ea415844 Corrections/typos. Luke Taylor 2007-11-22 19:08:15 +00:00
  • a9396afcd0 Corrected version of Spring-ldap in ntlm module (again). Luke Taylor 2007-11-20 21:35:48 +00:00
  • a23e7e43d3 Corrected version of Spring-ldap in ntlm module. Luke Taylor 2007-11-20 21:14:08 +00:00
  • 9e2f372bad SEC-607: Deprecated InitialDirContextFactory and replaced it with SpringSecurityContextSource. Luke Taylor 2007-11-20 20:54:48 +00:00
  • 79adaa2d3d Changed forum description. Luke Taylor 2007-11-20 16:50:58 +00:00
  • 831981ac69 Changed forum description. Luke Taylor 2007-11-20 16:50:12 +00:00
  • 6d5773d177 Replaced creation of new list with Collections.EMPTY_LIST reference. Luke Taylor 2007-11-17 23:06:32 +00:00
  • 1196381220 Remove "controls" property as it doesn't really make sense and has never been used. Luke Taylor 2007-11-17 20:55:39 +00:00
  • 91e0a329f9 Upgrade to Spring LDAP 1.2 final. Luke Taylor 2007-11-17 20:53:26 +00:00
  • b1b3f585e4 Moved setter methods out of inner classes area. Luke Taylor 2007-11-13 22:55:01 +00:00
  • c485664ee7 Removed accidental use of autoboxing. Luke Taylor 2007-11-13 22:16:52 +00:00
  • 3e3dac4050 SEC-600: Added extra test assertions on authentication details object after password change. Luke Taylor 2007-11-13 17:17:25 +00:00
  • cb237055ac SEC-600: Added Jdbc implementation of UserDetailsManager Luke Taylor 2007-11-13 17:11:29 +00:00
  • 81067840ef SEC-485: Added calculateLoginLifetime method. Luke Taylor 2007-11-13 01:16:27 +00:00
  • b681952933 SEC-545: Added utility methods for checking if user has a particular role to existing AuthorityUtils class. Class may be renamed at some point as more functionality is added. Luke Taylor 2007-11-11 23:37:32 +00:00
  • 315d4a247f Added method to clear datasource field after use. Luke Taylor 2007-11-11 23:10:21 +00:00
  • 910e63f83c SEC-586: Implemented secure channel support in namespace configuration. Luke Taylor 2007-11-11 22:07:46 +00:00
  • c214f4a9bc Simplified initialization of datasource. Luke Taylor 2007-11-11 22:06:22 +00:00
  • 4f3bbb52f6 Pulled methods and fields up into AbstractFilterInvocationDefinitionSource to make it easier to query the map size etc, regardless of the specific type. Luke Taylor 2007-11-11 19:29:11 +00:00
  • 28a138f8ec Converted to use guard clause to reduce nesting. Luke Taylor 2007-11-11 19:22:51 +00:00
  • 756be6fed3 Removed unnecessary constructor. Luke Taylor 2007-11-11 19:10:47 +00:00
  • 964e6911a7 Added RememberMeServices to list of logout handlers. Luke Taylor 2007-11-11 18:11:18 +00:00
  • 2856a6ba43 Allow configuration of embedded ldap server port through ldap namespace configuration. Changed default port from 3389 to avoid conflict with windows remote desktop (as reported by Ray Krueger in dev list). Luke Taylor 2007-11-11 16:10:30 +00:00
  • 0e7dac6ca5 SEC-565: Refactoring of TokenBasedRememberMeServices. Changed arguments to makeValidSignature so that it could be used from both places where a signature is required and refactored the class to extend AbstractRememberMeServices. The method processAutoLoginCookie now returns a UserDetails, rather than username, as the UserDetails is needed in TokenBasedRememberMeServices. Luke Taylor 2007-11-10 19:20:36 +00:00
  • 1a5ef2dece SEC-588: Completed JdbcTokenRepositoryImpl and added extra update method to PersistentTokenRepository interface (additional files from failed commit). Luke Taylor 2007-11-10 15:56:07 +00:00
  • 7caa1587b3 SEC-588: Completed JdbcTokenRepositoryImpl and added extra update method to PersistentTokenRepository interface. Luke Taylor 2007-11-10 15:42:21 +00:00
  • 0b6070ecec Added link to Ldap BeanDefinitionParser. Luke Taylor 2007-11-08 01:14:01 +00:00
  • 7b981d3e84 SEC-592 Scott Battaglia 2007-11-07 21:55:59 +00:00
  • 87a864619d SEC-592 Scott Battaglia 2007-11-07 21:44:15 +00:00
  • d91cf157fd Further updates to namespace doc. Luke Taylor 2007-11-07 20:15:26 +00:00
  • 981f185575 SEC-592 Scott Battaglia 2007-11-07 18:46:35 +00:00
  • 53253cf8f8 namespace document. Luke Taylor 2007-11-07 18:40:51 +00:00
  • 746f052d42 Fixed URLs. Luke Taylor 2007-11-07 15:39:54 +00:00
  • 0a50cd67ce Tidied up logic for setting token repository in RememberMeBeanDefinitionParser. Plus some tinkering with attributes in rnc file. Luke Taylor 2007-11-07 13:29:15 +00:00
  • a954274037 SEC-455: Added note on including taglib declaration in JSPs. Luke Taylor 2007-11-07 00:46:04 +00:00
  • 8abcbd77d9 SEC-564: Added tags URL to "svn usage" page. Luke Taylor 2007-11-07 00:27:58 +00:00
  • 38a0bf7ca4 SEC-564: Documented checkout of 1.0.x branch and trunk separately. Luke Taylor 2007-11-07 00:24:02 +00:00
  • 9fa32bac7c SEC-578: Set FilterInvocationDefinitionSource field in FilterChainProxy to null after it has been converted to a map of paths->filters. Luke Taylor 2007-11-06 23:58:56 +00:00
  • 9f2bc9a842 SEC-582: Namespace configuration implementation for remember-me support. Luke Taylor 2007-11-06 23:20:25 +00:00
  • b868143fb1 Make sure "start" is called even if working directory is already set. Luke Taylor 2007-11-06 22:18:13 +00:00
  • 7ad8e2acf0 SEC-591: Removed default NullRememberMeServices in RememberMeProcessingFilter Luke Taylor 2007-11-06 21:43:37 +00:00
  • 4c44bd782f SEC-588: Added extra tests to check cookie values. Luke Taylor 2007-11-04 12:07:49 +00:00
  • 55b1f9348d SEC-588: PersistentTokenBasedRememberMeServices implementation. Luke Taylor 2007-11-03 22:11:26 +00:00
  • 8b199d38ed Refactored autoLogin method to reduce nesting of conditionals and loops. Luke Taylor 2007-10-30 21:09:47 +00:00
  • 38210d2039 updated the version number to match other packages John Lewis 2007-10-29 18:30:39 +00:00
  • d7b6ca281a Removed unused "autodetect" method. Luke Taylor 2007-10-27 11:50:38 +00:00
  • 43fc8e2660 Added Id keyword for all java files Luke Taylor 2007-10-27 00:45:30 +00:00
  • d3b165749f SEC-583: Implementation of namespace config for concurrent session support. Luke Taylor 2007-10-27 00:28:24 +00:00
  • 334d55b12e Tidying. Luke Taylor 2007-10-27 00:26:25 +00:00
  • 685d74d81b FilterSecurityInterceptor is now configured through ConfigUtils, rather than by autowiring. Luke Taylor 2007-10-27 00:25:59 +00:00
  • 0185dc5a90 Moved registration of ProviderManager bean to ConfigUtils. Luke Taylor 2007-10-27 00:24:16 +00:00
  • 06ce4b79e9 SEC-584: Remove use of default SessionRegistryImpl. Luke Taylor 2007-10-27 00:23:21 +00:00
  • 0cdac4912a Changed to use a BeanReference when creating default login page to prevent duplication of filter bean. Luke Taylor 2007-10-27 00:20:55 +00:00
  • 3d9ea49d19 SEC-585: Made expiredUrl optional. Luke Taylor 2007-10-26 23:32:40 +00:00
  • 55ef50a4df Added checking of path ordering to FilterChainProxy to detect misplaced universal match ("/**"). Luke Taylor 2007-10-26 13:51:32 +00:00
  • 1bcb62af2e Remove use of autoconfig, as it was really just a conveniece for creating default access and authentication managers. Luke Taylor 2007-10-26 13:05:31 +00:00
  • 700de0d388 Tidying. Luke Taylor 2007-10-25 15:07:15 +00:00
  • 03e285c31d Moved responsability for creating AuthenticationManager into AuthenticationProviderBeanDefinitionParser. Tidied up SecrityNamespaceHandler. Luke Taylor 2007-10-25 14:21:45 +00:00
  • 3927ba9ed0 SEC-578: Removed additional FilterChainMap reference. Luke Taylor 2007-10-25 13:40:51 +00:00
  • 7ef57c67ed SEC-578: Removed FilterChainMap class Luke Taylor 2007-10-25 11:51:51 +00:00
  • fb72fa82de Changed comment to remove reference to FilterChainMap. Luke Taylor 2007-10-22 23:56:01 +00:00
  • acf3966651 SEC-578: Refactored to remove FilterChainMap and use a LinkedHashMap instead to maintain the path ordering. Also made use of Springs ManagedList and ManagedMap to preform resolution of bean names to Filter objects at runtime, replacing the unnecessary bean which was performing this task for the filter lists. Luke Taylor 2007-10-22 23:52:29 +00:00
  • c2db942852 Namespace version of tutorial config. Currently lacks support for remember me and anonymous authentication. Luke Taylor 2007-10-20 23:20:36 +00:00
  • b9cfae5903 Exception for flagging errors in namespace config. Luke Taylor 2007-10-20 23:18:41 +00:00