301626fd6e
SEC-346: Fix. Added suggested change. Also some minor tidying up of comments etc.
Luke Taylor
2007-08-30 20:55:49 +00:00
8cb836c6cf
SEC-441: Fix. Added suggested changes.
Luke Taylor
2007-08-30 19:42:35 +00:00
2e8d16c538
SEC-484: Multithreaded tests for SessionRegistryImpl.
Luke Taylor
2007-08-30 19:26:24 +00:00
ad43d433b4
SEC-484: Fix for NPE concurreny issue. Also reinstated synchronized on registerNewSession (had removed it for testing).
Luke Taylor
2007-08-30 19:04:18 +00:00
aa4ee54f86
Added logging to SessionRegistryImpl.
Luke Taylor
2007-08-30 18:22:40 +00:00
7fcdd4a6ff
More tidying...
Luke Taylor
2007-08-30 11:31:36 +00:00
510cd5050f
Tidied up SessionRegistryImpl and rolled back reformatting of its test class to incorrect width.
Luke Taylor
2007-08-30 11:21:28 +00:00
6c169d9acf
SEC-508: Added CDATA sections to multi-line text values in tutorial and contacts sample context files to prevent eclipse reforatting bug from messing them up.
Luke Taylor
2007-08-29 12:12:45 +00:00
e87956358f
Added missing "'" to login page in tutorial app.
Luke Taylor
2007-08-29 12:06:25 +00:00
5f993e5627
SEC-534: Refactored JaasAuthenticationProvider to use ApplicationPublisherAware rather than ApplicationContextAware.
Luke Taylor
2007-08-29 11:51:02 +00:00
1467527c0a
SEC-538: Deleted maven 1 files.
Luke Taylor
2007-08-29 11:00:28 +00:00
5b7ed79b6a
SEC-539: Reformatted "divider" comments (//~ Methods=== etc). Simplified boolean expression in afterPropertiesSet.
Luke Taylor
2007-08-28 23:19:06 +00:00
d7cef1ba31
SEC-539: Moved SecurityContextHolder.setContext() call into the try {} block to emphasize that it is only set for the duration of chain.doFilter() and immediately cleared afterwards. Changed the debug messages about setting the context, since it has not strictly taken place when they are logged.
Luke Taylor
2007-08-28 23:11:58 +00:00
47c5a6d43f
SEC-539: Renamed extractSecurityContextFromSession to readSecurityContextFromSession to emphasize that it doesn't actually modify anything (the context is still stored in the session).
Luke Taylor
2007-08-28 22:43:13 +00:00
f7a6129657
SEC-539: Removed unnecessary check for a null request object. Removed unnecessary catch/rethrow of IOException and ServletException from try/finally around chain.doFilter.
Luke Taylor
2007-08-28 22:40:56 +00:00
d1be9f9980
SEC-539: Refactored so that SecurityContextHolder.setContext() is called in exactly one place. Moved setting of httpSession = null to point immediately after its last use.
Luke Taylor
2007-08-28 22:38:55 +00:00
3dd0716611
SEC-539: Altered storeSecurityContextInSession to take the SecurityContext as a parameter rather than calling SecurityContextHolder.getContext(). This allows SecurityContextHolder.clearContext() to be called immediately after reading the context in the finally block of doFilter().
Luke Taylor
2007-08-28 21:58:30 +00:00
fa63d8ecfb
SEC-539: Refactored if (httpSession == null) block in storeSecurityContextInSession()
Luke Taylor
2007-08-28 21:25:17 +00:00
ce3eb599ed
SEC-539: Renamed populateSecurityContextFromSession to extractSecurityContextFromSession and removed the side-effect of setting SecurityContextHolder. It now returns the context found in the session (or null) and SecurityContextHolder.setContext() is called in a single place in doFilter().
Luke Taylor
2007-08-28 21:11:48 +00:00
ba88214d1d
SEC-539: Refactored populateSecurityContextFromSession() to reduce nested blocks and clarify logic.
Luke Taylor
2007-08-28 20:16:19 +00:00
27ef2caf45
SEC-539: Removed filterApplied boolean.
Luke Taylor
2007-08-28 19:56:33 +00:00
e8d11f28f2
SEC-539: Extracted storeSecurityContextInSession() method.
Luke Taylor
2007-08-28 19:54:24 +00:00
bcf69cbe3d
SEC-539: Extracted populateSecurityContextFromSession() method.
Luke Taylor
2007-08-28 19:16:37 +00:00
6651a240de
Replaced massive if/else with guard clause to reduce nesting. Moved declaration of filterApplied boolean to where it is actually set. It is only used when removing the attribute from the request at the end of the invocation, so should probably not be needed at all. request.removeAttribute() can be called regardless of whether the attribute is set or not.
Luke Taylor
2007-08-28 18:26:04 +00:00
6fe00b3433
SEC-501: Fix. Convert secure url paths to lower case if convertUrlToLowercaseBeforeComparison is true.
Luke Taylor
2007-08-28 16:53:05 +00:00
036ea034ac
SEC-521: Updated svn URLs to match recent repository restructuring.
Luke Taylor
2007-08-28 15:31:36 +00:00
4ba77fa736
SEC-450: Added group subtree to LDAP test server and extra tests for DefaultLdapAuthoritiesPopulator to make sure searchSubtree parameter works as expected.
Luke Taylor
2007-08-28 15:26:59 +00:00
e189bc685f
SEC-408: Fix. Provide getter for filterProcessesUrl.
Luke Taylor
2007-08-28 11:37:05 +00:00
c8077c5e87
SEC-506: Fix as suggested by reporter. Split the disgest header string ignoring separating commas which occur between quotes.
Luke Taylor
2007-08-28 00:31:30 +00:00
3f123e1478
SEC-518: Fix. "Cache" in EhCache is a class, so change the APIs to use the interface it implements (Ehcache).
Luke Taylor
2007-08-27 23:41:59 +00:00
87d6b8dedd
SEC-412: Fix. Added extra constructor to UsernameNotFoundException allow use of extraInformation property of parent class.
Luke Taylor
2007-08-27 23:22:48 +00:00
f47ccd81a6
SEC-487: Added documentation on use of #NONE# in FilterChainProxy. Also changed doc version to 1.0.5.
Luke Taylor
2007-08-27 23:05:16 +00:00
dda88e3931
SEC-502: Fix. Use a Map instead of HashMap in the API. Also some minor tidying of test class.
Luke Taylor
2007-08-27 17:21:16 +00:00
57f3d268a1
SEC-519: Fix. Changed notNull() assertion for "key" parameter to hasText() to prevent the use of empty keys.
Luke Taylor
2007-08-27 17:17:25 +00:00
1c72b7989e
Fix for SEC-522. Strip query parameters from logout URL before doing comparison with filterProcessesUrl.
Luke Taylor
2007-08-27 17:14:23 +00:00
82599a72ba
Reformatted LogoutFilter.
Luke Taylor
2007-08-27 16:56:33 +00:00
f8689b18b2
SEC-526: Fixed. Support for different case prefixes ({SHA}, {sha} etc).
Luke Taylor
2007-08-27 16:23:14 +00:00
0425d3b638
Rolled back unnecessary changes (whitespace, imports etc) for SEC-398 to make actual change from revision 1858 clearer.
Luke Taylor
2007-08-27 13:29:39 +00:00
ed944fa537
SEC-514: Re-enable contact sample in maven build.
Luke Taylor
2007-08-27 12:35:23 +00:00
6a36ae7a0d
SEC-509: removed clirr plugin declaration from maven build.
Luke Taylor
2007-08-27 11:49:11 +00:00
c682a79e46
SEC-505: Fixed. Minor corrections to docbook source.
Luke Taylor
2007-08-27 11:44:11 +00:00
709dba101c
SEC-498: Correct name of AfterInvocationProviderManager
Luke Taylor
2007-08-27 00:39:14 +00:00
70875a3c70
SEC-523: Made sentence about where GrantedAuthority objects come from a bit clearer.
Luke Taylor
2007-08-27 00:28:17 +00:00
cbc74de7c6
Removed old LDAP code from sandbox and adjusted dependencies accordingly.
Luke Taylor
2007-08-26 23:07:34 +00:00
5474b3a78c
SEC-279 - Deleting Contacts Tiger sample project
Mark St. Godard
2007-08-25 23:16:22 +00:00
93b303e343
Support Spring LDAP.
Ben Alex
2007-08-25 00:16:12 +00:00
db3024f9a4
SEC-271: Revert Ordered and ApplicationContextAware usage at this time, due to release of 1.0..
Ben Alex
2007-08-25 00:15:30 +00:00
7a5c1ee328
Rename to spring-security. This is only a temporary commit, as in the future Maven 2 will be used and this file will be removed from Subversion.
Ben Alex
2007-08-24 14:36:59 +00:00
8b6c592180
Finalization of repository restructure.
Ben Alex
2007-08-24 14:28:00 +00:00
3fbc7beb88
SEC-251: Document use of {1} parameter in javadoc for DefaultLdapAuthoritiesPopulator.
Luke Taylor
2007-08-17 15:45:57 +00:00
fd0d4cd8b0
SEC-521: Fixed sourceforge svn URLs.
Luke Taylor
2007-08-10 18:34:38 +00:00
8396f04ae6
implemented unit tests for portlet support
John Lewis
2007-08-04 17:38:51 +00:00
0efdd5d2bf
added javadoc package.html files for portlet classes
John Lewis
2007-07-27 04:33:56 +00:00
f70cba5d0e
added PortletProcessingFilterEntryPoint for accessing servlet resources via portlet authentication
John Lewis
2007-07-27 00:54:54 +00:00
bc30b903f8
SEC-398: Lazy update of 'filterApplied' to true
Vishal Puri
2007-07-25 05:34:40 +00:00
99cc55b94a
Minor code style corrections.
Luke Taylor
2007-07-24 18:23:35 +00:00
156965b370
SEC-181: Remove acegifier application.
Luke Taylor
2007-07-24 18:20:22 +00:00
ea42164af2
Added jetty plugin to tutorial app pom.xml.
Luke Taylor
2007-07-24 18:12:09 +00:00
5d64b86875
Removed user cache from tutorial app context, as it's session -based.
Luke Taylor
2007-07-24 18:11:32 +00:00
fe4bbe0fbf
SEC-514: Refactoring contacts sample into single webapp.
Luke Taylor
2007-07-24 17:46:43 +00:00
a499e74102
SEC-449: Add spring-ldap dependency to pom.xml.
Luke Taylor
2007-07-24 17:23:47 +00:00
b646a06443
Fix for SEC-512. Removed unnecessary context creation.
Luke Taylor
2007-07-24 17:01:36 +00:00
aea1148ffb
Fix broken test caused by null application context in AbtractAccessDecisionManager when auto-detection of voters is called.
Luke Taylor
2007-07-24 16:48:49 +00:00
c5cc42e16c
made two instance variables protected for RBA solution
Vishal Puri
2007-07-23 07:59:28 +00:00
1dfc2baea2
OpenId4Java support OpenIdAuthenticationProcessingFilter to replace OpenIDLoginInititationServlet
Ray Krueger
2007-07-02 03:44:07 +00:00
ef38844a6d
Improved comments and made TokenBasedRememberMeServices modular to support subclasses
Vishal Puri
2007-06-27 08:33:37 +00:00
61d44954ee
Changed parent reference to 1.0.5-SNAPSHOT
Ray Krueger
2007-06-19 13:13:58 +00:00
683fc597d2
Changed parent reference to 1.0.5-SNAPSHOT
Ray Krueger
2007-06-19 13:10:42 +00:00
0159b617cf
Refactored the failureUrl lookup into a protected method to allow customization
Ray Krueger
2007-06-19 13:09:57 +00:00
e0956920c7
SEC-271: copied Bank* unit test and relevant classes to test @Secured annotation as a part of autoconfig tag work
Vishal Puri
2007-06-19 04:15:25 +00:00
207e8b932e
SEC-271: implemented auto creation of AuthenticationProcessingFilter and it's dependencies
Vishal Puri
2007-06-14 11:17:05 +00:00
23024b20ad
SEC-271: Removed AuthenticationRepositoryDependenciesConfigurer as the introspection of applicationcontext for collaborators is implemented in the bean itself
Vishal Puri
2007-06-14 06:27:32 +00:00
2987b62893
SEC-271: autoconfig work
Vishal Puri
2007-06-14 04:51:16 +00:00
1ee2a26e8f
SEC-271: removed RemeberMeServicesDependenciesConfigurer as autodetection of dependencies is handled in TokenBasedRememberMeServices
Vishal Puri
2007-06-08 01:57:54 +00:00
5249befa25
SEC-271: tests for RememberMeServicesBeanDefinitionParser
Vishal Puri
2007-06-08 01:51:59 +00:00
6c22fea917
SEC-271: removed registration of BFPP(RemeberMeServicesDependenciesConfigurer) as autodetection of dependencies is now handled in TokenBasedRememberMeServices
Vishal Puri
2007-06-08 01:50:35 +00:00
10c2294aad
SEC-271: removed import of spring-util.xsd as it is not required
Vishal Puri
2007-06-08 01:48:11 +00:00
66d7f754c1
SEC-271: changed pom versions, added log4j.properties in test classpath, added another junit test in ExceptionTranslationParserTests
Vishal Puri
2007-06-07 02:21:52 +00:00
1665e21873
SEC-271: Added version tag
Vishal Puri
2007-06-07 02:13:50 +00:00
a0cb72cc3c
SEC-271: Removed the registeration of BFPP(AccessDeniedHandlerLocator) and improved comments
Vishal Puri
2007-06-07 02:12:29 +00:00
4d783d7375
SEC-271: Deleted AccessDeniedHandlerBeanDefinitionLocator as the autodetection functionality is implemented in ExceptionTranslationfilter
Vishal Puri
2007-06-07 02:11:12 +00:00
917030f0a3
SEC-488: Added maven.src.dir property to point to src/main because of changed m2 directory structure
Vishal Puri
2007-06-06 03:00:13 +00:00
e9e89b835d
Added maven.src.dir property to point to src/main because of changed m2 directory structure
Vishal Puri
2007-06-06 02:49:44 +00:00
82b22563e5
initial checking of JSR-168 Portlet support in to sandbox
John Lewis
2007-06-04 08:01:11 +00:00
165d2c0122
[maven-release-plugin] prepare for next development iteration
Carlos Sanchez
2007-06-02 21:28:53 +00:00
942b5d7345
[maven-release-plugin] prepare release acegi-security-1.0.4-maven2
Carlos Sanchez
2007-06-02 21:21:51 +00:00
Luke Taylor