6abceb7ab0
Additional changes related to SEC-192 (avoiding session creation when creating WebAuthenticationDetails). Also fixed Jalopy chaos in SwitchUserProcessingFilter.
Luke Taylor
2006-02-20 00:37:39 +00:00
52a212e609
Removed "== true" in boolean.
Luke Taylor
2006-02-20 00:27:36 +00:00
5475ab0575
Modify AbstractAuthenticationManager to transfer the details object from authentication request to the resulting authentication token, provided it has not already been set on the latter by an authentication provider.
Luke Taylor
2006-02-19 23:50:21 +00:00
c88b9093c0
Remove unnecessary check for null.
Luke Taylor
2006-02-19 22:35:37 +00:00
ee41d24447
Javadoc correction.
Luke Taylor
2006-02-19 22:23:04 +00:00
e12c8310eb
Remove unnecessary default constructors which throw IllegalArgumentException. Favours compile time over runtime errors.
Luke Taylor
2006-02-16 16:44:35 +00:00
4b4d4d3332
Added some uses of Spring Assert class and removed one to prevent unnecessary StringBuffer creation.
Luke Taylor
2006-02-16 01:11:31 +00:00
84ccd89061
More readable javadoc.
Luke Taylor
2006-02-15 19:06:04 +00:00
cd7efaf567
Fix for SEC-189. Added getter for initialDirContextFactory.
Luke Taylor
2006-02-13 16:20:42 +00:00
6c29a6d17e
Added test for immutability of authorities array. Refactored standard authorities array into an instance field.
Luke Taylor
2006-02-13 16:16:43 +00:00
2ab5af0a69
SEC-188: Fix JavaDocs.
Ben Alex
2006-02-12 06:29:53 +00:00
a28a932598
SEC-183: Minimise session creation as a consequence of SEC-168 and SEC-182 changes.
Ben Alex
2006-02-09 23:04:29 +00:00
c7c0154ae5
Added Acegi license.
Luke Taylor
2006-02-09 16:37:53 +00:00
0282696202
SEC-182: Remember-me compatibility with concurrent session support.
Ben Alex
2006-02-09 10:32:49 +00:00
c6eacf026d
Add unit testing in isolation article.
Ben Alex
2006-02-09 09:49:22 +00:00
7aa8d98a65
Finish RC2 release, prepare snapshot again.
Ben Alex
2006-02-09 08:49:33 +00:00
ee78570902
Prepare to release 1.0.0 RC2.
Ben Alex
2006-02-09 07:45:11 +00:00
32893f49cf
Release numbering section.
Ben Alex
2006-02-09 07:44:48 +00:00
48f5d7f289
Add Acegifier test resources to classpath, so unit tests can run within Eclipse.
Ben Alex
2006-02-09 07:07:14 +00:00
4783b8bc32
Disable failing test, logged as SEC-181 for follow-up.
Ben Alex
2006-02-09 07:06:55 +00:00
b1dd784dee
SEC-180: BasicProcessingFilter should configurably ignore authentication failures.
Ben Alex
2006-02-09 06:41:31 +00:00
e63b2ec9e6
Cleanup unused imports.
Ben Alex
2006-02-09 06:00:25 +00:00
96196bd637
SEC-179: Upgrade to Spring 2.0-M2.
Ben Alex
2006-02-09 05:36:06 +00:00
ae29498f75
SEC-158: X509 to support Authentication.isAuthenticated() as per usual contract.
Ben Alex
2006-02-09 04:25:07 +00:00
4dd75dfced
Add link to JIRA.
Ben Alex
2006-02-09 04:18:48 +00:00
79287999dc
SEC-178: Refactor AbstractAuthenticationToken.
Ben Alex
2006-02-09 04:16:50 +00:00
74de83e5f1
SEC-177: Add hashCode() method.
Ben Alex
2006-02-09 03:45:47 +00:00
c9cee6651c
SEC-176: Add hashCode() method.
Ben Alex
2006-02-09 03:36:47 +00:00
ac457021b8
Inheritance doesn't seem to work, so added the groupId manually.
Ben Alex
2006-02-09 03:13:58 +00:00
8c9db812da
Correct classpath to include dependency from sandbox/project.xml.
Ben Alex
2006-02-09 03:02:24 +00:00
77be0009ad
Correct equals(Object) method handling if both objects have null getDetails().
Ben Alex
2006-02-09 02:54:40 +00:00
78df09db8a
SEC-175: Add equals(Object) method.
Ben Alex
2006-02-09 02:53:27 +00:00
2006bddf51
Remove broken links.
Ben Alex
2006-02-09 01:30:20 +00:00
c8e81bd425
SEC-159: Comment about use of SecurityContextHolder.clearContext().
Ben Alex
2006-02-09 00:12:56 +00:00
dc959b1847
Fix for SEC-159. Added clearContext() method to SecurityContextHolder and refactored code to use it instead of putting an empty context into the holder.
Luke Taylor
2006-02-08 23:27:46 +00:00
8c0ce12332
SEC-169: Add SessionRegistry.getAllPrincipals() method.
Ben Alex
2006-02-08 05:22:48 +00:00
3a01e48b17
SEC-174: Correct IE6 bug with AuthenticationProcessingFilterEntryPoint.
Ben Alex
2006-02-08 04:58:50 +00:00
9d213f46a4
SEC-168: Prevent errors with concurrent session support.
Ben Alex
2006-02-08 04:42:03 +00:00
7883aefa16
Updated config for LdapSearch
Luke Taylor
2006-02-08 02:33:56 +00:00
1fa6ac0975
SEC-164: Copy Authentication.getDetails() to returned Authentication object.
Ben Alex
2006-02-08 02:19:43 +00:00
2daea069f9
Refactoring of BindAuthenticator to allow an extended version which uses ppolicy controls. Added no-cause constructor in LdapDataAccessException for use in data parsing errors.
Luke Taylor
2006-02-08 02:17:44 +00:00
ca1bf5cc21
SEC-170: AbstractAclVoter to support JoinPoint.
Ben Alex
2006-02-08 02:06:55 +00:00
eb7964f6e5
Clean imports.
Luke Taylor
2006-02-08 01:54:03 +00:00
6ed1400534
Password policy LDAP controls and related classes.
Luke Taylor
2006-02-08 01:50:15 +00:00
05d55ea83a
Update pom dependencies. ldapsdk asn1 classes are used for ldap controls.
Luke Taylor
2006-02-08 01:27:34 +00:00
69498d1a3f
AspectJ thread.
Ben Alex
2006-02-08 01:26:55 +00:00
fe88d6ec17
SEC-134 fix. Authorities array is now copied on access. Also refactored token classes to move authorities to the base class.
Luke Taylor
2006-02-08 01:24:38 +00:00
ccfc574894
Bring Eclipse classpath into line with Maven project.xml version 1.107.
Ben Alex
2006-02-06 08:12:06 +00:00
842ad929a4
Change search object to use constructor injection (SEC-165) .
Luke Taylor
2006-02-03 19:53:08 +00:00
436fcde10b
Change apacheds to version 0.9.4-SNAPSHOT, add slf4j-log4j12 dep
Luke Taylor
2006-02-02 19:58:46 +00:00
b82af1baee
add apache snapshot repo to repository list
Luke Taylor
2006-02-02 19:55:15 +00:00
bc0de2bfd0
switch apacheds deps to acegi repo versions
Luke Taylor
2006-02-02 19:52:56 +00:00
3036b5d46b
Spring mock is required for compilation
Carlos Sanchez
2006-02-01 19:16:46 +00:00
dac57d7c69
Cleaned comment
Carlos Sanchez
2006-02-01 19:11:03 +00:00
b580012f8c
Added first draft of LDAP docs
Luke Taylor
2006-02-01 13:02:08 +00:00
1ca02b6922
Include @Inherited and @Documented to Secured annotation see SEC-148
Mark St. Godard
2006-01-30 03:27:18 +00:00
9771b7817a
SEC-144: Separate SecurityEnforcementFilter from FilterSecurityInterceptor.
Ben Alex
2006-01-28 22:54:23 +00:00
fa4c2a6ade
Correct bug with SEC-120 location of where filter chain proceeds.
Ben Alex
2006-01-28 22:52:17 +00:00
823f93fe3b
SEC-163: Fix ClassCastException bug in MethodInvocationUtils, and add test to prove correct functionality.
Ben Alex
2006-01-28 21:33:35 +00:00
b3cb329ede
SEC-120: Concurrent sessions should be respected by remember-me authentication.
Ben Alex
2006-01-28 21:33:02 +00:00
bf66eb55e2
Add JDJ article.
Ben Alex
2006-01-28 07:49:56 +00:00
ce907f2ddc
SEC-153: Improve toString() method.
Ben Alex
2006-01-28 01:30:46 +00:00
484b0e3a51
SEC-126: Initial commit of WebInvocationPrivilegeEvaluator feature.
Ben Alex
2006-01-28 01:26:58 +00:00
0c89822c56
SEC-162: Properly handle null Authentication.
Ben Alex
2006-01-28 01:24:52 +00:00
c8c7c24822
SEC-120: Remember-me to delegate to AuthenticationManager so authentication-specific behaviour (such as concurrent user management) can be applied.
Ben Alex
2006-01-28 01:22:36 +00:00
9062b4c352
Improved solution to 1.4-compatible IllegalArgumentException with "cause" exception (as suggested on dev list).
Luke Taylor
2006-01-27 18:53:37 +00:00
fbe5957c23
Add support for ldaps:// urls. (Fix for SEC-146).
Luke Taylor
2006-01-27 18:28:13 +00:00
82be52cea0
SEC-123: Remove exception from no-arg constructor.
Ben Alex
2006-01-27 05:26:46 +00:00
ea182f73fe
SEC-145: Include nested exception.
Ben Alex
2006-01-27 05:17:13 +00:00
2459858f48
SEC-132: Refactor out getSessionId() to interface, so different Authentication.getDetails() implementations can be used.
Ben Alex
2006-01-27 05:10:30 +00:00
07ed2ca2f0
Initial commit.
Ben Alex
2006-01-27 05:09:57 +00:00
ab223b8423
SEC-156: Use getName() instead of toString() as getName() is always the username whereas toString() contains extra information if the Authentication.getPrincipal() has been converted to a UserDetails.
Ben Alex
2006-01-27 04:52:46 +00:00
8f6275ab3e
SEC-155: BasicaclEntryCache to provide "remove from cache" support.
Ben Alex
2006-01-27 04:42:39 +00:00
449e395181
Reformat code.
Ben Alex
2006-01-27 04:42:15 +00:00
e675c89e28
Remove unused imports.
Ben Alex
2006-01-27 04:41:32 +00:00
5e258cc201
SEC-161: Truncate everything after ? in URL.
Ben Alex
2006-01-27 03:30:01 +00:00
a7537558e1
Need a file to prevent Eclipse from giving an error due to missing folder.
Ben Alex
2006-01-27 03:19:07 +00:00
49a917b08d
Remove extra dependency on Commons Lang. This dependency is only required by the domain subproject, not the core security project.
Ben Alex
2006-01-27 03:18:34 +00:00
13a0784736
Replaced use of Java 1.5 IllegalArgumentException constructor.
Luke Taylor
2006-01-27 01:20:15 +00:00
20469b6ac9
Legacy LDAP tests and support files deleted.
Luke Taylor
2006-01-26 20:49:55 +00:00
2b0a65983d
Removed unused logger.
Luke Taylor
2006-01-26 20:48:49 +00:00
f9e043d43a
added commons lang dependency
Luke Taylor
2006-01-26 20:02:26 +00:00
17b3424b85
Javadoc typos.
Luke Taylor
2006-01-26 14:55:13 +00:00
4024f124b9
SEC-154: Support Hibernate/CGLIB modified domain objects.
Ben Alex
2006-01-26 10:27:32 +00:00
9766ee1cbe
SEC-151: Add comment about BeanNameAutoProxyCreator.
Ben Alex
2006-01-26 10:12:09 +00:00
433e5fb858
SEC-136: Fix typos.
Ben Alex
2006-01-26 10:07:37 +00:00
a7ebe51fc8
SEC-135: Additional logging of votes in BasicAclEntryVoter.
Ben Alex
2006-01-26 10:04:36 +00:00
f4c1b81a9c
SEC-150: Expand exception message.
Ben Alex
2006-01-26 10:00:59 +00:00
6cf30c71b8
SEC-142: Fix package names.
Ben Alex
2006-01-26 09:48:54 +00:00
37802e3748
SEC-138: Make exception output to Commons Logging, not system console.
Ben Alex
2006-01-26 09:36:48 +00:00
10541fc9db
SEC-137: Correct stack overflow with MethodInvocation.createFromClass(Class, Method).
Ben Alex
2006-01-26 09:28:30 +00:00
e5c538d1a5
SEC-125: Provide hashCode() method for AbstractAuthenticationToken.
Ben Alex
2006-01-26 09:23:03 +00:00
a0aef26e21
Add 2006 to copyright header.
Ben Alex
2006-01-26 08:26:06 +00:00
c030052058
Add another JSF article.
Ben Alex
2006-01-26 02:42:53 +00:00
cbb3d4f23d
Fix HTML error.
Ben Alex
2006-01-25 22:59:05 +00:00
a9c398caa9
Correct error in docs re InheritableThreadLocal.
Ben Alex
2006-01-25 22:42:15 +00:00
63682a9c5d
Javadoc typos.
Luke Taylor
2006-01-25 17:04:58 +00:00
fe2f4e4a3b
Added setter method to allow connection pooling to be disabled.
Luke Taylor
2006-01-25 17:04:02 +00:00
ab0c24bd97
Add Bart van Riel's tutorial.
Ben Alex
2006-01-24 21:05:11 +00:00
f57d279b70
Add Cagatay Civici's blog.
Ben Alex
2006-01-22 04:41:21 +00:00