Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 41202112bc SEC-37: Only update HttpSession if SecurityContext has actually been changed. Ben Alex 2005-10-21 07:26:16 +00:00
  • 494e35f009 Jalopy styling. Ben Alex 2005-10-21 07:23:33 +00:00
  • e1c7a6bc86 Few more.... Ben Alex 2005-10-21 06:34:07 +00:00
  • 76fe024302 Doc updates. Ben Alex 2005-10-21 01:24:33 +00:00
  • 24a78be159 Corrected link in Javadoc. Luke Taylor 2005-10-19 21:19:16 +00:00
  • c065c46668 Javadoc correction: ContextHolder -> SecurityContextHolder Luke Taylor 2005-10-18 15:44:22 +00:00
  • df4b8f602f Javadoc correction: SecureContext -> SecurityContext Luke Taylor 2005-10-18 15:43:41 +00:00
  • fc8ed33f64 Reduce to 50% size. Ben Alex 2005-10-17 12:27:54 +00:00
  • a7e977c31a Use jars uploaded to ibiblio Carlos Sanchez 2005-10-06 21:01:58 +00:00
  • f6487edf90 Removed uneeded jboss-jmx Carlos Sanchez 2005-10-06 20:56:04 +00:00
  • b2363dfe07 SEC-62 Add maven 2 support Carlos Sanchez 2005-10-06 20:53:08 +00:00
  • 789b63090f SEC-57 Make build compatible with maven 1.1 Carlos Sanchez 2005-10-06 20:24:07 +00:00
  • 29e3daaab6 Removed redundant groupId (inherited from parent) Carlos Sanchez 2005-10-06 20:01:29 +00:00
  • a39339674e login.config.url should be set to a url, not a file path Ray Krueger 2005-09-26 14:14:42 +00:00
  • bc14dd62db Fixed CVS line break Scott McCrory 2005-09-25 22:49:45 +00:00
  • 4717b64b83 Updated Siteminder auth processing filter and added test case. As of this weekend, this version is in production at a large financial org. Scott McCrory 2005-09-25 22:48:33 +00:00
  • 9b898e84c4 Added Java 5 Annotations version of Contacts sample (contacts-tiger). Mark St. Godard 2005-09-25 05:58:49 +00:00
  • 2c539a03d2 Add Seraph link. Ben Alex 2005-09-23 01:14:39 +00:00
  • 0f5e9ad372 Fix NPE. Thanks to Tom Dunstan. Ben Alex 2005-09-22 01:49:12 +00:00
  • f5741962ed Add createSessionAllowed property, which should be set to false to avoid unnecessary session creation. Ben Alex 2005-09-22 00:54:27 +00:00
  • 84a723d035 Adding more Common User problems to FAQ Mark St. Godard 2005-09-21 01:53:35 +00:00
  • 60d3b6505b Finalizing the validation, entry point and channel processor concerning captchas. Replacing the Thread.sleep() in captchaChannelProcessorTest to avoid the build break issue. Marc-Antoine Garrigue 2005-09-20 12:24:47 +00:00
  • 6f3e92e2e4 started adding Common User Problems to the FAQ..... I will add more as well go.. I will also add the Change Password and other usage patterns such as Disabling and Event publishing, etc Mark St. Godard 2005-09-20 02:31:23 +00:00
  • fb3f4af3b2 when extracting the original user, fix by referencing by the interface (UserDetail) rather than the concrete class (User) Mark St. Godard 2005-09-20 02:28:01 +00:00
  • 24394b7b2b added fix to preserve custom UserDetails implementations (Matt DeHoust fix recommendation) Mark St. Godard 2005-09-19 02:22:44 +00:00
  • d44b570087 Disable failing tests until Marc-Antoine has a chance to look at them. Ben Alex 2005-09-18 22:38:37 +00:00
  • ae9e7733db Fix broken tests. Ben Alex 2005-09-18 22:38:05 +00:00
  • 1455029435 Refactor lifecycle methods into separate files, so that subclasses can extend specific classes or interfaces to achieve the desired subset of lifecycle capabilities. Ben Alex 2005-09-15 08:13:09 +00:00
  • be578c99d1 Add setId(Long) back into class, as Hibernate 3.0.5 gives Lazy Initialization Exception if using field="access" when trying to do a getId() on a lazily loaded association. Ben Alex 2005-09-09 06:10:13 +00:00
  • ddd69c751f Automatically ensure Validators accessing DAOs receive detached instances. Also provide DetachmentContextHolder ThreadLocal, so that this behaviour can be specified whenever required. Ben Alex 2005-09-09 03:59:34 +00:00
  • 1119b665f8 Make createOrUpdate(E) delegate to Manager methods, not to the DAO method of the same name. Ben Alex 2005-09-09 03:58:04 +00:00
  • 3794c608ad Remove setId(Long). This means access="field" needs to be used with Hibernate. Ben Alex 2005-09-09 03:56:58 +00:00
  • 35ca25f085 BasicAuthenticationProcessingFilter no longer creates HttpSession via WebAuthenticationDetails call. Ben Alex 2005-09-08 11:15:48 +00:00
  • c64a3770de Prove that 403 errors are handled by web.xml <error-page>. Ben Alex 2005-09-08 10:20:34 +00:00
  • c7dcceb05c Do not setAuthenticated(false) in the event of a public (unsecured) invocation. Thanks to Joseph Dane for reporting this issue on acegisecurity-developer on 3 September 2005. Ben Alex 2005-09-08 09:32:24 +00:00
  • 1bd4d0beca Started adding Java 5 Annotation documentation, including example configuration and usage. Mark St. Godard 2005-09-05 05:56:39 +00:00
  • e850849be5 Added Java 5 Annotations version of the BankService sample. Note: This project requires the Secured annotation which is in "core-tiger"... make sure you have built and installed the acegi-security-tiger-0.9.0-SNAPSHOT.jar in your local maven repo. Mark St. Godard 2005-09-05 04:38:45 +00:00
  • 61df8e9f7b Support multiple SessionFactory instances (not just one). Ben Alex 2005-09-04 23:08:02 +00:00
  • 3f24824f66 updated config, added switchUserProcessingFilter to the filter chain, added the ROLE_SUPERVISOR the ability to switch to other users (i.e. ROLE_USER) Mark St. Godard 2005-09-04 20:09:56 +00:00
  • fce510fa9f added core-tiger Mark St. Godard 2005-09-04 20:07:12 +00:00
  • 230d1946b9 added switchUserProcessingFilter config, not added to filter chain (yet) Mark St. Godard 2005-09-03 21:45:32 +00:00
  • 3dcea7ace0 initial pages for user switching Mark St. Godard 2005-09-03 21:44:05 +00:00
  • 486bbee35d added context path to redirect Mark St. Godard 2005-09-03 21:43:08 +00:00
  • 9d359780d9 finish user context switch event publishing Mark St. Godard 2005-09-03 20:24:35 +00:00
  • 4ae14cc7bc ignore target Mark St. Godard 2005-08-25 03:07:12 +00:00
  • c68dbf1090 renamed to acegi-security-tiger Mark St. Godard 2005-08-25 03:05:15 +00:00
  • 20ebb668a6 Added event for user context switching and updated switch user filter Mark St. Godard 2005-08-25 02:59:19 +00:00
  • 55f5c3397a Relocated JdbcDaoExtendedImpl.convertAclObjectIdentityToString to superclass (pursuant to suggestion made by Tim Kettering on acegisecurity-developer). Ben Alex 2005-08-23 22:45:17 +00:00
  • 2bda6ec25c Fix: SEC-48 http://opensource2.atlassian.com/projects/spring/browse/SEC-48 If the principal is an instanceof UserDetails, UserDetails.getUsername(); Ray Krueger 2005-08-23 15:15:06 +00:00
  • 438130ef4c Use same groupId as Apache Repo and iBiblio Repo. Ben Alex 2005-08-22 21:42:47 +00:00
  • 9b648357fe Fixed sdocbook plugin url Carlos Sanchez 2005-08-22 21:30:54 +00:00
  • fc1fe03871 Automatically introspect generic to determine supports(Class) instead of relying on IoC container or Java code to specify it. Ben Alex 2005-08-21 10:36:26 +00:00
  • ebb99abc78 Ensure that classes implementing the BindBeforeValidation interface have the method called *before* validation, as Validator implementations will sometimes check the properties modified by BindBeforeValidation implementations. Ben Alex 2005-08-21 10:34:50 +00:00
  • c5e060dc09 Fix generics. Ben Alex 2005-08-21 10:31:41 +00:00
  • 9ea795927e Provide Maven POM for sandbox, so that users can easily build its contents. Ben Alex 2005-08-21 10:30:18 +00:00
  • 204582d2fc For convenience of users of Acegi Security Domain subproject, include the source code in the sources ZIP file. Ben Alex 2005-08-21 10:29:22 +00:00
  • cbdb3ed8da Add Jared Odulio's blog entry. Ben Alex 2005-08-21 10:18:26 +00:00
  • 40a81ed220 Revisit synchonization issue and correct problem identified by Volker Malzahn. Ben Alex 2005-08-21 10:10:16 +00:00
  • e805aa2e73 Add annotation support. Ben Alex 2005-08-21 09:40:09 +00:00
  • c2e927e01d Add Pascal Gehl's blog entry. Ben Alex 2005-08-21 08:43:29 +00:00
  • 975de1e043 Add .cvsignore files so that empty directories are created in CVS. Remove package.html files that do not belong to a particular package and were simply directory markers. Ben Alex 2005-08-21 08:19:02 +00:00
  • 0f1c802b47 adding core-tiger to the multiproject includes Mark St. Godard 2005-08-13 03:21:41 +00:00
  • 0a8699003f Initial checkin of Security Java 5 Annotation support (see http://opensource.atlassian.com/projects/spring/browse/SEC-4) Mark St. Godard 2005-08-12 02:57:38 +00:00
  • ec5e39c2e8 Initial checkin of user security context switching (see SEC-15). This is the first cut of the SwitchUserProcessingFilter that handles switching to a target uesr and exiting back to the original user. Note: This is going to be used for the common use-case of an Administrator 'switching' to another user (i.e. ROLE_ADMIN -> ROLE_USER). This is the initial cut of a Unix 'su' for Acegi managed web applications. Mark St. Godard 2005-08-04 05:49:12 +00:00
  • 27a57410c1 Update to latest Spring tld Luke Taylor 2005-08-02 17:27:30 +00:00
  • 72e3a24c22 Merged from the refactoring branch. Needs user tested, and better documented; but its stable enough that I'm committing it. Robert Sanders 2005-08-02 02:50:27 +00:00
  • b371f35cfc File created in the LDAP refactoring branch; (currently not being used) in the MAIN/HEAD branch. This is a JavaBean which is used to create JNDI SearchControls Objects for use in searching LDAP DirContexts. Robert Sanders 2005-08-02 02:34:16 +00:00
  • 1502ba9409 File as created in the LDAP refactoring branch. with a number of JavaDoc comments added for clarity. Robert Sanders 2005-08-02 02:31:51 +00:00
  • 725ec767b6 Javadoc typo corrected (as suggested on mailing list) Luke Taylor 2005-08-01 20:05:02 +00:00
  • 9421b66611 These are really renamings, not deletions, but since its CVS we have to make do with adding a "new" file with a different name. Robert Sanders 2005-08-01 18:24:49 +00:00
  • 1f46005dad Renamed, and refactored version of the LdapPasswordAuthenticationTest which works with the newest 'stable' verion of the LdapPasswordAuthenticationDao. Robert Sanders 2005-08-01 18:22:00 +00:00
  • 3762ba25e8 Fixed dumb mistake in the DN of the second user object. Robert Sanders 2005-08-01 18:17:06 +00:00
  • b634b27550 Fixed license header, updated to point to new location of helper classes in the .support package. Robert Sanders 2005-08-01 03:12:04 +00:00
  • bb4867b3cf Fixed license header. Robert Sanders 2005-08-01 03:10:10 +00:00
  • 1c30ebb27b Updated some of the JavaDocs which needed it. Robert Sanders 2005-08-01 03:09:50 +00:00
  • b4e08a413b Renamed and moved version of LdapTestHelper. Robert Sanders 2005-08-01 03:03:31 +00:00
  • 020b4d8e32 Updated version of the BaseLdapTestCase which is in a better named package (.support), with better named helper classes. Robert Sanders 2005-08-01 03:02:48 +00:00
  • 2d772cbfcc Fix bug as reported by Jared Odulio on acegisecurity-developer 29 July 2005. Ben Alex 2005-07-31 00:58:48 +00:00
  • 6dcf6b9456 Use iBiblio Maven repo location for Apache DS. Ben Alex 2005-07-31 00:54:56 +00:00
  • 3010a85fdd Add the policies which were agreed on-list. Ben Alex 2005-07-30 01:04:44 +00:00
  • c2c48b905b Added package.html files to reamining java packages (see http://opensource.atlassian.com/projects/spring/browse/SEC-41) Scott McCrory 2005-07-26 01:54:18 +00:00
  • f5975dcf30 Whoops, almost forgot to remove System.out debug lines :-/ Scott McCrory 2005-07-26 00:55:53 +00:00
  • f4c8211cc2 Replaced .cvsignore placeholders for package.html files (which also serve some doccumentary purpose). Scott McCrory 2005-07-26 00:52:02 +00:00
  • 891cd7380c Mirrored Ben's FilterChainProxy.java 1.5 spelling fix to its corresponding test class, which depended on equality of the exception message. All JUnit tests pass now. Scott McCrory 2005-07-26 00:50:43 +00:00
  • 6018ef22a8 Replaced .cvsignore placeholders for package.html files (which also serve some doccumentary purpose). Scott McCrory 2005-07-25 22:55:00 +00:00
  • dc31553f2a Syntax Scott McCrory 2005-07-25 22:49:05 +00:00
  • db4ed4bc44 Added debug statement to AbstractTicketValidator to help with Acegi+CAS+SSL setup (thanks Seth Ladd for the patch) (see http://opensource.atlassian.com/projects/spring/browse/SEC-34) Scott McCrory 2005-07-25 03:46:23 +00:00
  • c66c5dfab5 AuthorizeTag no longer depends on JDK 1.4. Tested on Websphere 5.0 w/JDK 1.3 (see http://opensource.atlassian.com/projects/spring/browse/SEC-11) Scott McCrory 2005-07-25 00:52:15 +00:00
  • f20bc6d9d0 Catch up with recent changes. Ben Alex 2005-07-25 00:45:43 +00:00
  • 32f62d1ef1 Added SiteminderAuthenticationProcessingFilter for Ben's review. <Untested>. Scott McCrory 2005-07-24 23:59:08 +00:00
  • 4889c753ee Changed the classpath to match where Maven stored jsp and servlet api jars on my machine. Ben, please test to see if this is compatible with your Eclipse setup. Scott McCrory 2005-07-24 23:18:37 +00:00
  • 9fc7717d20 Added .cvsignore as a placeholder so that CVS retains these directories upon checkout. Scott McCrory 2005-07-24 23:16:34 +00:00
  • 71e35de986 Update servlet dependency ids with latest conventions Carlos Sanchez 2005-07-24 06:12:38 +00:00
  • f650289142 Avoid expense of HttpSession when working with anonymous users. Ben Alex 2005-07-23 10:05:32 +00:00
  • f625d06cd9 Avoid expense of HttpSession when working with anonymous users. Ben Alex 2005-07-23 09:52:42 +00:00
  • 4ad98a7df3 Spelling correction, thanks to Zack Chandler. Ben Alex 2005-07-23 07:40:43 +00:00
  • c5ba30b001 Comment how to make a signing certificate. Ben Alex 2005-07-23 07:39:56 +00:00
  • 4b98d357ff SecureContextLoginModuleTest has been renamed to ...Tests as per Acegi project. Ray Krueger 2005-07-22 04:35:31 +00:00
  • 28e8c93beb Changes to exception handling, and some additional validation of web.xml content. Luke Taylor 2005-07-22 00:20:54 +00:00
  • e51c38aec9 Removed reference in Javadoc to obtaining and validating the SecureContext (checking for null etc), as this is no longer relevant. Luke Taylor 2005-07-21 22:59:30 +00:00