GitHub-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
4117 Commits
61 Branches
369 Tags
120 MiB
Branch: 3.0.x
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '3.0.x'
${ noResults }
Commit Graph

2062 Commits (3.0.x)

Author SHA1 Message Date
Rob Winch 915b2acf73 SEC-2056: DaoAuthenticationProvider performs isPasswordValid when user not found
13 years ago
Rob Winch 4c9a13a755 SEC-2031: PreInvocationAuthorizationAdviceVoter supports subclasses
13 years ago
Rob Winch 5c4f4cbe4d SEC-2061: Fix typo in messages.properties
13 years ago
Rob Winch 4f993d95b5 Updates for 3.0.x autorepo support
13 years ago
Rob Winch 7406e03306 SEC-1975: Ignore anonymous users for AuthenticationSimpleHttpInvokerRequestExecutor
14 years ago
Rob Winch 9847366d5e SEC-1881: Renamed **/*Test.java to **/*Tests.java since **/*Test.java are not included in surefire configuration
14 years ago
Luke Taylor b1af3d00ee SEC-1857: Use Principal.getName() in ContextPropagatingRemoteInvocation
14 years ago
Luke Taylor 82163e2546 Remove ancient code formatter artifacts.
14 years ago
Luke Taylor 2d27b28199 Set version to 3.0.8.CI-SNAPSHOT.
14 years ago
Luke Taylor 714ee3e960 Set version to 3.0.7.RELEASE.
14 years ago
Luke Taylor 102027a44c SEC-1804: Updated Javadoc wrt immutability of User class.
15 years ago
Luke Taylor 799a43d72e SEC-1804: Update InMemoryDaoImpl to use User class directly and create a copy. Otherwise credentials are cleared on cached user instances.
15 years ago
Luke Taylor 3dc4158f7d Set version to 3.0.7.CI-SNAPSHOT
15 years ago
Luke Taylor 62f70f17ff Set project release version to 3.0.6.RELEASE
15 years ago
Luke Taylor c19a5ffd73 SEC-1796: Check for annotated annotations at class/interface level. Previously only the specific security annotation was checked for. By delegating to Spring's AnnotationUtils, custom annotations carrying the security annotation are also detected.
15 years ago
Luke Taylor 887e3361d2 SEC-1750: Make sure RunAs replacement is constrained to the SecurityContext of the current thread.
15 years ago
Luke Taylor a24570ae06 SEC-1744: Do not trust authorities contained in the authentication request in JaasAuthenticationProvider.
15 years ago
Luke Taylor ba719dc0e1 SEC-1741: Modify ContextPropagatingRemoteInvocation to pass a simple combination of principal/credentials as Strings, rather than serializing the whole SecurityContext object from the client.
15 years ago
Luke Taylor 28e70db8f2 SEC-1742: Deprecate use of extraInformation field in AuthenticationException, making it transient and removing any sensitive data in UserDetails objects which are stored in it.
15 years ago
Rob Winch 84031c6001 SEC-1792: Fixed NullPointerException in RunAsUserToken#toString()
15 years ago
Luke Taylor cb7a94af88 SEC-1768: Use AopProxyUtils.ultimateTargetClass to cater for situation where security interceptor is applied to a proxy.
15 years ago
Luke Taylor 9b8d2719a6 SEC-1686: Up required minimum version to 3.0.6 in version check.
15 years ago
Luke Taylor b5546d1d29 SEC-1764: Remove use of Java 6 method Arrays.copyOfRange.
15 years ago
Luke Taylor 70ca0d1a39 SEC-1764: Ensure password encoders use UTF-8 charset when creating strings from byte arrays.
15 years ago
Luke Taylor 7a5a062cd0 SEC-1764: Backport Utf8 encoder to 3.0.x
15 years ago
Luke Taylor 6c97fccc91 SEC-1700: Allow for case where JAAS config is not a simple file, but may be a jar resource, for example.
15 years ago
Luke Taylor f509193604 Update Base64 implementation to include fixes (using diff) from the original up to version 2.3.7.
15 years ago
Rob Winch 1b6587a5d4 SEC-1666: Use constant time comparison for sensitive data.
15 years ago
Rob Winch b3943ac268 SEC-1545: Removed unused i18n keys, changed keys to follow naming conventions, found missing keys based upon old keys, sorted keys, any unknown keys are entered as a comment with the English value.
15 years ago
Luke Taylor 8f71f6febf SEC-1557: Added getter to DelegatingMethodSecurityMetadataSource.
15 years ago
Luke Taylor d53db3ba13 Update version to 3.0.6.CI-SNAPSHOT.
15 years ago
Luke Taylor 90304f64c6 Update version for 3.0.5 release
15 years ago
Luke Taylor ec7b9703a6 Expand message on incorrect Spring version to suggest checking the classpath for unwanted jars.
15 years ago
Luke Taylor fc75b69ab8 SEC-1607: Report correct version for Spring Security (not Spring version).
15 years ago
Luke Taylor 3cfe23f60d Update versions to 3.0.5.CI-SNAPSHOT
15 years ago
Luke Taylor 82d140ffb1 Version 3.0.4.RELEASE
15 years ago
Luke Taylor 1563491322 SEC-1600: Added Implementation-Version and Implementation-Title to manifest templates and checking of version numbers in namespace config module and core. Config checks the version of core it is running against and core checks the Spring version, reporting any mismatches or situations where the app is running with less than the recommended Spring version.
15 years ago
Luke Taylor c458311d2d SEC-1548: Added extra logging to Dao-authentication classes to clarify reasons for authentication failure (missing user vs wrong password etc.).
15 years ago
Luke Taylor d6f408e8bf SEC-1583: Added hasAuthority and hasAnyAuthority imlementations to SecurityExpressionRoot.
15 years ago
Rob Winch 443231d1e8 SEC-1578: Use ThreadLocal.remove() instead of ThreadLocal.set(null)
15 years ago
Luke Taylor a1b124def5 SEC-1532: Add cache of previously matched beans to ProtectPointcutPostProcessor to ensure that it doesn't perform pointcut matching every time a new prototype bean is created.
16 years ago
Luke Taylor 845c50a1c3 SEC-1507: Applied patch to return empty authority list rather than null from RoleHierarchyImpl.
16 years ago
Luke Taylor 25d222208d Switch version to 3.0.4-CI-SNAPSHOT.
16 years ago
Luke Taylor 9b0c21dfef 3.0.3 release. Update version in build files.
16 years ago
Luke Taylor 02c1f02f2a SEC-1493: Fix broken tests in 3.0.x branch
16 years ago
Luke Taylor 21a664b2eb Deprecation warning suppression for UserMap.
16 years ago
Luke Taylor 73b62497a3 SEC-1493: Added CredentialsContainer interface and implemented it in User, AbstractAuthenticationToken and UsernamePasswordAuthenticationToken. ProviderManager makes use of this to erase the credentials of the returned Authentication object (and its contents) if configured to do so by setting the 'eraseCredentialsAfterAuthentication' property.
16 years ago
Luke Taylor 8737fe3acb SEC-1495: Convert User class equals and hashcode methods to only use the "username" property.
16 years ago
Luke Taylor 27faad3402 SEC-1488: Remove commons-logging dependencies from maven poms and use slf4j in all samples.
16 years ago
Luke Taylor aaa7bd90b2 SEC-1481: Updated constructors of Authentication types to use a generic wildcard for authorities collection.
16 years ago