spring-security

Commit Graph

Author	SHA1	Message	Date
Spring Operator	11a61dc8cc	URL Cleanup This commit updates URLs to prefer the https protocol. Redirects are not followed to avoid accidentally expanding intentionally shortened URLs (i.e. if using a URL shortener). # Fixed URLs ## Fixed Success These URLs were switched to an https URL with a 2xx status. While the status was successful, your review is still recommended. * http://www.apache.org/licenses/ with 1 occurrences migrated to: https://www.apache.org/licenses/ ([https](https://www.apache.org/licenses/) result 200). * http://www.apache.org/licenses/LICENSE-2.0 with 924 occurrences migrated to: https://www.apache.org/licenses/LICENSE-2.0 ([https](https://www.apache.org/licenses/LICENSE-2.0) result 200). * http://www.apache.org/licenses/LICENSE-2.0.html with 1 occurrences migrated to: https://www.apache.org/licenses/LICENSE-2.0.html ([https](https://www.apache.org/licenses/LICENSE-2.0.html) result 200).	7 years ago
Rob Winch	2288d50f0e	Polish URLs We have performed some polish on your URLs. We do not follow redirects to avoid expanding intentionally shorter URLs (i.e. URL shortened URLs) # Fixed URLs ## Fixed But Review Recommended These URLs were fixed, but the https status was not OK. However, the https status was the same as the http request, so we migrated them. Your review is recommended. \| HTTP URL \| Result URL \| HTTPS Result \| HTTP Result \| Count \| \| --- \| --- \| --- \| --- \| --- \| \| http://repo.terracotta.org/maven2/ \| https://repo.terracotta.org/maven2/ \| HttpResponse(httpStatus = 403 FORBIDDEN) \| HttpResponse(httpStatus = 403 FORBIDDEN) \| 1 \| \| http://maven-gae-plugin.googlecode.com/svn/repository \| https://maven-gae-plugin.googlecode.com/svn/repository \| HttpResponse(httpStatus = 404 NOT_FOUND) \| HttpResponse(httpStatus = 404 NOT_FOUND) \| 1 \| \| http://repository.springsource.com/maven/bundles/external \| https://repository.springsource.com/maven/bundles/external \| HttpResponse(httpStatus = 404 NOT_FOUND) \| HttpResponse(httpStatus = 404 NOT_FOUND) \| 1 \| \| http://repository.springsource.com/maven/bundles/release \| https://repository.springsource.com/maven/bundles/release \| HttpResponse(httpStatus = 404 NOT_FOUND) \| HttpResponse(httpStatus = 404 NOT_FOUND) \| 1 \| ## Fixed Success These URLs were fixed successfully. \| HTTP URL \| Result URL \| HTTPS Result \| HTTP Result \| Count \| \| --- \| --- \| --- \| --- \| --- \| \| http://docs.spring.io/spring-ldap/docs/1.3.x/apidocs/ \| https://docs.spring.io/spring-ldap/docs/1.3.x/apidocs/ \| HttpResponse(httpStatus = 200 OK) \| null \| 2 \| \| http://docs.spring.io/spring/docs/3.2.x/javadoc-api \| https://docs.spring.io/spring/docs/3.2.x/javadoc-api \| HttpResponse(httpStatus = 301 MOVED_PERMANENTLY redirectUrl = http://docs.spring.io/spring/docs/3.2.x/javadoc-api/) \| null \| 1 \| \| http://docs.spring.io/spring/docs/3.2.x/javadoc-api/ \| https://docs.spring.io/spring/docs/3.2.x/javadoc-api/ \| HttpResponse(httpStatus = 200 OK) \| null \| 1 \| \| http://download.oracle.com/javase/6/docs/api/ \| https://download.oracle.com/javase/6/docs/api/ \| HttpResponse(httpStatus = 302 FOUND redirectUrl = https://docs.oracle.com/javase/6/docs/api/) \| null \| 2 \| \| http://spring.io/ \| https://spring.io/ \| HttpResponse(httpStatus = 200 OK) \| null \| 42 \| \| http://spring.io/spring-security \| https://spring.io/spring-security \| HttpResponse(httpStatus = 302 FOUND redirectUrl = https://projects.spring.io/spring-security) \| null \| 42 \| \| http://www.apache.org/licenses/LICENSE-2.0.txt \| https://www.apache.org/licenses/LICENSE-2.0.txt \| HttpResponse(httpStatus = 200 OK) \| null \| 42 \| \| http://forums.gradle.org/gradle/topics/after_upgrade_gradle_to_2_0_version_the_maven_pom_not_support_build_property \| https://discuss.gradle.org/gradle/topics/after_upgrade_gradle_to_2_0_version_the_maven_pom_not_support_build_property \| HttpResponse(httpStatus = 404 NOT_FOUND) \| HttpResponse(httpStatus = 301 MOVED_PERMANENTLY redirectUrl = https://discuss.gradle.org/gradle/topics/after_upgrade_gradle_to_2_0_version_the_maven_pom_not_support_build_property) \| 1 \| \| http://forums.gradle.org/gradle/topics/eclipse_wtp_deploys_testcode_to_server_example_provided \| https://discuss.gradle.org/gradle/topics/eclipse_wtp_deploys_testcode_to_server_example_provided \| HttpResponse(httpStatus = 404 NOT_FOUND) \| HttpResponse(httpStatus = 301 MOVED_PERMANENTLY redirectUrl = https://discuss.gradle.org/gradle/topics/eclipse_wtp_deploys_testcode_to_server_example_provided) \| 1 \| # Ignored These URLs were intentionally ignored so we didn't migrate them. \| HTTP URL \| \| --- \| \| http://maven.apache.org/POM/4.0.0 \| \| http://maven.apache.org/xsd/maven-4.0.0.xsd \| \| http://www.w3.org/2001/XMLSchema-instance \|	7 years ago
Spring Buildmaster	7f246e1c0e	Release version 3.2.10.RELEASE	9 years ago
Rob Winch	53ccda1549	Fix pom.xml	9 years ago
Rob Winch	0896d22995	Update to Spring 3.2.18	9 years ago
Rob Winch	55a25fa213	Use BUILD-SNAPSHOT See if this avoids the conflict resolution	9 years ago
Rob Winch	cdc485d121	Update to spring 3.2.17	9 years ago
Rob Winch	5e19ac5e7e	Update pom.xml	9 years ago
Rob Winch	f75ebb22d8	Next Development Version	10 years ago
Spring Buildmaster	980edebefa	Release version 3.2.9.RELEASE	10 years ago
Rob Winch	56e41df964	SEC-3128: RoleVoter supports null Authentication	10 years ago
Rob Winch	a24065c361	SEC-3109: DelegatingSecurityContextExecutor fails with same Thread Previously DelegatingSecurityContextRunnable and DelegatingSecurityContextCallable would not setup the SecurityContext if it was on the same thread as it was created. This was intended to fix SEC-3031 but simply caused more problems. This commit changes the strategy to keep track of the previous SecurityContext and restore it (or clear it out if it was originally empty).	10 years ago
Rob Winch	23de257508	SEC-3031: DelegatingSecurityContext(Runnable\|Callable) only modify SecurityContext on new Thread Modifying the SecurityContext on the same Thread can cause issues. For example, with a RejectedExecutionHandler the SecurityContext may be cleared out on the original Thread. This change modifies both the DelegatingSecurityContextRunnable and DelegatingSecurityContextCallable to, by default, only modify the SecurityContext if they are invoked on a new Thread. The behavior can be changed by setting the property enableOnOrigionalThread to true.	11 years ago
Rob Winch	567b0ed030	SEC-3013: Add messages_en.properties	11 years ago
Rob Winch	13cb51c15f	SEC-2918: Update Spring Version 3.2.13	11 years ago
james	b42cb9e3e1	SEC-2812: Fix german translations in 3.2.x	11 years ago
Rob Winch	cdac4d990b	SEC-2747: Remove spring-core dependency from spring-security-crypto	11 years ago
Rob Winch	c36cc88ac4	SEC-2150: Support class level annotations on Spring Data Repositories	11 years ago
Rob Winch	7d82349b1e	SEC-2150: Add tests to verify JSR-250 Spec behavior	11 years ago
Rob Winch	b6ab9c85e9	SEC-2682: DelegatingSecurityContextRunnable/Callable delegate toString()	11 years ago
Rob Winch	b71989ecde	SEC-2574: JavaConfig default SessionRegistry processes SessionDestroyedEvents	11 years ago
Rob Winch	0a184a8d79	SEC-2697: Fix logging of Spring Version Check	12 years ago
Rob Winch	9a27f9f778	SEC-2579: Add springio-platform plugin	12 years ago
Rob Winch	13c5750f5d	SEC-2571: Improve wording of UsernamePasswordAuthenticationToken#setAuthenticated() error	12 years ago
Rob Winch	414289d466	SEC-2571: Failure in UserDetailsService->InternalAuthenticationServiceException	12 years ago
Rob Winch	fd6f9da184	SEC-2542: Use exclusions to remove duplicate dependencies A number of projects had duplicate dependencies on their classpaths as a result of the same classes being available in more than one artifact, each with different Maven coordinates. Typically this only affected the tests, but meant that the actual classes that were loaded was somewhat unpredictable and had the potential to vary between an IDE and the command line depending on the order in which the aritfacts appeared on the classpath. This commit adds a number of exclusions to remove such duplicates. In addition to the new exclusions, notable other changes are: - Spring Data JPA has been updated to 1.4.1. This brings its transitive dependency upon spring-data-commons into line with Spring LDAP's and prevents both spring-data-commons-core and spring-data-commons from being on the classpath - All Servlet API dependencies have been updated to use the official artifact with all transitive dependencies on unofficial servlet API artifacts being excluded. - In places, groovy has been replaced with groovy-all. This removes some duplicates caused by groovy's transitive dependencies. - JUnit has been updated to 4.11 which brings its transitive Hamcrest dependency into line with other components. There appears to be a bug in Gradle which means that some exclusions applied to an artifact do not work reliably. To work around this problem it has been necessary to apply some exclusions at the configuration level Conflicts: samples/messages-jc/pom.xml	12 years ago
Rob Winch	ea0466d666	Next developmenet version in pom.xml	12 years ago
Alexander Kjäll	783af4012b	SEC-2518: UserDetailsService javadoc repeats "insensitive" Typo in javadoc, "case insensitive" was repeated twice.	12 years ago
Rob Winch	7dbb8e777e	SEC-2500: Prevent anonymous bind for ActiveDirectoryLdapAuthenticator	12 years ago
Rob Winch	7f99a2dfbb	SEC-2487: Update to Spring 3.2.8.RELEASE	12 years ago
Rob Winch	fc8e4868ce	SEC-2468: Fix tests	12 years ago
Rob Winch	65367e6547	SEC-2468: JdbcUserDetailsManager#createNewAuthentication uses null credentials	12 years ago
Rob Winch	152f41f61e	SEC-2392: KeyBasedPersistenceTokenService uses bytes instead of bits The method setPseudoRandomNumberBits actually sets the number of bytes. This commit deprecates setPseudoRandomNumberBits and adds setPseudoRandomNumberBytes. The default value is still 256 to remain passive but will be updated in 4.x.	12 years ago
Rob Winch	ec8b48150d	SEC-2474: Update poms	12 years ago
Rob Winch	087b56da96	SEC-2473: Update to Spring 3.2.7	12 years ago
Rob Winch	2df5541905	SEC-2448: Update to HSQL 2.3.1	12 years ago
Rob Winch	a34178bc40	SEC-2434: Update to Spring 3.2.6 and Spring 4.0 GA	12 years ago
Rob Winch	4460e84b29	Updates to pom.xml author and repo	12 years ago
Rob Winch	fa39ecd719	SEC-2367: ProviderManager rethrows InternalAuthenticationServiceExceptions	12 years ago
Rob Winch	7e274ea5b6	Fix typo in InternalAuthenticationServiceException javadoc	12 years ago
Rob Winch	5a59c74d02	SEC-2327: Document SecurityExpressionRoot	12 years ago
Rob Winch	2d2f91484d	SEC-2350: Fix broken test	12 years ago
Rob Winch	1745715865	SEC-2350: Remove warning whe using Spring 4	12 years ago
Rob Winch	2c8946c406	Next development version	12 years ago
Spring Buildmaster	9c703a3051	Release version 3.2.0.RC2	12 years ago
Rob Winch	e696890e8e	SEC-2151: Fix spring4Test	12 years ago
Rob Winch	61e6acb3f4	SEC-2151: AnnotationParameterNameDiscoverer support single annotated param This makes sense since often times only a single argument is necessary in the expression.	12 years ago
Rob Winch	e5f034bdef	SEC-2151: Fix tests	12 years ago
Rob Winch	a09756745f	SEC-2151: Support binding method arguments with Annotations This allow utilizing method arguments for method access control on interfaces prior to JDK 8.	12 years ago
Rob Winch	fb0a8d19e8	SEC-2322: Support StandardReflectionParameterNameDiscoverer	12 years ago

1 2 3 4 5 ...

2240 Commits (3.2.x)