spring-security

Commit Graph

Author	SHA1	Message	Date
Oliver Becker	9eb34fe51c	SEC-2119: Add a 'form-parameter' attribute to <remember-me> This change extends the namespace configuration of <remember-me> with a 'form-parameter' attribute. The introduced attribute sets the 'parameter' property of AbstractRememberMeServices. This enables overriding the default value of '_spring_security_remember_me' using the namespace configuration.	13 years ago
Rob Winch	e8661913d1	SEC-2119: Update to 3.2 schema and use default schema version when available	13 years ago
@fbiville	83f1d76c16	SEC-2138: Fix code snippet in Hierarchical Roles section The bean definition of RoleHierarchyVoter was syntactically incorrect.	13 years ago
Rob Winch	5ba31dfd56	Use AspectJMethodSecurityInterceptor in reference Change reference to use AspectJMethodSecurityInterceptor instead of undefined AspectJSecurityInterceptor.	13 years ago
Rob Winch	373fe3a9f1	SEC-2074: Update reference to use <method-security-metadata-source>	13 years ago
Rob Winch	6cea2694dc	SEC-2069: Update doc to use FilterInvocationSecurityMetadataSource	13 years ago
Rob Winch	4f741bc914	SEC-2057: ConcurrentSessionFilter is now after SecurityContextPersistenceFilter Previously, ConcurrentSessionFilter was placed after SecurityContextPersistenceFilter which meant that the SecurityContextHolder was empty when ConcurrentSessionFilter was invoked. This caused the Authentication to be null when performing a logout. It also caused complications with LogoutHandler implementations that would be accessing the SecurityContextHolder and potentially clear it out expecting that SecurityContextPersistenceFilter would then clear the SecurityContextRepository. The ConcurrentSessionFilter is now positioned after the SecurityContextPersistenceFilter to ensure that the SecurityContextHolder is populated and cleared out appropriately.	13 years ago
Rob Winch	8ad0e0e8e8	SEC-1995: Use Gradle Artifactory integration for releases	14 years ago
Rob Winch	095dcb3a74	SEC-2010: Include missing <value> tag in Hierarchical Roles section of the reference	14 years ago
Rob Winch	b196d70f99	SEC-1905: Added para tag to the digest encoded password footnote	14 years ago
Rob Winch	bfd09f7603	SEC-1905: Added footnote to password encoding for digest authentication Technically digest authentication can allow for encoded passwords, but it needs to be in the correct format. This update adds a footnote to clarify this. Previously the documentation stated that passwords must be in clear text.	14 years ago
Rob Winch	3e4da4f60f	Updated to next snapshot version	14 years ago
Rob Winch	f46a5bab40	Set to 3.1.1 Release	14 years ago
Rob Winch	18230259b8	SEC-1985: Removed WebSecurityExpessionHandler from reference	14 years ago
Rob Winch	954ba57cf2	SEC-1970: Cleanup of pre authentication documentation * Removed custom-authentication-provider from documentation * Rephrased to make the pre authentication documentation a little more concise * Removed nested () within text (not code) * Removed user which should have been use	14 years ago
Rob Winch	ca741ab18f	SEC-1943: Corrected namespace doc to state SecurityContextHolderAwareRequestFilter instead of SecurityContextHolderAwareFilter	14 years ago
Luke Taylor	2434564d6c	SEC-1904: Fixed LDAP object class name in docs.	14 years ago
Luke Taylor	b493afa18c	SEC-1888: Improving the doc on (not) using multiple annotation types in the same class.	14 years ago
Luke Taylor	9b423a7726	Set 3.1.0 release version.	14 years ago
Rob Winch	53483df1f5	SEC-1678: Added What's new section to reference	14 years ago
Rob Winch	041cb1dcc3	SEC-1858: Included the updates for logout-success-url documentation	14 years ago
Rob Winch	f88b6f75ff	SEC-1858: Overhall the namespace appendix of the reference to include missing elements and attributes	14 years ago
Rob Winch	2fd0a65049	SEC-1839: Updated preauth example to use </security:authentication-manager> instead of </security-authentication-manager>	14 years ago
Luke Taylor	503ac9ae7c	SEC-1798: Remove internal evaluation of EL in JSP tag implementations.	15 years ago
Luke Taylor	a1c714cff4	SEC-1754: Added an InvalidSessionStrategy to allow SessionManagementFilter to delegate out the behaviour when an invalid session identifier is submitted.	15 years ago
Florian Fankhauser	2e83d98c8f	SEC-1776: Corrected typo in manual	15 years ago
Luke Taylor	ecfffaaa3f	Make aspectj dependencies optional throughout and spring-jdbc/tx optional in core poms. Reduces exclusions required in third-party poms (e.g. spring-social).	15 years ago
Luke Taylor	b53d430798	Doc update to reflect change in cas integration module name since 3.0.	15 years ago
Luke Taylor	295ea27526	SEC-1743: Separate remoting from core into separate module.	15 years ago
Luke Taylor	6e91786f92	SEC-1734: AbstractRememberMeServices will now default to using a secure cookie if the connection is secure. The behaviour can be overridden by setting the useSecureCookie property in which case the cookie will either always be secure (true) or never (false).	15 years ago
Rob Winch	bd74185e41	SEC-1729: Updated openid module and sample to openid4java 0.9.6 and httpclient 4.1.1	15 years ago
Luke Taylor	e473897fd9	SEC-1181: Add docs for ActiveDirectoryLdapAuthenticationProvider. Minor fix to initialization checks.	15 years ago
Luke Taylor	c4a1ce9f1a	SEC-1725: Update docs to remove references to filter-chain-map.	15 years ago
Rob Winch	f28a09dfa4	Formatting changes to CAS documentation	15 years ago
Rob Winch	01fb4bdb6d	SEC-1718: Update documentation and sample application to demonstrate how to use a PGT to authenticate to stateless services using a PT	15 years ago
Rob Winch	11331d34d9	SEC-1717: Document how to perform Single Logout with CAS and added integration test for sample application to test Single Logout	15 years ago
Rob Winch	04f1df2a1b	SEC-965: Updated CAS documentation to describe authenticating proxy tickets	15 years ago
Luke Taylor	74b0c1780e	SEC-1707: Added metadata-source-ref attribute to namespace appendix.	15 years ago
Rob Winch	79e17e22bc	SEC-1703: Updated namespace for intercept-url	15 years ago
Rob Winch	d9d5ee1114	SEC-1703: Updated cas custom-filter@ref to match example bean id and custom-filter@position to be CAS_FILTER	15 years ago
Luke Taylor	9c88576992	Added extra FAQ on "Bad Credentials" message and on testing LDAP authentication. Minor mods to LDAP doc.	15 years ago
Rob Winch	236efadfb7	SEC-1698: Update documentation to use correct package for RequestHeaderAuthenticationFilter	15 years ago
Luke Taylor	1dc309b041	SEC-1689: Minor doc updates related to use of password encoding and the crypto package.	15 years ago
Luke Taylor	a25d131f21	Some doc clarifications on the use of UserDetailService vs AuthenticationProvider.	15 years ago
Luke Taylor	b26f2309f4	Add paragraph to manual database appendix to clarify that the standard schema is completely optional if you aren't using JdbcDaoImpl.	15 years ago
Luke Taylor	9cf8ba02ba	Adding some extra section IDs in namespace appendix to provide bookmarkable URLs.	15 years ago
Luke Taylor	57c3afd31a	SEC-1689: Adjust manual to remove references to separate crypto module.	15 years ago
Luke Taylor	5f58108717	Typo.	15 years ago
Luke Taylor	83050f96cb	SEC-1656: Document potential need for pre-emptive session creation if writing the security context manuall.	15 years ago
Luke Taylor	4e349904e5	Add missing language attributes to programlisting tags for highlighting.	15 years ago

... 5 6 7 8 9 ...

497 Commits (5.0.x)