Luke Taylor
|
23511c930f
|
Standardising slf4j versions.
|
16 years ago |
Luke Taylor
|
10cd080090
|
SEC-1356: Update createUser method in LdapUserDetailsManager to create the LDAP entry before adding authorities. Prevents removal of authorities for an existing user.
|
16 years ago |
Luke Taylor
|
51dfc0fb39
|
Set versions to 3.0.2-CI-SNAPSHOT, post release.
|
16 years ago |
Luke Taylor
|
05634f97dc
|
Updated version numbers for 3.0.1 release.
|
16 years ago |
Luke Taylor
|
b323098167
|
Added gradle build files for taglibs, tutorial, contacts and openid.
Changed build file names to match module names (by manipulating the project objects in the settings.gradle file).
|
16 years ago |
Luke Taylor
|
052537c8b0
|
Removing $Id$ markers and stripping trailing whitespace from the codebase.
|
16 years ago |
Luke Taylor
|
115d5b84ff
|
[maven-release-plugin] prepare for next development iteration
|
16 years ago |
Luke Taylor
|
6c6ef08353
|
[maven-release-plugin] prepare release spring-security-3.0.0.RELEASE
|
16 years ago |
Luke Taylor
|
e64866ae6a
|
Updated bundlor templates and introduced spring.version variable
|
16 years ago |
Luke Taylor
|
fcce29f8df
|
SEC-1326: Updating dependencies to match Spring versions. Removing unused deps.
|
16 years ago |
Luke Taylor
|
aeed49393c
|
Switching StringBuffer to StringBuilder throughout the codebase (APIs permitting).
|
16 years ago |
Luke Taylor
|
cad32ffe39
|
SEC-1325: Tighten up Authentication interface contract to disallow null authorities. Modified internals of AbstractAuthenticationToken to use an empty list instead of null. Clarified Javadoc. removed unnecessary null checks in classes which use the interface.
|
16 years ago |
Luke Taylor
|
520e733cb2
|
[maven-release-plugin] prepare for next development iteration
|
16 years ago |
Luke Taylor
|
f2cf17bd49
|
[maven-release-plugin] prepare release spring-security-3.0.0.RC2
|
16 years ago |
Luke Taylor
|
dab76249db
|
Added gradle build files (experimental)
|
16 years ago |
Luke Taylor
|
9d85168a10
|
Fix apache-ds shard-ldap version in template.mf (should be 0.9.15)
|
16 years ago |
Luke Taylor
|
3f963ef8ca
|
Restore versions and svn URLs in trunk (release plugin fail)
|
16 years ago |
Luke Taylor
|
af563e826c
|
[maven-release-plugin] prepare release spring-security-3.0.0.RC1
|
16 years ago |
Luke Taylor
|
021f650f3d
|
Tidying up ldap pom
|
16 years ago |
Luke Taylor
|
908e88b802
|
Import cleaning.
|
16 years ago |
Luke Taylor
|
0e9452c17c
|
SEC-1074: Customized interceptor list for DefaultDirectoryService, including removal of SchemaInterceptor.
|
16 years ago |
Luke Taylor
|
caff3ee9ba
|
SEC-1231: Authentication.getAuthorities should be of type Collection<GrantedAuthority> and not List<GrantedAuthority>. Refactored the interface and related classes to match (UserDetails etc).
|
16 years ago |
Luke Taylor
|
245fc96137
|
SEC-1075: Update the embedded LDAP server to use Apache DS 1.5. Updated to use the new 1.5.5 release for the embedded server.
|
17 years ago |
Luke Taylor
|
f6f5855b52
|
SEC-1222: Provide a constructor for LdapUserDetailsService that does not require an LdapAuthoritiesPopulator. Done.
|
17 years ago |
Luke Taylor
|
5a8772df5b
|
Reset pom versions post release
|
17 years ago |
Luke Taylor
|
0e5aa7008d
|
[maven-release-plugin] prepare release spring-security-3.0.0.M2
|
17 years ago |
Luke Taylor
|
d47abbc35f
|
SEC-1223: Added break to bindWithDnLoop when non-null use is returned.
|
17 years ago |
Luke Taylor
|
2f9a98c7ce
|
SEC-214: Update keywords.
|
17 years ago |
Luke Taylor
|
8ed9f8a057
|
Remove wrongly named file
|
17 years ago |
Luke Taylor
|
4df370b100
|
SEC-214: Add functionality to be able to use LDAP password policy request/response controls. Added PasswordPolicyAwareContextSource, ppolicy control implementations (from Sandbox) and modified BindAuthenticator to check for the presence of the response control, adding the control to the retured DirContextAdapter if appropriate. LdapUserDetailsImpl also contains the data for grace logins remaining and time till password expiry. Added OpenLDAP startup script with test data and integration test which operates against the data (must be run manually).
|
17 years ago |
Luke Taylor
|
719a5e09d8
|
SEC-1205: Added comment to Javadoc for PasswordComparisonAuthenticator to indicate that it won't work with SSHA passwords
|
17 years ago |
Luke Taylor
|
01b8def455
|
SEC-1145: Added test to confirm that there is no pooling issue in the trunk. There are already checks for the presence of the pooling flag.
|
17 years ago |
Luke Taylor
|
131ba5c62e
|
Reset poms to 3.0.0.CI-SNAPSHOT after tagging M1 release
|
17 years ago |
Luke Taylor
|
e2c218e8c9
|
[maven-release-plugin] prepare release spring-security-3.0.0.M1
|
17 years ago |
Luke Taylor
|
6d655aa514
|
SEC-1132: More refactoring to remove cycles ad reduce complexity metrics
|
17 years ago |
Luke Taylor
|
929b6bb1a0
|
Refactoring to remove warnings in LDAP module.
|
17 years ago |
Luke Taylor
|
22e7142f45
|
SEC-998: Bundlor enabled in web, ldap, config and core modules
|
17 years ago |
Luke Taylor
|
21e36e0a57
|
Updated version number from 2.5.0-SNPSHOT to 3.0.0.CI-SNAPSHOT
|
17 years ago |
Luke Taylor
|
1fa46f4ad2
|
SEC-1104: Added check of "running" flag in stop() method to prevent stopping twice.
|
17 years ago |
Luke Taylor
|
b2b2c95e55
|
SEC-1098: Added ignorePartialResultException property which is set on the LDAP template.
|
17 years ago |
Luke Taylor
|
c7baeab172
|
SEC-1117: Moved check for empty password from LdapAuthenticationProvider to BindAuthenticator to allow use with Ntlm.
|
17 years ago |
Luke Taylor
|
350f75f7f3
|
SEC-1084: Retain Authentication.details when authenticating in LdapAuthenticationProvider.
|
17 years ago |
Luke Taylor
|
93bdcccaee
|
SEC-1132: Moved userdetails into core and added core/authority sub-package
|
17 years ago |
Luke Taylor
|
10673780db
|
OPEN - issue SEC-1136: Removed SpringSecurityException. Introduced new AclException as base class for Acl module. Refactored JAAS authentication to map to AuthenticationExcpetions rather than SpringSecurityException. Modified ExceptionTranslationFilter to look explicitly for AuthenticationException or AccessDeniedException (which it should do since these are the only two it handles).
|
17 years ago |
Luke Taylor
|
ca7d055c2b
|
SEC-1132: Created core and authentication packages within core module.
|
17 years ago |
Luke Taylor
|
9efb5a7007
|
SEC-1132: Moved access-control/authorization specific code to org.sf.security.access package. Created provisioning package for user management classes to remove cyclical deps. Some other moving of classes to remove code tangles. Restructuring of portlet module under org.sf.security.portlet
|
17 years ago |
Luke Taylor
|
f746a20ab4
|
SEC-1132: package refactoring of non-core modules
|
17 years ago |
Luke Taylor
|
bec84f874a
|
SEC-1125: Further refactoring of web packages following creation of web module. Fixing samples.
|
17 years ago |
Luke Taylor
|
2a9a8a41db
|
SEC-1125: Created separate web module spring-security-web
|
17 years ago |
Luke Taylor
|
2c985a1c36
|
SEC-1126: separated out spring-security-config module containing namespace configuration classes and resources
|
17 years ago |