Luke Taylor
06368f956a
Minor doc/javadoc updates to clarify use of UserDetailsContextapper.
16 years ago
Luke Taylor
efb600166a
SEC-1488: Remove commons-logging dependencies from maven poms.
16 years ago
Luke Taylor
e1f575c545
SEC-1480: Add simple equals and hashcode methods based on DN value to LdapUserDetailsImpl to allow its use as a map key (in SessionRegistry, for example).
16 years ago
Luke Taylor
2b9beffd08
SEC-1444: Fix JNDI escaping problems in LDAP authentication.
...
CompositeName adds quotes to names which contain a forward slash ("/") character. These are automatically removed by Spring LDAP's DistinguishedName, but only if they are at the ends of the String. Since we were preprending the base to the (quoted) DN, resulting in something like ["cn=joe/b",ou=people], this was causing problems with the DN value returned from the search. Additionally, the bind succeeds when a DN is used with a slash, but the subsequent call to getAttributes() fails. This call now passes in a DistinguishedName for the user DN instance instead of a String.
16 years ago
Luke Taylor
977bc2b164
SEC-1433: Reduce the number of direct dependencies on DataAccessException from spring-tx.
...
It is still required as a compile-time dependency by classes which use Spring's JDBC support, but it doesn't really have to be used in many interfaces and classes which are not necessarily backed by JDBC implementations.
16 years ago
Luke Taylor
f3264ba9ab
Addition of commons-logging exclusions and adjustments to pom generation.
16 years ago
Luke Taylor
2f1479785e
Refactoring to remove remaining circular dependencies indicated by structure101.
16 years ago
Luke Taylor
f3f84da625
Increase upper bounds of Spring and Spring Security versions in bundlor templates to 3.2.0.
16 years ago
Luke Taylor
2ee7696bf4
Update version number to 3.1.0.CI-SNAPSHOT.
16 years ago
Luke Taylor
44f45d21f0
3.0.2 release. Update version in build files.
16 years ago
Luke Taylor
c12c43da9e
Javadoc fixes.
16 years ago
Luke Taylor
36612377e2
Replace package.html with package-info.java files, creating new ones where missing and updating outdated contents.
16 years ago
Luke Taylor
23511c930f
Standardising slf4j versions.
16 years ago
Luke Taylor
10cd080090
SEC-1356: Update createUser method in LdapUserDetailsManager to create the LDAP entry before adding authorities. Prevents removal of authorities for an existing user.
16 years ago
Luke Taylor
51dfc0fb39
Set versions to 3.0.2-CI-SNAPSHOT, post release.
16 years ago
Luke Taylor
05634f97dc
Updated version numbers for 3.0.1 release.
16 years ago
Luke Taylor
b323098167
Added gradle build files for taglibs, tutorial, contacts and openid.
...
Changed build file names to match module names (by manipulating the project objects in the settings.gradle file).
16 years ago
Luke Taylor
052537c8b0
Removing $Id$ markers and stripping trailing whitespace from the codebase.
16 years ago
Luke Taylor
115d5b84ff
[maven-release-plugin] prepare for next development iteration
16 years ago
Luke Taylor
6c6ef08353
[maven-release-plugin] prepare release spring-security-3.0.0.RELEASE
16 years ago
Luke Taylor
e64866ae6a
Updated bundlor templates and introduced spring.version variable
16 years ago
Luke Taylor
fcce29f8df
SEC-1326: Updating dependencies to match Spring versions. Removing unused deps.
16 years ago
Luke Taylor
aeed49393c
Switching StringBuffer to StringBuilder throughout the codebase (APIs permitting).
16 years ago
Luke Taylor
cad32ffe39
SEC-1325: Tighten up Authentication interface contract to disallow null authorities. Modified internals of AbstractAuthenticationToken to use an empty list instead of null. Clarified Javadoc. removed unnecessary null checks in classes which use the interface.
16 years ago
Luke Taylor
520e733cb2
[maven-release-plugin] prepare for next development iteration
16 years ago
Luke Taylor
f2cf17bd49
[maven-release-plugin] prepare release spring-security-3.0.0.RC2
16 years ago
Luke Taylor
dab76249db
Added gradle build files (experimental)
16 years ago
Luke Taylor
9d85168a10
Fix apache-ds shard-ldap version in template.mf (should be 0.9.15)
16 years ago
Luke Taylor
3f963ef8ca
Restore versions and svn URLs in trunk (release plugin fail)
16 years ago
Luke Taylor
af563e826c
[maven-release-plugin] prepare release spring-security-3.0.0.RC1
16 years ago
Luke Taylor
021f650f3d
Tidying up ldap pom
16 years ago
Luke Taylor
908e88b802
Import cleaning.
16 years ago
Luke Taylor
0e9452c17c
SEC-1074: Customized interceptor list for DefaultDirectoryService, including removal of SchemaInterceptor.
16 years ago
Luke Taylor
caff3ee9ba
SEC-1231: Authentication.getAuthorities should be of type Collection<GrantedAuthority> and not List<GrantedAuthority>. Refactored the interface and related classes to match (UserDetails etc).
16 years ago
Luke Taylor
245fc96137
SEC-1075: Update the embedded LDAP server to use Apache DS 1.5. Updated to use the new 1.5.5 release for the embedded server.
17 years ago
Luke Taylor
f6f5855b52
SEC-1222: Provide a constructor for LdapUserDetailsService that does not require an LdapAuthoritiesPopulator. Done.
17 years ago
Luke Taylor
5a8772df5b
Reset pom versions post release
17 years ago
Luke Taylor
0e5aa7008d
[maven-release-plugin] prepare release spring-security-3.0.0.M2
17 years ago
Luke Taylor
d47abbc35f
SEC-1223: Added break to bindWithDnLoop when non-null use is returned.
17 years ago
Luke Taylor
2f9a98c7ce
SEC-214: Update keywords.
17 years ago
Luke Taylor
8ed9f8a057
Remove wrongly named file
17 years ago
Luke Taylor
4df370b100
SEC-214: Add functionality to be able to use LDAP password policy request/response controls. Added PasswordPolicyAwareContextSource, ppolicy control implementations (from Sandbox) and modified BindAuthenticator to check for the presence of the response control, adding the control to the retured DirContextAdapter if appropriate. LdapUserDetailsImpl also contains the data for grace logins remaining and time till password expiry. Added OpenLDAP startup script with test data and integration test which operates against the data (must be run manually).
17 years ago
Luke Taylor
719a5e09d8
SEC-1205: Added comment to Javadoc for PasswordComparisonAuthenticator to indicate that it won't work with SSHA passwords
17 years ago
Luke Taylor
01b8def455
SEC-1145: Added test to confirm that there is no pooling issue in the trunk. There are already checks for the presence of the pooling flag.
17 years ago
Luke Taylor
131ba5c62e
Reset poms to 3.0.0.CI-SNAPSHOT after tagging M1 release
17 years ago
Luke Taylor
e2c218e8c9
[maven-release-plugin] prepare release spring-security-3.0.0.M1
17 years ago
Luke Taylor
6d655aa514
SEC-1132: More refactoring to remove cycles ad reduce complexity metrics
17 years ago
Luke Taylor
929b6bb1a0
Refactoring to remove warnings in LDAP module.
17 years ago
Luke Taylor
22e7142f45
SEC-998: Bundlor enabled in web, ldap, config and core modules
17 years ago
Luke Taylor
21e36e0a57
Updated version number from 2.5.0-SNPSHOT to 3.0.0.CI-SNAPSHOT
17 years ago