610 Commits (12c78791de53a1821e77c1136acd64eaff94de53)

Author SHA1 Message Date
Scott Battaglia 3d0f746719 SEC-224 20 years ago
Ben Alex 51f1b33af9 SEC-209: Make eventPublisher protected. 20 years ago
Luke Taylor 7e7920ce00 Fix for SEC-202. Intialize manager password to default "manager_password_not_set". 20 years ago
Scott Battaglia 5607da8d67 updated references from Yale CAS to JA-SIG CAS 20 years ago
Luke Taylor 6abceb7ab0 Additional changes related to SEC-192 (avoiding session creation when creating WebAuthenticationDetails). Also fixed Jalopy chaos in SwitchUserProcessingFilter. 20 years ago
Luke Taylor 52a212e609 Removed "== true" in boolean. 20 years ago
Luke Taylor 5475ab0575 Modify AbstractAuthenticationManager to transfer the details object from authentication request to the resulting authentication token, provided it has not already been set on the latter by an authentication provider. 20 years ago
Luke Taylor c88b9093c0 Remove unnecessary check for null. 20 years ago
Luke Taylor ee41d24447 Javadoc correction. 20 years ago
Luke Taylor e12c8310eb Remove unnecessary default constructors which throw IllegalArgumentException. Favours compile time over runtime errors. 20 years ago
Luke Taylor 4b4d4d3332 Added some uses of Spring Assert class and removed one to prevent unnecessary StringBuffer creation. 20 years ago
Luke Taylor 84ccd89061 More readable javadoc. 20 years ago
Luke Taylor cd7efaf567 Fix for SEC-189. Added getter for initialDirContextFactory. 20 years ago
Luke Taylor 6c29a6d17e Added test for immutability of authorities array. Refactored standard authorities array into an instance field. 20 years ago
Ben Alex 2ab5af0a69 SEC-188: Fix JavaDocs. 20 years ago
Ben Alex a28a932598 SEC-183: Minimise session creation as a consequence of SEC-168 and SEC-182 changes. 20 years ago
Ben Alex 0282696202 SEC-182: Remember-me compatibility with concurrent session support. 20 years ago
Ben Alex b1dd784dee SEC-180: BasicProcessingFilter should configurably ignore authentication failures. 20 years ago
Ben Alex e63b2ec9e6 Cleanup unused imports. 20 years ago
Ben Alex ae29498f75 SEC-158: X509 to support Authentication.isAuthenticated() as per usual contract. 20 years ago
Ben Alex 79287999dc SEC-178: Refactor AbstractAuthenticationToken. 20 years ago
Ben Alex 74de83e5f1 SEC-177: Add hashCode() method. 20 years ago
Ben Alex c9cee6651c SEC-176: Add hashCode() method. 20 years ago
Ben Alex 77be0009ad Correct equals(Object) method handling if both objects have null getDetails(). 20 years ago
Ben Alex 78df09db8a SEC-175: Add equals(Object) method. 20 years ago
Luke Taylor dc959b1847 Fix for SEC-159. Added clearContext() method to SecurityContextHolder and refactored code to use it instead of putting an empty context into the holder. 20 years ago
Ben Alex 8c0ce12332 SEC-169: Add SessionRegistry.getAllPrincipals() method. 20 years ago
Ben Alex 3a01e48b17 SEC-174: Correct IE6 bug with AuthenticationProcessingFilterEntryPoint. 20 years ago
Ben Alex 9d213f46a4 SEC-168: Prevent errors with concurrent session support. 20 years ago
Ben Alex 1fa6ac0975 SEC-164: Copy Authentication.getDetails() to returned Authentication object. 20 years ago
Luke Taylor 2daea069f9 Refactoring of BindAuthenticator to allow an extended version which uses ppolicy controls. Added no-cause constructor in LdapDataAccessException for use in data parsing errors. 20 years ago
Ben Alex ca1bf5cc21 SEC-170: AbstractAclVoter to support JoinPoint. 20 years ago
Luke Taylor eb7964f6e5 Clean imports. 20 years ago
Luke Taylor fe88d6ec17 SEC-134 fix. Authorities array is now copied on access. Also refactored token classes to move authorities to the base class. 20 years ago
Luke Taylor 842ad929a4 Change search object to use constructor injection (SEC-165) . 20 years ago
Ben Alex 9771b7817a SEC-144: Separate SecurityEnforcementFilter from FilterSecurityInterceptor. 20 years ago
Ben Alex fa4c2a6ade Correct bug with SEC-120 location of where filter chain proceeds. 20 years ago
Ben Alex 823f93fe3b SEC-163: Fix ClassCastException bug in MethodInvocationUtils, and add test to prove correct functionality. 20 years ago
Ben Alex ce907f2ddc SEC-153: Improve toString() method. 20 years ago
Ben Alex 484b0e3a51 SEC-126: Initial commit of WebInvocationPrivilegeEvaluator feature. 20 years ago
Ben Alex 0c89822c56 SEC-162: Properly handle null Authentication. 20 years ago
Ben Alex c8c7c24822 SEC-120: Remember-me to delegate to AuthenticationManager so authentication-specific behaviour (such as concurrent user management) can be applied. 20 years ago
Luke Taylor 9062b4c352 Improved solution to 1.4-compatible IllegalArgumentException with "cause" exception (as suggested on dev list). 20 years ago
Luke Taylor fbe5957c23 Add support for ldaps:// urls. (Fix for SEC-146). 20 years ago
Ben Alex 82be52cea0 SEC-123: Remove exception from no-arg constructor. 20 years ago
Ben Alex ea182f73fe SEC-145: Include nested exception. 20 years ago
Ben Alex 2459858f48 SEC-132: Refactor out getSessionId() to interface, so different Authentication.getDetails() implementations can be used. 20 years ago
Ben Alex 07ed2ca2f0 Initial commit. 20 years ago
Ben Alex ab223b8423 SEC-156: Use getName() instead of toString() as getName() is always the username whereas toString() contains extra information if the Authentication.getPrincipal() has been converted to a UserDetails. 20 years ago
Ben Alex 8f6275ab3e SEC-155: BasicaclEntryCache to provide "remove from cache" support. 20 years ago