Luke Taylor
f578915728
Test class for X509 filter.
21 years ago
Luke Taylor
af02c42e9f
First version that works.
21 years ago
Luke Taylor
fbb4bc0873
Added regexp matching within the DN to extract the user name.
21 years ago
Luke Taylor
29050b29b2
Dao populator tests for X.509. Tests matching of regexps in the certificate Subject to extract the user name.
21 years ago
Ben Alex
4763f953d3
FilterChainProxy now supports replacement of ServletRequest and ServetResponse by Filter beans.
21 years ago
Luke Taylor
5c86b97f37
First working (kind of) version.
21 years ago
Ben Alex
c5fe428400
Patch by Matt Raible which returns null if Authentication is anonymous.
21 years ago
Ben Alex
b898b87ffb
Enhance test coverage as part of diagnosis of reported bug at http://forum.springframework.org/viewtopic.php?p=15751 .
21 years ago
Ben Alex
15535fff41
SecurityEnforcementFilter caused NullPointerException when anonymous authentication used with BasicProcessingFilterEntryPoint.
21 years ago
Luke Taylor
08dbf66880
(Currently functionless) entry point implementation for X.509
21 years ago
Luke Taylor
aabcef4c69
Dao populator for X509, mirroring the CAS one.
21 years ago
Luke Taylor
fea1725f39
Removed inappropriate inheritance from AbstractProcessingFilter (doesn't make sense for X509 case).
21 years ago
Luke Taylor
ae91b58685
First stab at X509 authentication provider
21 years ago
Luke Taylor
da3801b914
Javadoc improvements.
21 years ago
Luke Taylor
559f480f4b
Corrected Javadoc typos.
21 years ago
Luke Taylor
ab6d43ff08
Corrected Javadoc typo.
21 years ago
Ben Alex
051a34f859
Support credentialsExpiredUrl as per request made in http://forum.springframework.org/viewtopic.php?t=3862 .
21 years ago
Luke Taylor
5c3799cd16
Changed "opal ticket" to "opaque ticket" in Javadoc.
21 years ago
Luke Taylor
124f33bb09
Corrected Javadoc typo
21 years ago
Luke Taylor
6b12779902
Minor Javadoc corrections
21 years ago
Luke Taylor
4ef54828c0
corrected javadoc link
21 years ago
Ben Alex
f1e071b0f1
Added remember-me services.
21 years ago
Ben Alex
0d33b06990
Fix NullPointerException if a pattern is given without any config attributes (eg /**/*.css=). Contributed by Konstantin Shaposhnikov.
21 years ago
Ben Alex
873c3f6c3d
Improve Linux and non-Sun JDK (specifically IBM JDK) compatibility.
21 years ago
Ben Alex
d47a2190f7
Correct test failure on high performance JREs.
21 years ago
Ray Krueger
44397bb05d
Committing ConcurrentSessionController feature and tests. Documentation is needed.
21 years ago
Ray Krueger
4125db5650
Added in a default constructor to use the original sessionid and a constructor for specifying the sessionId
21 years ago
Ben Alex
693ac5a24a
Anonymous principal support. As requested by the community at various times, including in http://forum.springframework.org/viewtopic.php?t=1925 .
21 years ago
Ray Krueger
3c4faf58c7
HttpSessionEventPublisher, HttpSessionCreatedEvent, HttpSessionDestroyedEvent
...
Used together to provide published events in the ApplicationContext about HttpSessions.
Useful for things like Single Session logins.
21 years ago
Ray Krueger
8b24b1cf7a
MockFilterChain extended TestCase but had no public constructor and no test methods.
...
The expectedToProceed test is internally handled by a static call to TestCase.assertTrue() and TestCase.fail()
21 years ago
Ben Alex
a3818184f4
Added Digest Authentication support (RFC 2617 and RFC 2069).
21 years ago
Ben Alex
dda66a0454
Significantly refactor "well-known location model" to authentication processing mechanism and HttpSessionContextIntegrationFilter model.
21 years ago
Ben Alex
ba02d45677
Clean up imports.
21 years ago
Ben Alex
e52f3eacb1
Use WebAuthenticationDetails for Authentication.getDetails() by default.
21 years ago
Ben Alex
a5ea6f5436
Rewrite FilterChainProxy to separate functionality from FilterToBeanProxy and properly implement filter chaining issues.
21 years ago
Ben Alex
57842d4ba8
IoC container vs servlet container lifecycle separation.
21 years ago
Ben Alex
44f1c83dab
Move MockFilterChain to external class.
21 years ago
Ben Alex
6d693ac0d4
Improve logging.
21 years ago
Carlos Sanchez
7c9fad0477
Added filter chain
21 years ago
Ben Alex
0b296e7cf0
Correct issue with JdbcDaoImpl default SQL query not using consistent case sensitivity as per http://forum.springframework.org/viewtopic.php?t=3526 .
21 years ago
Ray Krueger
1949c3b27e
Added AuthenticationException to the commence method signature of the AutenticationEntryPoint. The best example of this
...
is the BasicProcessingFilterEntryPoint where the authException.getMessage() is used to send back an informative 401,
instead of just the error code.
Added AccessDeniedException to the sendAccessDeniedError method signature. The accessDeniedException.getMessage() result
is used to send an invormative 403 error back to the servletResponse by default.
21 years ago
Ben Alex
beadf24610
Use static HttpServletResponse.SC_UNAUTHORIZED instead of 401 HTTP response code.
21 years ago
Ben Alex
6370fadfdc
FilterSecurityInterceptor now only executes once per request (improves performance with SiteMesh). Suggested by Sanjiv Jivan.
21 years ago
Ben Alex
cbe53e21b9
HttpSessionIntegrationFilter no longer creates a HttpSession unnecessarily.
21 years ago
Ben Alex
834f69168d
Support getUserPrincipal().
21 years ago
Ben Alex
0be77abe75
Allow empty passwords as per http://forum.springframework.org/viewtopic.php?p=13343 .
21 years ago
Ben Alex
4e6a4742bd
Tapestry integration improvements, as per http://forum.springframework.org/viewtopic.php?p=13327
21 years ago
Ray Krueger
82c15b1874
The JaasAuthenticationCallbackHandler handle method now takes a callback and the authentication in progress, the setAuthentication method has been removed.
...
The JaasAuthenticationProvider afterPropertiesSet method now makes use of the java.security.auth.login.config System property before trying to use the login.config.url.X properties.
21 years ago
Ben Alex
cc669f4e35
Retrieve bean from parent bean factory if not found, as per http://forum.springframework.org/viewtopic.php?t=3005 .
21 years ago
Ben Alex
7e234869a5
Make Serializable.
21 years ago