spring-security

Commit Graph

Author	SHA1	Message	Date
Luke Taylor	1d96283876	Removed commented out line.	18 years ago
Luke Taylor	ef44bd91f2	SEC-933: Added test for security pointcut applied to a UserDetailsService.	18 years ago
Luke Taylor	d7926f3557	SEC-943: Forgot to commit tests.	18 years ago
Luke Taylor	e5d86b13b7	SEC-941: Embedded ldap-server uses hard-coded ldap url for importing ldif files http://jira.springframework.org/browse/SEC-941. Changed LdapUtils.parseRootDnFromUrl to use URI.getRawPath() so the returned root value still contains the escaping. I think this should be Ok.	18 years ago
Ray Krueger	3393ea7aaa	SEC-923: Realm support for discovering relying parties. A new "realmMapping" property can be configured on the OpenIDAuthenticationProcessingFilter to map the "return_to" url to a realm. If there is no mapping present the "return_to" url will be parsed and the protocol, hostname and port will be used with a trailing "/"	18 years ago
Luke Taylor	67e5afbb79	OPEN - issue SEC-881: PreAuthenticatedFilter continues filter chain after unsuccessfulAuthentication(...) http://jira.springframework.org/browse/SEC-881. Updated Javadoc.	18 years ago
Luke Taylor	000bb1cbed	OPEN - issue SEC-881: PreAuthenticatedFilter continues filter chain after unsuccessfulAuthentication(...) http://jira.springframework.org/browse/SEC-881. Added test class.	18 years ago
Luke Taylor	243c4f22d4	OPEN - issue SEC-899: GrantedAuthorityImpl.compareTo should handle null roles http://jira.springframework.org/browse/SEC-899. Changed to return -1 when compared to custom auhority which returns null from getAuthority()	18 years ago
Luke Taylor	d4c105d8ba	OPEN - issue SEC-934: security:intercept-url throws NPE if defined twice with the same url http://jira.springframework.org/browse/SEC-934. Added log warning when the same url is used multiple times.	18 years ago
Luke Taylor	f6ff958411	Renamed rnc file.	18 years ago
Luke Taylor	4bb3eb12c3	SEC-933: global-method-security and aop:aspectj-autoproxy throws NullPointerException in some situations http://jira.springframework.org/browse/SEC-933. Removed the setting of the attributeSource field from the interceptor in MethodDefinitionSourceAdvisor as this was overwriting the version supplied with the constructor with null (causing the NPE). Also implemented lazy initialization of the authentication provider list from the bean factory in a custom NamespaceAuthenticationManager (extends ProviderManager and introspects the BeanFactory when getProviders() is first called). This should prevent the perennial problem of the eager initialization of UserDetailsService and other beans when the interceptor is eagerly initialized by something like aspectj-autoproxy.	18 years ago
Luke Taylor	f538a36cd3	SEC-939: Changed XML header to include schema locations for clarification.	18 years ago
Luke Taylor	6e06789a28	SEC-937: Added CAS logout filter to sample application	18 years ago
Luke Taylor	6b45eda37c	SEC-877, SEC-553: Added code to sandbox/other	18 years ago
Luke Taylor	f453264bde	SEC-909: custom remember me services doesn't get registered as logout handler http://jira.springframework.org/browse/SEC-909. HttpSecurityBeanDefinitionParser now passes the resolved RememberMeServices bean name to the LogoutBeanDefinitionparser so that it an use it explicitly.	18 years ago
Luke Taylor	1ddc033fe5	SEC-903: Wrong attribute mapping when using jdbc-user-service bean http://jira.springframework.org/browse/SEC-903. Corrected property name set by JdbcUserServiceBeanDefinitionParser (was setting authorities query rather than groups one).	18 years ago
Luke Taylor	e303e8b71a	SEC-924: Implement automatic injection of namespace created RememberMeServices into custom AbstractProcessingFilter based beans. http://jira.springframework.org/browse/SEC-924. Delayed setting of NullRememberMeServices in AbstractProcessingFilter until afterPropertiesSet method is called, allowing the null value to be read by the namespace and the confgiured RememberMeServices bean injected.	18 years ago
Luke Taylor	bf5896600e	OPEN - issue SEC-913: SwitchUserProcessingFilter modifies the switchFailureUrl member variable on failure http://jira.springframework.org/browse/SEC-913. Applied patch as suggested (use sendRedirect method for failure URL).	18 years ago
Luke Taylor	b4c63db680	SEC-921: Improved messages_zh_CN.properties for Chinese http://jira.springframework.org/browse/SEC-921. Added contributed file.	18 years ago
Luke Taylor	a56c13fb22	SEC-912: Added callback methods to BasicProcessingFilter for successful and unsuccessful authentication.	18 years ago
Luke Taylor	697c7c5f48	SEC-918: Added more info on DB schema to javadoc	18 years ago
Luke Taylor	b32a418175	Added mmore info on 'springSecurityFilter' chain and warning not to use this bean name explicitly	18 years ago
Luke Taylor	4cebc67088	Added example config for JDBCDaoImpl and user-service-ref in namespace	18 years ago
Luke Taylor	fbc7c31b5e	SEC-918: Added DDL or user and authorities tables to section on JDBC UserDetailsService	18 years ago
Luke Taylor	7dc998196a	Added faq on JDK and Spring version requirements	18 years ago
Luke Taylor	768219af81	Added exta sub-headings to facilitate searching for particular topics from content page	18 years ago
Luke Taylor	7039bfdfbe	Minor text spacing correction	18 years ago
Luke Taylor	d13b32c77f	Clarified that paths are relative to the checked out source tree	18 years ago
Luke Taylor	dce709a669	Minor code formatting in docbookk	18 years ago
Luke Taylor	d9634bcb39	SEC-920: Update preauth sample to make use of internal authentication manager http://jira.springframework.org/browse/SEC-920. Updated context file to use <custom-authentication-provider>.	18 years ago
Luke Taylor	8fe1b4b402	SEC-914: Slight modification of tld description text for readability.	18 years ago
Luke Taylor	30f1e5729a	SEC-914: Corrected tagllib descriptor documentation for var attribute in authentication tag.	18 years ago
Luke Taylor	6d179122d3	SEC-916: Added Spanish messages contribution.	18 years ago
Luke Taylor	bd4ed794ea	SEC-904: Renamed SessionRegistryImplMultithreadedTests	18 years ago
Luke Taylor	2cda6242c8	SEC-904: Moved multi-threaded tests into sandbox	18 years ago
Luke Taylor	479693ced7	SEC-900: Added extra checks on expiry time	18 years ago
Luke Taylor	d5df35f739	Update sandbox poms post-release	18 years ago
Luke Taylor	b99a5dec29	Various mods to heavyduty app	18 years ago
Luke Taylor	e1fcacbca5	Added general question on other security concerns	18 years ago
Luke Taylor	bf45ff94e7	SEC-901: Improve docs on custom-filter and avoiding conflicts with namespace filters	18 years ago
Luke Taylor	c372c2df87	SEC-896: Changed result.toString() to String.valueOf(result) in tag class to prevent NPE when value of property is null	18 years ago
Luke Taylor	dd5edbcce9	Added labels to faqs	18 years ago
Luke Taylor	3a25766da1	Adding sub-headings etc to 'secure objects' section	18 years ago
Luke Taylor	6ff0b969d5	Corrected ldap sample config (traditional bean version was wrong)	18 years ago
Luke Taylor	775a6c3939	[maven-release-plugin] prepare for next development iteration	18 years ago
Luke Taylor	87d50aecce	[maven-release-plugin] prepare release spring-security-parent-2.0.3	18 years ago
Luke Taylor	125f5911c0	Heavyduty sample additions to check multiple-parameter values	18 years ago
Luke Taylor	57558de3ec	Added error page URL to openid login sample	18 years ago
Luke Taylor	456e737d31	Corrections to readme	18 years ago
Luke Taylor	66008817c4	Changed OSGi version prior to 2.0.3 release	18 years ago

1 2 3 4 5 ...

2991 Commits (1d962838768e6e7de30b901b520a87e1d69dd402) All Branches Search

2991 Commits (1d962838768e6e7de30b901b520a87e1d69dd402)

All Branches