205ef42cfb
SEC-3147: Add error parameter for default authentication-failure-url
10 years ago
53f85e2151
SEC-2848: LogoutConfigurer allows setting clearAuthentication
10 years ago
15b4406015
SEC-3135: antMatchers(<method>,new String[0]) now passive
10 years ago
c93d6bc823
SEC-3120: Remove .and() from httpStrictTransportSecurity() doc
10 years ago
4144de9376
SEC-3082: make SavedRequest parameters case sensitive
10 years ago
0981cd975f
SEC-3120: Reference hsts() -> httpStrictTransportSecurity()
10 years ago
be303b15d1
SEC-3128: RoleVoter supports null Authentication
10 years ago
6f1bb705ac
SEC-3135: antMatchers now allows method and no pattern
...
Previously, antMatchers(POST).authenticated() was not allowed. Instead
users had to use antMatchers(POST, "/**").authenticated().
Now we default the patterns to be "/**" if it is null or empty.
10 years ago
8f13beccb7
SEC-2190: Fix Javadoc
10 years ago
8b641e5f79
SEC-2190: Support WebApplicationContext in ServletContext attribute
10 years ago
5c73816a1a
SEC-3108: DigestAuthenticationFilter should use SecurityContextHolder.createEmptyContext()
10 years ago
69274d9aa8
SEC-2521: Improve StandardPasswordEncoder performance
10 years ago
a88ac0fcc1
SEC-3109: Fix web tests
10 years ago
bd221739c7
SEC-3109: DelegatingSecurityContextExecutor fails with same Thread
...
Previously DelegatingSecurityContextRunnable and DelegatingSecurityContextCallable
would not setup the SecurityContext if it was on the same thread as it was created.
This was intended to fix SEC-3031 but simply caused more problems.
This commit changes the strategy to keep track of the previous SecurityContext
and restore it (or clear it out if it was originally empty).
10 years ago
95ea86b48d
SEC-3057: Include all *.txt & *.jar in dist zip
10 years ago
861ec76991
SEC-3133: Correct test doc username parameter
10 years ago
f76bf96e14
SEC-3132: securityBuilder cannot be null
...
If a custom SecurityConfiguererAdapter applies another
SecurityConfigurerAdapter it caused an error securityBuilder cannot be null.
This commit fixes this.
10 years ago
8858419696
SEC-3052: Doc DEFAULT_MATCHER->DEFAULT_CSRF_MATCHER
10 years ago
dd092431a0
SEC-2941: Default RequestPostProcessor overrides
...
Previously a default RequestPostProcessor overrode additional
RequestPostProcessor instances added to the request. This was due to
SPR-12945. Now that SPR-12945 is fixed, this commit adds a test to
ensure this stays fixed.
10 years ago
b9f8af3096
SEC-3063: rm ConditionalOnMissingBean for @Primary
...
ConditionalOnMissingBean can only work in a Spring Boot environment. This
means this approach is flawed.
Instead users that wish to override requestDataValueProcessor can use
@Primary .
10 years ago
cda6532c43
SEC-3070: Logout invalidate-session=false and Spring Session doesn't
...
work
10 years ago
3925ed90c4
SEC-3124: Fix broken Javadoc related to `<` and `>`
10 years ago
81d61c2715
Merge pull request #227 from zshift/master
...
Fixed incorrect dn.
10 years ago
21c0542487
SEC-3117: Update users.ldif
...
Fixed incorrect dn.
10 years ago
5f84902e72
Merge pull request #200 from ckarawani/master
...
SEC-2757: Removed assertion of 'sn' when creating LdapUserDetails
10 years ago
8baafbb2f2
SEC-3116: Polish WebSecurity Javadoc
10 years ago
8698161463
Update users.ldif
...
Fixed incorrect dn.
10 years ago
c8f598778f
Polish snasphot -> snapshot
10 years ago
29f2cc0ab1
snasphot -> snapshot
10 years ago
79ea541d3e
Merge pull request #224 from djechelon/patch-1
...
Update messages_it.properties
10 years ago
af363ecc2c
Merge pull request #226 from nivenoct/master
...
Fix reference to Null Object pattern in the manual
10 years ago
777431758d
Fix reference to Null Object pattern in the manual
10 years ago
e6ed4441c4
Update messages_it.properties
11 years ago
a00a7dabd8
Merge pull request #221 from codingdiscer/master
...
Fix reference to Spring Security version in the manual (3.0->4.0)
11 years ago
09c4765191
Fix reference to Spring Security version in the manual
11 years ago
50ff81033c
Add coreInstall Task
11 years ago
81e2778106
SEC-3097: Change CsrfRequestPostProcessor to use TestCsrfTokenRepository
...
This ensures that when using a wrapped HttpServletRequest (i.e. Spring
Session) that the CSRF token test support still works.
11 years ago
ea94706319
SEC-3097: Use MockMvc for SecurityMockMVcRequestPostProcessorsCsrfTests
...
This is necessary because the changes for this issue are going to make
the mocked version of the tests invalid.
11 years ago
a9a5377e4a
Unused import
...
An import unsued
11 years ago
5edfeb4091
Unused import
...
And import is unused
11 years ago
97969ea9d2
SEC-2059: Ignore Query String for Resolving Path Variables
11 years ago
adfeb96e2f
Update to Spring 4.2.1
11 years ago
bac980cbcb
SEC-2868: Simplify custom UserDetailsService Java Config
...
Exposing a UserDetailsService as a bean is now all that is necessary
for Java based configuration. Additionally, an optional PasswordEncoder
bean can be used to configure password encoding.
11 years ago
35393098f8
SEC-3094: Add @WithAnonymousUser & anonymous() MockMvcRequestPostProcessor
11 years ago
6b05b298ff
SEC-2059: Support Path Variables in Web Expressions
11 years ago
5f328b1178
SEC-2709: Fix WithSecurityContextTestExecutionListener Order
11 years ago
327695ab0c
SEC-3084: Doc SecurityContextRequestPostProcessorSupport & SecurityContextHolder
11 years ago
c79bceab03
SEC-2956: Improve AnnotationParameterNameDiscoverer Performance
11 years ago
cbed1d75ee
SEC-3076: Add Method Level Security Meta Annotations
11 years ago
7708129aad
SEC-3080: Remove invalid characters from reference
11 years ago
Kazuki Shimizu
Rob Winch
izeye
Rob Winch
Peter David Faria
zhanhb
Alex Derkach
/usr/local/ΕΨΗΕΛΩΝ
Dan Dowma
David Avenante