Luke Taylor
|
2a9a8a41db
|
SEC-1125: Created separate web module spring-security-web
|
17 years ago |
|
Luke Taylor
|
2c985a1c36
|
SEC-1126: separated out spring-security-config module containing namespace configuration classes and resources
|
17 years ago |
|
Luke Taylor
|
a45ba138f7
|
SEC-1121: InMemoryResource.equals() is wrong. Corrected as suggested.
|
17 years ago |
|
Luke Taylor
|
4aff4b2350
|
SEC-1123: Renamed ObjectDefinitionSource to SecurityMetadataSourceand performed related refactoring
|
17 years ago |
|
Luke Taylor
|
4aae5ec42e
|
SEC-1124: Refactored LDAP code into separate module
|
17 years ago |
|
Luke Taylor
|
a0f3015ac6
|
SEC-1086: AccessDecisionManager implementations now log debug messages giving the results returned by each voter polled.
|
17 years ago |
|
Luke Taylor
|
d163cd7d18
|
SEC-1099: Translation of message.properties in Brazilian Portuguese. Added file.
|
17 years ago |
|
Luke Taylor
|
c0638e9c8d
|
SEC-1110: Localization (messages_ko_KR.properties). Added.
|
17 years ago |
|
Luke Taylor
|
591681c180
|
Upgrade to Spring M2 and correct expression classes and pom files to match changes
|
17 years ago |
|
Luke Taylor
|
98593b7c78
|
SEC-1120: Added Portuguese messages file
|
17 years ago |
|
Luke Taylor
|
ccf422af5a
|
SEC-1070: AbstractRetryEntryPoint always uses RetryWithHttpEntryPoint logger. Converted to protected (non-static) and used getClass().
|
17 years ago |
|
Luke Taylor
|
9de9f638fe
|
SEC-1083: Removed unnecessary import
|
17 years ago |
|
Luke Taylor
|
30748e8615
|
SEC-1083: PersistentTokenBasedRememberMeServices does not clear tokens on logout. Override logout method to remove tokens for user.
|
17 years ago |
|
Luke Taylor
|
b7557d017e
|
Corrected Javadoc typo.
|
17 years ago |
|
Luke Taylor
|
ef3ea65fdb
|
Switching back to 2.5.0-SNAPSHOT after tagging M1 release
|
17 years ago |
|
Luke Taylor
|
fc5f50501e
|
[maven-release-plugin] prepare release 2.5.0.M1
|
17 years ago |
|
Luke Taylor
|
ddffdf1699
|
SEC-745: Renamed failureHandler and successHandler to have prefix 'authentication'
|
17 years ago |
|
Luke Taylor
|
4a41416c9b
|
Tidying up and removing compiler warnings.
|
17 years ago |
|
Luke Taylor
|
f5d2e7a7ce
|
Make error message when multiple UserDetailsServices are found more explicit.
|
17 years ago |
|
Luke Taylor
|
9cb361e88a
|
SEC-745: Added LogoutSuccessHandler strategy for use in LogoutFilter.
|
17 years ago |
|
Luke Taylor
|
66e586ec67
|
Added Id keyword.
|
17 years ago |
|
Luke Taylor
|
cc5966bc7e
|
Tidying up, removing compiler warnings etc.
|
17 years ago |
|
Luke Taylor
|
8154161ef5
|
SEC-1035: Updated build to use Spring 3.0.0.M1 Release
|
17 years ago |
|
Luke Taylor
|
8f598e9b11
|
SEC-1052: Add support for the namespace option 'disable-url-rewriting'.
|
17 years ago |
|
Luke Taylor
|
171456a26c
|
SEC-1018: Changes to allow external reference to SaltSource bean from the namespace.
|
17 years ago |
|
Luke Taylor
|
00125cddee
|
SEC-1016: Moved the MapBasedDefinitionSource to the top of the list of delegates (before expressions), but changed the code to only add it if there are pointcuts defined, so there should be no unnecessary overhead.
|
17 years ago |
|
Luke Taylor
|
585e5f393a
|
Added warning suppression for deprecation.
|
17 years ago |
|
Luke Taylor
|
d8b5f770e9
|
Added warning suppression for deprecation.
|
17 years ago |
|
Luke Taylor
|
db5f1e69f1
|
SEC-949: Added the option of specifying -1 as the token-validity-seconds value in order to set the cookie maxAge to expire when the browser closes.
|
17 years ago |
|
Luke Taylor
|
c2e688610c
|
SEC-1011: Introduced methods for extracting the remember-me cookie and for creating the returned token.
|
17 years ago |
|
Luke Taylor
|
998f0b3ea1
|
SEC-993: Updated retrievePassword method to return null if an Authentication object with null credentials is presented (e.g. with OpenID). Prevents NPE when toString() is called.
|
17 years ago |
|
Luke Taylor
|
d0fcbd9baf
|
Tidying up Javadoc.
|
17 years ago |
|
Luke Taylor
|
a1bd48733a
|
Minor Javadoc correction.
|
17 years ago |
|
Luke Taylor
|
74fd5fe8a4
|
Finish refactoring JdbcDaoIml to remove MappingSqlQuery objects. Updated Javadoc to avoid user confusion.
|
17 years ago |
|
Luke Taylor
|
b24cc17dea
|
SEC-1052: Added "disableUrlRewriting" parameter to HttpSessionSecurityContextRepository.
|
17 years ago |
|
Luke Taylor
|
bf409b5b25
|
Improvements to Javadoc.
|
17 years ago |
|
Luke Taylor
|
f54d7ee6bc
|
SEC-535: Added "postOnly" flag to AuthenticationProcessingFilter, defaulting to "true" so that only POST requests are allowed by default.
|
17 years ago |
|
Luke Taylor
|
898ef36d02
|
SEC-959: Converted SwitchUserFilter to use new Authentication success and failure strategies from SEC-745 for managing redirects.
|
17 years ago |
|
Luke Taylor
|
c3181d9db0
|
SEC-1063: Moved the justUseSavedRequestOnGet property to ExceptionTranslationFilter. If set, it will not store the SavedRequest for unless the request is a GET.
|
17 years ago |
|
Luke Taylor
|
40ccd3be11
|
SEC-1058: Further refactoring to remove use of getDefaultTargetUrl(). Subclasses now pass the default value as a constructor argument.
|
17 years ago |
|
Luke Taylor
|
fcc68e636e
|
SEC-1062: Added authentication-success-handler-ref and authentication-failure-handler-ref to the namespace definition.
|
17 years ago |
|
Luke Taylor
|
a0bcf7184c
|
SEC-1061: Renamed serverSideRedirect property.
|
17 years ago |
|
Luke Taylor
|
cf3cac90ad
|
SEC-1058, SEC-745: Updating comments
|
17 years ago |
|
Luke Taylor
|
3f38035057
|
SEC-1058: Renamed "forwardToDestination" to "useForward" for simplicity and consistency with the namespace.
|
17 years ago |
|
Luke Taylor
|
2927b8464f
|
SEC-1058: Substantial refactoring of AbstractProcessingFilter to use AuthenticationFailureHandler strategy. Also changed attemptAuthentication method to take a response object and have the option of returning null, to allow OpenIDAuthenticationProcessingFilter to work without having to throw exceptions between the template methods (which made the logic very hard to follow). The OpenID filter now redirects to the OpenID provider service from this method, rather than treating it as a temporary failure and throwing OpenIDAuthenticationRequiredException.
|
17 years ago |
|
Luke Taylor
|
839279161d
|
SEC-745: Added concrete failure handling strategies.
|
17 years ago |
|
Luke Taylor
|
6664f57ff6
|
SEC-992: Removed the line setting returningObj to false.
|
17 years ago |
|
Luke Taylor
|
10e4d1fe1a
|
SEC-1058: Partial refactoring of AbstractProcessingFilter. It now uses the injected SuccssfulAuthenticationHandler strategy instead of managing everything itself. The default implementation is SavedRequestAwareSuccessfulAuthenticationHandler which encapsulates most of the filter's success logic along with the code which was previously in TargetUrlResolver. Removed TargetUrlResolver.
|
17 years ago |
|
Luke Taylor
|
615194710e
|
SEC-745: Created AuthenticationFailureHandler and AuthenticationSuccessHandler strategy interfaces.
|
17 years ago |
|
Luke Taylor
|
48dce501ce
|
SEC-942: Added createEmptyContext() method to SecurityContextHolderStrategy and SecurityContextHolder to encapsulate the context implemetentation in one place. HttpSessionSecurityContextRepository calls this method when it needs a new context to store in the session.
|
17 years ago |
