spring-security

Author	SHA1	Message	Date
Luke Taylor	41e06152b3	SEC-1420: JSP for itest of authentication tags with and without escaping.	16 years ago
Luke Taylor	a7e21318bf	SEC-1425: Replace use of Java 1.6 String.isEmpty().	16 years ago
Luke Taylor	bc6aae132b	SEC-1420: Add htmlEscape attribute to authentication JSP tag. This allows HTML escaping to be disabled if required.	16 years ago
Luke Taylor	b46ae6ac62	SEC-1425: Add check for empty cookie in AbstractRememberMeServices. Prevents ArrayOutOfBoundsException later when processing the tokeniszed cookie.	16 years ago
Luke Taylor	317da55cd0	SEC-1423: Cache PointcutExpression instances in ProtectPointcutPostProcessor for more efficient startup.	16 years ago
Luke Taylor	9e751e22c8	Refactoring to remove remaining circular dependencies indicated by structure101.	16 years ago
Luke Taylor	4d65b35827	Minor gradle 0.9 syntax change.	16 years ago
Luke Taylor	9831980bc2	Update versions to 3.0.3.CI-SNAPSHOT.	16 years ago
Luke Taylor	44f45d21f0	3.0.2 release. Update version in build files.	16 years ago
Luke Taylor	d2b2ca3bc6	SEC-1387: Use a transient object as the advice monitor, rather than a Serializable. No need for an anonymous inner class.	16 years ago
Luke Taylor	97d04b73c1	Upgrade to Spring 3.0.1.	16 years ago
Luke Taylor	10dc72b017	SEC-1387: Support serialization of security advised beans. MethodSecurityMetadataSourceAdvisor now takes the SecurityMetadataSource bean name as an extra constructor argument and re-obtains the bean from the BeanFactory in its readObject method. Beans that are advised using <global-method-security> should therefore now be serializable.	16 years ago
Luke Taylor	14ae36ac3b	SEC-1412: Modify DefaultSavedRequest to ignore If-Not-Matched header. The browser (or at least Firefox) does not send it after a redirect, and it causes problems with Spring's ShallowEtagHeaderFilter if it is stored and returned by the saved request.	16 years ago
Luke Taylor	9bdc012c69	Minor corrections to Session Management chapter of ref manual.	16 years ago
Luke Taylor	c0579230b2	Correct package names in ref manual docbook. Minor change to namespace appendix.	16 years ago
Luke Taylor	5b5934144a	Avoid infinite loop in InterceptMethodsBeanDefinitionDecoratorTests when upgrading to Spring 3.0.1. Converted test target to implement ApplicationListener<SessionCreatedEvent> so that it doesn't receive events from its own interceptor (which are in turn intercepted).	16 years ago
Luke Taylor	bd635edc31	SEC-1410: Makes sure usernames which are OpenID https identities are detected as well as http ones. Using ":" as the token delimiter means we accidentally mistake the URL for two tokens. This had previously been fixed for http URLs but not https ones.	16 years ago
Luke Taylor	1719bdebeb	Changed classes output dir names in core modules for better display in structure diagram	16 years ago
Luke Taylor	c1133d1ef3	Removed unused import in DelegatingAuthenticationEntryPoint and corrected test class name.	16 years ago
Luke Taylor	d30e31d816	Remove unnecessary @SuppressWarnings and inline dependency from ELRequestMatcher (util package) to core ExpressionUtils.	16 years ago
Luke Taylor	dbee91002e	Deprecate EncryptionUtils.	16 years ago
Luke Taylor	c12c43da9e	Javadoc fixes.	16 years ago
Luke Taylor	36612377e2	Replace package.html with package-info.java files, creating new ones where missing and updating outdated contents.	16 years ago
Luke Taylor	e729819ce0	Updated incorrect package names in docbook	16 years ago
Luke Taylor	1e4f451352	Moved DelegatingAuthenticationEntryPointTest-context.xml to test/resources	16 years ago
Luke Taylor	dcbdfc2026	SEC-1396: Implement eager saving of SecurityContext in SessionManagementFilter on authentication. The user is then seen as being authenticated to further (re-entrant) requests which occur before the existing request has completed. The saving logic is contained with the SecurityContextRepository implementation.	16 years ago
Luke Taylor	403f8da79a	Added missing jettyVersion variable to build.gradle.	16 years ago
Mike Wiesner	90d6ff1fde	SEC-1406: Create a DelegatingAuthenticationEntryPoint	16 years ago
Mike Wiesner	d32b078a8c	SEC-1406: Create a DelegatingAuthenticationEntryPoint	16 years ago
Luke Taylor	e678ba7283	Improvements to itest-web subproject. Added to gradle build. Updated deps (testng and jwebunit). New test added for persistent remember-me.	16 years ago
Luke Taylor	70ef0d8b3e	Added extra test to itest/context as POC of using extra interceptor with http ns.	16 years ago
Luke Taylor	23511c930f	Standardising slf4j versions.	16 years ago
Luke Taylor	017dad8f5d	Added support for fop extensions in PDF generation.	16 years ago
Luke Taylor	2173029216	SEC-1404: Use a factory method to convert the path to lower case for use in the filter-chain map. Delays the conversion till after palceholders have been substituted, preventing the placeholder from being converted (or the value not being converted).	16 years ago
Mike Wiesner	d2413cf237	SEC-1406: Create a DelegatingAuthenticationEntryPoint	16 years ago
Luke Taylor	5753d69465	SEC-1404: Updated test for placeholders in intercept-url elements to check they work for filter='none' elements	16 years ago
Luke Taylor	81657d0efc	SEC-1403: Corrected interface name.	16 years ago
Luke Taylor	08c7155ab5	SEC-1404: Refactored IP subnet matching into IpAddressMatcher class to allow it to be used outside expressions.	16 years ago
Luke Taylor	1ecd3e228b	SEC-1405: added RequestMatcher interface.	16 years ago
Luke Taylor	2f40088fe7	Change spring-aop dep to compile scope in contacts sample	16 years ago
Luke Taylor	15c309a2ed	Add spring-aop to acl and contacts compile dependencies following changes for SEC-1390. AopInfrastructureBean interface is now required.	16 years ago
Luke Taylor	f54831f2b5	SEC-1398: Minor changes to method security annotation information in namespace chapter. Added some explanation of the different annotation types and their suitability.	16 years ago
Luke Taylor	67c9a0b78d	SEC-1389: Added "iterations" property to BaseDigestpasswordEncoder to support "stretching" of passwords.	16 years ago
Luke Taylor	bd2fd3448b	SEC-1392: Mark PermissionEvaluator and MethodSecurityExpressionHandler as AopInfrastructure beans to prevent them being advised and causing premature use of MethodSecurityMetadataSource before it is initialized properly.	16 years ago
Luke Taylor	984604b026	SEC-1384: Removed check for empty authority list from DefaultWebInvocationPrivilegeEvaluator. The class previously rejected access if the user had no authorities. It will now allow the AccessDecisionManager to make the decision.	16 years ago
Luke Taylor	8720966d20	SEC-1390: Added null check on claimedIdentifier returned by DiscoveryInformation to prevent NPE.	16 years ago
Luke Taylor	b1243416fc	Minor corrections to aspectj interceptor docs	16 years ago
Luke Taylor	38837775a5	Minor corrections to aspectj interceptor docs.	16 years ago
Luke Taylor	10d787ede2	Javadoc corrections to SessionRegistryImpl	16 years ago
Luke Taylor	c4d2f59eec	SEC-1381: Update source repo information in docs to point to git rather than subversion.	16 years ago

1 2 3 4 5 ...

3920 Commits (41e06152b3f4bae69fa27aef5e8d351e360a26e5) All Branches Search

3920 Commits (41e06152b3f4bae69fa27aef5e8d351e360a26e5)

All Branches