Luke Taylor
807ae835b8
[maven-release-plugin] copy for tag spring-security-parent-2.0.2
18 years ago
Luke Taylor
122e1c47ed
Changed rnc filename prior to 2.0.2 release
18 years ago
Luke Taylor
64ab7e534c
Spelling corrections in Javadoc.
18 years ago
Luke Taylor
ab6d29d927
SEC-862: Make logoutSuccessUrl accessible to sub-classes.
18 years ago
Luke Taylor
1d9d7eb9a7
Removed accidental commit of SavedRequest clearing code in TargetUrlResolverImpl
18 years ago
Luke Taylor
ecd2cc6da7
Added some Assert calls to setters and improved comments.
18 years ago
Luke Taylor
f228d013d8
SEC-861: Change default value of justUseSavedRequestOnGet to false
18 years ago
Luke Taylor
4de4bb8e87
SEC-860: Added setter for authenticationDetailsSource to AbstractRememberMeServices
18 years ago
Luke Taylor
f8cded10ee
Typo.
18 years ago
Luke Taylor
c031588975
SEC-606: Added support for customizable credentials character set.
18 years ago
Luke Taylor
36a192b70f
SEC-858: Replaced integer properties in schema with strings to allow use of placeholders.
18 years ago
Luke Taylor
980a72f9a0
Removed TODO (done).
18 years ago
Luke Taylor
517a7f117a
SEC-857: Make request wrapper getParameterValues() consistent with getParameterMap() etc.
18 years ago
Luke Taylor
244579faf4
OPEN - issue SEC-856: GroupManager JdbcUserDetailsManager implementation: addGroupAuthority() method doesn't work.
...
http://jira.springframework.org/browse/SEC-856 . Refactored class to remove the JDBC-related inner classes.
18 years ago
Luke Taylor
d63536cc0d
SEC-821: Added support for eternal session registry and concurrent session controller to the 2.0.2 namespace.
18 years ago
Luke Taylor
8b5bbe3800
SEC-830: Changed SavedRequestAwareWrapper to make wrapped request parameters take precedence over saved request ones.
18 years ago
Luke Taylor
45c3084502
SEC-836: Made LDAP namespace elements use subtree group searching by default.
18 years ago
Luke Taylor
871e529840
SEC-850: custom-authentication-provider Registering Separate Bean Definitions in App Context and Providers List
...
http://jira.springframework.org/browse/SEC-850 . Added extra test.
18 years ago
Luke Taylor
d1005e4cfb
SEC-850: custom-authentication-provider Registering Separate Bean Definitions in App Context and Providers List
...
http://jira.springframework.org/browse/SEC-850 . Changed bean decorator to add a bean reference to the ProviderManager rather than a bean definition.
18 years ago
Luke Taylor
9ce0270226
Fixed typo in test name
18 years ago
Luke Taylor
7603ce2f97
SEC-848: Remove all Spring LDAP dependecy loading from namespace parsers
...
http://jira.springframework.org/browse/SEC-848 . Replaced class references with class names.
18 years ago
Luke Taylor
25ba269db0
SEC-835: use setContentType on response for J2EE 1.3 compatibility.
18 years ago
Luke Taylor
11b448c0e0
SEC-847: Updated the xsl file to inline openid-login and other elements
18 years ago
Luke Taylor
08c5fe8925
Fixed autoboxing issue
18 years ago
Luke Taylor
fbe3ca48f4
SEC-823, SEC-843: Allow setting of custom RememberMeServices and token validity periodon remember-me namespace element
18 years ago
Luke Taylor
3e33b8a880
Update InMemoryXmlApplicationContext to use 2.0.2 schema
18 years ago
Luke Taylor
b60c578b25
SEC-844: Support for SHA-256 hashing.
18 years ago
Luke Taylor
03981ab6a0
SEC-844: Added sec-256 to namespace schema
18 years ago
Luke Taylor
e9adbd4d62
SEC-844, SEC-843, SEC-823: Added support for sha-256, custom remember-me services and setting of remember me token validity period to namespace schema. Also added 2.0.2 XSD file
18 years ago
Luke Taylor
29d31b72d0
SEC-837: Add special character filtering to LDAP search filters
18 years ago
Luke Taylor
3fb1f59fde
SEC-837: Add special character filtering to LDAP search filterscore/src/test/java/org/springframework/security/ldap
18 years ago
Luke Taylor
5af53da106
Improved doc for'filters' attribute
18 years ago
Luke Taylor
2329dadf48
Removed jalopy parameter comments
18 years ago
Luke Taylor
f269373442
IDE-791: Remove explicit Spring LDAP class dependencies from LdapServerBDP.
18 years ago
Luke Taylor
8b2c0468ff
OPEN - issue SEC-834: Session fixation attack protection will cause problems with URL rewriting
...
http://jira.springframework.org/browse/SEC-834 . Modified HttpSecurityBDP to add session-fixation parameters to openId and form-login filters. Also added sessionRegistry property to AbstractProcessingFilter so that it doesn't conflict with concurrent session control.
18 years ago
Luke Taylor
d17a2da9e0
SEC-834: Session fixation attack protection will cause problems with URL rewriting
...
http://jira.springframework.org/browse/SEC-834 . Changed position of SessionFixationProtectionFilter and modified it to make a decision about whether authentication has taken place prior to calling doFilter(). Previously it did this on the return through the filter chain, which caused the problem described in this issue.
18 years ago
Luke Taylor
7f38c656ca
SEC-820: Expand regular expression used in hierarchical roles.
18 years ago
Luke Taylor
6493df13f8
SEC-803: Removed use of websphere SubjectHelper class.
18 years ago
Luke Taylor
59543af4fb
SEC-826: Support for JPA PersistenceContext annotation broken
...
http://jira.springframework.org/browse/SEC-826 Moved all injection post-processing to BeanPostProcessors (and deleted bean factory post-processor) to prevent early instantiation problems. Beas should now all be instantiated before the injection takes place.
18 years ago
Luke Taylor
1fee538c7e
Fixed typo in setter method (uses of).
18 years ago
Luke Taylor
ae2470127c
Fixed typo in setter method "seAttributePrefix"
18 years ago
Luke Taylor
e1b226ee57
Added 2.0.2 namespace file
18 years ago
Luke Taylor
add2649397
Javadoc typo.
18 years ago
Luke Taylor
781d88bd30
OPEN - issue SEC-825: Query string isn't beig stripped from URLs when ant matcher is in use (regression issue)
...
http://jira.springframework.org/browse/SEC-825 . Make sure the property is set on DefaultFilterInvocationDefinitionSource when ant paths are in use.
18 years ago
Luke Taylor
883b92e7bd
SEC-822: Converted to long arithmetic to prevent integer overflowing with long token validity periods
18 years ago
Luke Taylor
301d021bf5
SEC-817: NPE in org.springframework.security.config.FilterChainProxyPostProcessor
...
Reversed order of beanName.equals() call as suggested.
18 years ago
Luke Taylor
8ad2d681ab
SEC-818: Changed redirect URL validation to ignore potential property placeholders at parsing time and report a warning through the parser context rather than an error. Also validated the URLs in the beans themselves using Asserts, so an exception will occur later when the beans have been created rather than while assembling the bean definitions.
18 years ago
Luke Taylor
afc757e618
Removed reference to LdapDataAccessException since it isn't actually mentioned except in javadoc
18 years ago
Luke Taylor
c333070fe3
Javadoc tidying
18 years ago
Luke Taylor
fca3a2a709
SEC-812: Added missing TextUtils file
18 years ago