spring-security

Commit Graph

Author	SHA1	Message	Date
Rob Winch	48283ec004	SEC-2276: Delay saving CsrfToken until token is accessed This also removed the CsrfToken from the response headers to prevent the token from being saved. If user's wish to return the CsrfToken in the response headers, they should use the CsrfToken found on the request.	13 years ago
Rob Winch	c131fb6379	SEC-2139: named-security-filter are all defined and ordered correctly	13 years ago
Rob Winch	03b235295e	SEC-2270: Remove duplicate version from guides index	13 years ago
Rob Winch	efa9f4db93	SEC-2108: Fix typo in ldap section of manual	13 years ago
Rob Winch	379cbd2a8b	SEC-2274: Add ApplicationContext as HttpSecurity shared object	13 years ago
Rob Winch	e8788f2657	SEC-2269: Fix markup for CSRF link	13 years ago
Rob Winch	17c2a18fee	SEC-2269: Fix CSRF link in appendix	13 years ago
Rob Winch	0247dd124f	SEC-2271: LogoutConfigurer#logoutUrl explains about CSRF	13 years ago
Rob Winch	a3a432f7b6	SEC-2269: Fix additional links	13 years ago
Rob Winch	3b2156969d	SEC-2269: Fix headers link	13 years ago
Rob Winch	f707101fdb	SEC-2269: Fix headers documentation	13 years ago
Rob Winch	eb95c500f5	Remove dockbook-reference from guides	13 years ago
Rob Winch	110e769bd4	SEC-2257: Remove HttpSecurityBuilder#getAuthenticationManager() Removed in favor of using shared object.	13 years ago
Hans-Joachim Kliemeck	8b1ab4e85f	SEC-2260 - update pom/gradle to use current cas client library	13 years ago
Rob Winch	658a93178c	SEC-2252: Add custom form guide	13 years ago
Rob Winch	51b9c4a19a	Hide logout in main.jsp if not logged in	13 years ago
Rob Winch	5fe32bb3c8	SEC-2216: Add withObjectPostProcessor	13 years ago
Rob Winch	d62c2e0835	SEC-2244: Defaults based on loginPage are now updated when loginPage changes	13 years ago
Rob Winch	e0cad0d684	SEC-2230: Fix Header tests	13 years ago
Rob Winch	2e852f4613	SEC-2230: Remove stray import	13 years ago
Rob Winch	a469f26b10	SEC-2230: Polish Headers JavaConfig	13 years ago
Rob Winch	e9bb9e766e	SEC-1574: Add CSRF Support	13 years ago
beamerblvd	5f35d9e3ec	SEC-2135: Document HttpServletRequest.changeSessionId() support	13 years ago
Rob Winch	797df51264	SEC-2135: Support HttpServletRequest#changeSessionId()	13 years ago
Rob Winch	75fb971d23	SEC-2221: Fix the ignored media types to use includes instead of equals	13 years ago
Rob Winch	54c2166567	SEC-2194: Remove unnecessary MessageSecurityWebApplicationInitializer from helloworld	13 years ago
Rob Winch	fea4d01aad	SEC-2194: hello samples displays username and logout properly	13 years ago
Rob Winch	b5ecaf61ed	SEC-2194: Remove samples errors/tabs folders	13 years ago
Rob Winch	f036970f8b	SEC-2194: Add margin to links in header of samples	13 years ago
Rob Winch	2feded5fc5	SEC-2194: Update samples to have jsp-api	13 years ago
Rob Winch	485676be8c	SEC-2251: Polish Hello World guides * Correct how to add username and logout to mvc * Externalize :revnumber:	13 years ago
Rob Winch	22e4d1646a	SEC-2194: Remove login page from hellomvc and insecuremvc	13 years ago
Rob Winch	13da42ca1b	SEC-2137: Allow disabling session fixation and enable concurrency control	13 years ago
Rob Winch	867f02e8ac	SEC-2249: AbstractSecurityWebApplicationInitializer does not delegate WebApplicationInitializer Previously AbstractSecurityWebApplicationInitializer delegated to a WebApplicationInitializer, but it caused issues in some instances where a container would pass the annonymous inner class to SpringServletContainerInitializer which caused errors on startup. Now AbstractSecurityWebApplicationInitializer registers the ContextLoaderListener on its own instead of delegating.	13 years ago
Rob Winch	e1dfa81a0f	GRADLE-1116: Add back workaround for depending on test sources	13 years ago
Rob Winch	337c3cf96c	SEC-2255: Update to Gradle 1.7	13 years ago
Rob Winch	54bf6c846b	SEC-2097: Remove configure() blocks from gradle/*.gradle	13 years ago
Rob Winch	e0cb931f69	SEC-2251: Create Hello World Java Configuration guides	13 years ago
Rob Winch	e8278f3b9b	SEC-2249: AbstractSecurityWebApplicationInitializer allows register config	13 years ago
Rob Winch	976d9a9016	SEC-2194: Polish java config sample apps	13 years ago
Guillaume Smet	d20a8e0373	SEC-2245: Cast to interface instead of implementation Makes our life easier when we want to override the MethodSecurityExpressionRoot.	13 years ago
Rob Winch	1f86d5dad9	SEC-2097: Add Tomcat Gradle plugin	13 years ago
Rob Winch	343a76de13	Use eclipse-wtp instead of eclipse in java projects	13 years ago
Rob Winch	6a1a6b080f	No longer using Eclipse classpath container, so remove workarounds for it	13 years ago
Rob Winch	ab2b461075	Gradle workaround for test source being deployed	13 years ago
Rob Winch	9d58317731	Use included configuration instead of sourceSets.main.output Previously the crypto module was not exported in Eclipse because it was listed as a test dependency to have it added as a dependency. Note that this was all to work around GRADLE-1116 Now we add an included configuration that is exported for Eclipse, but not added to the Maven pom (since all the crypto module is included in core).	13 years ago
Rob Winch	51a48fa9fa	Allow import without Eclipse dependency management This adds a .classpath file that contains no source folders to ensure that the projects that are not java projects work. The projects still require a java project nature to add the gradle project nature.	13 years ago
Rob Winch	fdb73fac23	Remove @Override from interface define methods	13 years ago
Rob Winch	b13b87a1e7	Remove @Override from methods that override interfaces Ensure JDK5 compatibility	13 years ago
Rob Winch	388a4dd9db	SEC-2194: Add Java Config samples	13 years ago

1 2 3 4 5 ...

4855 Commits (48283ec0049b4245a8887ffaf89d60416fb12203) All Branches Search

4855 Commits (48283ec0049b4245a8887ffaf89d60416fb12203)

All Branches