Luke Taylor
25d222208d
Switch version to 3.0.4-CI-SNAPSHOT.
16 years ago
Luke Taylor
9b0c21dfef
3.0.3 release. Update version in build files.
16 years ago
Luke Taylor
27faad3402
SEC-1488: Remove commons-logging dependencies from maven poms and use slf4j in all samples.
16 years ago
Luke Taylor
9d2e2ca11d
SEC-1232: Add config dependency to maven build for aspectj sample.
16 years ago
Luke Taylor
6354c7e052
SEC-1232: GlobalMethodSecurityBeanDefinitionParser support for mode='aspectj'
...
AspectJ sample application context also updated to use this syntax.
16 years ago
Luke Taylor
42cdaa0ce2
Latest gradle syntax updates.
16 years ago
Luke Taylor
91153df78d
SEC-1262: Added new (replacement) AspectJ interceptor which wraps the JoinPoint in a MethodInvocation adapter to provide compatibility with classes which only support MethodInvocation instances.
...
Also deprecated the existing AspectJ interceptors. This will also allow future simplification of the AbstractMethodSecurityMetadataSource, as it no longer needs to support JoinPoints.
16 years ago
Luke Taylor
1b0ac9c785
Porting of gradle changes from master.
16 years ago
Luke Taylor
9831980bc2
Update versions to 3.0.3.CI-SNAPSHOT.
16 years ago
Luke Taylor
44f45d21f0
3.0.2 release. Update version in build files.
16 years ago
Luke Taylor
2f40088fe7
Change spring-aop dep to compile scope in contacts sample
16 years ago
Luke Taylor
15c309a2ed
Add spring-aop to acl and contacts compile dependencies following changes for SEC-1390.
...
AopInfrastructureBean interface is now required.
16 years ago
Luke Taylor
0974e21fb6
SEC-1379: Added creation of a session if session timeout is detected (requested session ID is invalid).
...
This prevents problems with repeated detection of the same invalid session when the redirected request comes in.
16 years ago
Luke Taylor
a5dde8b28f
Updated doc on invalid session detection.
...
Invalid session URL must typically be omitted from the filter chain to prevent an infinite loop.
16 years ago
Luke Taylor
51dfc0fb39
Set versions to 3.0.2-CI-SNAPSHOT, post release.
16 years ago
Luke Taylor
05634f97dc
Updated version numbers for 3.0.1 release.
16 years ago
Luke Taylor
b323098167
Added gradle build files for taglibs, tutorial, contacts and openid.
...
Changed build file names to match module names (by manipulating the project objects in the settings.gradle file).
16 years ago
Luke Taylor
e211f9b35f
SEC-1349: Allow configuration of OpenID with parameters which should be transferred to the return_to URL.
...
The OpenIDAuthenticationFilter now has a returnToUrlParameters property (a Set). If this is set, the named parameters will be copied from the incoming submitted request to the return_to URL. If not set, it defaults to the "parameter" property of the AbstractRememberMeServices of the parent class. If remember-me is not in use, it defaults to the empty set.
Enabled remember-me in the OpenID sample.
16 years ago
Luke Taylor
052537c8b0
Removing $Id$ markers and stripping trailing whitespace from the codebase.
16 years ago
Luke Taylor
be72ed1350
Remove commented out beans from contacts sample app context.
...
These were left when the app was updated to use Spring MVC @Controller syntax and scanning.
16 years ago
Luke Taylor
893f212fa5
Tidying
16 years ago
Luke Taylor
115d5b84ff
[maven-release-plugin] prepare for next development iteration
16 years ago
Luke Taylor
6c6ef08353
[maven-release-plugin] prepare release spring-security-3.0.0.RELEASE
16 years ago
Luke Taylor
a7770a64d3
Update cas server version in runall.sh
16 years ago
Luke Taylor
aad7d01c84
Updated CAS server version for sample use to 3.3.5
16 years ago
Luke Taylor
fcce29f8df
SEC-1326: Updating dependencies to match Spring versions. Removing unused deps.
16 years ago
Luke Taylor
aeed49393c
Switching StringBuffer to StringBuilder throughout the codebase (APIs permitting).
16 years ago
Luke Taylor
fac07ba8ff
Schema updates to Spring 3.0
16 years ago
Luke Taylor
85a58fd473
SEC-1331: Modify namespace to allow omission of user passwords in user-service element and generate random ones internally, preventing authentication against the data..
16 years ago
Luke Taylor
520e733cb2
[maven-release-plugin] prepare for next development iteration
16 years ago
Luke Taylor
f2cf17bd49
[maven-release-plugin] prepare release spring-security-3.0.0.RC2
16 years ago
Luke Taylor
94d185a6be
Updated slf4j version in ldap sample
16 years ago
Luke Taylor
5546698fef
SEC-1253: Decouple spring-security-config module from spring-security-web. Added ClassUtils.isPresent() check for FilterChainProxy before attempting to register web-related parsers and decorators. Added use of namespace to dms sample for testing.
16 years ago
Luke Taylor
4d8956a227
SEC-1288: Changed claimedIdentityFieldName in OpenIDAuthenticationFilter to "openid_identifier", as recommended by the 2.0 spec.
16 years ago
Luke Taylor
8f5c414b00
Improve cleanup in sample script
16 years ago
Luke Taylor
3f963ef8ca
Restore versions and svn URLs in trunk (release plugin fail)
16 years ago
Luke Taylor
af563e826c
[maven-release-plugin] prepare release spring-security-3.0.0.RC1
16 years ago
Luke Taylor
5f3ff97ce0
Disable aspectj sample
16 years ago
Luke Taylor
cf5e713812
Fixes to samples and improved test workout script
16 years ago
Luke Taylor
cb643f73de
Tidying up.
16 years ago
Luke Taylor
1286741c7c
SEC-1259: Improve consistency of authentication filter names.
16 years ago
Luke Taylor
1042305cfe
Renamed web.wrapper to web.servletapi. Added some package.html files.
16 years ago
Luke Taylor
7247902911
SEC-1229: Updated sample and itest namespace concurrency configs.
16 years ago
Luke Taylor
aa153681bf
SEC-1229: Added session-management element to namespace and refactored existing session-related attributes and concurrency control. Refactored <http> parsing code to split it up into more manageable units.
16 years ago
Luke Taylor
3f70d79df5
SEC-1022: Remove use of static methods/initializers in Acl Permissions. Converted PermissionFactory to a strategy which is used to convert integers and names to Permission instances.
17 years ago
Luke Taylor
731402e9f5
SEC-525: [PATCH] Add AccessCheckerTag based on URL resource access permissions. Added functionality to "authorize" tag to allow evaluation of whether a particual url is accessible to the user. Uses a WebInvocationPrivilegeEvaluator registered in the application context.
17 years ago
Luke Taylor
b531a81176
SEC-1246: Introduce EL-based authorization tag. Added optional access expression to authorize tag.
17 years ago
Luke Taylor
1d00b92d25
Removed portlet sample
17 years ago
Luke Taylor
aec730ae7e
SEC-1238: Disable portlet module
17 years ago
Luke Taylor
5bdfd8cd77
Tidying imports etc to remove compiler warnings.
17 years ago