GitHub-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
3275 Commits
49 Branches
370 Tags
130 MiB
Tree: 65a78ce4a4
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '65a78ce4a4'
${ noResults }
Commit Graph

3275 Commits (65a78ce4a48dd4454a2bb0d12faa0d4da18b8c19)
 

Author SHA1 Message Date
Luke Taylor 65a78ce4a4 SEC-745: updated cas sample filter bean configuration
17 years ago
Luke Taylor ddffdf1699 SEC-745: Renamed failureHandler and successHandler to have prefix 'authentication'
17 years ago
Luke Taylor 6a0da5fe67 Fixed sandbox build
17 years ago
Luke Taylor fc9a1f0242 Remove parent from itest module - force explicit Spring 2.5 dependency
17 years ago
Luke Taylor 4a41416c9b Tidying up and removing compiler warnings.
17 years ago
Luke Taylor 6003291a68 Updated to use new Sprig test classes and to remove data dependencies between tests.
17 years ago
Luke Taylor f5d2e7a7ce Make error message when multiple UserDetailsServices are found more explicit.
17 years ago
Luke Taylor 0d7002e322 SEC-1012: Extra fixes to dependent modules following changes to Acl APIs.
17 years ago
Luke Taylor 14c50a9c96 SEC-1012: Java-5-ifying the ACL package.
17 years ago
Luke Taylor 9cb361e88a SEC-745: Added LogoutSuccessHandler strategy for use in LogoutFilter.
17 years ago
Luke Taylor 66e586ec67 Added Id keyword.
17 years ago
Luke Taylor cc5966bc7e Tidying up, removing compiler warnings etc.
17 years ago
Luke Taylor 8154161ef5 SEC-1035: Updated build to use Spring 3.0.0.M1 Release
17 years ago
Luke Taylor 8f598e9b11 SEC-1052: Add support for the namespace option 'disable-url-rewriting'.
17 years ago
Luke Taylor 171456a26c SEC-1018: Changes to allow external reference to SaltSource bean from the namespace.
17 years ago
Luke Taylor 00125cddee SEC-1016: Moved the MapBasedDefinitionSource to the top of the list of delegates (before expressions), but changed the code to only add it if there are pointcuts defined, so there should be no unnecessary overhead.
17 years ago
Luke Taylor 585e5f393a Added warning suppression for deprecation.
17 years ago
Luke Taylor d8b5f770e9 Added warning suppression for deprecation.
17 years ago
Luke Taylor e86c76f555 Updated Spring version.
17 years ago
Luke Taylor db5f1e69f1 SEC-949: Added the option of specifying -1 as the token-validity-seconds value in order to set the cookie maxAge to expire when the browser closes.
17 years ago
Luke Taylor c2e688610c SEC-1011: Introduced methods for extracting the remember-me cookie and for creating the returned token.
17 years ago
Luke Taylor 7fa9a959b5 Added webAppRootKey context-param to samples to prevent conflicts when run together in Tomcat.
17 years ago
Luke Taylor 998f0b3ea1 SEC-993: Updated retrievePassword method to return null if an Authentication object with null credentials is presented (e.g. with OpenID). Prevents NPE when toString() is called.
17 years ago
Luke Taylor d0fcbd9baf Tidying up Javadoc.
17 years ago
Luke Taylor a1bd48733a Minor Javadoc correction.
17 years ago
Luke Taylor 681f1ee00c Fix duplicate logging.
17 years ago
Luke Taylor 74fd5fe8a4 Finish refactoring JdbcDaoIml to remove MappingSqlQuery objects. Updated Javadoc to avoid user confusion.
17 years ago
Luke Taylor b24cc17dea SEC-1052: Added "disableUrlRewriting" parameter to HttpSessionSecurityContextRepository.
17 years ago
Scott Battaglia 717fdcfec3 SEC-1046
17 years ago
Luke Taylor bf409b5b25 Improvements to Javadoc.
17 years ago
Luke Taylor 55cc98ab54 SEC-1006: Fixed Javadoc.
17 years ago
Luke Taylor f54d7ee6bc SEC-535: Added "postOnly" flag to AuthenticationProcessingFilter, defaulting to "true" so that only POST requests are allowed by default.
17 years ago
Luke Taylor 224c86a0b3 Tidying.
17 years ago
Luke Taylor 898ef36d02 SEC-959: Converted SwitchUserFilter to use new Authentication success and failure strategies from SEC-745 for managing redirects.
17 years ago
Luke Taylor c3181d9db0 SEC-1063: Moved the justUseSavedRequestOnGet property to ExceptionTranslationFilter. If set, it will not store the SavedRequest for unless the request is a GET.
17 years ago
Luke Taylor c564a879d4 Some tests used for obtaining performance data.
17 years ago
Luke Taylor 40ccd3be11 SEC-1058: Further refactoring to remove use of getDefaultTargetUrl(). Subclasses now pass the default value as a constructor argument.
17 years ago
Luke Taylor fcc68e636e SEC-1062: Added authentication-success-handler-ref and authentication-failure-handler-ref to the namespace definition.
17 years ago
Luke Taylor a0bcf7184c SEC-1061: Renamed serverSideRedirect property.
17 years ago
Luke Taylor cf3cac90ad SEC-1058, SEC-745: Updating comments
17 years ago
Luke Taylor 3f38035057 SEC-1058: Renamed "forwardToDestination" to "useForward" for simplicity and consistency with the namespace.
17 years ago
Luke Taylor 2927b8464f SEC-1058: Substantial refactoring of AbstractProcessingFilter to use AuthenticationFailureHandler strategy. Also changed attemptAuthentication method to take a response object and have the option of returning null, to allow OpenIDAuthenticationProcessingFilter to work without having to throw exceptions between the template methods (which made the logic very hard to follow). The OpenID filter now redirects to the OpenID provider service from this method, rather than treating it as a temporary failure and throwing OpenIDAuthenticationRequiredException.
17 years ago
Luke Taylor 839279161d SEC-745: Added concrete failure handling strategies.
17 years ago
Luke Taylor 6664f57ff6 SEC-992: Removed the line setting returningObj to false.
17 years ago
Luke Taylor 10e4d1fe1a SEC-1058: Partial refactoring of AbstractProcessingFilter. It now uses the injected SuccssfulAuthenticationHandler strategy instead of managing everything itself. The default implementation is SavedRequestAwareSuccessfulAuthenticationHandler which encapsulates most of the filter's success logic along with the code which was previously in TargetUrlResolver. Removed TargetUrlResolver.
17 years ago
Luke Taylor 6c7d15ee44 Removed unused logger and imports.
17 years ago
Luke Taylor df771038b4 SEC-1051: Fixed class names in dms sample app context.
17 years ago
Luke Taylor 615194710e SEC-745: Created AuthenticationFailureHandler and AuthenticationSuccessHandler strategy interfaces.
17 years ago
Luke Taylor 48dce501ce SEC-942: Added createEmptyContext() method to SecurityContextHolderStrategy and SecurityContextHolder to encapsulate the context implemetentation in one place. HttpSessionSecurityContextRepository calls this method when it needs a new context to store in the session.
17 years ago
Luke Taylor aec23749d7 SEC-1056: Remove deprecated FilterToBeanProxy: It's gone
17 years ago