Luke Taylor
|
65fe641900
|
SEC-264: changes to LDAP services.
|
20 years ago |
Luke Taylor
|
db042046e9
|
Introduce LDAPUserDetails.
|
20 years ago |
Scott Battaglia
|
ab05cb95ff
|
SEC-239: changed order url is created in to reflect new processing filter url order
|
20 years ago |
Scott Battaglia
|
aee934812a
|
SEC-239: switched to encoding a url with response.encodeURL to get the jsession.
|
20 years ago |
Luke Taylor
|
a7d7631f2f
|
Fixed potential problem with multiple userDn patterns.
|
20 years ago |
Luke Taylor
|
f0b11109b4
|
Added tests for nameExists method
|
20 years ago |
Luke Taylor
|
9f385eb1e0
|
Typo in Javadoc.
|
20 years ago |
Luke Taylor
|
a468f03cae
|
Add functionality to LdapTemplate for checking that an entry exists, and for retrieving an entry as an object, mapped from its attributes.
|
20 years ago |
Luke Taylor
|
3f0f45706c
|
Update Javadoc to include SSHA info.
|
20 years ago |
Luke Taylor
|
def8a849a2
|
Added String-only 'compare' operation tests which now work with ApacheDS RC2 (unlike byte[] comparisons which are still broken).
|
20 years ago |
Luke Taylor
|
98887f37da
|
Change to more appropriate inline inner class name.
|
20 years ago |
Luke Taylor
|
0b2be28def
|
Added search method which will be used for finding roles.
|
20 years ago |
Luke Taylor
|
91f5fc30be
|
SEC-258: Removed use of URI class
|
20 years ago |
Luke Taylor
|
25c643970a
|
Change package names to match apacheds RC1.
|
20 years ago |
Ben Alex
|
890864ed00
|
SEC-194: Allow remember-me services to be used with BASIC authentication.
|
20 years ago |
Ben Alex
|
9b63051149
|
SEC-204: Improve startup time detection of errors by FilterInvocationDefinitionSourceEditor.
|
20 years ago |
Ben Alex
|
cc07f620df
|
SEC-257: ExceptionTranslationFilter to use AccessDeniedHandler.
|
20 years ago |
Ben Alex
|
21aaf2b9db
|
SEC-256: Contacts sample not displaying localized exceptions correctly.
|
20 years ago |
Ben Alex
|
d125569bd6
|
SEC-29: Save POST parameters on AuthenticationEntryPoint redirect.
|
20 years ago |
Ben Alex
|
22aa0e898f
|
SEC-243: SessionRegistry.getAllSessions() now accepts an "includeExpiredSessions" argument.
|
20 years ago |
Ben Alex
|
0648c65b0b
|
SEC-243: SessionRegistry.getAllSessions() now accepts an "includeExpiredSessions" argument.
|
20 years ago |
Ben Alex
|
d8a56d4e60
|
SEEC-255: Always create HttpSession before calling AuthenticationDetailsSource.
|
20 years ago |
Marc-Antoine Garrigue
|
2af791a801
|
Error in javadoc concerning the default keyword
REQUIRES_CAPTCHA_BELOW_AVERAGE_TIME_IN_MILLIS_REQUESTS
|
20 years ago |
Ben Alex
|
81603832be
|
SEC-152: Strategy pattern for SecurityContextHoldder.
|
20 years ago |
Ben Alex
|
b05709df6a
|
SEC-152: Strategy pattern for SecurityContextHoldder.
|
20 years ago |
Scott McCrory
|
88ff43017d
|
Added unit test for the overridden requiresAuthentication method
|
20 years ago |
Scott McCrory
|
481a9377e4
|
Added NPE check for defaultTargetUrl in requiresAuthentication
|
20 years ago |
Ben Alex
|
8cc5dcde30
|
SEC-249: Support logout filter.
|
20 years ago |
Luke Taylor
|
8400341399
|
Tidy up screwy formatting.
|
20 years ago |
Ray Krueger
|
a7d0f88e01
|
Fixed no authority check so that it is after addCustomAuthorities
http://opensource.atlassian.com/projects/spring/browse/SEC-253
Also removed the unused logger
|
20 years ago |
Ben Alex
|
a47a342ce6
|
SEC-234: Allow pluggable AuthenticationDetailsSource strategy interface.
|
20 years ago |
Ben Alex
|
b1becf9277
|
SEC-242: Make logger reflect subclass, not superclass.
|
20 years ago |
Ben Alex
|
f4156a22bd
|
SEC-246: Enable late binding on DaoAuthenticationProvider.userDetailsService field.
|
20 years ago |
Ben Alex
|
d541c8e257
|
SEC-238: Add AuthenticationException to onUnsuccessfulAuthentication method signature.
|
20 years ago |
Ben Alex
|
540c7b2e6a
|
SEC-229: Allow external URLs from AbstractProcessingFilter.
|
20 years ago |
Ben Alex
|
97ac9f7e98
|
SEC-191: Look in parent bean factories for AclManager.
|
20 years ago |
Ben Alex
|
f6b7429947
|
SEC-187: Tidy up URL composition logic basedon default HTTP(S) ports.
|
20 years ago |
Ben Alex
|
307ac99ec5
|
SEC-199: Use ServletException.getRootCause() to extract any Acegi Security exceptions.
|
20 years ago |
Ben Alex
|
4e09777dec
|
SEC-247: Allow #NONE# to be used to specify paths that shouldn't have any filters fire.
|
20 years ago |
Ben Alex
|
185d63f23c
|
SEC-221: AbstractProcessingFilter.onPreAuthentication() should have exceptions caught.
|
20 years ago |
Ben Alex
|
6bae43d380
|
SEC-206: Include context root when generating cookies.
|
20 years ago |
Ben Alex
|
5d9ed78b50
|
SEC-147: Add processDomainObjectClass property to AfterInvocationProviders.
|
20 years ago |
Ben Alex
|
de4af379cc
|
SEC-252: Stop NPE if principal object is null.
|
20 years ago |
Ben Alex
|
fba45cb19e
|
SEC-208: Fix threading issue.
|
20 years ago |
Carlos Sanchez
|
88e8e60861
|
[SEC-240] Moved log4j.properties to test folder to avoid including it in jar
|
20 years ago |
Ben Alex
|
5f79a25860
|
SEC-243: SessionRegistryImpl no longer incorrectly includes expired sessions.
|
20 years ago |
Ben Alex
|
948f79e2e2
|
SEC-219: Support complex tokenization scenarios.
|
20 years ago |
Ben Alex
|
14683dcbc7
|
SEC-190: Add hashCode() and equals() methods.
|
20 years ago |
Ben Alex
|
36c096858d
|
SEC-223: Improve hashCode() performance.
|
20 years ago |
Ben Alex
|
57aee4e605
|
SEC-218: Fix authentication exception cleanup of SecurityContextHolder.
|
20 years ago |