spring-security

Commit Graph

Author	SHA1	Message	Date
Rob Winch	26166ef6e8	SEC-2272: CsrfRequestDataValueProcessor support Spring 4 and Spring 3	12 years ago
Rob Winch	3f69847a4e	SEC-2286: Log invalid CSRF tokens at debug level	12 years ago
Rob Winch	d60108eaf6	SEC-2229: Add optional dependencies to spring-security-config spring-tx and spring-jdbc aren't pulled in transitively from spring-security-web now, so we must include them as optional dependencies.	12 years ago
Rob Winch	98bdd32ca0	SEC-2282: Add CSRF documentation to the reference manual	12 years ago
Rob Winch	33db440961	SEC-2129: AntPathRequestMatcher also supports case sensitive comparisions	12 years ago
Rob Winch	7d1d856729	SEC-2229: spring-security-web dependency polish - remove direct dependency on spring-aop - spring-tx and spring-jdbc optional	12 years ago
Rob Winch	18bd82e7d4	SEC-2131: Update doc to state session authentication sends 401 if no page	12 years ago
Rob Winch	cd7055f725	SEC-2171: Include Information about pooling in Spring LDAP documentation	12 years ago
Rob Winch	7f2308f46c	SEC-2146: Document AspectJ does not inherit annotations	12 years ago
Rob Winch	534989c8ea	SEC-2103: Fix tests to verify debug logging instead of info	12 years ago
Rob Winch	acb2b680d0	SEC-2103: Change log of no results to debug	13 years ago
Nick Williams	f29505d657	SEC-2280: Fix SessionFixationConfigurer#changeSessionId Javadoc The Javadoc for SessionFixationConfigurer#changeSessionId() was copied and pasted from SessionFixationConfigurer#none() and never updated. It is incorrect. This commit fixes that.	13 years ago
Rob Winch	48283ec004	SEC-2276: Delay saving CsrfToken until token is accessed This also removed the CsrfToken from the response headers to prevent the token from being saved. If user's wish to return the CsrfToken in the response headers, they should use the CsrfToken found on the request.	13 years ago
Rob Winch	c131fb6379	SEC-2139: named-security-filter are all defined and ordered correctly	13 years ago
Rob Winch	03b235295e	SEC-2270: Remove duplicate version from guides index	13 years ago
Rob Winch	efa9f4db93	SEC-2108: Fix typo in ldap section of manual	13 years ago
Rob Winch	379cbd2a8b	SEC-2274: Add ApplicationContext as HttpSecurity shared object	13 years ago
Rob Winch	e8788f2657	SEC-2269: Fix markup for CSRF link	13 years ago
Rob Winch	17c2a18fee	SEC-2269: Fix CSRF link in appendix	13 years ago
Rob Winch	0247dd124f	SEC-2271: LogoutConfigurer#logoutUrl explains about CSRF	13 years ago
Rob Winch	a3a432f7b6	SEC-2269: Fix additional links	13 years ago
Rob Winch	3b2156969d	SEC-2269: Fix headers link	13 years ago
Rob Winch	f707101fdb	SEC-2269: Fix headers documentation	13 years ago
Rob Winch	eb95c500f5	Remove dockbook-reference from guides	13 years ago
Rob Winch	110e769bd4	SEC-2257: Remove HttpSecurityBuilder#getAuthenticationManager() Removed in favor of using shared object.	13 years ago
Hans-Joachim Kliemeck	8b1ab4e85f	SEC-2260 - update pom/gradle to use current cas client library	13 years ago
Rob Winch	658a93178c	SEC-2252: Add custom form guide	13 years ago
Rob Winch	51b9c4a19a	Hide logout in main.jsp if not logged in	13 years ago
Rob Winch	5fe32bb3c8	SEC-2216: Add withObjectPostProcessor	13 years ago
Rob Winch	d62c2e0835	SEC-2244: Defaults based on loginPage are now updated when loginPage changes	13 years ago
Rob Winch	e0cad0d684	SEC-2230: Fix Header tests	13 years ago
Rob Winch	2e852f4613	SEC-2230: Remove stray import	13 years ago
Rob Winch	a469f26b10	SEC-2230: Polish Headers JavaConfig	13 years ago
Rob Winch	e9bb9e766e	SEC-1574: Add CSRF Support	13 years ago
beamerblvd	5f35d9e3ec	SEC-2135: Document HttpServletRequest.changeSessionId() support	13 years ago
Rob Winch	797df51264	SEC-2135: Support HttpServletRequest#changeSessionId()	13 years ago
Rob Winch	75fb971d23	SEC-2221: Fix the ignored media types to use includes instead of equals	13 years ago
Rob Winch	54c2166567	SEC-2194: Remove unnecessary MessageSecurityWebApplicationInitializer from helloworld	13 years ago
Rob Winch	fea4d01aad	SEC-2194: hello samples displays username and logout properly	13 years ago
Rob Winch	b5ecaf61ed	SEC-2194: Remove samples errors/tabs folders	13 years ago
Rob Winch	f036970f8b	SEC-2194: Add margin to links in header of samples	13 years ago
Rob Winch	2feded5fc5	SEC-2194: Update samples to have jsp-api	13 years ago
Rob Winch	485676be8c	SEC-2251: Polish Hello World guides * Correct how to add username and logout to mvc * Externalize :revnumber:	13 years ago
Rob Winch	22e4d1646a	SEC-2194: Remove login page from hellomvc and insecuremvc	13 years ago
Rob Winch	13da42ca1b	SEC-2137: Allow disabling session fixation and enable concurrency control	13 years ago
Rob Winch	867f02e8ac	SEC-2249: AbstractSecurityWebApplicationInitializer does not delegate WebApplicationInitializer Previously AbstractSecurityWebApplicationInitializer delegated to a WebApplicationInitializer, but it caused issues in some instances where a container would pass the annonymous inner class to SpringServletContainerInitializer which caused errors on startup. Now AbstractSecurityWebApplicationInitializer registers the ContextLoaderListener on its own instead of delegating.	13 years ago
Rob Winch	e1dfa81a0f	GRADLE-1116: Add back workaround for depending on test sources	13 years ago
Rob Winch	337c3cf96c	SEC-2255: Update to Gradle 1.7	13 years ago
Rob Winch	54bf6c846b	SEC-2097: Remove configure() blocks from gradle/*.gradle	13 years ago
Rob Winch	e0cb931f69	SEC-2251: Create Hello World Java Configuration guides	13 years ago

1 2 3 4 5 ...

4967 Commits (78f85cc12911015982e5e34bde77dfbd251c901b) All Branches Search

4967 Commits (78f85cc12911015982e5e34bde77dfbd251c901b)

All Branches