Rob Winch
50d7d3287f
Add spring-security-4.2.xsd
10 years ago
Eddú Meléndez
13b0ddb7e6
Fix test assertions
10 years ago
Spring Buildmaster
919f000c80
Release version 4.1.1.RELEASE
10 years ago
Johnny Lim
310bb39a0d
Fix typo
10 years ago
Rob Winch
764a4d8414
Fix Error Message typo
...
Fixes gh-3953
10 years ago
Jakob Englisch
b17870ee07
LogoutConfigurer: only allow suitable http methods
10 years ago
Rob Winch
e4c13e3c0e
Add MvcRequestMatcher
...
Fixes gh-3964
10 years ago
Rob Winch
13bc70f693
Add CorsFilter support
10 years ago
Rob Winch
c935d857eb
Add mvc namespace to XmlApplicationContext
10 years ago
Rob Winch
7f3b3a8b59
Polish
...
Issue gh-180
10 years ago
Rob Winch
bd5f71bb0d
Polish
...
Fix checkstyle for LDAP JavaConfig Authority mapping
Issue gh-2768
10 years ago
Tony Dalbrekt
b76e3be822
LDAP Java Config supports GrantedAuthoritiesMapper
...
Fixes gh-2768
10 years ago
Rob Winch
26ad1cb4a5
Polish RememberMe Validation
...
Issue gh-3909
10 years ago
Eddú Meléndez
87224f62e4
RememberMe JavaConfig Validation
...
Add validation when rememberMeServices and rememberMeCookieName are
provided
Fixes gh-3909
10 years ago
Rob Winch
66858e22ad
Disable XMLHttpRequest for formLogin entry point
...
Previously the following:
http http://localhost:8080/user \
"X-Requested-With:XMLHttpRequest" "Accept:text/plain"
Produced a 302 instead of a 401
Fixes gh-3887
10 years ago
Eddú Meléndez
39ed7d0eca
Propagate rolePrefix to LdapAuthoritiesPopulator
...
Previous to this commit, custom rolePrefix was not propagated to
LdapAuthoritiesPopulator populating a wrong authority. Now, rolePrefix
is propagated and the authority is as expected.
Fixes gh-3921
10 years ago
Eddú Meléndez
a2ead4cf7a
Polish
...
Fixes gh-3892
10 years ago
Rob Winch
2d6051625f
Update pom.xml
10 years ago
Rob Winch
477573b3bc
Fix @EnableGlobalAuthentication & method seucrity on @Configuration class
...
Fixes gh-3934
10 years ago
Rob Winch
fa1c484587
AuthenticationConfiguration.getAuthenticationManager() supports recursion
...
AuthenticationConfiguration.getAuthenticationManager() now supports
recursion. This is necessary in instances where something using
@EnableGlobalAuthentication requires an object using method level security.
Fixes gh-3935
10 years ago
Rob Winch
9e3d2e2d99
HTTP Basic default logout ignores text/html
...
This fixes an issue where Chrome sends an accept header of application/xml
which triggers an HTTP 204 to be returned
Fixes gh-3902
10 years ago
Sola
d3b3f8e004
Fix WebSecurityConfigurerAdapter Javadoc
...
The constructor's Javadoc was incorrect. This commit
fixes it.
10 years ago
Spring Buildmaster
001b05569a
Release version 4.1.0.RELEASE
10 years ago
Joe Grandja
e68d8bfaea
Clarifies sessionAuthenticationStrategy setter
...
Fixes gh-234
10 years ago
Joe Grandja
491abf2600
Revert "Fix test for SessionManagementConfigurer"
...
This reverts commit 17b25d1477 .
Issue gh-234
10 years ago
Joe Grandja
0d2b797c2a
Revert "Fix sessionAuthenticationStrategy setter"
...
This reverts commit 8f5d46ad68 .
Issue gh-234
10 years ago
Joe Grandja
17b25d1477
Fix test for SessionManagementConfigurer
...
Fixes gh-234
10 years ago
didiez
8f5d46ad68
Fix sessionAuthenticationStrategy setter
...
sessionAuthenticationStrategy was setting sessionFixationAuthenticationStrategy instead
Fixes gh-234
10 years ago
Spring Buildmaster
24d0069668
Release version 4.1.0.RC2
10 years ago
Rob Winch
7fe0a135ec
Default AntPathRequestMatcher to be case sensitive
...
Issue gh-3831
10 years ago
Rob Winch
510cd59980
Default logout negotiation in Java Configuration
...
This commit adds content negotiation for log out.
Fixes gh-3282
10 years ago
Rob Winch
51995dc187
Add Java Configuration InvalidSessionStrategy ( #3827 )
...
Allow configuring the InvalidSessionStrategy in Java Configuration.
Fixes gh-3371
10 years ago
Rob Winch
a5a8aeb550
Message SecurityExpressionHandler is post processed ( #3820 )
...
Previously the SecurityExpressionHandler for message based configuration
did not have a beanResolver set.
This commit post processes the default message SecurityExpressionHandler
to ensure the beanResolver is set.
Fixes gh-3797
10 years ago
Rob Winch
c872a77ad1
RoleHiearchy Bean used in GlobalMethodSecurity ( #3394 )
...
Previously it required quite a bit of extra work to use RoleHiearchy
within Java Based Spring Security configuration.
Now if a single RoleHiearchy Bean is defined it will automatically
be picked up and used by method security.
Fixes gh-3394
10 years ago
Johnny Lim
933a7e8363
Remove duplicate words
...
Fixes gh-3826
10 years ago
Rob Winch
fb5776cb5c
Support Camel case URI variables ( #3814 )
...
Perviously there were issues with case insenstive patterns and URI
variables that contained upper case characters. For example, the pattern
"/user/{userId}" could not resolve the variable #userId Instead it was
forced to lowercase and #userid was used.
Now if the pattern is case insensitive then so is the variable. This means
that #userId will work as will #userid.
Fixes gh-3786
10 years ago
Matthias Merdes
b6800bdb4d
Update ExpressionUrlAuthorizationConfigurer Error Message
...
Update error message
10 years ago
Rob Winch
59db9413aa
Add SpEL Bean reference test ( #3815 )
...
Issue gh-3797
10 years ago
Rob Winch
6f169267c4
HttpSecurity comparitor->comparator
...
Rename HttpSecurity's comparitor to comparator
Fixes gh-3810
10 years ago
Rob Winch
a7fb6d2e58
Add HttpSecurity.addFilterAt ( #3809 )
...
Fixes gh-3784
10 years ago
Rob Winch
d3a9cc6eae
Add CsrfTokenRepository ( #3805 )
...
* Create LazyCsrfTokenRepository
Fixes gh-3790
* Add CookieCsrfTokenRepository
Fixes gh-3009
10 years ago
Leon Radley
b82df4ecf3
Add alwaysRemember to RememberMe Java Config
...
Allow setting alwaysRemember from RememberMeConfigurer
Fixes gh-180
10 years ago
Jeffrey Walraven
bd0c8a7baa
Fix HttpSecurity logout JavaDoc
...
Removed error provoking extra logout() from example code
10 years ago
Johnny Lim
fe94d654ed
Fix typos ( #228 )
10 years ago
Nicolai Ehemann
c57dba6b77
Fix typo in setMessageExpessionHandler ( #3803 )
10 years ago
Joe Grandja
b90242f2fa
Updates all POM versions to 4.1.0 snapshot build.
...
Fixes gh-3804
10 years ago
Quinten De Swaef
d05fe8ec07
Fix typo in xsd
...
Fixes gh-3229
10 years ago
Spring Buildmaster
044acf7e27
Release version 4.1.0.RC1
10 years ago
Joe Grandja
2f7f2ff589
Adds support for Content Security Policy
...
Fixes gh-2342
10 years ago
Rob Winch
4b650dc58d
Allow AuthenticationProvider Bean in Java Config
...
This commit adds support for defaulting java configuration's
authentication by providing an AuthenticationProvider Bean.
Fixes gh-3091
10 years ago