spring-security

Commit Graph

Author	SHA1	Message	Date
Luke Taylor	781d88bd30	OPEN - issue SEC-825: Query string isn't beig stripped from URLs when ant matcher is in use (regression issue) http://jira.springframework.org/browse/SEC-825. Make sure the property is set on DefaultFilterInvocationDefinitionSource when ant paths are in use.	18 years ago
Luke Taylor	883b92e7bd	SEC-822: Converted to long arithmetic to prevent integer overflowing with long token validity periods	18 years ago
Luke Taylor	301d021bf5	SEC-817: NPE in org.springframework.security.config.FilterChainProxyPostProcessor Reversed order of beanName.equals() call as suggested.	18 years ago
Luke Taylor	8ad2d681ab	SEC-818: Changed redirect URL validation to ignore potential property placeholders at parsing time and report a warning through the parser context rather than an error. Also validated the URLs in the beans themselves using Asserts, so an exception will occur later when the beans have been created rather than while assembling the bean definitions.	18 years ago
Luke Taylor	afc757e618	Removed reference to LdapDataAccessException since it isn't actually mentioned except in javadoc	18 years ago
Luke Taylor	c333070fe3	Javadoc tidying	18 years ago
Luke Taylor	fca3a2a709	SEC-812: Added missing TextUtils file	18 years ago
Luke Taylor	fa44c74993	SEC-812: Added entity-escaping of username stored under last username key, to prevent problems if it is rendered in a page without escaping the text.	18 years ago
Luke Taylor	06719053f1	Removed commons lang dependency.	18 years ago
Ben Alex	9961c7f867	Moved to correct build location.	18 years ago
Ben Alex	7a2e1e13d3	SEC-811: Provide a mechanism to allocate and rebuild cryptographically strong, randomised tokens.	18 years ago
Luke Taylor	a599ef5398	[maven-release-plugin] prepare for next development iteration	18 years ago
Luke Taylor	3e808335a4	[maven-release-plugin] prepare release spring-security-parent-2.0.1	18 years ago
Luke Taylor	6ecfa0541f	SEC-806: Osgi-ified more modules	18 years ago
Luke Taylor	4984d4be65	OPEN - issue SEC-757: Add validation of redirect URLs on namespace http://jira.springframework.org/browse/SEC-757. Added validation method to ConfigUtils and calls to it for url attributes.	18 years ago
Luke Taylor	0df9dee9dd	SEC-806: Improved OSGi bundle version information support	18 years ago
Luke Taylor	81ebd094ff	OPEN - issue SEC-808: Switch namespace schema version to 2.0.1 and update spring.schemas http://jira.springframework.org/browse/SEC-808. Replaced 2.0 text with that from the 2.0 release, rather than the website schema.	18 years ago
Luke Taylor	473f6a32c6	OPEN - issue SEC-808: Switch namespace schema version to 2.0.1 and update spring.schemas http://jira.springframework.org/browse/SEC-808. Created new 2.0.1 schema files and updated tests to use them.	18 years ago
Luke Taylor	8281aeb0da	SEC-807: Allow mapping to a standard Ldap UserDetails through the namespace http://jira.springframework.org/browse/SEC-807. Added extra test for Ldap provider parser.	18 years ago
Luke Taylor	e4b32b8d29	OPEN - issue SEC-807: Allow mapping to a standard Ldap UserDetails through the namespace http://jira.springframework.org/browse/SEC-807. Added support for user-details-class attribute to ldap-authentication-provider and ldap-user-service.	18 years ago
Luke Taylor	104716fedb	SEC-805: Add extra fields to InetOrgPerson http://jira.springframework.org/browse/SEC-805. Added a substantial number of new fields to the class.	18 years ago
Luke Taylor	ef112f7967	Fixed autoboxing problem.	18 years ago
Luke Taylor	341455cde4	SEC-799: Import cleaning following other changes.	18 years ago
Luke Taylor	2d692718e0	SEC-799: Add better detection of missing server-ref element for <ldap-user-service> and <ldap-authentication-provider /> http://jira.springframework.org/browse/SEC-799. Updated ContextSourceSettingPostProcessor to set the standard ContextSource as an alias if it is needed by a bean but has not been set (because the user specified their own server id on <ldap-server />).	18 years ago
Luke Taylor	270fa92780	Improved Javadoc comment	18 years ago
Luke Taylor	d3a0f05de9	SEC-783: GlobalMethodSecurityBeanDefinitionParser should support AfterInvocationProviders http://jira.springframework.org/browse/SEC-783. Added support for custom-after-invocation-provider	18 years ago
Luke Taylor	348d211b8c	SEC-797: Minor javadoc correction.	18 years ago
Luke Taylor	d1e23b3d2c	SEC-783: Added custom-after-invocation-provider element to namespace.	18 years ago
Luke Taylor	1090072fff	SEC-795: Add check for protected login page when using namespace http://jira.springframework.org/browse/SEC-795. I've added checks for the various scenarios which will result in a protected login page and suitable warning messages.	18 years ago
Luke Taylor	5d51b35cfa	SEC-792: Filters should only be added to the default stack if they are labelled using custom-filter. http://jira.springframework.org/browse/SEC-792. Updated FilterChainProxyPostProcessor to raise an exception if two filters have the same order, and also to unwrap wrapped filters once the sorting by order has been performed.	18 years ago
Luke Taylor	38774ec94f	SEC-792: Filters should only be added to the default stack if they are labelled using custom-filter. http://jira.springframework.org/browse/SEC-792. The filters are now maintained as a list in the context and have to be stored there explicitly on registration.	18 years ago
Luke Taylor	01185475a1	OPEN - issue SEC-793: ldap-authentication-provider element parser ignores hash attribute. http://jira.springframework.org/browse/SEC-793. Added support for hash attribute. password-encoder still takes precendence with a warning if both are present.	18 years ago
Luke Taylor	7e63fe7357	SEC-790: DefaultLoginPageGeneratingFilter should be a better HTTP citizen http://jira.springframework.org/browse/SEC-790. Applied submitted patch.	18 years ago
Luke Taylor	8ea7487ec3	Removed unused method.	18 years ago
Luke Taylor	ec81e780b2	Import cleaning.	18 years ago
Luke Taylor	599d9fea04	Minor improvements to toString() methods for logging.	18 years ago
Luke Taylor	b2e9e82727	Fixed typo in message.	18 years ago
Luke Taylor	63decfeb93	SEC-761: HttpSessionContextIntegrationFilter.contextObject should be created in afterPropertiesSet(), not the constructor http://jira.springframework.org/browse/SEC-761. Added call to generateNewContext() in the afterPropertiesSet() method to take account of custom security context classes.	18 years ago
Luke Taylor	1ae167434a	SEC-756: Add checks for duplicate use of namespace elements such as global-method-security http://jira.springframework.org/browse/SEC-756. Refactored HttpSecurityBDP and added check for duplicate usage of the element.	18 years ago
Luke Taylor	083644f2fe	SEC-756: Refactored GlobalMethodSecurityDefinitionParser and added check for duplicate registration.	18 years ago
Luke Taylor	1258fa854e	SEC-788: x509 authentication does not work properly http://jira.springframework.org/browse/SEC-788. Added check for X509 element when choosing entry point, if nothing else is available.	18 years ago
Luke Taylor	e12b6afefa	SEC-776: Http Session created for Anonymous request http://jira.springframework.org/browse/SEC-776. Added AuthenticationtrustResolver to HttpSCIF to check for anonymous authentication.	18 years ago
Luke Taylor	88ea87642a	SEC-791: RequestKey.equals throws NPE if method is null http://jira.springframework.org/browse/SEC-791. Fixed handling of equals when one http method is null.	18 years ago
Luke Taylor	9eaa1cbbdd	OPEN - issue SEC-789: Add support for optional role-prefix attribute to namespace http://jira.springframework.org/browse/SEC-789. Added role-prefix attribute to ldap provider and jdbc/ldap user-service elements.	18 years ago
Luke Taylor	aba5a22b6c	SEC-789: Add support for optional role-prefix attribute to namespace http://jira.springframework.org/browse/SEC-789. Added support for role-prefix to jdbc-user-service element.	18 years ago
Luke Taylor	1a4130528a	SEC-782: Incorrect UrlMatcher initialization in FilterChainProxy results in wrong lowercase/uppercase matching http://jira.springframework.org/browse/SEC-782. I've updated FilterChainProxy to make sure the same UrlMatcher is used throughout when converting a legacy configuration.	18 years ago
Luke Taylor	5bb558bd6a	SEC-777: The disabled status cannot be set in <user-service> http://jira.springframework.org/browse/SEC-777. Added the disabled flag to the relax grammar file.	18 years ago
Luke Taylor	993fdd7a32	Added better toString() method to OrderedFilterDecorator to make it report the delegate filter information.	18 years ago
Luke Taylor	469f55ce05	SEC-773: global-method-security fails with JPA http://jira.springframework.org/browse/SEC-773. Added extra constructor to MethodDefinitionSourceAdvisor to allow for lazy initialization of the advice (MethodSecurityInterceptor), and in turn the AuthenticationManager and ay referenced UserDetailsService implementations.	18 years ago
Luke Taylor	7238097310	OPEN - issue SEC-775: CLONE -impossible to specify "observeOncePerRequest" property in the namespace based configuration. http://jira.springframework.org/browse/SEC-775. Corrected check for value of observe-once-per-request attribute. Should be a check for "false" as it is true by default.	18 years ago

... 28 29 30 31 32 ...

3025 Commits (820e3f57504a7fb8fcc8a74e06a481ab47a10ea2)