GitHub-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
16174 Commits
49 Branches
323 Tags
127 MiB
Tree: 820e3f5750
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '820e3f5750'
${ noResults }
Commit Graph

3025 Commits (820e3f57504a7fb8fcc8a74e06a481ab47a10ea2)

Author SHA1 Message Date
Ben Alex 5a51f391a4 Add UsernameNotFoundException to default exception to event mappings list.
21 years ago
Ben Alex aa4fd8586c Fix concurrent session interaction bug where UserDetails.getUsername() may have been override to be a different value than the original login request, as per email from Herryanto Siatono on acegisecurity-developer 5 November 2005.
21 years ago
Ray Krueger 0aa4989dad JaasAuthenticationProvider no longer supports the useSystemProperty setting.This is because it no longer uses the java.security.auth.login.config system property for configuring Jaas. Custom Jaas configuration needs can be implemented in a subclass that overrides the configureJaas method.
21 years ago
Ray Krueger 6049e9ac65 Removed string concatenation from buffer.append methods
21 years ago
Ben Alex 9be82a3d8f SEC-67: Enhance taglib to allow retrieval of custom UserDetails methods.
21 years ago
Ben Alex 31a1f0be1a SEC-52: Move potentially useful methods to an abstract superclass so that other voters can use them.
21 years ago
Ben Alex 6e389ca1b8 SEC-51: Use long instead of int for ACL primary keys.
21 years ago
Ben Alex 633f2cfe66 SEC-39: Add equals(Object) method to User.
21 years ago
Ben Alex 7faf2741f1 SEC-32: Patches to move isPermissable(int) method to the BasicAclEntry interface. Thanks to Andres March for this patch.
21 years ago
Ben Alex a42dec6fbf SEC-21: Initial commit.
21 years ago
Ben Alex e9b1d9452f SEC-9 and SEC-55: Refactor DaoAuthenticationProvider and deprecate PasswordDaoAuthenticationProvider.
21 years ago
Ben Alex f50cbd31ba SEC-38: Make InMemoryDaoImpl support external Properties objects.
21 years ago
Ben Alex 0d77abb9c1 SEC-64: Correct operation with Orion Web Application Server. Patch thanks to Paul Brooks.
21 years ago
Ben Alex d9be0f86fd SEC-53: BasicProcessingFilter only to reauthenticate if the SecurityContextHolder contains an unauthenticated Authentication, or an Authentication with a different username.
21 years ago
Ben Alex 690ab27a52 SEC-70 and SEC-71: Refactor event publishing.
21 years ago
Ben Alex b6dbfde55c SEC-70: Refactor event publishing.
21 years ago
Ben Alex 3811200599 Improve debug output.
21 years ago
Ben Alex 2cbe42f493 SEC-7: Allow better chaining of authentication providers.
21 years ago
Ben Alex 42c47c086a JavaDocs formatting.
21 years ago
Luke Taylor f8b0de3459 Corrected Javadoc link to interface name.
21 years ago
Marc-Antoine Garrigue 5235727d23 SEC-2
21 years ago
Ben Alex 1ae07779a2 SEC-710: Refactor concurrent session handling support.
21 years ago
Ben Alex a5ffda7369 SEC-63: Do not return an absolute URL unless switching from HTTP to HTTPS.
21 years ago
Ben Alex c6d5363e5d SEC-60: Make method more friendly towards Hibernate detached object. Please note my comments in the JIRA task, as I believing calling toString() is not an unreasonable expectation.
21 years ago
Ben Alex d49198a944 SEC-43: Eliminate id column.
21 years ago
Ben Alex 41202112bc SEC-37: Only update HttpSession if SecurityContext has actually been changed.
21 years ago
Ben Alex 494e35f009 Jalopy styling.
21 years ago
Luke Taylor 24a78be159 Corrected link in Javadoc.
21 years ago
Luke Taylor c065c46668 Javadoc correction: ContextHolder -> SecurityContextHolder
21 years ago
Luke Taylor df4b8f602f Javadoc correction: SecureContext -> SecurityContext
21 years ago
Carlos Sanchez b2363dfe07 SEC-62 Add maven 2 support
21 years ago
Ray Krueger a39339674e login.config.url should be set to a url, not a file path
21 years ago
Scott McCrory bc14dd62db Fixed CVS line break
21 years ago
Scott McCrory 4717b64b83 Updated Siteminder auth processing filter and added test case. As of this weekend, this version is in production at a large financial org.
21 years ago
Ben Alex 0f5e9ad372 Fix NPE. Thanks to Tom Dunstan.
21 years ago
Ben Alex f5741962ed Add createSessionAllowed property, which should be set to false to avoid unnecessary session creation.
21 years ago
Marc-Antoine Garrigue 60d3b6505b Finalizing the validation, entry point and channel processor concerning captchas. Replacing the Thread.sleep() in captchaChannelProcessorTest to avoid the build break issue.
21 years ago
Mark St. Godard fb3f4af3b2 when extracting the original user, fix by referencing by the interface (UserDetail) rather than the concrete class (User)
21 years ago
Mark St. Godard 24394b7b2b added fix to preserve custom UserDetails implementations (Matt DeHoust fix recommendation)
21 years ago
Ben Alex d44b570087 Disable failing tests until Marc-Antoine has a chance to look at them.
21 years ago
Ben Alex ae9e7733db Fix broken tests.
21 years ago
Ben Alex 35ca25f085 BasicAuthenticationProcessingFilter no longer creates HttpSession via WebAuthenticationDetails call.
21 years ago
Ben Alex c7dcceb05c Do not setAuthenticated(false) in the event of a public (unsecured) invocation. Thanks to Joseph Dane for reporting this issue on acegisecurity-developer on 3 September 2005.
21 years ago
Mark St. Godard 486bbee35d added context path to redirect
21 years ago
Mark St. Godard 9d359780d9 finish user context switch event publishing
21 years ago
Mark St. Godard 20ebb668a6 Added event for user context switching and updated switch user filter
21 years ago
Ben Alex 55f5c3397a Relocated JdbcDaoExtendedImpl.convertAclObjectIdentityToString to superclass (pursuant to suggestion made by Tim Kettering on acegisecurity-developer).
21 years ago
Ray Krueger 2bda6ec25c Fix: SEC-48 http://opensource2.atlassian.com/projects/spring/browse/SEC-48
21 years ago
Ben Alex 40a81ed220 Revisit synchonization issue and correct problem identified by Volker Malzahn.
21 years ago
Mark St. Godard ec5e39c2e8 Initial checkin of user security context switching (see SEC-15). This is the first cut of the SwitchUserProcessingFilter that handles switching to a target uesr and exiting back to the original user. Note: This is going to be used for the common use-case of an Administrator 'switching' to another user (i.e. ROLE_ADMIN -> ROLE_USER). This is the initial cut of a Unix 'su' for Acegi managed web applications.
21 years ago