GitHub-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
4911 Commits
61 Branches
359 Tags
120 MiB
Tree: a888ddf8b3
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'a888ddf8b3'
${ noResults }
Commit Graph

2189 Commits (a888ddf8b3d33473d546b2b51d41cee5ea64b67d)

Author SHA1 Message Date
Luke Taylor be8ee61f82 PreInvocationAuthorizationAdviceVoter was checking the wrong type in its "supports" method.
14 years ago
Luke Taylor 359bd7c468 SEC-1804: Updated Javadoc wrt immutability of User class.
15 years ago
Luke Taylor 8ce6c73802 Add check for empty attributes list as well as null, in DelegatingMethodSecurityMetadataSource
15 years ago
Luke Taylor d6b7b52a79 Update to Spring 3.0.6.
15 years ago
Luke Taylor a4c05239e5 SEC-1719: Lithuanian messages translation.
15 years ago
Luke Taylor 59a07175a6 SEC-1744: Do not trust authorities contained in the authentication request in JaasAuthenticationProvider.
15 years ago
Luke Taylor 5fce0a58bd SEC-1750: Make sure RunAs replacement is constrained to the SecurityContext of the current thread.
15 years ago
Luke Taylor 249610c7ed SEC-1742: Remove deprecated "includeDetailsObject" field from DaoAuthenticationProvider.
15 years ago
Luke Taylor 1976cb1bf7 SEC-1742: Deprecate use of extraInformation field in AuthenticationException, making it transient and removing any sensitive data in UserDetails objects which are stored in it.
15 years ago
Luke Taylor 74daa68691 SEC-1796: Check for annotated annotations at class/interface level. Previously only the specific security annotation was checked for. By delegating to Spring's AnnotationUtils, custom annotations carrying the security annotation are also detected.
15 years ago
Rob Winch 7399c9a7a5 SEC-1792: Fixed NullPointerException in RunAsUserToken#toString()
15 years ago
Rob Winch dfd467f26e cleaned imports in RunAsUserToken
15 years ago
Luke Taylor 56e86dd36f Adding assertions on constructor arg values.
15 years ago
Luke Taylor 2d271666a4 Add constructors to facilitate constructor-based injection for required/shared bean properties.
15 years ago
Rob Winch c3a3a5bfbf Updated core.gradle to include crypto as referenced project in eclipse
15 years ago
Luke Taylor d253f5e109 SEC-1768: Use AopProxyUtils.ultimateTargetClass() to cater for the situation where the security interceptor is being applied to a proxy.
15 years ago
Luke Taylor 571bfc4869 Refactoring to use Utf8 encoder instead of String.getBytes("UTF-8").
15 years ago
Luke Taylor 361b77685d Add crypto as an exported dependency of core in IDEA configuration.
15 years ago
Luke Taylor 2b8d4684a1 SEC-1764: Ensure password encoders use UTF-8 charset when creating strings from byte arrays.
15 years ago
Luke Taylor e27f655e9d SEC-1689: Re-instate crypto as separate library (for use in non-Spring Security apps), as well as packaging with core.
15 years ago
Luke Taylor 6d04670f87 SEC-1695: Allow customization of the session key under which the SecurityContext is stored.
15 years ago
Luke Taylor 42e0e158b4 Simplify Digester utility class.
15 years ago
Luke Taylor 21295a58e5 SEC-1751: Applied patch to use zero-IV for queryable text encryption.
15 years ago
Luke Taylor 5a4aed238c SEC-1752: Fixed Utf8 codec to take account of the limit of the ByteBuffer returned by CharsetEncoder.encode().
15 years ago
Luke Taylor 63f160dc72 SEC-1749: Add support for PageContext lookup of objects and use of PermissionEvaluator when using web access expressions.
15 years ago
Luke Taylor c758f36629 Forgot to add version information test previously
15 years ago
Luke Taylor 295ea27526 SEC-1743: Separate remoting from core into separate module.
15 years ago
Luke Taylor 396eced291 Add test to check version information.
15 years ago
Luke Taylor 6a2a636fd7 Update Javadoc for UserDetailsManager to reflect that the new password doesn't need to be stored in the security context (and probably shouldn't be).
15 years ago
Luke Taylor a2858240f1 SEC-1728: Remove references to SUN provider and incorrect seeding of SecureRandom in SecureRandomBytesKeyGenerator.
15 years ago
Luke Taylor 73fb1764b8 SEC-1730: Fix broken KeyGenerators method.
15 years ago
Luke Taylor 614d8c0321 SEC-1723: Use standard SpEL syntax for accessing beans in the app context by name.
15 years ago
Luke Taylor 8178371927 SEC-1700: Add fixed serializationVersionUID values to security context, authentication tokens and related classes
15 years ago
Luke Taylor 5a9aa6d1aa SEC-1700: Allow for case where JAAS config is not a simple file, but may be a jar resource, for example.
15 years ago
Luke Taylor 6db7472928 SEC-1181: Added extra I18N messages for LDAP locked, disabled etc.
15 years ago
Luke Taylor 59ac4c8b96 SEC-1181: Added option to parse AD sub-error codes.
15 years ago
Luke Taylor 01c9c4e4db SEC-1697: Don't publish authorization success events in AbstractSecurityInterceptor by default.
15 years ago
Luke Taylor 8d99918798 SEC-1491: Add support for an external priority SecurityMetadataSource to be referenced from global-method-security.
15 years ago
Luke Taylor 3084ad878f SEC-1491: Added AnnotationMetadataExtractor to SecuredAnnotationSecurityMetadataSource to allow a custom security annotation to be used.
15 years ago
Luke Taylor 244047ffe9 Delete unused test entities.
15 years ago
Luke Taylor ead669f10c Move single-use annotation test classes into SecuredAnnotationSecurityMetadataDefinitionSourceTests.
15 years ago
Luke Taylor e470eaa41d SEC-1689: Moved core codec code into crypto package and removed existing duplication (Hex encoding etc). Refactoring of crypto code to use CharSequence for where possible instead of String.
15 years ago
Luke Taylor 50828cdd43 SEC-1689: Move crypto module code to core for simplicity.
15 years ago
Luke Taylor 5a6afbff95 SEC-1688: Allow injection of a PasswordEncoder from the crypto module into DaoAuthenticationProvider.
15 years ago
Luke Taylor 885f0270dc Some adjustments to the core build to make sure crypto classes are correctly exported to other tasks.
15 years ago
Luke Taylor 9d45828cb0 SEC-1689: Package crypto module classes with core.
15 years ago
Luke Taylor fd1a70edc2 SEC-1665: Add extra check of non-public declared methods in MethodInvocationAdapter, if public method cannot be found.
15 years ago
Luke Taylor 131c80f444 SEC-1690: Refactor expression PropertyAccessor for dealing with properties as beans in the ApplicationContext.
15 years ago
Luke Taylor 7a0a2dace6 Revert deliberate test failure.
15 years ago
Luke Taylor a9d325ea18 Deliberately fail test to test bamboo's reaction
15 years ago