85 Commits (b28e3a0b2f95bc97ace3fff27e7d49bab920ec70)

Author SHA1 Message Date
Luke Taylor 9d66e1fac3 Exclude static resources from filter chain in tutorial sample. 15 years ago
Luke Taylor 80fd96df6d SEC-1650: Updates and corrections to tutorial sample to fit better with new tutorial. 15 years ago
Rob Winch c9b328d8c7 SEC-1757: Updated tutorial sample to state that listing of accounts is allowed by anyone and to display accounts for the different types of access to posting to Accounts 15 years ago
Luke Taylor d58dd79a52 SEC-1494: Updated the tutorial webapp to use CSS and make use of the securityHiddenUI element when UI security is disabled. 15 years ago
Luke Taylor 19e56f4397 Stripping out unnecessary dependencies from sample jars. 15 years ago
Luke Taylor 685e0417a7 SEC-1544: Update the tutorial sample to attempt to delete the JSESSIONID cookie on logout. 16 years ago
Luke Taylor c37ca1c2a9 Sample app build adjustments to remove unwanted deps such as jsp-api, tidy up use of JSTL, make sure all are using servlet 2.5 etc. 16 years ago
Luke Taylor 6abfa2e887 Update minimum required schema to 3.1. 16 years ago
Luke Taylor 2afccfc633 Remove commons-logging dependency properly and switch tutorial sample to logback/slf4j. 16 years ago
Luke Taylor 0974e21fb6 SEC-1379: Added creation of a session if session timeout is detected (requested session ID is invalid). 16 years ago
Luke Taylor a5dde8b28f Updated doc on invalid session detection. 16 years ago
Luke Taylor 052537c8b0 Removing $Id$ markers and stripping trailing whitespace from the codebase. 16 years ago
Luke Taylor 893f212fa5 Tidying 16 years ago
Luke Taylor fac07ba8ff Schema updates to Spring 3.0 16 years ago
Luke Taylor 7247902911 SEC-1229: Updated sample and itest namespace concurrency configs. 17 years ago
Luke Taylor aa153681bf SEC-1229: Added session-management element to namespace and refactored existing session-related attributes and concurrency control. Refactored <http> parsing code to split it up into more manageable units. 17 years ago
Luke Taylor 5953af0f6b SEC-1196: Change use of <authentication-manager> to actually register the global ProviderManager instance. This element now registers the global ProviderManager instance and must contain any authentication-provider elements (or ldap-authentication-provider elements). 17 years ago
Luke Taylor 1afa67c954 SEC-1195: Added internal AuthenticationManager for use by beans which are generated by the <http> block. 17 years ago
Luke Taylor 853b4c8753 SEC-1186: Make sure an Element is always supplied when registering the AuthenticationManager. Fixes broken tests. 17 years ago
Luke Taylor 0134a5646d Changed to use expressions in commented-out XML instead of outdated syntax. 17 years ago
Luke Taylor f976080d1d Fixes to sample app context files 17 years ago
Luke Taylor 14c4739605 SEC-1158: Decoupling of Pre/Post annotations implementation from Spring EL. 17 years ago
Luke Taylor bec84f874a SEC-1125: Further refactoring of web packages following creation of web module. Fixing samples. 17 years ago
Luke Taylor 2927b8464f SEC-1058: Substantial refactoring of AbstractProcessingFilter to use AuthenticationFailureHandler strategy. Also changed attemptAuthentication method to take a response object and have the option of returning null, to allow OpenIDAuthenticationProcessingFilter to work without having to throw exceptions between the template methods (which made the logic very hard to follow). The OpenID filter now redirects to the OpenID provider service from this method, rather than treating it as a temporary failure and throwing OpenIDAuthenticationRequiredException. 18 years ago
Luke Taylor 6ccdcec629 SEC-1033: Added web expressions to tutorial sample configuration. 18 years ago
Luke Taylor bc6878c1c5 SEC-1044: Removed remember-me functionality from http auto-config namespace configuration. Added explicit <remember-me> elements to contacts and tutorial sample configurations. 18 years ago
Ben Alex 7e562031cc Better demonstrate the new EL-based "overdraft" authorization rules. 18 years ago
Luke Taylor d6cd392a9e Tidying up some stuff in tutorial app 18 years ago
Luke Taylor a7d046357b SEC-1013: Refactored out use of ConfigAttributeDefinition from remaining interfaces 18 years ago
Luke Taylor fc498954c6 Updated sample context files to point at 2.0.1 schema 18 years ago
Luke Taylor 882509fb2a Renamed context file 18 years ago
Luke Taylor eba18675fc Removed old acegi file from tutorial sample as it's causing confusion with users. 18 years ago
Luke Taylor 80cd7f4acc Removed accidental commit of tutorial context file 18 years ago
Luke Taylor 0cf745b85f Updated clean plugin to 2.2 18 years ago
Luke Taylor c7f182309f Removed excess config from tutorial sample file 18 years ago
Ben Alex 1490fe0b0a Various fine-tuning so people can see AspectJ expressions and a simple, minimal configuration. 18 years ago
Luke Taylor ef5b3e2f9c SEC-733: Changed names of <global-method-security> attributes as discussed with Ben and updated sample to reflect the changes. Also changed explicit instantiation of Jsr250 and Secured annotation MethodDefinitionSource beans in GlobalMethodSecurityBDP into bean definitions to make more tooling friendly. 18 years ago
Luke Taylor 743d72ca7b Added log4j support to tutorial app 18 years ago
Ben Alex 0860333a3f SEC-733: AspectJ Pointcut Expression Parsing support. 18 years ago
Luke Taylor 114969f7f7 SEC-706: Removed LDAP dependencies from tutorial app, since we now have a separate sample 18 years ago
Luke Taylor 8c00bb1537 SEC-674: Updated samples to work with new module layout. Changed taglib build to copy tld file to META-INF directory. 18 years ago
Luke Taylor be62979a01 Switch JSTL back to 1.1.2. 18 years ago
Luke Taylor adba67326f Removed accidentally committed version of tutorial app context file. 18 years ago
Luke Taylor 84c7ac5e57 SEC-664: Removed validateUserDetails method from AbstractRememberMeServices, wrapped the UserDetailsService in a status-checking one and added a catch block for AccountStatusExceptions. Also some minor tidying up of other remember-me classes. 18 years ago
Luke Taylor df1def412e Changed to using new alias for security filter chain in samples. 18 years ago
Luke Taylor 5738a51040 SEC-651: Support for ldap-user-service bean. 18 years ago
Luke Taylor acf5601714 SEC-645: Reimplementation of X509 provider and namespace implementation. 18 years ago
Luke Taylor 82940db6c8 SEC-648: Added custom-authentication-provider support. 18 years ago
Luke Taylor b85f76e6c1 Added SSL support to the tutorial app Jetty plugin configuration and added a requirement for SSL on the "extremely secure" page. 18 years ago
Luke Taylor 342677fabc Removed auto-config from tutorial sample and added commented out ldap support. Updated ldif file to match sample users. 18 years ago