Luke Taylor
|
9d66e1fac3
|
Exclude static resources from filter chain in tutorial sample.
|
15 years ago |
Luke Taylor
|
80fd96df6d
|
SEC-1650: Updates and corrections to tutorial sample to fit better with new tutorial.
|
15 years ago |
Rob Winch
|
c9b328d8c7
|
SEC-1757: Updated tutorial sample to state that listing of accounts is allowed by anyone and to display accounts for the different types of access to posting to Accounts
|
15 years ago |
Luke Taylor
|
d58dd79a52
|
SEC-1494: Updated the tutorial webapp to use CSS and make use of the securityHiddenUI element when UI security is disabled.
|
15 years ago |
Luke Taylor
|
19e56f4397
|
Stripping out unnecessary dependencies from sample jars.
|
15 years ago |
Luke Taylor
|
685e0417a7
|
SEC-1544: Update the tutorial sample to attempt to delete the JSESSIONID cookie on logout.
|
16 years ago |
Luke Taylor
|
c37ca1c2a9
|
Sample app build adjustments to remove unwanted deps such as jsp-api, tidy up use of JSTL, make sure all are using servlet 2.5 etc.
|
16 years ago |
Luke Taylor
|
6abfa2e887
|
Update minimum required schema to 3.1.
|
16 years ago |
Luke Taylor
|
2afccfc633
|
Remove commons-logging dependency properly and switch tutorial sample to logback/slf4j.
|
16 years ago |
Luke Taylor
|
0974e21fb6
|
SEC-1379: Added creation of a session if session timeout is detected (requested session ID is invalid).
This prevents problems with repeated detection of the same invalid session when the redirected request comes in.
|
16 years ago |
Luke Taylor
|
a5dde8b28f
|
Updated doc on invalid session detection.
Invalid session URL must typically be omitted from the filter chain to prevent an infinite loop.
|
16 years ago |
Luke Taylor
|
052537c8b0
|
Removing $Id$ markers and stripping trailing whitespace from the codebase.
|
16 years ago |
Luke Taylor
|
893f212fa5
|
Tidying
|
16 years ago |
Luke Taylor
|
fac07ba8ff
|
Schema updates to Spring 3.0
|
16 years ago |
Luke Taylor
|
7247902911
|
SEC-1229: Updated sample and itest namespace concurrency configs.
|
17 years ago |
Luke Taylor
|
aa153681bf
|
SEC-1229: Added session-management element to namespace and refactored existing session-related attributes and concurrency control. Refactored <http> parsing code to split it up into more manageable units.
|
17 years ago |
Luke Taylor
|
5953af0f6b
|
SEC-1196: Change use of <authentication-manager> to actually register the global ProviderManager instance. This element now registers the global ProviderManager instance and must contain any authentication-provider elements (or ldap-authentication-provider elements).
|
17 years ago |
Luke Taylor
|
1afa67c954
|
SEC-1195: Added internal AuthenticationManager for use by beans which are generated by the <http> block.
|
17 years ago |
Luke Taylor
|
853b4c8753
|
SEC-1186: Make sure an Element is always supplied when registering the AuthenticationManager. Fixes broken tests.
|
17 years ago |
Luke Taylor
|
0134a5646d
|
Changed to use expressions in commented-out XML instead of outdated syntax.
|
17 years ago |
Luke Taylor
|
f976080d1d
|
Fixes to sample app context files
|
17 years ago |
Luke Taylor
|
14c4739605
|
SEC-1158: Decoupling of Pre/Post annotations implementation from Spring EL.
|
17 years ago |
Luke Taylor
|
bec84f874a
|
SEC-1125: Further refactoring of web packages following creation of web module. Fixing samples.
|
17 years ago |
Luke Taylor
|
2927b8464f
|
SEC-1058: Substantial refactoring of AbstractProcessingFilter to use AuthenticationFailureHandler strategy. Also changed attemptAuthentication method to take a response object and have the option of returning null, to allow OpenIDAuthenticationProcessingFilter to work without having to throw exceptions between the template methods (which made the logic very hard to follow). The OpenID filter now redirects to the OpenID provider service from this method, rather than treating it as a temporary failure and throwing OpenIDAuthenticationRequiredException.
|
18 years ago |
Luke Taylor
|
6ccdcec629
|
SEC-1033: Added web expressions to tutorial sample configuration.
|
18 years ago |
Luke Taylor
|
bc6878c1c5
|
SEC-1044: Removed remember-me functionality from http auto-config namespace configuration. Added explicit <remember-me> elements to contacts and tutorial sample configurations.
|
18 years ago |
Ben Alex
|
7e562031cc
|
Better demonstrate the new EL-based "overdraft" authorization rules.
|
18 years ago |
Luke Taylor
|
d6cd392a9e
|
Tidying up some stuff in tutorial app
|
18 years ago |
Luke Taylor
|
a7d046357b
|
SEC-1013: Refactored out use of ConfigAttributeDefinition from remaining interfaces
|
18 years ago |
Luke Taylor
|
fc498954c6
|
Updated sample context files to point at 2.0.1 schema
|
18 years ago |
Luke Taylor
|
882509fb2a
|
Renamed context file
|
18 years ago |
Luke Taylor
|
eba18675fc
|
Removed old acegi file from tutorial sample as it's causing confusion with users.
|
18 years ago |
Luke Taylor
|
80cd7f4acc
|
Removed accidental commit of tutorial context file
|
18 years ago |
Luke Taylor
|
0cf745b85f
|
Updated clean plugin to 2.2
|
18 years ago |
Luke Taylor
|
c7f182309f
|
Removed excess config from tutorial sample file
|
18 years ago |
Ben Alex
|
1490fe0b0a
|
Various fine-tuning so people can see AspectJ expressions and a simple, minimal configuration.
|
18 years ago |
Luke Taylor
|
ef5b3e2f9c
|
SEC-733: Changed names of <global-method-security> attributes as discussed with Ben and updated sample to reflect the changes. Also changed explicit instantiation of Jsr250 and Secured annotation MethodDefinitionSource beans in GlobalMethodSecurityBDP into bean definitions to make more tooling friendly.
|
18 years ago |
Luke Taylor
|
743d72ca7b
|
Added log4j support to tutorial app
|
18 years ago |
Ben Alex
|
0860333a3f
|
SEC-733: AspectJ Pointcut Expression Parsing support.
|
18 years ago |
Luke Taylor
|
114969f7f7
|
SEC-706: Removed LDAP dependencies from tutorial app, since we now have a separate sample
|
18 years ago |
Luke Taylor
|
8c00bb1537
|
SEC-674: Updated samples to work with new module layout. Changed taglib build to copy tld file to META-INF directory.
Also standardized JSTL version to 1.1.0 (impl 1.1.2), moving deps to root sample pom.
|
18 years ago |
Luke Taylor
|
be62979a01
|
Switch JSTL back to 1.1.2.
|
18 years ago |
Luke Taylor
|
adba67326f
|
Removed accidentally committed version of tutorial app context file.
|
18 years ago |
Luke Taylor
|
84c7ac5e57
|
SEC-664: Removed validateUserDetails method from AbstractRememberMeServices, wrapped the UserDetailsService in a status-checking one and added a catch block for AccountStatusExceptions. Also some minor tidying up of other remember-me classes.
|
18 years ago |
Luke Taylor
|
df1def412e
|
Changed to using new alias for security filter chain in samples.
|
18 years ago |
Luke Taylor
|
5738a51040
|
SEC-651: Support for ldap-user-service bean.
|
18 years ago |
Luke Taylor
|
acf5601714
|
SEC-645: Reimplementation of X509 provider and namespace implementation.
|
18 years ago |
Luke Taylor
|
82940db6c8
|
SEC-648: Added custom-authentication-provider support.
|
18 years ago |
Luke Taylor
|
b85f76e6c1
|
Added SSL support to the tutorial app Jetty plugin configuration and added a requirement for SSL on the "extremely secure" page.
|
18 years ago |
Luke Taylor
|
342677fabc
|
Removed auto-config from tutorial sample and added commented out ldap support. Updated ldif file to match sample users.
|
18 years ago |