spring-security

Commit Graph

Author	SHA1	Message	Date
Luke Taylor	c09cd3a9cb	Remove unused inner class in MethodSecurityMetadataSourceAdvisor	16 years ago
Luke Taylor	55de2cfcb1	SEC-1262: Added new (replacement) AspectJ interceptor which wraps the JoinPoint in a MethodInvocation adapter to provide compatibility with classes which only support MethodInvocation instances. Also deprecated the existing AspectJ interceptors. This will also allow future simplification of the AbstractMethodSecurityMetadataSource, as it no longer needs to support JoinPoints.	16 years ago
Luke Taylor	2b8b8819e4	Added gradle support for aspects project.	16 years ago
Luke Taylor	6fcaba2c46	Moved setting of 'provided' scope mapping on pom out of whenConfigured() so that the mapping is in place when the pom dependencies are assembled. Added 'skipTests' option.	16 years ago
Luke Taylor	f3264ba9ab	Addition of commons-logging exclusions and adjustments to pom generation.	16 years ago
Hans Dockter	b64a3fa725	Hans Dockter's refactoring of gradle build, plus simplification of docbook plugin.	16 years ago
Luke Taylor	d66ff32a1d	Added taglib dependency to itest-web project. Needed by additional test for SEC-1420.	16 years ago
Luke Taylor	b7aaa3447c	Updated aws-maven to 3.0.0.RELEASE	16 years ago
Luke Taylor	b38b8e55ac	SEC-1432: Convert map keys to lower-case in UserMap.setUsers(). Otherwise the lookup on mixed-case fails, since the lookup is performed with a lower-case key.	16 years ago
Luke Taylor	43f0e11106	SEC-1429: Removed cached authentication from session after successful authentication.	16 years ago
Luke Taylor	89d8c8cc83	Additional test classes for authentication and logout success/failure handling.	16 years ago
Luke Taylor	a3263753d9	Fix to Javadoc for AbstractAuthenticationProcessingFilter.	16 years ago
Luke Taylor	530ab3ae30	SEC-1429: Move logic for saving of AuthenticationException into the SimpleUrlAuthenticationFailurehandler from AbstractAuthenticationProcessingFilter. It will also now use request scope if configured to do a forward instead of a redirect.	16 years ago
Luke Taylor	4d70f88285	SEC-1420: JSP for itest of authentication tags with and without escaping.	16 years ago
Luke Taylor	0551dd89ac	SEC-1420: Add htmlEscape attribute to authentication JSP tag. This allows HTML escaping to be disabled if required.	16 years ago
Luke Taylor	43f3568b16	SEC-1407: Removed original URL matching classes and updated Javadoc of new RequestMatcher versions.	16 years ago
Luke Taylor	90caf1bb37	Manual formatting.	16 years ago
Luke Taylor	ae8027fa47	SEC-1425: Replace use of Java 1.6 String.isEmpty().	16 years ago
Luke Taylor	e5a875d752	SEC-1407: Correct logger category in MatcherType.	16 years ago
Luke Taylor	90a7f1f00e	SEC-1383: Namespace support for MethodSecurityMetadataSource. Initial commit.	16 years ago
Luke Taylor	93438defff	SEC-1407: Use RequestMatcher instances as the FilterInvocationSecurityMetadataSource keys and in the FilterChainMap use by FilterChainProxy. This greatly simplifies the code and opens up possibilities for other matching strategies (e.g. EL). This also means that matching is now completely strict - the order of the matchers is all that matters (not whether an HTTP method is included or not). The first matcher that returns true will be used.	16 years ago
Luke Taylor	962a2d5272	Tone down Apache DS log level in itest-web	16 years ago
Luke Taylor	d39e93ec23	Add maven pom customization options to build.gradle	16 years ago
Luke Taylor	b147652193	Make hsqldb a testRuntime/runtime dependency.	16 years ago
Luke Taylor	cb0f3f677f	SEC-1425: Add check for empty cookie in AbstractRememberMeServices. Prevents ArrayOutOfBoundsException later when processing the tokeniszed cookie.	16 years ago
Luke Taylor	f0466b6488	SEC-1424: Added support for "stateless" option for create-session attribute, designed for applications which do not use sessions at all.	16 years ago
Luke Taylor	6a34807a07	SEC-1423: Cache PointcutExpression instances in ProtectPointcutPostProcessor for more efficient startup.	16 years ago
Luke Taylor	e2f9be9015	SEC-1307: Modify context saving logic in HttpSessionSecurityContextRepository to check the SecurityContext and its contents (the Authentication) against the respective values when the request first arrived at the SecurityContextPersistenceFilter. As explained in the issue, this allows a definite decision to be made about whether the current thread has modified the context information during the request, indicating that it should be saved. Also removed deprecated HttpSessionContextIntegrationFilter and tests.	16 years ago
Luke Taylor	5aae545949	SEC-1232: Re-enable aspects module and aspectj sample in maven build.	16 years ago
Luke Taylor	4dd10cd266	Refactor overly large doFilter() method in DigestAuthenticationFilter.	16 years ago
Luke Taylor	2f1479785e	Refactoring to remove remaining circular dependencies indicated by structure101.	16 years ago
Luke Taylor	f3f84da625	Increase upper bounds of Spring and Spring Security versions in bundlor templates to 3.2.0.	16 years ago
Luke Taylor	b0bea8356f	Minor gradle 0.9 syntax change.	16 years ago
Luke Taylor	025ab4ce1a	Tweaking of table size in namespace chapter and PDF page margins to try to reduce overlapping of text	16 years ago
Luke Taylor	26cf6f5528	SEC-1399: Remove MockAuthenticationManager in app context file for FilterChainProxy tests.	16 years ago
Luke Taylor	ea7ccc718d	SEC-1399: Removed AbstractAuthenticationManager. MockAuthenticationManager was the only other subclass (apart from the main ProviderManager) and has been removed also.	16 years ago
Luke Taylor	dacb8dd25a	SEC-1382: Removed deprecated label-based voter and related classes.	16 years ago
Luke Taylor	68f6afd905	SEC-1383: Added namespace support for method-security-metadata-source	16 years ago
Luke Taylor	b7fc5bc455	Update schema version to 3.1	16 years ago
Luke Taylor	e2a8f81ae8	Update aspectj version in sample to 1.6.8	16 years ago
Luke Taylor	b37d2ed978	SEC-593: Added PermissionCacheOptimizer strategy interface and implementation in Acl module. This is used by DefaultMethodSecurityExpressionHandler to allow permissions to be cached before repeatedly evaluating an expression for a collection of domain objects.	16 years ago
Luke Taylor	1474e73b11	SEC-1166: Added new interface PermissionGrantingStrategy to allow customization of ACL permission granting logic. The DefaultPermissionGrantingStrategy contains the standard behaviour that was previously in AclImpl.	16 years ago
Luke Taylor	7c99361c26	Reduce length of long lines in the reference manual. Some are too long for the PDF version.	16 years ago
Luke Taylor	40d3f726d6	Update manual version to 3.0.2.RELEASE	16 years ago
Luke Taylor	2ee7696bf4	Update version number to 3.1.0.CI-SNAPSHOT.	16 years ago
Luke Taylor	44f45d21f0	3.0.2 release. Update version in build files.	16 years ago
Luke Taylor	d2b2ca3bc6	SEC-1387: Use a transient object as the advice monitor, rather than a Serializable. No need for an anonymous inner class.	16 years ago
Luke Taylor	97d04b73c1	Upgrade to Spring 3.0.1.	16 years ago
Luke Taylor	10dc72b017	SEC-1387: Support serialization of security advised beans. MethodSecurityMetadataSourceAdvisor now takes the SecurityMetadataSource bean name as an extra constructor argument and re-obtains the bean from the BeanFactory in its readObject method. Beans that are advised using <global-method-security> should therefore now be serializable.	16 years ago
Luke Taylor	14ae36ac3b	SEC-1412: Modify DefaultSavedRequest to ignore If-Not-Matched header. The browser (or at least Firefox) does not send it after a redirect, and it causes problems with Spring's ShallowEtagHeaderFilter if it is stored and returned by the saved request.	16 years ago

1 2 3 4 5 ...

3957 Commits (c09cd3a9cbdbe2a30023f1519d06b38cb0cd880b) All Branches Search

3957 Commits (c09cd3a9cbdbe2a30023f1519d06b38cb0cd880b)

All Branches