Luke Taylor
|
db90122179
|
SEC-1211: Create strategy for session handling on successful authentication. Added AuthenticatedSessionStrategy interface and default implementation which encapsulates the functionality that was previously in SessionFixationProtectionFilter and AbstractAuthentictationProcessingFilter. Updated the namespace to make use of these.
|
17 years ago |
|
Luke Taylor
|
8b115e2a21
|
SEC-1167: Added setRequestCache to SavedRequestAwareAuthenticationSuccessHandler and updated namespace parsing to set PortResolver on created HttpRequestCache.
|
17 years ago |
|
Luke Taylor
|
f404bb3d74
|
SEC-1167: Introduce more flexible SavedRequest handling. Separated the concept of SavedRequest from SecurityContextHolderAwareFilter since the two are orthogonal requirements. This no longer takes a wrapper class property or uses reflection. SavedRequest functionality is accessed through the RequestCache interface, with the default implementation being HttpSessionRequestCache. A separate filter RequestCacheAwareFilter is now responsible for reconstituting the SavedRequest if it matches the current request. The functionality for matching and returning the wrapper is contained in the RequestCache method though.
|
17 years ago |
|
Luke Taylor
|
e63fba3a36
|
Tidying
|
17 years ago |
|
Luke Taylor
|
8ddd96af2b
|
SEC-1186: intermediate commit of namespace changes for improved tooling support
|
17 years ago |
|
Luke Taylor
|
c6b9371029
|
Updated to latest Spring build snapshot. Required minor EL changes to parser class name
|
17 years ago |
|
Luke Taylor
|
e92aac225f
|
Minor javadoc.
|
17 years ago |
|
Luke Taylor
|
5808da12ff
|
SEC-1094: Simplified WebXml attribute mapping. Removed generic jaxen-based implementation on which it was based in favour of simple DOM model traversal. Updated sample.
|
17 years ago |
|
Luke Taylor
|
33eef5ec7a
|
Javadoc updates
|
17 years ago |
|
Luke Taylor
|
66f7e8bcc8
|
SEC-1168: Added filter-security-metadat-source to namespace.
|
17 years ago |
|
Luke Taylor
|
bb7ef1fa8b
|
Added HTML tags
|
17 years ago |
|
Luke Taylor
|
0cb40d6ae4
|
Javadoc update
|
17 years ago |
|
Luke Taylor
|
a8215fa2cb
|
SEC-1160: Renaming of authentication filters and entry points and associated doc changes
|
17 years ago |
|
Luke Taylor
|
5a03e842bd
|
Correcting Javadoc.
|
17 years ago |
|
Luke Taylor
|
4bad213b19
|
SEC-1132: Moved remaining preauth code from core to web
|
17 years ago |
|
Luke Taylor
|
d5b7ce69cc
|
SEC-1158: Decoupling of Pre/Post annotations implementation from Spring EL.
|
17 years ago |
|
Luke Taylor
|
29fafbbf18
|
Misc tidying up of old files and refactoring of tests
|
17 years ago |
|
Luke Taylor
|
6d655aa514
|
SEC-1132: More refactoring to remove cycles ad reduce complexity metrics
|
17 years ago |
|
Luke Taylor
|
5b543f83ec
|
Removed web dependency on core-tests
|
17 years ago |
|
Luke Taylor
|
dca566ff1f
|
SEC-1149: WebInvocationPrivilegeEvaluator now contains methods to evaluate the permissions on URIs directly. Deleted FilterInvocationUtils.
|
17 years ago |
|
Luke Taylor
|
d1cb85e4f3
|
Refactoring of methods names in UrlUtils for consistency.
|
17 years ago |
|
Luke Taylor
|
f6800fbe04
|
Refactored to remove dependency on FilterInvocationUtils.
|
17 years ago |
|
Luke Taylor
|
4bc788828c
|
SEC-1147: Remove use of SessionRegistryUtils. Inlined the methods.
|
17 years ago |
|
Luke Taylor
|
6db9a3facc
|
Minor debugging optimizations.
|
17 years ago |
|
Luke Taylor
|
e94baf38b3
|
Tidying up to remove warnings (generics, use of deprecated test classes etc).
|
17 years ago |
|
Luke Taylor
|
530a7b5d21
|
Use context returned by SecurityContextHolder.createEmptyContext() as contextObject default value.
|
17 years ago |
|
Luke Taylor
|
95ab95b6e3
|
SEC-1078: Missed commit of default strategy class.
|
17 years ago |
|
Luke Taylor
|
6bd7421a1b
|
SEC-1078: Converted WASSecurityHelper to an internal interface and added test for scenario from this issue.
|
17 years ago |
|
Luke Taylor
|
e45f6914ee
|
Import cleaning.
|
17 years ago |
|
Luke Taylor
|
1454cbb78e
|
SEC-1132: Moved TextUtils to web module and StringSplit utils into Digest authentication package (as they aren't used elsewhere).
|
17 years ago |
|
Luke Taylor
|
a76cbee4bc
|
SEC-1132: Moved ThrowableAnalyzer code to web module as it is only used in ExceptionTranslationFilter
|
17 years ago |
|
Luke Taylor
|
23d7778484
|
Typo.
|
17 years ago |
|
Luke Taylor
|
cac2bce382
|
Refactored SessionRegistryImpl to remove servlet API deps and moved back into core, along with other concurrent authentication package classes.
|
17 years ago |
|
Luke Taylor
|
271fbb7ddf
|
SEC-1081: Fix for PersistentTokenBasedRememberMeServices int overflow problem.
|
17 years ago |
|
Luke Taylor
|
2ff089af62
|
Restructure to standard layout.
|
17 years ago |
|
Luke Taylor
|
c21300d3ad
|
Tidying imports.
|
17 years ago |
|
Luke Taylor
|
6b3d0eac40
|
SEC-1111: Fix for "java.io.CharConversionException: Not an ISO 8859-1 character". Use response.getWriter() instead of printing to ServletOutputStream.
|
17 years ago |
|
Luke Taylor
|
23c23c6f3f
|
Remove unused import.
|
17 years ago |
|
Luke Taylor
|
292926518b
|
SEC-1136: Converted base exceptions to extend RuntimeException rather than NestedRuntimeException.
|
17 years ago |
|
Luke Taylor
|
93bdcccaee
|
SEC-1132: Moved userdetails into core and added core/authority sub-package
|
17 years ago |
|
Luke Taylor
|
c770998d92
|
SEC-1132: Move authoritymapping to core as it is actually used in loading authorities for a use, not in making access decisions.
|
17 years ago |
|
Luke Taylor
|
769041474e
|
SEC-1136: Missed an import.
|
17 years ago |
|
Luke Taylor
|
10673780db
|
OPEN - issue SEC-1136: Removed SpringSecurityException. Introduced new AclException as base class for Acl module. Refactored JAAS authentication to map to AuthenticationExcpetions rather than SpringSecurityException. Modified ExceptionTranslationFilter to look explicitly for AuthenticationException or AccessDeniedException (which it should do since these are the only two it handles).
|
17 years ago |
|
Luke Taylor
|
ca7d055c2b
|
SEC-1132: Created core and authentication packages within core module.
|
17 years ago |
|
Luke Taylor
|
9efb5a7007
|
SEC-1132: Moved access-control/authorization specific code to org.sf.security.access package. Created provisioning package for user management classes to remove cyclical deps. Some other moving of classes to remove code tangles. Restructuring of portlet module under org.sf.security.portlet
|
17 years ago |
|
Luke Taylor
|
7c4d54f356
|
SEC-1131: Applied patch for portlet upgrade
|
17 years ago |
|
Luke Taylor
|
1b43e3661a
|
SEC-1132: Moved switch user event class to web module as it is only used by SwitchUserProcessingFilter.
|
17 years ago |
|
Luke Taylor
|
f746a20ab4
|
SEC-1132: package refactoring of non-core modules
|
17 years ago |
|
Luke Taylor
|
bec84f874a
|
SEC-1125: Further refactoring of web packages following creation of web module. Fixing samples.
|
17 years ago |
|
Luke Taylor
|
2a9a8a41db
|
SEC-1125: Created separate web module spring-security-web
|
17 years ago |
