Luke Taylor
775a6c3939
[maven-release-plugin] prepare for next development iteration
18 years ago
Luke Taylor
87d50aecce
[maven-release-plugin] prepare release spring-security-parent-2.0.3
18 years ago
Luke Taylor
3ee8733261
SEC-879: Added required BeanPostProcessor to set SessionRegistry is set on namespace registered AbstractProcessingFilter and SessionFixationProtectionFilter when using custom ConcurrentSessionController
...
http://jira.springframework.org/browse/SEC-879 .
18 years ago
Luke Taylor
d5ee89bb7c
Correct typo in error message.
18 years ago
Luke Taylor
ff5bfccdba
SEC-892: Linked use of create-session='never' in namespace to corresponding properties in ExceptionTranslationFilter and AbstractProcessingFilter
18 years ago
Luke Taylor
c56d524bd9
SEC-887: Added setter method for account status checker.
18 years ago
Luke Taylor
af5f193ec1
SEC-890: Corrected use of dataSource property name in RememberMeBDP.
18 years ago
Luke Taylor
7d79ae5424
SEC-880: Fix incorrect index value.
18 years ago
Luke Taylor
32b8009bee
SEC-875: Removed duplicated parameters from SavedRequestWrapper.getParameterValues()
18 years ago
Luke Taylor
3b775d29d3
SEC-870: Polish messages file contribution
18 years ago
Ben Alex
358f284f42
SEC-760: Correct bug where more than one concurrent JaasAuthenticationProvider used.
18 years ago
Luke Taylor
ff785a829f
[maven-release-plugin] prepare for next development iteration
18 years ago
Luke Taylor
db1d8604a6
[maven-release-plugin] prepare release spring-security-parent-2.0.2
18 years ago
Luke Taylor
9308284bd4
SEC-864: Removed duplicate OpenID provider.
18 years ago
Luke Taylor
122e1c47ed
Changed rnc filename prior to 2.0.2 release
18 years ago
Luke Taylor
64ab7e534c
Spelling corrections in Javadoc.
18 years ago
Luke Taylor
ab6d29d927
SEC-862: Make logoutSuccessUrl accessible to sub-classes.
18 years ago
Luke Taylor
1d9d7eb9a7
Removed accidental commit of SavedRequest clearing code in TargetUrlResolverImpl
18 years ago
Luke Taylor
ecd2cc6da7
Added some Assert calls to setters and improved comments.
18 years ago
Luke Taylor
f228d013d8
SEC-861: Change default value of justUseSavedRequestOnGet to false
18 years ago
Luke Taylor
4de4bb8e87
SEC-860: Added setter for authenticationDetailsSource to AbstractRememberMeServices
18 years ago
Luke Taylor
f8cded10ee
Typo.
18 years ago
Luke Taylor
c031588975
SEC-606: Added support for customizable credentials character set.
18 years ago
Luke Taylor
36a192b70f
SEC-858: Replaced integer properties in schema with strings to allow use of placeholders.
18 years ago
Luke Taylor
980a72f9a0
Removed TODO (done).
18 years ago
Luke Taylor
517a7f117a
SEC-857: Make request wrapper getParameterValues() consistent with getParameterMap() etc.
18 years ago
Luke Taylor
244579faf4
OPEN - issue SEC-856: GroupManager JdbcUserDetailsManager implementation: addGroupAuthority() method doesn't work.
...
http://jira.springframework.org/browse/SEC-856 . Refactored class to remove the JDBC-related inner classes.
18 years ago
Luke Taylor
d63536cc0d
SEC-821: Added support for eternal session registry and concurrent session controller to the 2.0.2 namespace.
18 years ago
Luke Taylor
8b5bbe3800
SEC-830: Changed SavedRequestAwareWrapper to make wrapped request parameters take precedence over saved request ones.
18 years ago
Luke Taylor
45c3084502
SEC-836: Made LDAP namespace elements use subtree group searching by default.
18 years ago
Luke Taylor
871e529840
SEC-850: custom-authentication-provider Registering Separate Bean Definitions in App Context and Providers List
...
http://jira.springframework.org/browse/SEC-850 . Added extra test.
18 years ago
Luke Taylor
d1005e4cfb
SEC-850: custom-authentication-provider Registering Separate Bean Definitions in App Context and Providers List
...
http://jira.springframework.org/browse/SEC-850 . Changed bean decorator to add a bean reference to the ProviderManager rather than a bean definition.
18 years ago
Luke Taylor
9ce0270226
Fixed typo in test name
18 years ago
Luke Taylor
7603ce2f97
SEC-848: Remove all Spring LDAP dependecy loading from namespace parsers
...
http://jira.springframework.org/browse/SEC-848 . Replaced class references with class names.
18 years ago
Luke Taylor
25ba269db0
SEC-835: use setContentType on response for J2EE 1.3 compatibility.
18 years ago
Luke Taylor
11b448c0e0
SEC-847: Updated the xsl file to inline openid-login and other elements
18 years ago
Luke Taylor
08c5fe8925
Fixed autoboxing issue
18 years ago
Luke Taylor
fbe3ca48f4
SEC-823, SEC-843: Allow setting of custom RememberMeServices and token validity periodon remember-me namespace element
18 years ago
Luke Taylor
3e33b8a880
Update InMemoryXmlApplicationContext to use 2.0.2 schema
18 years ago
Luke Taylor
b60c578b25
SEC-844: Support for SHA-256 hashing.
18 years ago
Luke Taylor
03981ab6a0
SEC-844: Added sec-256 to namespace schema
18 years ago
Luke Taylor
e9adbd4d62
SEC-844, SEC-843, SEC-823: Added support for sha-256, custom remember-me services and setting of remember me token validity period to namespace schema. Also added 2.0.2 XSD file
18 years ago
Luke Taylor
29d31b72d0
SEC-837: Add special character filtering to LDAP search filters
18 years ago
Luke Taylor
3fb1f59fde
SEC-837: Add special character filtering to LDAP search filterscore/src/test/java/org/springframework/security/ldap
18 years ago
Luke Taylor
5af53da106
Improved doc for'filters' attribute
18 years ago
Luke Taylor
2329dadf48
Removed jalopy parameter comments
18 years ago
Luke Taylor
f269373442
IDE-791: Remove explicit Spring LDAP class dependencies from LdapServerBDP.
18 years ago
Luke Taylor
8b2c0468ff
OPEN - issue SEC-834: Session fixation attack protection will cause problems with URL rewriting
...
http://jira.springframework.org/browse/SEC-834 . Modified HttpSecurityBDP to add session-fixation parameters to openId and form-login filters. Also added sessionRegistry property to AbstractProcessingFilter so that it doesn't conflict with concurrent session control.
18 years ago
Luke Taylor
d17a2da9e0
SEC-834: Session fixation attack protection will cause problems with URL rewriting
...
http://jira.springframework.org/browse/SEC-834 . Changed position of SessionFixationProtectionFilter and modified it to make a decision about whether authentication has taken place prior to calling doFilter(). Previously it did this on the return through the filter chain, which caused the problem described in this issue.
18 years ago
Luke Taylor
7f38c656ca
SEC-820: Expand regular expression used in hierarchical roles.
18 years ago