GitHub-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
3712 Commits
56 Branches
313 Tags
132 MiB
Tree: d4d5012035
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'd4d5012035'
${ noResults }
Commit Graph

123 Commits (d4d5012035374b9f4e92ef3f3435cb6b044a0708)

Author SHA1 Message Date
Luke Taylor d4d5012035 SEC-1272: <authentication-manager> does not register default event handler DefaultAuthenticationEventPublisher. Update AuthenticationManagerBeanDefinitionParser to register a DefaultAuthenticationeventPublisher and set it on the registered ProviderManager.
17 years ago
Luke Taylor a2468c523a SEC-1283: AuthenticationConfigBuilder.createAnonymousFilter uses httpElt instead of anonymousElt. Corrected element name.
17 years ago
Luke Taylor 197737a2b4 SEC-1281: make sure correct 'key' value is used for RememberMeAuthenticationProvider when external RememberMeServices is used
17 years ago
Luke Taylor 799b96520b SEC-1269: Combining <form-login> and <open-id> fails to find entry point. Fixed entry point choice conditions when using openID and/or form-login
17 years ago
Luke Taylor 3f963ef8ca Restore versions and svn URLs in trunk (release plugin fail)
17 years ago
Luke Taylor af563e826c [maven-release-plugin] prepare release spring-security-3.0.0.RC1
17 years ago
Luke Taylor 73df14c912 Allow any ordering of authentication-provider elements within authentication-manager
17 years ago
Luke Taylor ed2ddf9323 SEC-1263: Add FactoryBean for namespace AuthenticationManager. <http> now uses AuthenticationManagerFactoryBean. Method security already uses a delegate object to lookup the AuthenticationManager. This now uses the same error message if the bean isn't found, rather than allowing the BeanFactory NoSuchBeanDefinitionException to be thrown directly.
17 years ago
Luke Taylor ac5237c127 SEC:1263: Added FactoryBean for AuthenticationManager
17 years ago
Luke Taylor e398922f85 Removing elements that are no longer supported from the namespace
17 years ago
Luke Taylor 80eb47c6fe SEC-1261: Convert FilterChainOrder to an enum (SecurityFilters).
17 years ago
Luke Taylor 4dcb9de67a SEC-1257: Some additional API changes to use Collection instead of List...
17 years ago
Luke Taylor 1286741c7c SEC-1259: Improve consistency of authentication filter names.
17 years ago
Luke Taylor f213cc5d9e SEC-1257: APIs using List<ConfigAttribute> should use a Collection instead. Converted.
17 years ago
Luke Taylor 5d486a51b6 SEC-1256: Added support for expression attributes in filter-security-metadata-source configuration.
17 years ago
Luke Taylor 07d7c0ddae Renamed form and openID filters to shorten names
17 years ago
Luke Taylor 1042305cfe Renamed web.wrapper to web.servletapi. Added some package.html files.
17 years ago
Luke Taylor 673cf300fb SEC-1229: Refactoring to remove package cycles.
17 years ago
Luke Taylor acf13c74ca SEC-1229: Refactored authentication.concurrent in core, moving classes into core.session
17 years ago
Luke Taylor 2b89ebdfbb SEC-1229: Further doc and mods to namespace config/naming to make it more consistent
17 years ago
Luke Taylor 073198886d SEC-1255: Modified UrlUtils. Full request URL for redirects uses the requestURI (which is encoded). The URL for path comparsions is built using the servletpath, as before.
17 years ago
Luke Taylor c34d719004 SEC-1252: Remove 2.0.x schemas from 3.0. Removed files and updated spring.schemas to remove 2.0.x versions
17 years ago
Luke Taylor 2a1430f1ce SEC-1229: Removed legacy concurrency classes
17 years ago
Luke Taylor ebada9fd12 SEC-1229: Added support for parsing error URL in session-management
17 years ago
Luke Taylor 203cc5a8dc SEC-1229: Added error-url to concurrency-control element and changed "exception-if-max-exceeded" to "error-if-max-exceeded"
17 years ago
Luke Taylor 7109b7e183 Import cleaning.
17 years ago
Luke Taylor aa153681bf SEC-1229: Added session-management element to namespace and refactored existing session-related attributes and concurrency control. Refactored <http> parsing code to split it up into more manageable units.
17 years ago
Luke Taylor 731402e9f5 SEC-525: [PATCH] Add AccessCheckerTag based on URL resource access permissions. Added functionality to "authorize" tag to allow evaluation of whether a particual url is accessible to the user. Uses a WebInvocationPrivilegeEvaluator registered in the application context.
17 years ago
Luke Taylor 71ab83255d SEC-1242: Check that RememberMeServices is an instance of AbstractRememberMeServices before attempting to inject a UserDetailsService.
17 years ago
Luke Taylor fa7404741b SEC-1167: Introduce more flexible SavedRequest handling. Add namespace support for a custom RequestCache through the request-cache element.
17 years ago
Luke Taylor aec730ae7e SEC-1238: Disable portlet module
17 years ago
Luke Taylor 6640eab9dc SEC-1240: Added {ssha} support to PasswordEncoderParser.
17 years ago
Luke Taylor d099d14e9b SEC-1235: Added test to attempt to verify (failed to reproduce).
17 years ago
Luke Taylor 8632946f30 SEC-1213: Added "order" atrribute to global-method-security
17 years ago
Luke Taylor 245fc96137 SEC-1075: Update the embedded LDAP server to use Apache DS 1.5. Updated to use the new 1.5.5 release for the embedded server.
17 years ago
Luke Taylor 2039200617 SEC-1217: AbstractRememberMeServices should set 'secure' attribute on remember-me cookie if in secure context. Added "useSecureCookie" configuration property and corresponding use-secure-cookie attribute in namespace.
17 years ago
Luke Taylor dbcb13ad14 SEC-1229: Redesign Concurrent Session Control implementation. Renamed session strategy interface and introduced SessionAuthenticationException for rejection of session/Authentication combination.
17 years ago
Luke Taylor 0d7b990e0a SEC-1184: Moved ACL cache classes and interface out of jdbc package.
17 years ago
Luke Taylor 471206a29d SEC-1229: Redesign Concurrent Session Control implementation. Added ConcurrentSessionControlAuthenticatedSessionStrategy
17 years ago
Luke Taylor fe33f08b73 SEC-1201: Allow requires-channel attribute to take placeholders.
17 years ago
Luke Taylor 00352227ac Tidying.
17 years ago
Luke Taylor ea01e9cdf7 SEC-1201: PropertyPlaceholderConfigurer does not work for intercept-url attributes. Ensure that channel processing handles paths which are placeholders.
17 years ago
Luke Taylor 9bf8656d66 SEC-1201: PropertyPlaceholderConfigurer does not work for intercept-url attributes. Added use of ManagedMaps and BeanDefinitions to support placeholders in the pattern and access attributes.
17 years ago
Luke Taylor 579644fa95 SEC-1225: Use bean references for authentication providers. Updated AuthenticationManagerBDP to regsiter the providers as top level beans.
17 years ago
Luke Taylor 24911eb606 Corrected links in manual, comment in schema file.
17 years ago
Luke Taylor 5a8772df5b Reset pom versions post release
17 years ago
Luke Taylor 0e5aa7008d [maven-release-plugin] prepare release spring-security-3.0.0.M2
17 years ago
Luke Taylor 48988bde84 SEC-935: Support for OpenID attribute exchange and changes to namespace syntax to allow simple configuration of attributes to request.
17 years ago
Luke Taylor f536c80020 SEC-1202: Removed SpringSecurityFilter and replaced with use of GenericFilterBean from spring-web
17 years ago
Luke Taylor 966f3e4101 SEC-1182: Added tst to confirm that this is no longer an issue due to other changes
17 years ago