Luke Taylor
d686f64f26
Skip EncryptorsTests when using <JDK 1.6 as AES isn't available
15 years ago
Luke Taylor
60befb063a
SEC-1659: Added crypto module to list of project modules in reference manual intro and to dependencies appendix.
15 years ago
Luke Taylor
162cb64baa
SEC-1659: Label crypto utils package as only for internal use.
15 years ago
Keith Donald
38327d1b16
SEC-1659: crypto docs
15 years ago
Keith Donald
b646e44646
SEC-1659: fixed bundlor step of build
15 years ago
Keith Donald
ea76efdb2c
SEC-1659: favor AES encryption instead of DES as standard symmetric encryption algorithm
15 years ago
Keith Donald
ffa7301e7f
SEC-1569: initial commit of spring-security-crypto module, consisting of encrypt, keygen, password, and util packages
15 years ago
Luke Taylor
afd586c96e
Re-instate the CAS integration sequence description in the CAS chapter, with corrections (and minus proxying).
15 years ago
Luke Taylor
2eefbf3a23
SEC-1657: Added support for 'name' attribute in <http> element to expose filter chain as a list bean.
15 years ago
Rob Winch
f20649f035
SEC-1648: added null check for getTargetUrlParameter() in SavedRequestAwareAuthenticationSuccessHandler.onAuthenticationSuccess and updated validation for AbstractAuthenticationTargetUrlRequestHandler.setTargetUrlParameter
15 years ago
Luke Taylor
075b30ab44
SEC-1651: Added paragraph to FAQ mentioning dependencies appendix.
15 years ago
Luke Taylor
8da0de459b
SEC-1651: Added remaining module information to dependencies appendix.
15 years ago
Luke Taylor
79b8edbd1e
Update CAS client to 3.1.12
15 years ago
Luke Taylor
eeb466b613
SEC-1648: Implemented Rob's suggestion to use a null value for the targetUrlParameter rather than a boolean property. It should thus only be used if this value is set.
15 years ago
Luke Taylor
6de2197c0f
SEC-1653: Ensure UserDetailsServiceFactoryBean is registered using the tools API to prevent errors in STS.
15 years ago
Luke Taylor
19e56f4397
Stripping out unnecessary dependencies from sample jars.
15 years ago
Luke Taylor
39b48c6d95
Update gradle wrapper to 0.9.1 in order to use mavenLocal() repo syntax.
15 years ago
Luke Taylor
bf59c75886
Test class to improve coverage of WAS-specific preauth code.
16 years ago
Luke Taylor
b858b23927
SEC-1651: Added first draft of dependencies appendix to reference manual.
16 years ago
Luke Taylor
6779822325
Remove GRADLE-1090 workarounds from config.gradle.
16 years ago
Luke Taylor
8d7830a1ee
SEC-1603: Add support in namespace for use of AuthenticationSuccessHandler with remember-me.
16 years ago
Luke Taylor
7fd3aa2b45
SEC-1603: Add support for injecting an AuthenticationSuccessHandler into RememberMeAuthenticationFilter.
16 years ago
Luke Taylor
c1f2fa1983
SEC-1558: Changed signatures of PrePostInvocationAttributeFactory to take strings rather than annotation types to allow the metadata to be obtained from other sources (not just annotations).
16 years ago
Luke Taylor
423f9eae7a
SEC-1648: Added a useTargetUrlparameter property to AbstractAuthenticationTargetUrlRequestHandler which defaults to false.
...
This ensures that users will think about the context in which they are enabling the use of a parameter to determine the redirect location.
16 years ago
Luke Taylor
313fe78cc1
Corrected snapshot version
16 years ago
Luke Taylor
2487a3e27b
Reset to snapshot version
16 years ago
Luke Taylor
0ca5157f47
Set project release version to 3.1.0.M2
16 years ago
Luke Taylor
7316bcff75
Updated outdated CAS sample readme with instructions for running CAS using gradle
16 years ago
Luke Taylor
bbcc611af5
CAS server version upgrade and minor tweaks to CAS sample build file.
16 years ago
Luke Taylor
592782dc7f
Added test for getAdditionalRoles in DefaultLdapAuthoritiesPopulator.
16 years ago
Luke Taylor
eebcfd28ef
Move Ldap authorities populator tests to the correct package.
16 years ago
Luke Taylor
dbe270f132
SEC-1641: Correct code and test for null groupSearchBase.
16 years ago
Luke Taylor
428a0b7dce
SEC-1639: Removed url argument from FilterChainProxy's VirtualFilterChain, since this can be directly computed from the request instance in the debug statements.
16 years ago
Luke Taylor
5f6dab67e1
SEC-1492: Added SimpleAuthoritiesMapper which provides a one-to-one authority mapping with case-conversion and the addition of a "role" prefix to the authority name.
16 years ago
Luke Taylor
3547cfcc92
SEC-1641: Remove the private setGroupSearchBase method and allowed a null value to be set for the group search base in the constructor.
16 years ago
Luke Taylor
f1fe3ce7e6
Update wrapper to gradle 0.9 release
16 years ago
Luke Taylor
48ea0a6249
SEC-1638: Added paragraph to docs explaining that for complete security, an app should not switch out of HTTPS at all.
16 years ago
Luke Taylor
7cf9740fd4
SEC-1638: Added an example configuration to the Javadoc for ChannelProcessingFilter and a pointer from the reference manual.
16 years ago
Rob Winch
1ed5227d75
Removed @Override from HttpFirewallBeanDefinitionParser.parse since it does not override a method definition, it implements one.
...
Fixed The method parse(Element, ParserContext) of type HttpFirewallBeanDefinitionParser must override a superclass method HttpFirewallBeanDefinitionParser.java /spring-security-config/src/main/java/org/springframework/security/config/http line 23 Java Problem
16 years ago
Rob Winch
7c04fdbc90
SEC-1639: FirewalledRequest is now called on the specific FirewalledRequest instance rather that looping through ServletRequestWrappers.
...
VirtualFilterChain now accepts the FirewalledRequest in the constructor. The reset method is called directly on the instance passed in instead of looping through the ServletRequestWrappers.
16 years ago
Luke Taylor
46f83c8a08
SEC-1492: Added RoleHierarchyAuthoritiesMapper as the new preferred way of using a RoleHierarchy.
16 years ago
Luke Taylor
c8820166c8
SEC-1576: Parameterize the secured object type in AccessDecisionVoter.
16 years ago
Luke Taylor
85d685f7d3
SEC-1611: Make access attribute in authorize tag a runtime expression
16 years ago
Luke Taylor
ce421f22bf
SEC-1635: Stop security interceptors from calling AfterInvocationManager if exception occurs during invocation
16 years ago
Luke Taylor
2be2660b13
SEC-1636: Add optimizations for simple pattern cases in AntPathRequestMatcher. "/**" and "**" are treated as universal matches and a trailing "/**" is now optimized using a substring match.
16 years ago
Luke Taylor
523f6add60
Javadoc fix
16 years ago
Luke Taylor
4a40d80da1
SEC-1418: Deprecate GrantedAuthorityImpl in favour of final SimpleGrantedAuthority.
...
It should be noted that equality checks or lookups with Strings or other authority types will now fail where they would have succeeded before.
16 years ago
Luke Taylor
978b7d4707
SEC-1631: Reduced use of reflection in DefaultAuthenticationEventPublisher and added tests.
16 years ago
Luke Taylor
bfb723feac
SEC-1557: Added getter to DelegatingMethodSecurityMetadataSource. Also added some optimizations of cache lookup key equals method. A class type check is unnecessary since the key class is a private inner class.
16 years ago
Luke Taylor
441aa25383
SEC-1615: Changed key generation for anonymous provider to only use SecureRandom on demand.
16 years ago