Rob Winch
994117ad75
SEC-2436: Fix CsrfConfigurerNoWebMvcTests
13 years ago
Rob Winch
b7041ed00e
SEC-2436: Add @EnableWebMvcSecurity
13 years ago
Rob Winch
053c890a69
SEC-2450: WebSecurityConfigurerAdapter have default Order of 100
13 years ago
Rob Winch
2df5541905
SEC-2448: Update to HSQL 2.3.1
13 years ago
Rob Winch
04fac30d75
SEC-2449: <ldap-server> default port should fallback to dynamic value
13 years ago
Rob Winch
54ffa28bde
remove apacheDSWorkDir since custom tmp dir is created
13 years ago
Rob Winch
a34178bc40
SEC-2434: Update to Spring 3.2.6 and Spring 4.0 GA
13 years ago
Rob Winch
aaa7cec32e
SEC-2326: CsrfRequestDataValueProcessor implements RequestDataValueProcessor
...
Previously there was unecessary complexity in CsrfRequestDataValueProcessor
due to the non-passive changes in RequestDataValueProcessor. Now it simply
implements the interface with the methods for both versions of the interface.
This works since linking happens at runtime.
13 years ago
Rob Winch
7f714ebb23
SEC-2422: Session timeout detection with CSRF protection
13 years ago
Rob Winch
00d668dc5c
SEC-2431: UrlAuthorizationConfigurer missing <HttpSecurity> in doc
13 years ago
Rob Winch
4460e84b29
Updates to pom.xml author and repo
13 years ago
Rob Winch
8e8bdad8e6
SEC-2386: Remove stack for AuthenticationManagerBuilder with no authenticationProviders
13 years ago
Rob Winch
f2fdc9d1f5
SEC-2425: Add Test for EnableGlobalMethodSecurity works on parent config
13 years ago
Rob Winch
595b16d836
SEC-2377: Fix tests
13 years ago
Rob Winch
2a632a061e
SEC-2377: Hhandle EnableWebSecurity in both child & parent ApplicationContext
13 years ago
Rob Winch
0b996c669f
SEC-2424: Document ObjectPostProcessor
13 years ago
Rob Winch
13c5af5b91
SEC-2407: Better error message for missing securityFilterChainBuilders
13 years ago
Rob Winch
c7b93e6cee
SEC-2404: Fix CSRF config tests
13 years ago
Rob Winch
9dbe30c81d
SEC-2165: remember-me@token-validity-seconds can be parameterized
13 years ago
Rob Winch
afddb5eb39
SEC-2373: Update XSD doc to state security="none"
13 years ago
Rob Winch
6382b6341a
SEC-2355: Add test to validate intercept-url PATCH works
13 years ago
Collin Peters
85cd5627b6
SEC-2355: Add PATCH to intercept-url xsd
13 years ago
Rob Winch
2c8946c406
Next development version
13 years ago
Spring Buildmaster
9c703a3051
Release version 3.2.0.RC2
13 years ago
Rob Winch
dc317b3602
WebSecurityConfigurerAdapter implements WebSecurityConfigurer
13 years ago
Rob Winch
cda23443ac
XsdDocumentedTests now uses asciidoc instead of asciidoctor
13 years ago
Rob Winch
26be54653b
SEC-2382: AutowireBeanFactoryObjectPostProcessor works w/ BeanNameAutoProxyCreator
13 years ago
Rob Winch
9e7fbf8067
SEC-2321: Refine to use X-Requested-With: XMLHttpRequest
13 years ago
Rob Winch
5f290ba10f
SEC-2371: Remove ObjectPostProcessor.QUIESENT_POSTPROCESSOR
13 years ago
Rob Winch
604c26eb0d
Shis simplifies the class hieararchy significantly.EC-2366: Extract AbstractRequestMatcherRegistry from AbstractRequestMatcherConfigurer
...
This simplifies the class hierarchy significantly.
13 years ago
Rob Winch
348e3a22b6
SEC-2365: registerAuthentication->configure
13 years ago
Rob Winch
0978c12c47
SEC-2361: Java Config Sampels use @Autowired AuthenticationManagerBuilder
13 years ago
Rob Winch
0b0e7dbea9
SEC-2359: Merge DefaultLoginPageViewFilter w/ DefaultLoginPageGeneratingFilter
13 years ago
Rob Winch
51171efa7a
SEC-2357: Move *RequestMatcher to .matcher package
13 years ago
Rob Winch
14b9050616
SEC-2357: Move *RequestMatchers to .matchers package
13 years ago
Rob Winch
f2b44e6beb
Fix javadoc whitespace issue in HttpBasicConfigurer
13 years ago
Rob Winch
4ef0460ef6
SEC-2321: Improve Java Config defaults for JavaScript clients
13 years ago
Rob Winch
5f10d84bf5
SEC-2303: WebSecurity sets the Bean resolver
13 years ago
Rob Winch
dd1c2483b5
SEC-2349: Fix documentation tests
13 years ago
Rob Winch
8087cde628
SEC-2331: Include Expires: 0 in xsd and appendix
13 years ago
Rob Winch
17efd25717
SEC-2331: Include Expires: 0 in security headers documentation
13 years ago
Rob Winch
614c94187e
SEC-2305: GlobalMethodSecurityConfiguration autowire PermissionEvaluator
...
If a single PermissionEvaluator bean is found the
DefaultMethodSecurityExpressionHandler is configured with the
PermissionEvaluator. If multiple PermissionEvaluator beans are found, the
beans are ignored.
13 years ago
Rob Winch
a09756745f
SEC-2151: Support binding method arguments with Annotations
...
This allow utilizing method arguments for method access control on
interfaces prior to JDK 8.
13 years ago
Rob Winch
cea0cf9260
SEC-2243: Remove additional Debug Filter
13 years ago
Rob Winch
56ce7d284c
SEC-2336: WebSecurityConfigurerAdapter#registerAuthentication javadoc fixes
13 years ago
Rob Winch
88f41cdf62
SEC-2341: Update to Gradle 1.8
...
Some dependencies were necessary to update due to issues with JUnit
integration.
13 years ago
Rob Winch
a888ddf8b3
SEC-2307: JavaConfig RequestCache ignores favicon.ico
13 years ago
Rob Winch
ddc0ef7ab3
SEC-2339: Added Logical (Or, And, Negated) RequestMatchers
13 years ago
Rob Winch
28fb6ba14b
SEC-2328: Add hasAnyRole to ExpressionUrlAuthorizationConfiguration
13 years ago
Rob Winch
b16c17f70b
SEC-2301: Remove invalid import
13 years ago