Luke Taylor
3e9983c744
SEC-1186: Removed 'order' from openid filter
17 years ago
Luke Taylor
a8215fa2cb
SEC-1160: Renaming of authentication filters and entry points and associated doc changes
17 years ago
Luke Taylor
e94baf38b3
Tidying up to remove warnings (generics, use of deprecated test classes etc).
17 years ago
Luke Taylor
d7f202a111
Addition of final to constructor set fields to improve immutability of authentication and user objects
17 years ago
Luke Taylor
93bdcccaee
SEC-1132: Moved userdetails into core and added core/authority sub-package
17 years ago
Luke Taylor
ca7d055c2b
SEC-1132: Created core and authentication packages within core module.
17 years ago
Luke Taylor
9efb5a7007
SEC-1132: Moved access-control/authorization specific code to org.sf.security.access package. Created provisioning package for user management classes to remove cyclical deps. Some other moving of classes to remove code tangles. Restructuring of portlet module under org.sf.security.portlet
17 years ago
Luke Taylor
f746a20ab4
SEC-1132: package refactoring of non-core modules
17 years ago
Luke Taylor
bec84f874a
SEC-1125: Further refactoring of web packages following creation of web module. Fixing samples.
17 years ago
Luke Taylor
2a9a8a41db
SEC-1125: Created separate web module spring-security-web
17 years ago
Luke Taylor
ddffdf1699
SEC-745: Renamed failureHandler and successHandler to have prefix 'authentication'
17 years ago
Luke Taylor
40ccd3be11
SEC-1058: Further refactoring to remove use of getDefaultTargetUrl(). Subclasses now pass the default value as a constructor argument.
18 years ago
Luke Taylor
2927b8464f
SEC-1058: Substantial refactoring of AbstractProcessingFilter to use AuthenticationFailureHandler strategy. Also changed attemptAuthentication method to take a response object and have the option of returning null, to allow OpenIDAuthenticationProcessingFilter to work without having to throw exceptions between the template methods (which made the logic very hard to follow). The OpenID filter now redirects to the OpenID provider service from this method, rather than treating it as a temporary failure and throwing OpenIDAuthenticationRequiredException.
18 years ago
Luke Taylor
10e4d1fe1a
SEC-1058: Partial refactoring of AbstractProcessingFilter. It now uses the injected SuccssfulAuthenticationHandler strategy instead of managing everything itself. The default implementation is SavedRequestAwareSuccessfulAuthenticationHandler which encapsulates most of the filter's success logic along with the code which was previously in TargetUrlResolver. Removed TargetUrlResolver.
18 years ago
Luke Taylor
e5b1073501
SEC-1012: Added more generics and warning suppression
18 years ago
Luke Taylor
ec44f2bdfe
SEC-1012: Refactoring of use of GrantedAuthority[] to generified collections
18 years ago
Ray Krueger
3393ea7aaa
SEC-923: Realm support for discovering relying parties.
...
A new "realmMapping" property can be configured on the OpenIDAuthenticationProcessingFilter to map the "return_to" url to a realm. If there is no mapping present the "return_to" url will be parsed and the protocol, hostname and port will be used with a trailing "/"
18 years ago
Luke Taylor
15b893f9ae
SEC-809: OpenIDProcessingFilter updated to set authentication details (to make compatible with concurrent session control).
18 years ago
Luke Taylor
b62ad5b097
SEC-722: Changed openID filter to use its owen ordering value as it may be used together with form login.
18 years ago
Luke Taylor
5ba7091a20
SEC-690: Use consistent naming in OpenID classes
...
http://jira.springframework.org/browse/SEC-690
18 years ago
Luke Taylor
5e204e23f3
SEC-536: Introduced UserDetailsChecker strategy to extract code for checking status of accounts and allowing variation in pre/post authentication checks made by AbstractUserDetailsAuthenticationProvider
18 years ago
Luke Taylor
bd5a64825d
SEC-552: Replaced authorites populators in CAS and OpenID with a plain UserDetailsService
18 years ago
Ray Krueger
c0e2842f90
General cleanup and removal of unused stuff
18 years ago
Luke Taylor
e42fdf29ae
Don't add exception to session if allowSessionCreation is false.
18 years ago
Luke Taylor
abe62f9146
Modified to store the login name in the session when login fails, so that it is available to the view (as in AuthenticationProcessingFilter).
18 years ago
Luke Taylor
677012a5de
Added Robin as author.
18 years ago
Luke Taylor
0d9c1924fb
Added check for null consumer, removed unused "errorPage" property.
18 years ago
Ray Krueger
718eddadd7
Promoting OpenID out of the Sandbox
18 years ago