f40a1fda34
SEC-1357: Use getClass().getClassLoader() in SecurityNamespaceHandler to check for web classes.
...
This is used in preference to ClassUtils.getDefaultClassLoader() which fails to find the web classes in some situations.
16 years ago
052537c8b0
Removing $Id$ markers and stripping trailing whitespace from the codebase.
16 years ago
9a323f15bc
Bring versions in itext module up-to-date
16 years ago
68ae49ebe1
SEC-1355: Update manual code snippet to cast to OpenIDAuthenticationToken.
16 years ago
4e4242d010
SEC-1354: Added integration tests for combinations of @PreAuthorize and @Secured annotations.
16 years ago
846aa40a7b
Updated "heavyduty" sample version information.
16 years ago
be72ed1350
Remove commented out beans from contacts sample app context.
...
These were left when the app was updated to use Spring MVC @Controller syntax and scanning.
16 years ago
9730600777
Revert bundlor version update.
...
Config was wrong, but even with the correct config
the maven jar plugin generates its own manifest
file and ignores the one generated by bundlor.
16 years ago
3c97d68346
Upgrade to bundlor RC1
16 years ago
dc5417f1d5
SEC-1352: Added support for placeholders in <user-service>
...
The username, password and authorities attributes can now be placeholders.
16 years ago
f5d36aef65
SEC-1350: Improved Javadoc for AbstractPreAuthenticatedProcessingFilter
...
Added clarification that the credentials returned
by the subclass should not be null or they will
typically be rejected by the provider. Also added
some general overview.
16 years ago
93973a4b75
SEC-1304: Removed compareTo method from GrantedAuthorityImpl
...
This method had been left by mistake when the Comparable
interface was removed. See also SEC-1347.
16 years ago
c6b8fe5e55
SEC-1346: Added missing 'return' statements after redirects.
...
ConcurrentSessionFilter and SessionManagementFilter now return immediately after redirecting to the expired URL and invalid session URLs respectively. Extra tests added to check.
16 years ago
80aacf447f
Refactored JaasAuthenticationProvider
...
The toUrl() method on File gives a deprecation warning with Java 6, so I reimplemented
the logic for building the Jaas config URL.
16 years ago
893f212fa5
Tidying
16 years ago
b737fa451d
SEC-1344: Minor CAS doc updates
16 years ago
0aab19ed4b
Added additional info on concurrent session usage
16 years ago
744ed95b51
SEC-1343: ref manual typos
16 years ago
7e817b9640
NOJIRA formatting fix
16 years ago
4afe6c2c6a
SEC-1341
...
made it more extensible
16 years ago
3bb5ca5d4b
NOJIRA
...
upgraded to latest CAS client (3.1.10)
16 years ago
bcb1ff8921
SEC-1342: Introduced extra factory method in SecurityConfig to get round problem with Spring converting a string with commas to an array
16 years ago
115d5b84ff
[maven-release-plugin] prepare for next development iteration
16 years ago
6c6ef08353
[maven-release-plugin] prepare release spring-security-3.0.0.RELEASE
16 years ago
d695c85ad8
Removed maven structure from sandbox, and 'other' module, which is out of date.
16 years ago
a7770a64d3
Update cas server version in runall.sh
16 years ago
48be79108a
Gradle build file for 'heavyduty' sample
16 years ago
aad7d01c84
Updated CAS server version for sample use to 3.3.5
16 years ago
b96b14c5d0
Changed 'Advanced Topics' to more general 'Additional Topics'
16 years ago
1af9f8efea
SEC-1327: Minor doc update
16 years ago
be56d72912
SEC-1340: Minor doc corrections
16 years ago
e64866ae6a
Updated bundlor templates and introduced spring.version variable
16 years ago
052685e154
Add taglibs chapter to manual
16 years ago
3418aab46e
SEC-1327: Javadoc additions to clarify some behaviour
16 years ago
dd90f9332c
SEC-1326: Removed unncecessary exclusions
16 years ago
fcce29f8df
SEC-1326: Updating dependencies to match Spring versions. Removing unused deps.
16 years ago
89809e9029
SEC-1329: Added info on attribute-exchange configuration to the namespace chapter
16 years ago
97a31cae04
SEC-1333: Added error message for invalid redirect URL assertion
16 years ago
aeed49393c
Switching StringBuffer to StringBuilder throughout the codebase (APIs permitting).
16 years ago
fac07ba8ff
Schema updates to Spring 3.0
16 years ago
75311bad9a
LDAP API correction in ref manual
16 years ago
76731254c0
SEC-1328: Fixed issue with redirect to context relative URLs where the context name is part of the domain name.
16 years ago
85a58fd473
SEC-1331: Modify namespace to allow omission of user passwords in user-service element and generate random ones internally, preventing authentication against the data..
16 years ago
fabe03ba33
Doc updates
16 years ago
354b043fd1
SEC-1337: Add Serializable interface to internal comparator
16 years ago
55679971f0
SEC-1337: Make User serializable by moving anonymous comparator class
16 years ago
27dfff106e
Better FAQ css formatting
16 years ago
0297996bbb
Updated to Spring 3 release
16 years ago
06e092d46a
Midor Javadoc correction.
16 years ago
efb9ab4ff8
Completed initial draft of taglibs chapter
16 years ago
Luke Taylor
Scott Battaglia