spring-security

Commit Graph

Author	SHA1	Message	Date
Luke Taylor	f8cded10ee	Typo.	18 years ago
Luke Taylor	c031588975	SEC-606: Added support for customizable credentials character set.	18 years ago
Luke Taylor	36a192b70f	SEC-858: Replaced integer properties in schema with strings to allow use of placeholders.	18 years ago
Luke Taylor	980a72f9a0	Removed TODO (done).	18 years ago
Luke Taylor	517a7f117a	SEC-857: Make request wrapper getParameterValues() consistent with getParameterMap() etc.	18 years ago
Luke Taylor	244579faf4	OPEN - issue SEC-856: GroupManager JdbcUserDetailsManager implementation: addGroupAuthority() method doesn't work. http://jira.springframework.org/browse/SEC-856. Refactored class to remove the JDBC-related inner classes.	18 years ago
Luke Taylor	d63536cc0d	SEC-821: Added support for eternal session registry and concurrent session controller to the 2.0.2 namespace.	18 years ago
Luke Taylor	8b5bbe3800	SEC-830: Changed SavedRequestAwareWrapper to make wrapped request parameters take precedence over saved request ones.	18 years ago
Luke Taylor	45c3084502	SEC-836: Made LDAP namespace elements use subtree group searching by default.	18 years ago
Luke Taylor	871e529840	SEC-850: custom-authentication-provider Registering Separate Bean Definitions in App Context and Providers List http://jira.springframework.org/browse/SEC-850. Added extra test.	18 years ago
Luke Taylor	d1005e4cfb	SEC-850: custom-authentication-provider Registering Separate Bean Definitions in App Context and Providers List http://jira.springframework.org/browse/SEC-850. Changed bean decorator to add a bean reference to the ProviderManager rather than a bean definition.	18 years ago
Luke Taylor	9ce0270226	Fixed typo in test name	18 years ago
Luke Taylor	7603ce2f97	SEC-848: Remove all Spring LDAP dependecy loading from namespace parsers http://jira.springframework.org/browse/SEC-848. Replaced class references with class names.	18 years ago
Luke Taylor	25ba269db0	SEC-835: use setContentType on response for J2EE 1.3 compatibility.	18 years ago
Luke Taylor	11b448c0e0	SEC-847: Updated the xsl file to inline openid-login and other elements	18 years ago
Luke Taylor	08c5fe8925	Fixed autoboxing issue	18 years ago
Luke Taylor	fbe3ca48f4	SEC-823, SEC-843: Allow setting of custom RememberMeServices and token validity periodon remember-me namespace element	18 years ago
Luke Taylor	3e33b8a880	Update InMemoryXmlApplicationContext to use 2.0.2 schema	18 years ago
Luke Taylor	b60c578b25	SEC-844: Support for SHA-256 hashing.	18 years ago
Luke Taylor	03981ab6a0	SEC-844: Added sec-256 to namespace schema	18 years ago
Luke Taylor	e9adbd4d62	SEC-844, SEC-843, SEC-823: Added support for sha-256, custom remember-me services and setting of remember me token validity period to namespace schema. Also added 2.0.2 XSD file	18 years ago
Luke Taylor	29d31b72d0	SEC-837: Add special character filtering to LDAP search filters	18 years ago
Luke Taylor	3fb1f59fde	SEC-837: Add special character filtering to LDAP search filterscore/src/test/java/org/springframework/security/ldap	18 years ago
Luke Taylor	5af53da106	Improved doc for'filters' attribute	18 years ago
Luke Taylor	2329dadf48	Removed jalopy parameter comments	18 years ago
Luke Taylor	f269373442	IDE-791: Remove explicit Spring LDAP class dependencies from LdapServerBDP.	18 years ago
Luke Taylor	8b2c0468ff	OPEN - issue SEC-834: Session fixation attack protection will cause problems with URL rewriting http://jira.springframework.org/browse/SEC-834. Modified HttpSecurityBDP to add session-fixation parameters to openId and form-login filters. Also added sessionRegistry property to AbstractProcessingFilter so that it doesn't conflict with concurrent session control.	18 years ago
Luke Taylor	d17a2da9e0	SEC-834: Session fixation attack protection will cause problems with URL rewriting http://jira.springframework.org/browse/SEC-834. Changed position of SessionFixationProtectionFilter and modified it to make a decision about whether authentication has taken place prior to calling doFilter(). Previously it did this on the return through the filter chain, which caused the problem described in this issue.	18 years ago
Luke Taylor	7f38c656ca	SEC-820: Expand regular expression used in hierarchical roles.	18 years ago
Luke Taylor	6493df13f8	SEC-803: Removed use of websphere SubjectHelper class.	18 years ago
Luke Taylor	59543af4fb	SEC-826: Support for JPA PersistenceContext annotation broken http://jira.springframework.org/browse/SEC-826 Moved all injection post-processing to BeanPostProcessors (and deleted bean factory post-processor) to prevent early instantiation problems. Beas should now all be instantiated before the injection takes place.	18 years ago
Luke Taylor	1fee538c7e	Fixed typo in setter method (uses of).	18 years ago
Luke Taylor	ae2470127c	Fixed typo in setter method "seAttributePrefix"	18 years ago
Luke Taylor	e1b226ee57	Added 2.0.2 namespace file	18 years ago
Luke Taylor	add2649397	Javadoc typo.	18 years ago
Luke Taylor	781d88bd30	OPEN - issue SEC-825: Query string isn't beig stripped from URLs when ant matcher is in use (regression issue) http://jira.springframework.org/browse/SEC-825. Make sure the property is set on DefaultFilterInvocationDefinitionSource when ant paths are in use.	18 years ago
Luke Taylor	883b92e7bd	SEC-822: Converted to long arithmetic to prevent integer overflowing with long token validity periods	18 years ago
Luke Taylor	301d021bf5	SEC-817: NPE in org.springframework.security.config.FilterChainProxyPostProcessor Reversed order of beanName.equals() call as suggested.	18 years ago
Luke Taylor	8ad2d681ab	SEC-818: Changed redirect URL validation to ignore potential property placeholders at parsing time and report a warning through the parser context rather than an error. Also validated the URLs in the beans themselves using Asserts, so an exception will occur later when the beans have been created rather than while assembling the bean definitions.	18 years ago
Luke Taylor	afc757e618	Removed reference to LdapDataAccessException since it isn't actually mentioned except in javadoc	18 years ago
Luke Taylor	c333070fe3	Javadoc tidying	18 years ago
Luke Taylor	fca3a2a709	SEC-812: Added missing TextUtils file	18 years ago
Luke Taylor	fa44c74993	SEC-812: Added entity-escaping of username stored under last username key, to prevent problems if it is rendered in a page without escaping the text.	18 years ago
Luke Taylor	06719053f1	Removed commons lang dependency.	18 years ago
Ben Alex	9961c7f867	Moved to correct build location.	18 years ago
Ben Alex	7a2e1e13d3	SEC-811: Provide a mechanism to allocate and rebuild cryptographically strong, randomised tokens.	18 years ago
Luke Taylor	4984d4be65	OPEN - issue SEC-757: Add validation of redirect URLs on namespace http://jira.springframework.org/browse/SEC-757. Added validation method to ConfigUtils and calls to it for url attributes.	18 years ago
Luke Taylor	81ebd094ff	OPEN - issue SEC-808: Switch namespace schema version to 2.0.1 and update spring.schemas http://jira.springframework.org/browse/SEC-808. Replaced 2.0 text with that from the 2.0 release, rather than the website schema.	18 years ago
Luke Taylor	473f6a32c6	OPEN - issue SEC-808: Switch namespace schema version to 2.0.1 and update spring.schemas http://jira.springframework.org/browse/SEC-808. Created new 2.0.1 schema files and updated tests to use them.	18 years ago
Luke Taylor	8281aeb0da	SEC-807: Allow mapping to a standard Ldap UserDetails through the namespace http://jira.springframework.org/browse/SEC-807. Added extra test for Ldap provider parser.	18 years ago

1 2 3 4 5 ...

1526 Commits (f8cded10ee4750232dc45af26c72fe267b552aef)