Luke Taylor
|
0e5aa7008d
|
[maven-release-plugin] prepare release spring-security-3.0.0.M2
|
17 years ago |
|
Luke Taylor
|
d6e51b8428
|
Doc updates describing namespace changes
|
17 years ago |
|
Luke Taylor
|
984b2835d6
|
Update CAS sample to use new namespace syntax for authentication providers.
|
17 years ago |
|
Luke Taylor
|
2443cf6615
|
Disable itest module prior to release
|
17 years ago |
|
Luke Taylor
|
d47abbc35f
|
SEC-1223: Added break to bindWithDnLoop when non-null use is returned.
|
17 years ago |
|
Luke Taylor
|
2f9a98c7ce
|
SEC-214: Update keywords.
|
17 years ago |
|
Luke Taylor
|
8ed9f8a057
|
Remove wrongly named file
|
17 years ago |
|
Luke Taylor
|
4df370b100
|
SEC-214: Add functionality to be able to use LDAP password policy request/response controls. Added PasswordPolicyAwareContextSource, ppolicy control implementations (from Sandbox) and modified BindAuthenticator to check for the presence of the response control, adding the control to the retured DirContextAdapter if appropriate. LdapUserDetailsImpl also contains the data for grace logins remaining and time till password expiry. Added OpenLDAP startup script with test data and integration test which operates against the data (must be run manually).
|
17 years ago |
|
Luke Taylor
|
48988bde84
|
SEC-935: Support for OpenID attribute exchange and changes to namespace syntax to allow simple configuration of attributes to request.
|
17 years ago |
|
Luke Taylor
|
5e4743d8f2
|
Updated to Spring 3 M4 prior to M2 release
|
17 years ago |
|
Luke Taylor
|
e6631be778
|
Import cleaning
|
17 years ago |
|
Luke Taylor
|
faa6be2011
|
SEC-935: Updated to OpenID4Java 0.9.5 release
|
17 years ago |
|
Luke Taylor
|
6f76fe6fbb
|
Import cleaning
|
17 years ago |
|
Luke Taylor
|
eb059cfd12
|
SEC-1211: removed SessionUtils (no longer used)
|
17 years ago |
|
Luke Taylor
|
f536c80020
|
SEC-1202: Removed SpringSecurityFilter and replaced with use of GenericFilterBean from spring-web
|
17 years ago |
|
Luke Taylor
|
b807f7cbdd
|
Added comment to pom to explain spring-web requirement
|
17 years ago |
|
Luke Taylor
|
972cd0a53c
|
javadoc
|
17 years ago |
|
Luke Taylor
|
d65b1b3581
|
SEC-1200: Ukranian messages file
|
17 years ago |
|
Luke Taylor
|
966f3e4101
|
SEC-1182: Added tst to confirm that this is no longer an issue due to other changes
|
17 years ago |
|
Luke Taylor
|
b4bb489638
|
SEC-1164: Further registering on bean components for tooling and removal of global ids.
|
17 years ago |
|
Luke Taylor
|
b387d63aba
|
Removing unnecessary global bean names.
|
17 years ago |
|
Luke Taylor
|
a67448c867
|
SEC-1216: Remove unused code.
|
17 years ago |
|
Luke Taylor
|
229866e293
|
SEC-1142: Support for session timeout detection. Added namespace support for invalid-session-url
|
17 years ago |
|
Luke Taylor
|
c12e5b4d0b
|
SEC-1142: Renamed setter argument to match property.
|
17 years ago |
|
Luke Taylor
|
ea73fd0130
|
SEC-1142: Simplified implementation by removing template method.
|
17 years ago |
|
Luke Taylor
|
90d76373cc
|
SEC-1142: Support for session timeout detection. Added redirect to invalidSessionUrl in SessionManagementFilter when an invalid session Id is supplied in the request.
|
17 years ago |
|
Luke Taylor
|
0f6642d3ab
|
SEC-1216: Replacement of custom-after-invocation-provider with after-invocation-provider element. Some changes to help prevent proxying of aop infrastructure classes (use of AopInfrastructureBean marker interface)
|
17 years ago |
|
Luke Taylor
|
eaa0dc4fce
|
typo
|
17 years ago |
|
Luke Taylor
|
e40b9fbc75
|
SEC-1196: Introduce AuthenticationManagerDelegator is MethodSecurityInterceptor which is configured by global-method-security. Prevents regression of SEC-933 caused by eager init of AuthenitcationManager and dependent beans
|
17 years ago |
|
Luke Taylor
|
997faabe1e
|
SEC-1196: Removed ConfigUtils (no longer used).
|
17 years ago |
|
Luke Taylor
|
5953af0f6b
|
SEC-1196: Change use of <authentication-manager> to actually register the global ProviderManager instance. This element now registers the global ProviderManager instance and must contain any authentication-provider elements (or ldap-authentication-provider elements).
|
17 years ago |
|
Luke Taylor
|
c5d6484b54
|
SEC-1210: RememberMe filter misses UserDetailsService in default <http /> tag config when it is declared in parent app context. Fixed by getting the UserDetailsServiceInjectionPostProcessor to check ancestor bean factories for a UserDetailsService if one isn't found in the current bean factory.
|
17 years ago |
|
Luke Taylor
|
160aa512a1
|
Remove "infrastructure" type from authentication provider bean.
|
17 years ago |
|
Luke Taylor
|
6ae61f95db
|
Minor updates to test XML context implementation.
|
17 years ago |
|
Luke Taylor
|
a4a0aab66f
|
SEC-1164: Add additional component definitions so that Spring IDE picks them up and doesn;t report missing bean definitions
|
17 years ago |
|
Luke Taylor
|
06e393a171
|
Update bundlor to M5
|
17 years ago |
|
Luke Taylor
|
ecbacddc7c
|
SEC-1146: Add some information on using authority groups
|
17 years ago |
|
Luke Taylor
|
5d5df0c63d
|
Added extra 'manual' security interceptor config
|
17 years ago |
|
Luke Taylor
|
68364f06a2
|
Minor itest updates
|
17 years ago |
|
Luke Taylor
|
3e6054b69f
|
SEC-1211: Rename SessionFixationProtectionFilter to SessionManagementFilter, since it no longer performs session-fixation protection directly, but just executes the AuthenticatedSessionStrategy.
|
17 years ago |
|
Luke Taylor
|
5e285b3692
|
SEC-1211: Set the default AuthenticatedSessionStrategy to a null implementation to preserve existing behaviour.
|
17 years ago |
|
Luke Taylor
|
609a68b12a
|
SEC-1077: Added DefaultAuthenticatedSessionStrategy test to check that saved request attribute is retained when migrateAttributes is false.
|
17 years ago |
|
Luke Taylor
|
db90122179
|
SEC-1211: Create strategy for session handling on successful authentication. Added AuthenticatedSessionStrategy interface and default implementation which encapsulates the functionality that was previously in SessionFixationProtectionFilter and AbstractAuthentictationProcessingFilter. Updated the namespace to make use of these.
|
17 years ago |
|
Luke Taylor
|
4a12b80470
|
Minor updates to x509 doc and update of remember-me doc (no longer part of auto-config)
|
17 years ago |
|
Luke Taylor
|
fdb7325cbc
|
Javadoc update
|
17 years ago |
|
Luke Taylor
|
9c27bced5b
|
Corrected typo
|
17 years ago |
|
Luke Taylor
|
40efe6db57
|
Minor doc updates
|
17 years ago |
|
Luke Taylor
|
0a37aed4b9
|
SEC-1207. Fixed class name in jsp
|
17 years ago |
|
Luke Taylor
|
719a5e09d8
|
SEC-1205: Added comment to Javadoc for PasswordComparisonAuthenticator to indicate that it won't work with SSHA passwords
|
17 years ago |
|
Luke Taylor
|
931cf90dbb
|
SEC-1203: Allow configuration of X509 subject-dn-regex attribute using PropertyPlaceholderConfigurer. Modified parser to use a BeanDefinition for the SubjectPrincipalDnExtractor to allow property subsititution.
|
17 years ago |
