GitHub-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
4517 Commits
49 Branches
370 Tags
130 MiB
Tag: 3.1.0.RC3
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '3.1.0.RC3'
${ noResults }
Commit Graph

4517 Commits (3.1.0.RC3)
 

Author SHA1 Message Date
Luke Taylor 9e619611ae Set release version to 3.1.0.RC3
15 years ago
Luke Taylor 8ce6c73802 Add check for empty attributes list as well as null, in DelegatingMethodSecurityMetadataSource
15 years ago
Luke Taylor d6b7b52a79 Update to Spring 3.0.6.
15 years ago
Luke Taylor 3e4fc0b948 SEC-1795: Fix possible NPEs in AclImpl.equals()
15 years ago
Luke Taylor a4c05239e5 SEC-1719: Lithuanian messages translation.
15 years ago
Luke Taylor 503ac9ae7c SEC-1798: Remove internal evaluation of EL in JSP tag implementations.
15 years ago
Luke Taylor 45d938566c Some tests for Base64 encoding.
15 years ago
Luke Taylor 59a07175a6 SEC-1744: Do not trust authorities contained in the authentication request in JaasAuthenticationProvider.
15 years ago
Luke Taylor c618f4ab52 Add missing package to remoting bundlor template.
15 years ago
Luke Taylor 5fce0a58bd SEC-1750: Make sure RunAs replacement is constrained to the SecurityContext of the current thread.
15 years ago
Luke Taylor b48fc53fa2 SEC-1741: Modify ContextPropagatingRemoteInvocation to pass a simple combination of principal/credentials as Strings, rather than serializing the whole SecurityContext object from the client.
15 years ago
Luke Taylor 249610c7ed SEC-1742: Remove deprecated "includeDetailsObject" field from DaoAuthenticationProvider.
15 years ago
Luke Taylor 1976cb1bf7 SEC-1742: Deprecate use of extraInformation field in AuthenticationException, making it transient and removing any sensitive data in UserDetails objects which are stored in it.
15 years ago
Luke Taylor 824464516c SEC-1790: Reject redirect locations containing CR or LF.
15 years ago
Luke Taylor 6333909107 SEC-1797: Create a new session in AbstractPreAuthenticatedProcessingFilter when the existing session is invalidated on detecting a principal change.
15 years ago
Luke Taylor 74daa68691 SEC-1796: Check for annotated annotations at class/interface level. Previously only the specific security annotation was checked for. By delegating to Spring's AnnotationUtils, custom annotations carrying the security annotation are also detected.
15 years ago
Luke Taylor 8ce4d326f5 Update HttpClient to 4.1.2 and removed incorrect bundlor references to commons version.
15 years ago
Luke Taylor 0120643721 SEC-1794: Convert OpenIDAuthenticationStatus to an enum.
15 years ago
Luke Taylor 0c2a950fa0 SEC-1788: Avoid unnecessary call to getPreAuthenticatedPrincipal() in AbstractPreAuthenticatedProcessingFilter when not checking for principal changes is not enabled.
15 years ago
Rob Winch 7399c9a7a5 SEC-1792: Fixed NullPointerException in RunAsUserToken#toString()
15 years ago
Rob Winch dfd467f26e cleaned imports in RunAsUserToken
15 years ago
Luke Taylor 7e44580c75 Minor refactoring of aspects tests.
15 years ago
Luke Taylor 8740efc0f5 Added constructor injection options to ConcurrentSessionFilter
15 years ago
Luke Taylor a1c714cff4 SEC-1754: Added an InvalidSessionStrategy to allow SessionManagementFilter to delegate out the behaviour when an invalid session identifier is submitted.
15 years ago
Luke Taylor ac3d8b25f2 Expand LDAP authentication FAQ with information about bind authentication and unreadable password attributes.
15 years ago
Luke Taylor 8440743108 Remove Sql query objects from JdbcTokenRepositoryImpl in favour of direct JdbcTemplate use.
15 years ago
Luke Taylor 89fa771093 SEC-1753: Cater for missing DiscoveryInformation object in OpenID4JavaConsumer.endConsumption.
15 years ago
Luke Taylor 700fa9e0b6 SEC-1772: remote URL decoding of targetUrlParameter in AbstractAuthenticationTargetUrlRequestHandler.
15 years ago
Luke Taylor de97bac85b SEC-1763: Prevent nested switches in SwitchUserFilter by calling attemptExitUser() before doing the switch.
15 years ago
Luke Taylor a504cfae1a SEC-1770: Call refreshLastRequest on the session registry rather than the SessionInformation object to make sure it works with alternative SessionRegistry implementations.
15 years ago
Luke Taylor d5946b81b4 Added FAQ on how to add ApacheDS entries to pom.
15 years ago
Luke Taylor c117c643df SEC-1782: Javadoc correction for LdapAuthenticationProvider.
15 years ago
Rob Winch 330f82f562 SEC-1777: Corrected log in HttpSessionSecurityContextRepository to reference itself instead of HttpSessionContextIntegrationFilter
15 years ago
Florian Fankhauser 2e83d98c8f SEC-1776: Corrected typo in manual
15 years ago
Rob Winch 825f0061fb SEC-1761: Support HttpOnly Flag for Cookies when using Servlet 3.0
15 years ago
Luke Taylor 56e86dd36f Adding assertions on constructor arg values.
15 years ago
Luke Taylor f92589f051 Extract a SecurityFilterChain interface and create a default implementation to facilitate other configuration options.
15 years ago
Luke Taylor 2d271666a4 Add constructors to facilitate constructor-based injection for required/shared bean properties.
15 years ago
Luke Taylor 73442125de SEC-1775: Removed internal use of UserAttribute class in AnonymousAuthenticationFilter.
15 years ago
Luke Taylor 5d20f57fa8 Import cleaning.
15 years ago
Luke Taylor b15475ab3d SEC-1771: Change TokenBasedRememberMeServices to obtain password from UserDetailsService if necessary.
15 years ago
Luke Taylor 737a9d1825 Improved toString methods on request wrappers.
15 years ago
Rob Winch 85807fdfd0 Removed @Overrides from method that implements interface instead of overriding superclass to resolve Java 1.5 error
15 years ago
Rob Winch c3a3a5bfbf Updated core.gradle to include crypto as referenced project in eclipse
15 years ago
Luke Taylor d253f5e109 SEC-1768: Use AopProxyUtils.ultimateTargetClass() to cater for the situation where the security interceptor is being applied to a proxy.
15 years ago
Luke Taylor 5a1ddc660b SEC-1768: Added tests to reproduce "double-proxying" issue combining intercept-methods and tx-annotation-driven. Problem is caused by use of ProxyFactoryBean with auto-proxying.
15 years ago
Luke Taylor b0a60a7ff2 Reset to snapshot version.
15 years ago
Luke Taylor 926be1ca78 Intermediate crypto release version.
15 years ago
Luke Taylor 2861a951aa Minor FAQ update on version info.
15 years ago
Luke Taylor 1f1faa6da0 Use getClass() in logger instantiation in AbstractLdapAuthenticationProvider.
15 years ago