086056f191
SEC-2289: Make compatible with Spring 4 as well
...
There are a few subtle changes in Spring 4 that this commit addresses
13 years ago
f5a30e55a3
SEC-2042: AbstractAuthenticationProcessingFilter supports RequestMatcher
13 years ago
6b81f97081
SEC-2114: Polishing Spring Based Cache
13 years ago
01ea39ce35
SEC-2114: Provide Spring Cache Abstraction based cache implementations
...
As of Spring 3.1 spring has its own cache abstraction. This commit adds cache
imlpementations based on that abstraction.
13 years ago
8178371927
SEC-1700: Add fixed serializationVersionUID values to security context, authentication tokens and related classes
15 years ago
a76a947b12
SEC-965: Added support for CAS proxy ticket authentication on any URL
15 years ago
3f7f87e19f
SEC-1592: Updated CasAuthenticationFilter so that it does not continue FilterChain when handling proxy requests.
...
The fix moves CommonUtils.readAndRespondToProxyReceptorRequest into CasAuthenticationFilter.attemptAuthentication. This makes sense since
The CAS server is authenticating that the proxy url is valid (i.e. it exists and the SSL handshake succeeds). It also allows the FilterChain
to not be processed by returning a null Authentication.
15 years ago
4a40d80da1
SEC-1418: Deprecate GrantedAuthorityImpl in favour of final SimpleGrantedAuthority.
...
It should be noted that equality checks or lookups with Strings or other authority types will now fail where they would have succeeded before.
15 years ago
4ad0652787
Removed array of authorities constructor from TestingAuthenticationToken and RunAsUserToken.
15 years ago
d64efe9747
SEC-1492: Added GrantedAuthoritiesMapper to provide mapping of loaded authorities to those which are eventually stored in the user Authentication object.
15 years ago
d1e8b8e29d
More tests. Minor refactoring.
16 years ago
85c4c91e0e
IDEA inspection refactorings.
16 years ago
0e57ce2dc3
SEC-1481: Updated constructors of Authentication types to use a generic wildcard for authorities collection.
16 years ago
74896f217b
SEC-1459: Generifying AuthenticationUserDetailsService. Now parameterized with <? extends Authentication>.
16 years ago
977bc2b164
SEC-1433: Reduce the number of direct dependencies on DataAccessException from spring-tx.
...
It is still required as a compile-time dependency by classes which use Spring's JDBC support, but it doesn't really have to be used in many interfaces and classes which are not necessarily backed by JDBC implementations.
16 years ago
36612377e2
Replace package.html with package-info.java files, creating new ones where missing and updating outdated contents.
16 years ago
052537c8b0
Removing $Id$ markers and stripping trailing whitespace from the codebase.
16 years ago
7e817b9640
NOJIRA formatting fix
16 years ago
4afe6c2c6a
SEC-1341
...
made it more extensible
16 years ago
aeed49393c
Switching StringBuffer to StringBuilder throughout the codebase (APIs permitting).
16 years ago
a5ed2e579e
Refactored CAS test to remove dependency on core tests jar.
16 years ago
46ef4239ca
SEC-1228
...
added NO_PASSWORD instead of passing in NULL since the User object does not allowe NULL for the password.
16 years ago
f35cb48407
NOJIRA
...
changed constructor back to collection. Accidentally set to List due to old code residing on notebook.
16 years ago
e812c58e04
NOJIRA
...
fixed changed constructor
16 years ago
f0a5572188
SEC-1228
...
fixed mistyped class name
16 years ago
1286741c7c
SEC-1259: Improve consistency of authentication filter names.
17 years ago
caff3ee9ba
SEC-1231: Authentication.getAuthorities should be of type Collection<GrantedAuthority> and not List<GrantedAuthority>. Refactored the interface and related classes to match (UserDetails etc).
17 years ago
df9e2eac9e
NOJIRA
...
updated license header and removed unneeded interface
17 years ago
5bdfd8cd77
Tidying imports etc to remove compiler warnings.
17 years ago
53baac2fd9
SEC-1228
...
started adding support for supporting creating UserDetails via Assertions.
17 years ago
f536c80020
SEC-1202: Removed SpringSecurityFilter and replaced with use of GenericFilterBean from spring-web
17 years ago
83da7be2ea
Remove (ticket) cache package from CAS module. Unnecesary and has a circular reference.
17 years ago
af0c5f9e7f
SEC-1186: Removed 'order' from ntlm and cas filters
17 years ago
a8215fa2cb
SEC-1160: Renaming of authentication filters and entry points and associated doc changes
17 years ago
93bdcccaee
SEC-1132: Moved userdetails into core and added core/authority sub-package
17 years ago
ca7d055c2b
SEC-1132: Created core and authentication packages within core module.
17 years ago
9efb5a7007
SEC-1132: Moved access-control/authorization specific code to org.sf.security.access package. Created provisioning package for user management classes to remove cyclical deps. Some other moving of classes to remove code tangles. Restructuring of portlet module under org.sf.security.portlet
17 years ago
f746a20ab4
SEC-1132: package refactoring of non-core modules
17 years ago
bec84f874a
SEC-1125: Further refactoring of web packages following creation of web module. Fixing samples.
17 years ago
4a41416c9b
Tidying up and removing compiler warnings.
17 years ago
cc5966bc7e
Tidying up, removing compiler warnings etc.
17 years ago
224c86a0b3
Tidying.
17 years ago
40ccd3be11
SEC-1058: Further refactoring to remove use of getDefaultTargetUrl(). Subclasses now pass the default value as a constructor argument.
17 years ago
2927b8464f
SEC-1058: Substantial refactoring of AbstractProcessingFilter to use AuthenticationFailureHandler strategy. Also changed attemptAuthentication method to take a response object and have the option of returning null, to allow OpenIDAuthenticationProcessingFilter to work without having to throw exceptions between the template methods (which made the logic very hard to follow). The OpenID filter now redirects to the OpenID provider service from this method, rather than treating it as a temporary failure and throwing OpenIDAuthenticationRequiredException.
17 years ago
3f40604b82
SEC-1055: Converted interfaces and methods using ServletRequest/Response to HttpServletRequest/Response where appropriate.
17 years ago
6601b3da5f
Refactored inline authority list into member variable.
17 years ago
e5b1073501
SEC-1012: Added more generics and warning suppression
17 years ago
ec44f2bdfe
SEC-1012: Refactoring of use of GrantedAuthority[] to generified collections
17 years ago
7594e1ae2f
SEC-984
...
added template method to allow to override the default of retrieving user by username.
18 years ago
5b089aea16
SEC-852
...
provided mechanism to do get a proxy ticket
18 years ago
Rob Winch
Marten Deinum
Luke Taylor
Rob Winch
Scott Battaglia