spring-security

Commit Graph

Author	SHA1	Message	Date
Rob Winch	2cad2f401b	SEC-2325: Polish CSRF Tag support - Rename csrfField to csrfInput - Make AbstractCsrfTag package scope - rename FormFieldTag to CsrfInputTag - rename MetaTagsTag to CsrfMetaTagsTag - removed whitespace from tag output so output is minimized & improving browser performance - Update @since - changed test names to be more meaningful	12 years ago
beamerblvd	3048e2c6e7	SEC-2325 Added JSP tags for CSRF meta tags and form fields	12 years ago
Rob Winch	d33b9e2854	SEC-2324: Update Spring Security tld version	13 years ago
Rob Winch	f38df99730	SEC-2045: AbstractAuthorizeTag supports custom WebInvocationPrivilegeEvaluator	13 years ago
Rob Winch	f441c352f6	Clean up warnings in AccessControlListTagTests	14 years ago
Rob Winch	4b86d49a9a	SEC-2023: AccessControlListTag again supports bitmasks Spring Security 3.1 has a regression i the AccessControlListTag which should support using the bitmask in hasPermission. Now hasPermission supports bit masks again.	14 years ago
Rob Winch	b481a6c1ad	SEC-2022: AccessControlListTag again supports , separated list of permissions Spring Security 3.0.x allowed developers to pass in a , separated list of permissions. However, this functionality was accidentally removed in SEC-1560. The AcessControlListTag now splits the permissions using , as a delimiter which fixes this passivity issue.	14 years ago
Rob Winch	b626a63b85	Suppress warnings in AbstractAuthorizeTag and AuthorizeTagCustomGrantedAuthorityTests	14 years ago
Christian Hilmersson	d57f1d56d5	SEC-1900: AbstractAuthorizeTag now compares using getAuthority() This avoids backwards compatibility issues with other GrantedAuthority implementations.	14 years ago
Rob Winch	8ca2927761	Renamed /Test.java to /Tests.java to better follow conventions	14 years ago
Luke Taylor	178765cf83	SEC-1836: Forgot taglib comment update.	14 years ago
Luke Taylor	fc399af136	SEC-1836: use GET as the default method with authorize tag.	14 years ago
Luke Taylor	503ac9ae7c	SEC-1798: Remove internal evaluation of EL in JSP tag implementations.	15 years ago
Luke Taylor	74daa68691	SEC-1796: Check for annotated annotations at class/interface level. Previously only the specific security annotation was checked for. By delegating to Spring's AnnotationUtils, custom annotations carrying the security annotation are also detected.	15 years ago
Luke Taylor	63f160dc72	SEC-1749: Add support for PageContext lookup of objects and use of PermissionEvaluator when using web access expressions.	15 years ago
Luke Taylor	ce19b470e2	SEC-1560: Change AccessControlListTag to use PermissionEvaluator rather than explicit ACL classes.	15 years ago
Luke Taylor	94b7868039	SEC-1675: Add missing body-content elements to tag descriptor and update it to use 2.0 tag library schema.	15 years ago
Luke Taylor	00200cecbc	SEC-1494: Added system property "spring.security.disableUISecurity" which will prevent authorize tags from hiding content. By default, the property will also cause the area that would normally be hidden to be decorated with a <span class="securityHiddenUI"> tag, thus allowing the area to be rendered with some distinguishing css (e.g. a different background colour).	15 years ago
Luke Taylor	85d685f7d3	SEC-1611: Make access attribute in authorize tag a runtime expression	15 years ago
Luke Taylor	4a40d80da1	SEC-1418: Deprecate GrantedAuthorityImpl in favour of final SimpleGrantedAuthority. It should be noted that equality checks or lookups with Strings or other authority types will now fail where they would have succeeded before.	15 years ago
Luke Taylor	4ad0652787	Removed array of authorities constructor from TestingAuthenticationToken and RunAsUserToken.	15 years ago
Luke Taylor	ca679e1479	Reformatting.	15 years ago
Luke Taylor	1c8d28501c	SEC-1550: Convert signatures to use Collection<? extends GrantedAuthority> where appropriate.	15 years ago
Rossen Stoyanchev	bd84a2bfa1	SWC-1552 Update .tld in integration test to match change in taglib.	15 years ago
Rossen Stoyanchev	70600a0277	SEC-1552 Refactor AuthorizeTag and LegacyAuthorize tag to make them independent of JSP tag rendering.	15 years ago
Luke Taylor	af56f4844d	SEC-1562: Created SecurityExpressionHandler interface and AbstractSecurityExpressionHandler.	16 years ago
Luke Taylor	3c02989d67	Removal of jmock test dependency and upgrading of mockito version to 1.8.5. Minor adjustments to other build deps and configurations (e.g. prevent groovy from being used as a transitive dep, since we only use it for tests).	16 years ago
Luke Taylor	85c4c91e0e	IDEA inspection refactorings.	16 years ago
Luke Taylor	36e0fb6d91	SEC-1518: Fix element ordering in security.tld	16 years ago
Luke Taylor	b3aad4cf19	Javadoc fixes.	16 years ago
Luke Taylor	dada047e04	SEC-1456: Set rtexprvalue=true for "url" attribute in access tag to allow dynamic values (such as URL of current page).	16 years ago
Luke Taylor	bf91f2ca67	SEC-524: Added "var" attribute to authorize and accesscontrollist JSP tags. Allows the result of the boolean condition granting/denying access to be stored in the page context for later use, without having to duplicate the tag.	16 years ago
Luke Taylor	0551dd89ac	SEC-1420: Add htmlEscape attribute to authentication JSP tag. This allows HTML escaping to be disabled if required.	16 years ago
Luke Taylor	c12c43da9e	Javadoc fixes.	16 years ago
Luke Taylor	36612377e2	Replace package.html with package-info.java files, creating new ones where missing and updating outdated contents.	16 years ago
Luke Taylor	052537c8b0	Removing $Id$ markers and stripping trailing whitespace from the codebase.	16 years ago
Luke Taylor	893f212fa5	Tidying	16 years ago
Luke Taylor	3a24ddfb43	Corrected description in tld file for accescontrollist tag, removing reference to outdated class.	16 years ago
Luke Taylor	cad32ffe39	SEC-1325: Tighten up Authentication interface contract to disallow null authorities. Modified internals of AbstractAuthenticationToken to use an empty list instead of null. Clarified Javadoc. removed unnecessary null checks in classes which use the interface.	16 years ago
Luke Taylor	2b99c6331e	Javadoc.	17 years ago
Luke Taylor	9374bddceb	Added test class for AccessControlListTag.	17 years ago
Luke Taylor	937e370fb4	SEC-1022: Minor reformatting.	17 years ago
Luke Taylor	3f70d79df5	SEC-1022: Remove use of static methods/initializers in Acl Permissions. Converted PermissionFactory to a strategy which is used to convert integers and names to Permission instances.	17 years ago
Luke Taylor	731402e9f5	SEC-525: [PATCH] Add AccessCheckerTag based on URL resource access permissions. Added functionality to "authorize" tag to allow evaluation of whether a particual url is accessible to the user. Uses a WebInvocationPrivilegeEvaluator registered in the application context.	17 years ago
Luke Taylor	b531a81176	SEC-1246: Introduce EL-based authorization tag. Added optional access expression to authorize tag.	17 years ago
Luke Taylor	5605386a30	SEC-1132: Restructuring of ACL packages	17 years ago
Luke Taylor	e94baf38b3	Tidying up to remove warnings (generics, use of deprecated test classes etc).	17 years ago
Luke Taylor	1454cbb78e	SEC-1132: Moved TextUtils to web module and StringSplit utils into Digest authentication package (as they aren't used elsewhere).	17 years ago
Luke Taylor	93bdcccaee	SEC-1132: Moved userdetails into core and added core/authority sub-package	17 years ago
Luke Taylor	ca7d055c2b	SEC-1132: Created core and authentication packages within core module.	17 years ago

1 2

66 Commits (3.2.3.RELEASE)