33c9185160
Release version 4.0.2.RELEASE
11 years ago
ea873fb1b8
SEC-2963: Disable appengineFunctionalTest
11 years ago
117f892c91
SEC-3031: DelegatingSecurityContext(Runnable|Callable) only modify SecurityContext on new Thread
...
Modifying the SecurityContext on the same Thread can cause issues. For example, with a
RejectedExecutionHandler the SecurityContext may be cleared out on the original Thread.
This change modifies both the DelegatingSecurityContextRunnable and DelegatingSecurityContextCallable to,
by default, only modify the SecurityContext if they are invoked on a new Thread. The behavior can be changed
by setting the property enableOnOrigionalThread to true.
11 years ago
113b61e3a0
SEC-2957: Polish
11 years ago
dab4cf18b8
SEC-3032: Correct documented logout-success-url default
11 years ago
be27ede0e9
SEC-2957: Add missing provided dependencies to samples
11 years ago
e8c9f75f9c
Update pom.xml to latest versions
11 years ago
bc53945d89
Remove unused import in WithSecurityContextTestExecutionListenerTests
11 years ago
432123daa2
SEC-2964: Fix CsrfTokenArgumentResolver Javadoc
11 years ago
92ae45a04d
SEC-3051: Add AbstractPreAuthenticatedProcessingFilter#principalChanged
11 years ago
a50d297f3a
SEC-2953: Add index-docinfo.xml
...
This removes the "please define title in your docbook file"
11 years ago
54dabb6433
SEC-2993: OpenID Sample now uses me.yahoo.com
11 years ago
cd4a7e95cc
SEC-2991: Add CSRF Token to OpenID XML Sample
11 years ago
07fb2af74b
SEC-3011: AbstractUrlAuthorizationConfigurer postProcess default AccessDecisionManager
11 years ago
ab1b7a1eb6
Remove unnecessary @SuppressWarnings
11 years ago
7c725a60e2
SEC-3047: SecurityContextHolderAwareRequestFactory update RequestFactory
11 years ago
9b92d5a1e7
SEC-2963: Fix tests
11 years ago
e25b84c902
SEC-2963: Update to latest Google AppEngine
11 years ago
9654df2cc3
SEC-3045: Conditionally add MethodSecurityMetadataSourceAdvisor
11 years ago
a3df41b380
Clean Import Statements
11 years ago
abc445d5a7
SEC-2965: Polish
11 years ago
518a1c3c08
SEC-2965: Fix invalid formatted links in reference documentation
11 years ago
1ca5946d74
SEC-3003: Document invalid intercept-url attributes for filter-security-metadata-source
11 years ago
76a2fb9488
SEC-3020: SecurityContextHolderAwareRequestWrapper conditional rolePrefix
...
Previously SecurityContextHolderAwareRequestWrapper always prefixed with
rolePrefix. This meant the defaults would never return true for a role
that started with the prefix (i.e. ROLE_).
We no longer apply the rolePrefix if the value passed in already starts
with rolePrefix.
11 years ago
2d448658cd
SEC-3042: Add SecurityTestExecutionListeners
11 years ago
4cafd575c0
SEC-3041: Fix WithSecurityContextTestExecutionListener w/ no ApplicationContext
11 years ago
0e36f85dab
SEC-3019: Java Config for Http Basic supports Rememberme
11 years ago
b96cee7950
SEC-2984: WithMockUser authorities doc
11 years ago
e4517016ca
SEC-2984: Add @WithMockUser authorities property
11 years ago
08b1b56e2c
SEC-2973: Add OnCommittedResponseWrapper
...
This ensures that Spring Session & Security's logic for performing
a save on the response being committed can easily be kept in synch.
Further this ensures that the SecurityContext is now persisted when
the response body meets the content length.
11 years ago
316886affc
SEC-2931: Fix CsrfFilter Javadoc
11 years ago
75f57b96cb
SEC-2493: Fix javadoc for DefaultLdapAuthoritiesPopulator
11 years ago
aad4e70374
SEC-3034: AclPermissionEvaluator specifies Locale.ENGLISH
11 years ago
821333434d
SEC-3013: Add messages_en.properties
11 years ago
474d624e8e
SEC-2988: Renamed OnBeanCondition.java to OnMissingBeanCondition.java
11 years ago
64938ebcfc
SEC-2996: Suport configuring SecurityExpressionHandler<Message<Object>>
11 years ago
3db01bd9d6
SEC-3002: Add JUnit Assume to GCM encryption tests
...
Not all JDKs have GCM installed on them.
11 years ago
92c23fbbdc
Upgrade to a version of Powermock that’s compatible with JUnit 4.12
11 years ago
a48cc18858
SEC-3002: Add new option for AES encryption with GCM
...
The Galois Counter Mode (GCM) is held to be superior than the current
default CBC. This change adds an extra parameter to the constructor
of AesBytesEncryptor and a new convenience method in Encryptors.
11 years ago
ca0ffb8b5d
SEC-2948: Fix error message for wrong xsd schema
...
When using the wrong xsd schema < 4.0 a message was shown that the
schema needed to be version 3.2.
In reality this schema had to be version 4.0.
11 years ago
aed288da05
Fix Spring IO Tests
11 years ago
1f74ac811e
Fix Spring IO Tests
11 years ago
350b48e3fd
Use the latest version of the Spring IO Plugin
...
Spring IO Platform 2.0 will remove the managed versions .properties
file as support for it has been removed in Spring Boot 1.3.
This commit moves the build onto a new version of the Spring IO Plugin
that uses the Maven bom rather than the properties file.
11 years ago
197ddb3cd1
SEC-3029: Fix Compatibility with Spring 4.2.x
11 years ago
848523e47a
SEC-3029: Add springSnapshotTests
...
Test against Spring Framework's latest Snapshots
11 years ago
7b4a37f27e
SEC-2967w: Update to Gradle 2.4
11 years ago
7b158d0525
SEC-2966: Fix preauth-xml sample config attributes
11 years ago
0a118336d4
SEC-2955: Convert to "static" for inner classes
11 years ago
1a716d0593
SEC-2954: Update ActiveDirectoryLdapAuthenticationProvider javadoc
...
Cleaning up docs to match
cd352f665b (diff-c7d6415af2848047b4b7bde824f66fcb)
11 years ago
a67ef1c3a2
SEC-2944: Polish
11 years ago
Spring Buildmaster
Rob Winch
Andy Wilkinson
Dave Syer
Stijn
Alex Panchenko
kris