2004-11-21 16:48:31 -05:00
|
|
|
<html>
|
|
|
|
|
<head>
|
|
|
|
|
<title>Acegi Security - Upgrading from version 0.4 to 0.5</title>
|
|
|
|
|
</head>
|
|
|
|
|
<body>
|
|
|
|
|
<h1>Upgrading from 0.4 to 0.5</h1>
|
|
|
|
|
|
|
|
|
|
<p>The following should help most casual users of the project update their
|
2004-04-08 22:44:17 -04:00
|
|
|
applications:
|
2004-11-21 16:48:31 -05:00
|
|
|
<ul>
|
2004-04-08 22:44:17 -04:00
|
|
|
|
2004-11-21 16:48:31 -05:00
|
|
|
<li>All filters are now loaded via FilterToBeanProxy. The FilterToBeanProxy
|
2004-04-22 21:39:21 -04:00
|
|
|
obtains the filter from a Spring application context via the
|
|
|
|
|
WebApplicationContextUtils.getApplicationContext() method. Refer to the
|
2004-11-21 16:48:31 -05:00
|
|
|
reference documentation to see the new configuration of filters.</li>
|
2004-04-22 21:39:21 -04:00
|
|
|
|
2004-11-21 16:48:31 -05:00
|
|
|
<li>SecurityEnforcementFilter now requires an AuthenticationEntryPoint
|
2004-04-27 02:37:42 -04:00
|
|
|
and PortResolver. Refer to the reference documentation to see the
|
|
|
|
|
alternatives AuthenticationEntryPoint implementations available. Simply
|
2004-11-21 16:48:31 -05:00
|
|
|
use the PortResolverImpl for the PortResolver requirement.</li>
|
2004-04-22 21:39:21 -04:00
|
|
|
|
2004-11-21 16:48:31 -05:00
|
|
|
<li>Any of your login or login failure pages that previously referred to
|
2004-04-22 21:39:21 -04:00
|
|
|
AuthenticationProcessingFilter.ACEGI_SECURITY_LAST_EXCEPTION_KEY
|
|
|
|
|
should now use
|
2004-11-21 16:48:31 -05:00
|
|
|
net.sf.acegisecurity.ui.AbstractProcessingFilter.ACEGI_SECURITY_LAST_EXCEPTION_KEY.</li>
|
2004-04-22 21:39:21 -04:00
|
|
|
|
2004-11-21 16:48:31 -05:00
|
|
|
<li>DaoAuthenticationProvider no longer provides setters for case sensitivity
|
2004-04-22 21:39:21 -04:00
|
|
|
handling. The respective AuthenticationDao implementations should decide
|
|
|
|
|
whether or not to return User instances reflecting the exact case of the
|
|
|
|
|
requested username. The new PlaintextPasswordEncoder offers a setter for
|
2004-11-21 16:48:31 -05:00
|
|
|
ignoring the password case (defaults to require exact case matches).</li>
|
2004-04-08 22:44:17 -04:00
|
|
|
|
2004-11-21 16:48:31 -05:00
|
|
|
<li>DaoAuthenticationProvider now provides caching. Successful authentications
|
2004-04-23 01:01:57 -04:00
|
|
|
return DaoAuthenticationTokens. You must set the mandatory "key" property
|
|
|
|
|
on DaoAuthenticationProvider so these tokens can be validated. You may
|
|
|
|
|
also wish to change the "refreshTokenInterval" property from the default
|
2004-11-21 16:48:31 -05:00
|
|
|
of 60,000 milliseconds.</li>
|
2004-04-23 01:01:57 -04:00
|
|
|
|
2004-11-21 16:48:31 -05:00
|
|
|
<li>If you're using container adapters, please refer to the reference
|
2004-04-11 08:09:08 -04:00
|
|
|
documentation as additional JARs are now required in your container
|
2004-11-21 16:48:31 -05:00
|
|
|
classloader.</li>
|
2004-04-08 22:44:17 -04:00
|
|
|
|
2004-11-21 16:48:31 -05:00
|
|
|
<li>Whilst not really a change needed to your program, if you're using
|
2004-04-22 21:39:21 -04:00
|
|
|
Acegi Security please consider joining the acegisecurity-developer mailing
|
|
|
|
|
list. This is currently the best way to keep informed about the project's
|
|
|
|
|
status and provide feedback in design discussions. You can join at
|
|
|
|
|
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer.
|
2004-11-21 16:48:31 -05:00
|
|
|
Please continue using the Spring Users mailing list for general support.</li>
|
|
|
|
|
</ul>
|
2004-04-22 21:39:21 -04:00
|
|
|
|
2004-11-21 16:48:31 -05:00
|
|
|
<p>
|
2004-04-22 21:39:21 -04:00
|
|
|
There are also lots of new features you might wish to consider for your
|
|
|
|
|
projects. These include CAS integration, pluggable password encoders
|
|
|
|
|
(such as MD5 and SHA), along with pluggable salt sources. We hope you find
|
|
|
|
|
the new features useful in your projects.
|
2004-04-08 22:44:17 -04:00
|
|
|
|
2004-11-21 16:48:31 -05:00
|
|
|
|
|
|
|
|
</body>
|
|
|
|
|
</html>
|
