Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

SEC-2142: Schema documentation states anonymous and remember-me ke defaults to SecureRandom

This commit is contained in:
Mike Noordermeer 2013-01-07 13:48:43 +01:00 committed by Rob Winch
parent 2a86c72436
commit f8ed3791f9
4 changed files with 10 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
config/src/main/resources/org/springframework/security/config/spring-security-3.1.rnc
View File

@ -553,7 +553,7 @@ remember-me =
## Sets up remember-me authentication. If used with the "key" attribute (or no attributes) the cookie-only implementation will be used. Specifying "token-repository-ref" or "remember-me-data-source-ref" will use the more secure, persisten token approach.
element remember-me {remember-me.attlist}
remember-me.attlist &=
## The "key" used to identify cookies from a specific token-based remember-me application. You should set this to a unique value for your application.
## The "key" used to identify cookies from a specific token-based remember-me application. You should set this to a unique value for your application. If unset, it will default to a random value generated by SecureRandom.
attribute key {xsd:token}?
remember-me.attlist &=
@ -593,7 +593,7 @@ anonymous =
## Adds support for automatically granting all anonymous web requests a particular principal identity and a corresponding granted authority.
element anonymous {anonymous.attlist}
anonymous.attlist &=
## The key shared between the provider and filter. This generally does not need to be set. If unset, it will default to "doesNotMatter".
## The key shared between the provider and filter. This generally does not need to be set. If unset, it will default to a random value generated by SecureRandom.
attribute key {xsd:token}?
anonymous.attlist &=
## The username that should be assigned to the anonymous request. This allows the principal to be identified, which may be important for logging and auditing. if unset, defaults to "anonymousUser".

5
config/src/main/resources/org/springframework/security/config/spring-security-3.1.xsd
View File

@ -1748,7 +1748,8 @@
<xs:attribute name="key" type="xs:token">
<xs:annotation>
<xs:documentation>The "key" used to identify cookies from a specific token-based remember-me application.
You should set this to a unique value for your application.
You should set this to a unique value for your application. If unset, it will default to a
random value generated by SecureRandom.
</xs:documentation>
</xs:annotation>
</xs:attribute>
@ -1831,7 +1832,7 @@
<xs:attribute name="key" type="xs:token">
<xs:annotation>
<xs:documentation>The key shared between the provider and filter. This generally does not need to be set. If
unset, it will default to "doesNotMatter".
unset, it will default to a random value generated by SecureRandom.
</xs:documentation>
</xs:annotation>
</xs:attribute>

4
config/src/main/resources/org/springframework/security/config/spring-security-3.2.rnc
View File

@ -553,7 +553,7 @@ remember-me =
## Sets up remember-me authentication. If used with the "key" attribute (or no attributes) the cookie-only implementation will be used. Specifying "token-repository-ref" or "remember-me-data-source-ref" will use the more secure, persisten token approach.
element remember-me {remember-me.attlist}
remember-me.attlist &=
## The "key" used to identify cookies from a specific token-based remember-me application. You should set this to a unique value for your application.
## The "key" used to identify cookies from a specific token-based remember-me application. You should set this to a unique value for your application. If unset, it will default to a random value generated by SecureRandom.
attribute key {xsd:token}?
remember-me.attlist &=
@ -593,7 +593,7 @@ anonymous =
## Adds support for automatically granting all anonymous web requests a particular principal identity and a corresponding granted authority.
element anonymous {anonymous.attlist}
anonymous.attlist &=
## The key shared between the provider and filter. This generally does not need to be set. If unset, it will default to "doesNotMatter".
## The key shared between the provider and filter. This generally does not need to be set. If unset, it will default to a random value generated by SecureRandom.
attribute key {xsd:token}?
anonymous.attlist &=
## The username that should be assigned to the anonymous request. This allows the principal to be identified, which may be important for logging and auditing. if unset, defaults to "anonymousUser".

5
config/src/main/resources/org/springframework/security/config/spring-security-3.2.xsd
View File

@ -1748,7 +1748,8 @@
<xs:attribute name="key" type="xs:token">
<xs:annotation>
<xs:documentation>The "key" used to identify cookies from a specific token-based remember-me application.
You should set this to a unique value for your application.
You should set this to a unique value for your application. If unset, it will default to a
random value generated by SecureRandom.
</xs:documentation>
</xs:annotation>
</xs:attribute>
@ -1831,7 +1832,7 @@
<xs:attribute name="key" type="xs:token">
<xs:annotation>
<xs:documentation>The key shared between the provider and filter. This generally does not need to be set. If
unset, it will default to "doesNotMatter".
unset, it will default to a random value generated by SecureRandom.
</xs:documentation>
</xs:annotation>
</xs:attribute>