Commit Graph

74 Commits

Author SHA1 Message Date
Ben Alex 5f75e9bf9a Refactor Authentication.isAuthenticated() handling to be more performance (as per developer list discussion). 2005-06-22 06:30:46 +00:00
Ben Alex a7b5299e77 Correct synchronization issue with FilterToBeanProxy initialization (thanks to George Franciscus and Volker Malzahn as per acegisecurity-developer discussion 4 June 2005). 2005-06-22 05:22:05 +00:00
Ben Alex c699f7d40e Support non-username as primary key. 2005-05-29 09:46:51 +00:00
Ben Alex 4e55780e7c Performance optimisations thanks to Paulo Neves. 2005-05-20 00:00:22 +00:00
Ben Alex cfb8271826 Reorder DaoAuthenticationProvider exception logic as per developer list discussion. 2005-05-18 01:40:45 +00:00
Ben Alex ecbfac2ff8 Made AclEntry Serializable (correct issue with BasicAclEntryCache). 2005-05-17 11:07:00 +00:00
Ben Alex e08e66dec6 Refactor SecurityContextHolder to return a SecurityContext instead of Authentication. 2005-05-08 23:42:14 +00:00
Ben Alex 6a9abe5d90 Remove ContextHolder and introduce SecurityContext. 2005-05-07 09:11:37 +00:00
Luke Taylor d4da559ccc added entry for credential expiry modifications 2005-04-30 00:32:41 +00:00
Ben Alex d169829f27 AbstractAuthenticationToken.getName() now returns username alone if UserDetails present. 2005-04-29 22:29:00 +00:00
Ray Krueger 6f286e2054 AuthorityGranter.grant now returns a java.util.Set of role names, instead of a single role name 2005-04-27 03:39:06 +00:00
Ben Alex cff9ba4988 AnonymousProcessingFilter offers protected method to control when it should execute as per http://forum.springframework.org/viewtopic.php?p=19766. 2005-04-21 23:02:58 +00:00
Ben Alex a68d720e88 Prepare for 0.9.0. 2005-04-20 22:43:46 +00:00
Ben Alex 4cf500763f Release 0.8.2. 2005-04-20 14:15:03 +00:00
Ben Alex efd8955a3d General update. 2005-04-20 12:29:36 +00:00
Ben Alex fdf5c63033 Add obtainUsername method as per http://forum.springframework.org/viewtopic.php?t=4757. 2005-04-13 22:17:05 +00:00
Ben Alex 2ee7cc1c18 General update. 2005-04-06 06:39:03 +00:00
Ben Alex 204da55a0b PasswordDaoAuthenticationProvider no longer stores String against Authentication.setDetails(). 2005-04-03 21:48:45 +00:00
Ray Krueger 9649003d57 AbstractProcessingFilter no longer uses a set*FailureUrl approach for every exception, it now uses a properties object that maps authenticationExceptions to failure urls 2005-03-28 17:42:21 +00:00
Ben Alex 684d5bc10e Handle null Authentication.getAuthorities() in AuthorizeTag. 2005-03-27 06:36:41 +00:00
Ben Alex 8e6305ae81 Update commons-codec dependency to 1.3. 2005-03-25 22:33:18 +00:00
Ben Alex 8ae2276843 TokenBasedRememberMeServices changed to use long instead of int for tokenValiditySeconds. 2005-03-25 22:07:00 +00:00
Ben Alex 8884ca51af Add credentialsExpiredFailureUrl getter/setter to AbstractProcessingFilter. 2005-03-23 23:22:51 +00:00
Ben Alex 747825cda1 Correct location of AuthenticationSimpleHttpInvokerRequestExecutor in clientContext.xml. 2005-03-22 22:56:36 +00:00
Ben Alex 01aaadbe0d Prepare for 0.8.2 (assuming 0.8.2 is the next version, but subject to change). 2005-03-22 11:57:32 +00:00
Ben Alex 48dd6c5c73 Release 0.8.1. 2005-03-22 11:25:41 +00:00
Ben Alex 9f66c0eae9 Update to current Spring JAR dependencies. 2005-03-22 11:17:22 +00:00
Ben Alex 2b6b81f39a Use Spring 1.1.5 JARs. 2005-03-22 08:52:22 +00:00
Ben Alex c936801842 DigestProcessingFilter now provides userCache getter and setter. 2005-03-21 08:03:11 +00:00
Ben Alex 0530351f0d Provide toString() method on User. 2005-03-21 05:33:51 +00:00
Ben Alex a2b9da7e22 StringSplitUtils.split() ignored delimiter argument. 2005-03-21 05:14:48 +00:00
Ben Alex 6f31ecb04b UserDetails now indicates locked accounts. 2005-03-21 03:22:59 +00:00
Ben Alex a056946c49 HttpSessionContextIntegrationFilter now handles HttpSession invalidation without redirection. 2005-03-18 00:50:12 +00:00
Ben Alex 52c42a7a40 Corrected Authz parsing of whitespace in GrantedAuthoritys. Contributed by Francois Beausoleil. 2005-03-14 06:09:33 +00:00
Ben Alex df91d352cb AbstractBasicAclEntry improved compatibility with Hibernate, as per http://forum.springframework.org/viewtopic.php?t=3949. 2005-03-13 21:01:16 +00:00
Ben Alex 4763f953d3 FilterChainProxy now supports replacement of ServletRequest and ServetResponse by Filter beans. 2005-03-11 01:41:43 +00:00
Ben Alex c5fe428400 Patch by Matt Raible which returns null if Authentication is anonymous. 2005-03-10 12:00:30 +00:00
Ben Alex 15535fff41 SecurityEnforcementFilter caused NullPointerException when anonymous authentication used with BasicProcessingFilterEntryPoint. 2005-03-10 11:11:25 +00:00
Ben Alex 53bb4aebdf Setup future development for 0.8.1. 2005-03-03 13:29:46 +00:00
Ben Alex 4c5d0476b0 Prepare to release 0.8.0. 2005-03-03 00:06:46 +00:00
Ben Alex f1e071b0f1 Added remember-me services. 2005-03-01 02:30:38 +00:00
Ben Alex 0d33b06990 Fix NullPointerException if a pattern is given without any config attributes (eg /**/*.css=). Contributed by Konstantin Shaposhnikov. 2005-02-28 22:06:53 +00:00
Ben Alex 873c3f6c3d Improve Linux and non-Sun JDK (specifically IBM JDK) compatibility. 2005-02-28 03:02:32 +00:00
Ben Alex a3818184f4 Added Digest Authentication support (RFC 2617 and RFC 2069). 2005-02-22 06:14:44 +00:00
Ben Alex cbf413afcd Prepare for 0.8.0 as the next release. 2005-02-21 06:56:00 +00:00
Ben Alex dda66a0454 Significantly refactor "well-known location model" to authentication processing mechanism and HttpSessionContextIntegrationFilter model. 2005-02-21 06:48:31 +00:00
Ben Alex e52f3eacb1 Use WebAuthenticationDetails for Authentication.getDetails() by default. 2005-02-21 00:09:49 +00:00
Ben Alex f57b1b9a8f General update. 2005-02-20 05:40:57 +00:00
Ben Alex 0b296e7cf0 Correct issue with JdbcDaoImpl default SQL query not using consistent case sensitivity as per http://forum.springframework.org/viewtopic.php?t=3526. 2005-02-15 07:14:59 +00:00
Ray Krueger 1949c3b27e Added AuthenticationException to the commence method signature of the AutenticationEntryPoint. The best example of this
is the BasicProcessingFilterEntryPoint where the authException.getMessage() is used to send back an informative 401,
instead of just the error code.

Added AccessDeniedException to the sendAccessDeniedError method signature. The accessDeniedException.getMessage() result
is used to send an invormative 403 error back to the servletResponse by default.
2005-02-15 03:28:18 +00:00