Commit Graph

70 Commits

Author SHA1 Message Date
Ben Alex 03622f7011 Add missing beans from previous checkin. 2006-05-29 08:45:08 +00:00
Ben Alex ab12817b7a SEC-97: Format Acegi Security source code in accordance with latest Jalopy configuration. 2006-05-23 13:38:33 +00:00
Ben Alex 6b5fc1efce Correct comment in header. 2006-05-23 08:57:13 +00:00
Luke Taylor 1958d4e5aa Change package for ldap context factory bean 2006-05-20 17:50:51 +00:00
Ben Alex cc07f620df SEC-257: ExceptionTranslationFilter to use AccessDeniedHandler. 2006-04-28 06:52:50 +00:00
Ben Alex 9a90e4e1aa SEC-256: Contacts sample not displaying localized exceptions correctly. 2006-04-28 06:51:58 +00:00
Ben Alex 21aaf2b9db SEC-256: Contacts sample not displaying localized exceptions correctly. 2006-04-28 06:43:50 +00:00
Ben Alex d125569bd6 SEC-29: Save POST parameters on AuthenticationEntryPoint redirect. 2006-04-28 05:05:35 +00:00
Ben Alex 8cc5dcde30 SEC-249: Support logout filter. 2006-04-26 23:36:03 +00:00
Ben Alex e63b2ec9e6 Cleanup unused imports. 2006-02-09 06:00:25 +00:00
Luke Taylor dc959b1847 Fix for SEC-159. Added clearContext() method to SecurityContextHolder and refactored code to use it instead of putting an empty context into the holder. 2006-02-08 23:27:46 +00:00
Ben Alex 9771b7817a SEC-144: Separate SecurityEnforcementFilter from FilterSecurityInterceptor. 2006-01-28 22:54:23 +00:00
Ben Alex c8c7c24822 SEC-120: Remember-me to delegate to AuthenticationManager so authentication-specific behaviour (such as concurrent user management) can be applied. 2006-01-28 01:22:36 +00:00
Luke Taylor 8585ddf48b Updated app. context file to match new constructor-injection changes. 2005-12-20 23:21:55 +00:00
Luke Taylor a9a6f8b891 First checkin of LDAP contacts sample app. 2005-12-18 03:53:01 +00:00
Ben Alex 62fde4ede3 SEC-107: Finalize rename of AuthenticationDao to UserDetailsService with corresponding change in package from .providers.dao to .userdetails. 2005-11-30 00:20:13 +00:00
Ben Alex a6e23d79ae SEC-107: Rename AuthenticationDao to UserDetailsService. 2005-11-29 13:10:15 +00:00
Ben Alex c021362ebb New package top level name. 2005-11-29 04:06:31 +00:00
Ben Alex 6a1a4abb1d SEC-104: Move to org.acegisecurity package. 2005-11-17 00:56:49 +00:00
Ben Alex 2d74db9a0c SEC-51 and SEC-67 related changes. Tested all functions of "filters" version in web browser OK. 2005-11-04 04:15:57 +00:00
Ben Alex b6dbfde55c SEC-70: Refactor event publishing. 2005-11-03 06:55:47 +00:00
Ben Alex c64a3770de Prove that 403 errors are handled by web.xml <error-page>. 2005-09-08 10:20:34 +00:00
Mark St. Godard 3f24824f66 updated config, added switchUserProcessingFilter to the filter chain, added the ROLE_SUPERVISOR the ability to switch to other users (i.e. ROLE_USER)
For example: 'marissa' can login,  goto the /switchUser.jsp, then assume the role of another user such as 'scott'. marissa will then see scotts contacts, etc.
Then marissa can goto the /exitUser.jsp, and go back to 'marissa'

This is the similar to the Unix 'su' analogy that Ben made
2005-09-04 20:09:56 +00:00
Mark St. Godard 230d1946b9 added switchUserProcessingFilter config, not added to filter chain (yet) 2005-09-03 21:45:32 +00:00
Mark St. Godard 3dcea7ace0 initial pages for user switching 2005-09-03 21:44:05 +00:00
Luke Taylor 27a57410c1 Update to latest Spring tld 2005-08-02 17:27:30 +00:00
Ben Alex 2d772cbfcc Fix bug as reported by Jared Odulio on acegisecurity-developer 29 July 2005. 2005-07-31 00:58:48 +00:00
Luke Taylor 8e1549e399 Tidying up XML formatting (removed mix of tabs/spaces) 2005-07-20 14:13:47 +00:00
Luke Taylor de491d1767 Removed CAS references from web.xml for X.509. 2005-06-27 22:07:19 +00:00
Ben Alex fe15b011bb Make extra seed data and users so scalability more readily tested. 2005-05-18 03:01:34 +00:00
Ben Alex e08e66dec6 Refactor SecurityContextHolder to return a SecurityContext instead of Authentication. 2005-05-08 23:42:14 +00:00
Ben Alex 6a9abe5d90 Remove ContextHolder and introduce SecurityContext. 2005-05-07 09:11:37 +00:00
Luke Taylor 1a78f9e15f Refactored to use Spring Assert class (thanks IntelliJ :). 2005-04-15 01:21:41 +00:00
Ben Alex 9f66c0eae9 Update to current Spring JAR dependencies. 2005-03-22 11:17:22 +00:00
Luke Taylor a4210b5551 Rolled back to remove X.509 users. Using new certificate with existing user name instead. 2005-03-19 18:40:16 +00:00
Luke Taylor 05bd6abb22 Added cache beans. 2005-03-19 18:36:10 +00:00
Luke Taylor 645dba1fcb Added X.509 user to contacts with user name matching certificate email address. 2005-03-11 03:05:31 +00:00
Luke Taylor 740373ad01 Removed login-config info. Client authentication has to be enabled on the server (e.g. in the Tomcat connector) for it to work. 2005-03-11 00:33:15 +00:00
Luke Taylor 4ec64d407c X.509 version of contacts app. 2005-03-10 23:48:54 +00:00
Ben Alex 3e9cd13fef Re-enable session listener. 2005-03-01 02:35:33 +00:00
Ben Alex f1e071b0f1 Added remember-me services. 2005-03-01 02:30:38 +00:00
Ray Krueger 44397bb05d Committing ConcurrentSessionController feature and tests. Documentation is needed. 2005-02-26 21:48:07 +00:00
Ben Alex 693ac5a24a Anonymous principal support. As requested by the community at various times, including in http://forum.springframework.org/viewtopic.php?t=1925. 2005-02-23 06:09:56 +00:00
Ray Krueger 3c4faf58c7 HttpSessionEventPublisher, HttpSessionCreatedEvent, HttpSessionDestroyedEvent
Used together to provide published events in the ApplicationContext about HttpSessions.

Useful for things like Single Session logins.
2005-02-23 02:54:41 +00:00
Ben Alex dda66a0454 Significantly refactor "well-known location model" to authentication processing mechanism and HttpSessionContextIntegrationFilter model. 2005-02-21 06:48:31 +00:00
Ben Alex 4922ec1bbd Use FilterChainProxy to tidy web.xml. 2005-02-20 05:40:44 +00:00
Ben Alex c8706c33ac Log4J no longer expected in servlet container classpath. 2005-01-28 06:34:01 +00:00
Ben Alex 6c1e2f23b2 Allow last attempted username to be displayed in views. 2004-12-25 23:38:39 +00:00
Ben Alex 76c82db196 Refactor EH-CACHE integration classes to work with Spring IoC provided Cache rather than manage our own cache internally. 2004-12-05 04:37:05 +00:00
Ben Alex 44b7cccc1f Add RMI + HTTP Invoker remoting protocols and fixes related to Maven migration. 2004-11-20 05:28:20 +00:00