2392 Commits

Author SHA1 Message Date
Luke Taylor
1dc80b5665 Removed openid from sandbox pom.xml as it's been moved to main project 2008-01-30 14:45:11 +00:00
Luke Taylor
c7754d7bee SEC-473: Reduce the number of "cookie methods" in AbstractRememberMeServices. 2008-01-29 22:28:04 +00:00
Andrei Stefan
00b5c0e61b 2008-01-29 18:36:22 +00:00
Luke Taylor
f121b6ac90 Fixed tests which were making assumptions about ordering within sets. 2008-01-29 18:35:56 +00:00
Andrei Stefan
aa0744a705 test class for EhCacheBasedAclCache 2008-01-29 17:42:39 +00:00
Andrei Stefan
944c7e9665 2008-01-29 17:42:05 +00:00
Luke Taylor
e37d0b0bb1 SEC-543: sessionsUsedByPrincipal only needs to be added to "principals" map when it is first created. 2008-01-29 16:28:17 +00:00
Luke Taylor
379b7ab337 SEC-543: Moved logging out of synchronized block 2008-01-29 16:04:49 +00:00
Luke Taylor
9fe181046b SEC-543: Added null guard clauses to reduce nesting and increase readability. 2008-01-29 15:55:29 +00:00
Luke Taylor
c9de2f6c9f SEC-532: Remove FilterInvocationDefinitionSource-related classes which are no longer needed. 2008-01-29 15:09:20 +00:00
Luke Taylor
a0ee7fb6fd SEC-532: Madded FilterinvocationDefinitionSourceMapping package scoped 2008-01-29 13:08:12 +00:00
Luke Taylor
8e5b608ee9 SEC-532: Removed FilterInvocationDecorator and tests. 2008-01-29 12:34:01 +00:00
Luke Taylor
059ac644bb SEC-645: Deprecated old X.509 provider. 2008-01-29 11:50:33 +00:00
Luke Taylor
95c6ecdb1e SEC-468: Added Mike Wiesner's patch for AspectJ annotation support. 2008-01-29 11:33:38 +00:00
Luke Taylor
ef428d2c22 Moved test class to correct source tree 2008-01-29 10:57:44 +00:00
Luke Taylor
e63fa0f610 SEC-418: Changed interface SwitchAuthorityChanger to return List rather than expecting modification of passed in List of authorities. 2008-01-28 19:26:30 +00:00
Luke Taylor
0be34cdcc1 SEC-536: Added messages for generic UserDetails status checks. 2008-01-28 18:19:23 +00:00
Luke Taylor
c9dee10704 SEC-536: Added UserDetailsService decorator class which will throw an appropriate exception if the returned UserDetails object has a status of locked, disabled etc. 2008-01-28 18:10:43 +00:00
Luke Taylor
f0c15f5b1a SEC-25: Rolled back addition of EJB integration docbook to ref manual. 2008-01-28 17:33:08 +00:00
Luke Taylor
934e59a562 SEC-652: Fixed CasAuthenticationProvider to be compatible with Ray's recent AuthoritiesPopulator refactoring. 2008-01-28 16:05:39 +00:00
Luke Taylor
26ea65ddb1 SEC-652: Add a trustPassword to AbstractTicketValidator for use with password protected keystores (as in the sample application). 2008-01-28 16:04:38 +00:00
Luke Taylor
46a69b6d93 SEC-652: CAS sample application and server using maven jetty plugin. 2008-01-28 16:03:28 +00:00
Luke Taylor
511ebb5af4 Reformat pom.xml. 2008-01-28 14:30:15 +00:00
Luke Taylor
eb620f09eb Switched preauth default namespace to "beans" for readability. 2008-01-28 13:22:50 +00:00
Luke Taylor
5738a51040 SEC-651: Support for ldap-user-service bean. 2008-01-28 00:47:34 +00:00
Luke Taylor
544df3ea09 Updated SpringSecurityLdapTemplate to include base LDAP context in returned DirContextAdapter entry to make sure the result gives a correct value for getNameInNamespace(). This is necessary when a search is used to obtain entries to pass to DefaultLdapAuthoritiesPopulator, for example. 2008-01-28 00:39:42 +00:00
Luke Taylor
80b6111641 SEC-650: Change default scope to sub-tree. 2008-01-28 00:24:54 +00:00
Luke Taylor
e6d6e88117 Corrections to calculated order values from "before" and "after" attributes. 2008-01-27 22:46:24 +00:00
Luke Taylor
acf5601714 SEC-645: Reimplementation of X509 provider and namespace implementation. 2008-01-27 22:45:44 +00:00
Luke Taylor
9af7ab68bf Removed duplicate setting of bean property in BasicAuthenticationBeanDefinitionParser. 2008-01-27 20:48:37 +00:00
Luke Taylor
d8d657da7f Removed classname from log message (normally output by log4j anyway) 2008-01-27 20:44:58 +00:00
Luke Taylor
aeba732ba5 SEC-647: Created separate "certificates" directory so SSL certificates and keys can be shared between different sample applications. Added key for user "scott" and separate certificate authority pem file (can be installed in a browser). 2008-01-27 20:42:10 +00:00
Luke Taylor
82940db6c8 SEC-648: Added custom-authentication-provider support. 2008-01-27 13:31:34 +00:00
Luke Taylor
dbc901fba9 Deleted 2008-01-27 13:30:11 +00:00
Luke Taylor
384af268ab Import cleaning. 2008-01-27 13:28:58 +00:00
Luke Taylor
c7792458b4 SEC-645: Reimplementation of X509 authentication. 2008-01-27 11:12:50 +00:00
Ray Krueger
718eddadd7 Promoting OpenID out of the Sandbox 2008-01-27 02:57:57 +00:00
Luke Taylor
ae71e9a5bd SEC-632: Changed user-filter to custom-filter to avoid confusion with system "users". 2008-01-27 00:48:53 +00:00
Luke Taylor
cd16dac290 SEC-648: Added custom-authentication-provider element. 2008-01-27 00:42:35 +00:00
Luke Taylor
e852cf53a8 SEC-644: Fix broken NtlmProcessingFilter and add AuthenticationDetailsSource to it. 2008-01-27 00:31:55 +00:00
Luke Taylor
619c7b0dbf SEC-632: Explicit filter chain ordering is now achieved using "after" or "before". Setting the order value directly in the context is fragile due to potential future changes in the order values of standard filters. 2008-01-26 23:56:04 +00:00
Luke Taylor
e44e641106 SEC-647: Updated server keystore (new certificate using our own Test CA) and added client certificates for users rod and dianne. 2008-01-26 17:21:23 +00:00
Luke Taylor
0005da3b63 Corrected spelling of class name. 2008-01-26 11:36:24 +00:00
Andrei Stefan
83ecb3e9e0 test classes 2008-01-26 11:35:49 +00:00
Andrei Stefan
0e58e816a2 2008-01-26 11:31:49 +00:00
Luke Taylor
483068d486 SEC-647: Delete unused certificated directory and outdated certificates. 2008-01-26 11:28:36 +00:00
Andrei Stefan
0f32b3fc40 reverted to junit 3 2008-01-25 15:04:29 +00:00
Andrei Stefan
630efbf536 AclFormattingUtils and AccessControlEntryImpl test classes 2008-01-24 22:11:17 +00:00
Luke Taylor
b85f76e6c1 Added SSL support to the tutorial app Jetty plugin configuration and added a requirement for SSL on the "extremely secure" page. 2008-01-24 16:30:06 +00:00
Luke Taylor
d10450cfb7 SEC-531: Provide support for HTTP methods in FilterInvocationDefinitionSource. Path/Regex versions of FIDS are now deprecated and in favour of using their (no longer abstract) parent class with a UrlPathMatcher strategy. 2008-01-24 14:39:47 +00:00