393 Commits

Author SHA1 Message Date
Ben Alex
25cb085df7 More JavaDocs. 2005-05-29 08:30:28 +00:00
Ben Alex
3401072368 Made Serializable as per acegisecurity-developer list discussion on 20 May 2005. 2005-05-22 03:56:37 +00:00
Ben Alex
4e55780e7c Performance optimisations thanks to Paulo Neves. 2005-05-20 00:00:22 +00:00
Ben Alex
cfb8271826 Reorder DaoAuthenticationProvider exception logic as per developer list discussion. 2005-05-18 01:40:45 +00:00
Ben Alex
ecbfac2ff8 Made AclEntry Serializable (correct issue with BasicAclEntryCache). 2005-05-17 11:07:00 +00:00
Ben Alex
fa6924a373 Update project workspace settings to Java 1.5. NB: Maven remains at 1.3 compatibility for all subprojects except "domain". It is recommended the Eclipse "Problems" view be customised to not display items containing "Type Safety:" in their description. Developers should NOT introduce 1.5+ dependencies to any projects apart from "domain". 2005-05-09 01:18:31 +00:00
Ben Alex
e08e66dec6 Refactor SecurityContextHolder to return a SecurityContext instead of Authentication. 2005-05-08 23:42:14 +00:00
Ben Alex
6a9abe5d90 Remove ContextHolder and introduce SecurityContext. 2005-05-07 09:11:37 +00:00
Ray Krueger
47989c11bd HttpSessionEventPublisher now verifies that the ApplicationContext is not null 2005-05-02 20:31:18 +00:00
Ben Alex
d169829f27 AbstractAuthenticationToken.getName() now returns username alone if UserDetails present. 2005-04-29 22:29:00 +00:00
Ray Krueger
54ccbf5617 The SecurityEnforcementFilter was forced to catch Throwable by the FilterInvocation.invoke(...) method. Therefore it was wrapping the throwable in ServletException, which left it wrapping SevletException and IOException in ServletException. 2005-04-29 02:53:02 +00:00
Ray Krueger
2c23c75f91 SecureContextLoginModule as requested from list with Test 2005-04-27 04:47:41 +00:00
Ray Krueger
6f286e2054 AuthorityGranter.grant now returns a java.util.Set of role names, instead of a single role name 2005-04-27 03:39:06 +00:00
Luke Taylor
c29a5731be Moved credential expiry checking after password check. If the wrong password is presented, BadCredentialsException will now be thrown even if the password has expired. 2005-04-25 23:11:12 +00:00
Ben Alex
cff9ba4988 AnonymousProcessingFilter offers protected method to control when it should execute as per http://forum.springframework.org/viewtopic.php?p=19766. 2005-04-21 23:02:58 +00:00
Ben Alex
4e1649c2b7 Fix NullPointerException caused by unit tests. 2005-04-20 12:39:14 +00:00
Luke Taylor
1fc79f04f1 Added AntPathMatcher member to bring into line with recent Spring refactoring which breaks the build. 2005-04-18 23:10:54 +00:00
Luke Taylor
48ad6496e4 Javadoc typo corrected 2005-04-18 16:24:33 +00:00
Luke Taylor
ee32874308 Added X509 EhCache tests and fixed glaring bug in X509 EhCache implementation. 2005-04-17 22:18:01 +00:00
Ray Krueger
ec80ae22c1 Templated out event publishing. Added getApplicationContext(). Fixed javadoc formatting 2005-04-17 14:13:13 +00:00
Luke Taylor
1a78f9e15f Refactored to use Spring Assert class (thanks IntelliJ :). 2005-04-15 01:21:41 +00:00
Ben Alex
fdf5c63033 Add obtainUsername method as per http://forum.springframework.org/viewtopic.php?t=4757. 2005-04-13 22:17:05 +00:00
Ben Alex
8091b60194 Improve Javadocs. 2005-04-12 04:19:09 +00:00
Luke Taylor
f2788c7cb6 Refactored to use Spring Assert class. Corrected some typos. 2005-04-11 01:18:46 +00:00
Luke Taylor
3d4f8eed31 Refactoring to use Spring mock web classes. 2005-04-11 01:07:04 +00:00
Luke Taylor
d6f2b136ec Refactored to use Spring mock classes. 2005-04-09 23:37:18 +00:00
Luke Taylor
458a2c9e39 Refactored to use Spring mock classes. 2005-04-09 23:24:22 +00:00
Luke Taylor
021abb7369 Added check for "path parameters" to ensure the filterProcessesUrl matches rewritten URLs with a jsessionid included. Refactored property checking to use Spring Assert class. 2005-04-09 22:50:06 +00:00
Luke Taylor
eaa5feb5f8 Refactored to use Spring mock objects for HttpRequest etc. 2005-04-09 21:48:47 +00:00
Ben Alex
204da55a0b PasswordDaoAuthenticationProvider no longer stores String against Authentication.setDetails(). 2005-04-03 21:48:45 +00:00
Ray Krueger
9649003d57 AbstractProcessingFilter no longer uses a set*FailureUrl approach for every exception, it now uses a properties object that maps authenticationExceptions to failure urls 2005-03-28 17:42:21 +00:00
Ben Alex
798ebb1a3d Correct NullPointerException as fixture missing an ApplicationContext and attempting to publish an event. 2005-03-27 08:40:09 +00:00
Ben Alex
684d5bc10e Handle null Authentication.getAuthorities() in AuthorizeTag. 2005-03-27 06:36:41 +00:00
Ben Alex
8ae2276843 TokenBasedRememberMeServices changed to use long instead of int for tokenValiditySeconds. 2005-03-25 22:07:00 +00:00
Ray Krueger
10c1926385 Added the ConcurrentSessionViolationEvent that will be published by the ConcurrentSessionControllerImpl before throwing the ConcurrentSessionViolationException 2005-03-25 00:53:46 +00:00
Ben Alex
8884ca51af Add credentialsExpiredFailureUrl getter/setter to AbstractProcessingFilter. 2005-03-23 23:22:51 +00:00
Ben Alex
9f66c0eae9 Update to current Spring JAR dependencies. 2005-03-22 11:17:22 +00:00
Ben Alex
c936801842 DigestProcessingFilter now provides userCache getter and setter. 2005-03-21 08:03:11 +00:00
Ben Alex
0530351f0d Provide toString() method on User. 2005-03-21 05:33:51 +00:00
Ben Alex
a2b9da7e22 StringSplitUtils.split() ignored delimiter argument. 2005-03-21 05:14:48 +00:00
Ben Alex
6f31ecb04b UserDetails now indicates locked accounts. 2005-03-21 03:22:59 +00:00
Luke Taylor
ae47fb722d sendError now returns less informative forbidden message rather than the exception message. 2005-03-20 19:12:51 +00:00
Luke Taylor
944d11bb1a Changed to using DN in cache log messages rather than entire certificate. 2005-03-19 18:07:24 +00:00
Luke Taylor
918fc7c15a License header added. 2005-03-18 01:00:36 +00:00
Luke Taylor
e755687a19 Updated to use Spring Assert class. 2005-03-18 00:59:32 +00:00
Luke Taylor
2a6c68deb6 Entry point tests 2005-03-18 00:52:23 +00:00
Ben Alex
a056946c49 HttpSessionContextIntegrationFilter now handles HttpSession invalidation without redirection. 2005-03-18 00:50:12 +00:00
Luke Taylor
8592e3bcbf Added tearDown method which resets the Context to null 2005-03-18 00:45:48 +00:00
Luke Taylor
04366d2b12 Corrected Javadoc 2005-03-18 00:33:30 +00:00
Ben Alex
07e46fe4d5 Proper handling if the account is no longer allowed login. 2005-03-18 00:06:09 +00:00