2278 Commits

Author SHA1 Message Date
Luke Taylor
2eca8ee7b0 SEC-572: Added allowSessionCreation (default=true) property to AbstractProcessingFilter and modified it and AuthenticationProcessingFilter to stop them creating a new session for storing data if this property is set to false. 2008-01-08 18:11:20 +00:00
Luke Taylor
41d90e9bdb SEC-399: Added tests for new session creation/attribute migration options. 2008-01-08 15:44:21 +00:00
Luke Taylor
c5e6a4cdfd SEC-546: Added AccountStatusException as base class for dibled, locked etc. Modified ProviderManager to prevent it querying further providers if either this exception or a ConcurrentLoginException is thrown. 2008-01-08 13:33:20 +00:00
Luke Taylor
99b7510482 Tidied up getters/setters in AbstractProcessingFilter. Removed unused getters and reduced the scope of others where possible. 2008-01-07 16:10:50 +00:00
Luke Taylor
c5bc0fc683 SEC-623: Added login success and failure hooks to RememberMeProcessingFilter. Also moved MockApplicationEventPublisher implementations to a single class. 2008-01-07 15:06:29 +00:00
Luke Taylor
814b2fc7ea Added Id keyword. 2008-01-07 13:47:26 +00:00
Luke Taylor
0f0bfb149f Changed test class name to match implementation class. 2008-01-07 13:46:32 +00:00
Luke Taylor
10ec13e4e2 [maven-release-plugin] prepare for next development iteration 2008-01-02 22:42:21 +00:00
Luke Taylor
2c5090da90 [maven-release-plugin] prepare release release_2_0_M1 2008-01-02 22:41:31 +00:00
Luke Taylor
91d7d35422 Corrected tagBase for release plugin and updated version. 2008-01-02 22:35:05 +00:00
Luke Taylor
09242ec66d [maven-release-plugin] rollback the release of release_2_0_M1 2008-01-02 22:31:09 +00:00
Luke Taylor
42dcccd1b7 [maven-release-plugin] prepare release release_2_0_M1 2008-01-02 22:18:28 +00:00
Luke Taylor
1d67f88fa1 Corrected tagBase for release plugin and updated version. 2008-01-02 22:13:43 +00:00
Luke Taylor
aafbb5bb67 [maven-release-plugin] rollback the release of release_2_0_M1 2008-01-02 22:10:46 +00:00
Luke Taylor
425508d70d [maven-release-plugin] prepare release release_2_0_M1 2008-01-02 22:01:34 +00:00
Luke Taylor
0b1e17f69a [maven-release-plugin] rollback the release of release_2_0_M1 2008-01-02 21:54:37 +00:00
Luke Taylor
07aa0c6880 [maven-release-plugin] prepare release release_2_0_M1 2008-01-02 21:52:42 +00:00
Luke Taylor
4b543d10c8 Maven plugin version updates 2008-01-02 21:36:30 +00:00
Luke Taylor
9d962a39b2 Acegi -> Spring Security changes in site 2008-01-02 21:35:52 +00:00
Luke Taylor
5b9042ae07 Removed outdated scm elements from sub poms. 2008-01-02 20:33:09 +00:00
Luke Taylor
7583aca3eb Configured contacts app to use namespaces. Removed ldap, cas, x509 files to avoid confusion. Ldap and CAS will be better served by new samples. 2008-01-01 16:51:15 +00:00
Luke Taylor
b115f4aa83 Removed unecessary rethrow of AuthenticationException from AbstractSecurityInterceptor and tidied up javadoc etc. 2008-01-01 16:43:34 +00:00
Luke Taylor
b91e82d91c Changed _authenticationManager -> authenticationManager to get contact app tests passing again. 2007-12-25 00:34:28 +00:00
Luke Taylor
1472aeb77d Improved html site patching. 2007-12-25 00:17:02 +00:00
Luke Taylor
7ee049c824 Refactored SwitchUserProcessingFilter to extend SpringSecurityFilter. 2007-12-23 16:41:30 +00:00
Luke Taylor
5f1eea42fc Moved configuration of security interceptors with access and authentication manangers from post processing stage to bean creation stage. 2007-12-23 16:40:29 +00:00
Luke Taylor
46c99d1991 Converted tutorial context file to match namespace changes. 2007-12-23 16:36:44 +00:00
Luke Taylor
5da5bfb7bb Added "mvn compile" with JDK 1.4 as extra check in build process. 2007-12-23 15:07:13 +00:00
Luke Taylor
27de29f469 Corrected cut and paste error when parsing jdbc-user-service within AuthenticationProvider BDP. 2007-12-23 01:26:46 +00:00
Luke Taylor
ea8914f9ba Moved Http post processor bean name to BeanIds class. 2007-12-23 01:06:22 +00:00
Luke Taylor
9d671fbdbf Deleted original Ldap BD parser. 2007-12-23 01:05:35 +00:00
Luke Taylor
14e68618a5 Make constants class abstract. 2007-12-23 01:02:48 +00:00
Luke Taylor
46285a0ec0 SwitchUserProcessingFilter should come after FilterSecurityInterceptor (See SEC-376). 2007-12-23 01:02:12 +00:00
Luke Taylor
a38ed3cfde Added check for multiple RememberMeServices beans. 2007-12-23 00:18:14 +00:00
Luke Taylor
debfbe47cf Improvements to LDAP namespace configuration - splitting "ldap" element into ldap-server and ldap-authentication-provider. Also some minor changes to authentication-provider. 2007-12-23 00:17:37 +00:00
Luke Taylor
d0490e6322 Upgraded maven surefire and cobertura plugins. 2007-12-21 15:54:38 +00:00
Luke Taylor
cf80292de3 Changes to namespace reinstating authentication-provider element in preference to "repository" to wrap convey that a user-service will be used as to authenticate against. Also introduced separate password-encoder element for use within authentication-provider. 2007-12-21 15:50:56 +00:00
Luke Taylor
70286f1197 Fixed problem caused by maven-2.0.8 change in test classpath. ldif file wasn't being loaded for tests. Default path should be "classpath*:" not "classpath:". (See discussing in Spring's PathMatchingResourcePatternResolver). 2007-12-20 20:53:26 +00:00
Luke Taylor
6e74d925fb Boosted logging to try to resolve issues on bamboo server. 2007-12-20 19:45:43 +00:00
Luke Taylor
78e376312a Added logging of working directory location. 2007-12-20 18:29:05 +00:00
Luke Taylor
85b10f79c2 Made servlet-api integration into an attribute of http, rather than a child element since it has no configuration. 2007-12-20 17:51:27 +00:00
Luke Taylor
1c9bd8bf5f Updates to release description. 2007-12-20 17:47:05 +00:00
Luke Taylor
e65cb9b472 Made group names singular and added "teller" role. 2007-12-14 20:41:33 +00:00
Luke Taylor
31c09896ea Fixed problem with relative name being used in (member={0}) search in DefaultAuthoritiesPopulator. 2007-12-14 20:41:00 +00:00
Ben Alex
09f68400ec Add <intercept-methods> to example, but it is disabled in favour of @Secured annotation. Still, we include it so people can have a play around and switch between the two syntaxes easily in demos etc. 2007-12-14 19:56:31 +00:00
Ben Alex
55e4568003 Throw an exception instead of sending back a HTTP error code. This is necessary so any demonstration of upgrading from Servlet Spec authorization to Spring Security authorization, as the latter's ExceptionTranslationFilter expects specific exceptions to be thrown if you wish to commence the authentication process. 2007-12-14 19:44:50 +00:00
Luke Taylor
2e4773525b Updated tutorial to allow authentication against ldap provider using <ldap /> namespace element. 2007-12-14 19:18:18 +00:00
Ben Alex
d90ff50686 Use Java 5 to illustrate annotation support. 2007-12-14 16:54:10 +00:00
Luke Taylor
1a171ea316 SEC-595: Introduced loadUserAuthorities method. This can be overridden to allow loading of authorities with the authenticated user's credentials (by setting the security context). The Ldap ContextSource used in the authorities populator would also be configured with a SpringSecurityAuthentcationSource, to make use of the information in the security context. 2007-12-14 14:13:39 +00:00
Ben Alex
b1bc39a0df Provide some shell scripts that help with demos. These assume the application is deployed to http://localhost:8080/spring-security-samples-tutorial. 2007-12-14 02:45:01 +00:00