610 Commits

Author	SHA1	Message	Date
Luke Taylor	88e01624eb	SEC-560: Removed local password comparison form PasswordComparisonAuthenticator.	2007-11-28 18:29:04 +00:00
Luke Taylor	9e2f372bad	SEC-607: Deprecated InitialDirContextFactory and replaced it with SpringSecurityContextSource. ... Also some refactoring of LdapUserDetailsManager to use a strategy for creating DNs from usernames.	2007-11-20 20:54:48 +00:00
Luke Taylor	3e3dac4050	SEC-600: Added extra test assertions on authentication details object after password change.	2007-11-13 17:17:25 +00:00
Luke Taylor	cb237055ac	SEC-600: Added Jdbc implementation of UserDetailsManager	2007-11-13 17:11:29 +00:00
Luke Taylor	b681952933	SEC-545: Added utility methods for checking if user has a particular role to existing AuthorityUtils class. Class may be renamed at some point as more functionality is added.	2007-11-11 23:37:32 +00:00
Luke Taylor	315d4a247f	Added method to clear datasource field after use.	2007-11-11 23:10:21 +00:00
Luke Taylor	910e63f83c	SEC-586: Implemented secure channel support in namespace configuration.	2007-11-11 22:07:46 +00:00
Luke Taylor	c214f4a9bc	Simplified initialization of datasource.	2007-11-11 22:06:22 +00:00
Luke Taylor	756be6fed3	Removed unnecessary constructor.	2007-11-11 19:10:47 +00:00
Luke Taylor	2856a6ba43	Allow configuration of embedded ldap server port through ldap namespace configuration. Changed default port from 3389 to avoid conflict with windows remote desktop (as reported by Ray Krueger in dev list).	2007-11-11 16:10:30 +00:00
Luke Taylor	0e7dac6ca5	SEC-565: Refactoring of TokenBasedRememberMeServices. Changed arguments to makeValidSignature so that it could be used from both places where a signature is required and refactored the class to extend AbstractRememberMeServices. The method processAutoLoginCookie now returns a UserDetails, rather than username, as the UserDetails is needed in TokenBasedRememberMeServices.	2007-11-10 19:20:36 +00:00
Luke Taylor	7caa1587b3	SEC-588: Completed JdbcTokenRepositoryImpl and added extra update method to PersistentTokenRepository interface.	2007-11-10 15:42:21 +00:00
Scott Battaglia	87a864619d	SEC-592 ... fixed failing test due to thinking a null value should be provided.	2007-11-07 21:44:15 +00:00
Scott Battaglia	981f185575	SEC-592 ... implemented NullStatelessTicketCache and test cases and made it the default for CasAuthenticationProvider.	2007-11-07 18:46:35 +00:00
Luke Taylor	9f2bc9a842	SEC-582: Namespace configuration implementation for remember-me support.	2007-11-06 23:20:25 +00:00
Luke Taylor	7ad8e2acf0	SEC-591: Removed default NullRememberMeServices in RememberMeProcessingFilter	2007-11-06 21:43:37 +00:00
Luke Taylor	4c44bd782f	SEC-588: Added extra tests to check cookie values.	2007-11-04 12:07:49 +00:00
Luke Taylor	55b1f9348d	SEC-588: PersistentTokenBasedRememberMeServices implementation.	2007-11-03 22:11:26 +00:00
Luke Taylor	43fc8e2660	Added Id keyword for all java files	2007-10-27 00:45:30 +00:00
Luke Taylor	d3b165749f	SEC-583: Implementation of namespace config for concurrent session support. ... Also some minor adjustments to ordering of different http features in schema.	2007-10-27 00:28:24 +00:00
Luke Taylor	3d9ea49d19	SEC-585: Made expiredUrl optional. ... Also implemented Ordered interface for use in namespace configuration.	2007-10-26 23:32:40 +00:00
Luke Taylor	55ef50a4df	Added checking of path ordering to FilterChainProxy to detect misplaced universal match ("/**").	2007-10-26 13:51:32 +00:00
Luke Taylor	1bcb62af2e	Remove use of autoconfig, as it was really just a conveniece for creating default access and authentication managers.	2007-10-26 13:05:31 +00:00
Luke Taylor	acf3966651	SEC-578: Refactored to remove FilterChainMap and use a LinkedHashMap instead to maintain the path ordering. Also made use of Springs ManagedList and ManagedMap to preform resolution of bean names to Filter objects at runtime, replacing the unnecessary bean which was performing this task for the filter lists.	2007-10-22 23:52:29 +00:00
Luke Taylor	2d3d5ceb8d	Tidying.	2007-10-20 23:17:56 +00:00
Luke Taylor	cffd3131f0	Added building of filter chain in post-processing, support for basic authentication and automatic generation of login page, if no loginUrl supplied.	2007-10-20 23:17:01 +00:00
Luke Taylor	2b14d2da98	Make Spring Security filters implement the Ordered interface, for use when post-processing the application context	2007-10-20 23:09:23 +00:00
Luke Taylor	9b8c06e9f6	SEC-568: Introduced FilterChainMap as a simpler option for configuring FilterChainProxy and introduced a namespace-based for configuring it. The Url pattern matching is factored out into a separate strategy with ant and regex versions.	2007-10-20 23:05:03 +00:00
Luke Taylor	c51bcd9c1f	Changed method protection config to make it compatible with MethodDefinitionMap for the time being.	2007-10-14 14:29:15 +00:00
Luke Taylor	a4b522351f	Added "unprotected" method for tests	2007-10-14 14:15:51 +00:00
Luke Taylor	627b0b38ad	Intermediate checkin of experimental namespace config work.	2007-10-13 16:24:24 +00:00
Luke Taylor	e561b87987	Switched testOperation method to use unicode escaped characters.	2007-10-13 11:40:16 +00:00
Luke Taylor	75bc838ae8	Switched testOperation method to use French locale to prevent use of default machine locales such as Chinese (see previous commit sg).	2007-10-11 16:18:28 +00:00
Luke Taylor	0a214e4930	Removed locale-specific message value assertions which will cause tests to fail if run with a different standard locale for which we have a message file (e.g. Chinese).	2007-10-11 15:23:01 +00:00
Luke Taylor	92bc57eefd	Switch test to use a specific locale for which we have a message file (french). The default ResourceBundle behaviour is to attempt to load the platform locale if the specified one isn't found before using the default. We don't have a messages_en.properties file, hence trying to use "en" locale on a Chinese computer will result in Chinese messages being used (and test failing).	2007-10-11 15:16:06 +00:00
Luke Taylor	3f2b9cd6fb	SEC-562: More changes of Acegi name in comments, docs etc.	2007-10-03 14:02:39 +00:00
Luke Taylor	438dc44004	Minor changes to improve robustess of LDAP tests.	2007-10-02 14:50:08 +00:00
Luke Taylor	5a3f5fcd78	Minor changes to improve robustess of LDAP tests.	2007-10-02 14:49:08 +00:00
Luke Taylor	acb02246e0	Refactored embedded LDAP server tests to make use of new namespace configuration. Use Junit 4 annotations in preference to AbstractDependencyInjectionSpringContextTests so that it is possible to clear up the context after each class is run rather than at JVM shutdown (causes problems with running embedded apache DS).	2007-10-02 10:52:06 +00:00
Luke Taylor	77b6503e2e	SEC-271: Added namespace handler class and experimental LDAP parser. The latter creates an embedded Apache DS server if no server URL is supplied, so changed dependencies on the latter to compile-time/optional.	2007-10-02 10:46:38 +00:00
Luke Taylor	5066fc5e39	SEC-562: Changed urls for login, logout, switch user etc.	2007-09-24 15:39:51 +00:00
Luke Taylor	eacbc71ba1	Switch ldap server port to 3999 (intermittent test failures occurring).	2007-09-23 20:57:01 +00:00
Luke Taylor	18c8ba4ac2	SEC-562: Changing constants and key names.	2007-09-23 11:16:01 +00:00
Luke Taylor	5a586c04a9	SEC-562: Repackaging core.	2007-09-21 18:18:21 +00:00
Luke Taylor	274658f9b0	SEC-272: Added group tables to test DB.	2007-09-21 15:51:36 +00:00
Luke Taylor	d19fe54c01	Renamed test class to match target (JdbcDaoImpl).	2007-09-21 15:50:23 +00:00
Luke Taylor	400a3b90f0	SEC-232: Additional updates to hierachical roles code from contributor.	2007-09-19 22:10:31 +00:00
Luke Taylor	7139cbafbb	Removed assertions on response buffer size.	2007-09-19 16:25:31 +00:00
Luke Taylor	03beaf0777	SEC-448: MD4 password encode implementation.	2007-09-19 15:28:57 +00:00
Luke Taylor	2f03000b68	SEC-232: Add role hierarchy contribution.	2007-09-17 22:37:39 +00:00