Luke Taylor
|
e872823490
|
SEC-559: Throw an initialization exception if configured truststore file doesn't exist.
|
2007-09-17 21:29:40 +00:00 |
|
Luke Taylor
|
d79d55c8b6
|
SEC-8: Changes to LDAP authenticator API to take an authentication object rather than username/password.
|
2007-09-17 12:28:07 +00:00 |
|
Luke Taylor
|
c7354c125a
|
SEC-417: Fix. Remove hard-coded messages from JdbcDaoImpl to allow internationalized versions for "user not found" etc.
|
2007-09-16 22:20:08 +00:00 |
|
Luke Taylor
|
8a35f7da75
|
SEC-558: Combine user mapping implementations into a single interface and make more use of DirContextOperations in SS LDAP APIs.
|
2007-09-16 18:56:00 +00:00 |
|
Luke Taylor
|
56deb3dd83
|
SEC-549: Trim whitespace from username submitted with login form.
|
2007-09-14 14:25:21 +00:00 |
|
Luke Taylor
|
fdbcbec9d8
|
SEC-449: Reamed template test class to match tested class. Added test method for case when no attribute value is found.
|
2007-09-14 14:17:30 +00:00 |
|
Luke Taylor
|
d208cf3824
|
SEC-449: Make LdapUserDetailsMapper a pure ContextMapper so it can be used with LdapTemplate.
|
2007-09-13 20:42:50 +00:00 |
|
Luke Taylor
|
6d8f92e1b8
|
Allow an ldif file to be set in the configuration and loaded on initialization.
|
2007-09-13 20:40:49 +00:00 |
|
Luke Taylor
|
c0f5230667
|
SEC-302: Add rolePrefix property to SecurityContextHolderAwareRequestFilter.
|
2007-09-11 17:29:47 +00:00 |
|
Luke Taylor
|
6a6bafa219
|
Make sure test classes which are setting the context clear it in their tearDown methods.
|
2007-09-11 14:13:50 +00:00 |
|
Luke Taylor
|
c56b8c4117
|
SEC-471: Allow names of username and password parameters to be customized in AuthenticationProcessingFilter.
|
2007-09-11 12:12:14 +00:00 |
|
Luke Taylor
|
3326525b65
|
SEC-368: Tidied up captcha spelling.
|
2007-09-11 11:16:07 +00:00 |
|
Luke Taylor
|
dd2a46c7ca
|
SEC-368: Tidied up captcha spelling.
|
2007-09-11 11:11:05 +00:00 |
|
Luke Taylor
|
448e8cfb42
|
SEC-551: Convert RegExpBasedFilterInvocationDefinitionMap and DaoX509AuthoritiesPopulator to use JDK regexps. Removed ORO dependency from the project.
|
2007-09-10 23:09:36 +00:00 |
|
Luke Taylor
|
6eb17c8546
|
SEC-513: Ldap user manager implementation classes changed to use new spring ldap apis.
|
2007-09-10 21:13:45 +00:00 |
|
Luke Taylor
|
afaa169e97
|
SEC-449: Test data ldif file for ApacheDS.
|
2007-09-10 21:09:59 +00:00 |
|
Luke Taylor
|
0503c3e1ab
|
SEC-449: Refactoring towards more use of Spring LDAP. Also borrowed the Spring LDAP integration testing setup which is much better and makes use of the full LDAP stack. There were still problems with using Apache DS's CoreContextFactory (e.g. compare operations) so it is an improvement on that front too. Moved spring ldap to 1.2-RC1 version.
|
2007-09-10 21:09:02 +00:00 |
|
Luke Taylor
|
e7ede68352
|
Update ldap test base class to use LdapContext by default.
|
2007-09-07 20:52:03 +00:00 |
|
Luke Taylor
|
ff1f1d8ef5
|
SEC-449: Rename internal LdapTemplate class to SpringSecurityLdapTemplate to avoid confusion.
|
2007-09-07 20:49:38 +00:00 |
|
Luke Taylor
|
70239a9769
|
SEC-513: First check in of user management stuff.
|
2007-09-07 20:01:46 +00:00 |
|
Luke Taylor
|
9b71b5aa00
|
SEC-449: Mostly changes to aid moving towards compatibility with spring-ldap.
|
2007-09-07 19:55:45 +00:00 |
|
Luke Taylor
|
3de8745494
|
Commented out (another) failing captcha test whose behaviour varies with speed of the build server (makes assumptions about the interval within which certain lines of code are executed).
|
2007-09-04 01:06:58 +00:00 |
|
Luke Taylor
|
6289503643
|
Commented out failing captcha test whose behaviour varies with speed of the build server (makes assumptions about the interval within which certain lines of code are executed).
|
2007-09-03 23:33:13 +00:00 |
|
Luke Taylor
|
4e452046ec
|
Comment out System.out.println
|
2007-09-01 14:59:41 +00:00 |
|
Luke Taylor
|
b2799985f2
|
SEC-398: Added patch which uses response wrapper to set context in session on redirect or error.
|
2007-08-31 20:39:33 +00:00 |
|
Luke Taylor
|
0c4916ee98
|
SEC-427: Fix. Added NullAuthoritiesPopulator and extra constructor.
|
2007-08-30 21:12:16 +00:00 |
|
Luke Taylor
|
301626fd6e
|
SEC-346: Fix. Added suggested change. Also some minor tidying up of comments etc.
|
2007-08-30 20:55:49 +00:00 |
|
Luke Taylor
|
2e8d16c538
|
SEC-484: Multithreaded tests for SessionRegistryImpl.
|
2007-08-30 19:26:24 +00:00 |
|
Luke Taylor
|
510cd5050f
|
Tidied up SessionRegistryImpl and rolled back reformatting of its test class to incorrect width.
|
2007-08-30 11:21:28 +00:00 |
|
Luke Taylor
|
5f993e5627
|
SEC-534: Refactored JaasAuthenticationProvider to use ApplicationPublisherAware rather than ApplicationContextAware.
|
2007-08-29 11:51:02 +00:00 |
|
Luke Taylor
|
6fe00b3433
|
SEC-501: Fix. Convert secure url paths to lower case if convertUrlToLowercaseBeforeComparison is true.
Also removed unnecessary assertions from PathBasedFilterDefinitionMapTests.
|
2007-08-28 16:53:05 +00:00 |
|
Luke Taylor
|
4ba77fa736
|
SEC-450: Added group subtree to LDAP test server and extra tests for DefaultLdapAuthoritiesPopulator to make sure searchSubtree parameter works as expected.
|
2007-08-28 15:26:59 +00:00 |
|
Luke Taylor
|
c8077c5e87
|
SEC-506: Fix as suggested by reporter. Split the disgest header string ignoring separating commas which occur between quotes.
|
2007-08-28 00:31:30 +00:00 |
|
Luke Taylor
|
3f123e1478
|
SEC-518: Fix. "Cache" in EhCache is a class, so change the APIs to use the interface it implements (Ehcache).
|
2007-08-27 23:41:59 +00:00 |
|
Luke Taylor
|
dda88e3931
|
SEC-502: Fix. Use a Map instead of HashMap in the API. Also some minor tidying of test class.
|
2007-08-27 17:21:16 +00:00 |
|
Luke Taylor
|
1c72b7989e
|
Fix for SEC-522. Strip query parameters from logout URL before doing comparison with filterProcessesUrl.
|
2007-08-27 17:14:23 +00:00 |
|
Luke Taylor
|
f8689b18b2
|
SEC-526: Fixed. Support for different case prefixes ({SHA}, {sha} etc).
|
2007-08-27 16:23:14 +00:00 |
|
Ben Alex
|
db3024f9a4
|
SEC-271: Revert Ordered and ApplicationContextAware usage at this time, due to release of 1.0..
|
2007-08-25 00:15:30 +00:00 |
|
Vishal Puri
|
bc30b903f8
|
SEC-398: Lazy update of 'filterApplied' to true
|
2007-07-25 05:34:40 +00:00 |
|
Luke Taylor
|
b646a06443
|
Fix for SEC-512. Removed unnecessary context creation.
|
2007-07-24 17:01:36 +00:00 |
|
Vishal Puri
|
5ea8232f84
|
SEC-484: fixed concurrency issue
|
2007-07-23 07:58:31 +00:00 |
|
Vishal Puri
|
0e46e5307c
|
SEC-271: added Ordered interface to AcessDecisionVoters
|
2007-07-06 13:34:43 +00:00 |
|
Vishal Puri
|
b2c30277f4
|
SEC-271: work on security:autoconfig
|
2007-06-19 04:08:19 +00:00 |
|
Ben Alex
|
4561c3a1f1
|
Remove unused imports that were causing warnings.
|
2007-05-25 05:33:06 +00:00 |
|
Vishal Puri
|
b30162191e
|
SEC-271: Moved spring security namespaces cnfig code to sandbox
|
2007-05-25 03:17:12 +00:00 |
|
Ben Alex
|
4f13db5552
|
SEC-398: Delay sending of redirect until after HttpSession updated with revised SecurityContextHolder contents.
|
2007-05-25 01:24:07 +00:00 |
|
Vishal Puri
|
4c6d132ead
|
SEC-411: fixed broken unit tests as a consequence of adding anoter constructor argument
|
2007-05-24 23:35:01 +00:00 |
|
Ben Alex
|
0736f4ffa0
|
SEC-305: Retain SecurityContext when rendering error pages.
|
2007-05-24 02:04:47 +00:00 |
|
Ben Alex
|
6ea8899134
|
|
2007-05-24 00:47:12 +00:00 |
|
Ben Alex
|
5b8898c750
|
SEC-298: Ensure returned cookies have a maximum age equal to the TokenBasedRememberMeServices.tokenValiditySeconds property.
|
2007-05-23 06:43:47 +00:00 |
|