610 Commits

Author SHA1 Message Date
Luke Taylor
e872823490 SEC-559: Throw an initialization exception if configured truststore file doesn't exist. 2007-09-17 21:29:40 +00:00
Luke Taylor
d79d55c8b6 SEC-8: Changes to LDAP authenticator API to take an authentication object rather than username/password. 2007-09-17 12:28:07 +00:00
Luke Taylor
c7354c125a SEC-417: Fix. Remove hard-coded messages from JdbcDaoImpl to allow internationalized versions for "user not found" etc. 2007-09-16 22:20:08 +00:00
Luke Taylor
8a35f7da75 SEC-558: Combine user mapping implementations into a single interface and make more use of DirContextOperations in SS LDAP APIs. 2007-09-16 18:56:00 +00:00
Luke Taylor
56deb3dd83 SEC-549: Trim whitespace from username submitted with login form. 2007-09-14 14:25:21 +00:00
Luke Taylor
fdbcbec9d8 SEC-449: Reamed template test class to match tested class. Added test method for case when no attribute value is found. 2007-09-14 14:17:30 +00:00
Luke Taylor
d208cf3824 SEC-449: Make LdapUserDetailsMapper a pure ContextMapper so it can be used with LdapTemplate. 2007-09-13 20:42:50 +00:00
Luke Taylor
6d8f92e1b8 Allow an ldif file to be set in the configuration and loaded on initialization. 2007-09-13 20:40:49 +00:00
Luke Taylor
c0f5230667 SEC-302: Add rolePrefix property to SecurityContextHolderAwareRequestFilter. 2007-09-11 17:29:47 +00:00
Luke Taylor
6a6bafa219 Make sure test classes which are setting the context clear it in their tearDown methods. 2007-09-11 14:13:50 +00:00
Luke Taylor
c56b8c4117 SEC-471: Allow names of username and password parameters to be customized in AuthenticationProcessingFilter. 2007-09-11 12:12:14 +00:00
Luke Taylor
3326525b65 SEC-368: Tidied up captcha spelling. 2007-09-11 11:16:07 +00:00
Luke Taylor
dd2a46c7ca SEC-368: Tidied up captcha spelling. 2007-09-11 11:11:05 +00:00
Luke Taylor
448e8cfb42 SEC-551: Convert RegExpBasedFilterInvocationDefinitionMap and DaoX509AuthoritiesPopulator to use JDK regexps. Removed ORO dependency from the project. 2007-09-10 23:09:36 +00:00
Luke Taylor
6eb17c8546 SEC-513: Ldap user manager implementation classes changed to use new spring ldap apis. 2007-09-10 21:13:45 +00:00
Luke Taylor
afaa169e97 SEC-449: Test data ldif file for ApacheDS. 2007-09-10 21:09:59 +00:00
Luke Taylor
0503c3e1ab SEC-449: Refactoring towards more use of Spring LDAP. Also borrowed the Spring LDAP integration testing setup which is much better and makes use of the full LDAP stack. There were still problems with using Apache DS's CoreContextFactory (e.g. compare operations) so it is an improvement on that front too. Moved spring ldap to 1.2-RC1 version. 2007-09-10 21:09:02 +00:00
Luke Taylor
e7ede68352 Update ldap test base class to use LdapContext by default. 2007-09-07 20:52:03 +00:00
Luke Taylor
ff1f1d8ef5 SEC-449: Rename internal LdapTemplate class to SpringSecurityLdapTemplate to avoid confusion. 2007-09-07 20:49:38 +00:00
Luke Taylor
70239a9769 SEC-513: First check in of user management stuff. 2007-09-07 20:01:46 +00:00
Luke Taylor
9b71b5aa00 SEC-449: Mostly changes to aid moving towards compatibility with spring-ldap. 2007-09-07 19:55:45 +00:00
Luke Taylor
3de8745494 Commented out (another) failing captcha test whose behaviour varies with speed of the build server (makes assumptions about the interval within which certain lines of code are executed). 2007-09-04 01:06:58 +00:00
Luke Taylor
6289503643 Commented out failing captcha test whose behaviour varies with speed of the build server (makes assumptions about the interval within which certain lines of code are executed). 2007-09-03 23:33:13 +00:00
Luke Taylor
4e452046ec Comment out System.out.println 2007-09-01 14:59:41 +00:00
Luke Taylor
b2799985f2 SEC-398: Added patch which uses response wrapper to set context in session on redirect or error. 2007-08-31 20:39:33 +00:00
Luke Taylor
0c4916ee98 SEC-427: Fix. Added NullAuthoritiesPopulator and extra constructor. 2007-08-30 21:12:16 +00:00
Luke Taylor
301626fd6e SEC-346: Fix. Added suggested change. Also some minor tidying up of comments etc. 2007-08-30 20:55:49 +00:00
Luke Taylor
2e8d16c538 SEC-484: Multithreaded tests for SessionRegistryImpl. 2007-08-30 19:26:24 +00:00
Luke Taylor
510cd5050f Tidied up SessionRegistryImpl and rolled back reformatting of its test class to incorrect width. 2007-08-30 11:21:28 +00:00
Luke Taylor
5f993e5627 SEC-534: Refactored JaasAuthenticationProvider to use ApplicationPublisherAware rather than ApplicationContextAware. 2007-08-29 11:51:02 +00:00
Luke Taylor
6fe00b3433 SEC-501: Fix. Convert secure url paths to lower case if convertUrlToLowercaseBeforeComparison is true.
Also removed unnecessary assertions from PathBasedFilterDefinitionMapTests.
2007-08-28 16:53:05 +00:00
Luke Taylor
4ba77fa736 SEC-450: Added group subtree to LDAP test server and extra tests for DefaultLdapAuthoritiesPopulator to make sure searchSubtree parameter works as expected. 2007-08-28 15:26:59 +00:00
Luke Taylor
c8077c5e87 SEC-506: Fix as suggested by reporter. Split the disgest header string ignoring separating commas which occur between quotes. 2007-08-28 00:31:30 +00:00
Luke Taylor
3f123e1478 SEC-518: Fix. "Cache" in EhCache is a class, so change the APIs to use the interface it implements (Ehcache). 2007-08-27 23:41:59 +00:00
Luke Taylor
dda88e3931 SEC-502: Fix. Use a Map instead of HashMap in the API. Also some minor tidying of test class. 2007-08-27 17:21:16 +00:00
Luke Taylor
1c72b7989e Fix for SEC-522. Strip query parameters from logout URL before doing comparison with filterProcessesUrl. 2007-08-27 17:14:23 +00:00
Luke Taylor
f8689b18b2 SEC-526: Fixed. Support for different case prefixes ({SHA}, {sha} etc). 2007-08-27 16:23:14 +00:00
Ben Alex
db3024f9a4 SEC-271: Revert Ordered and ApplicationContextAware usage at this time, due to release of 1.0.. 2007-08-25 00:15:30 +00:00
Vishal Puri
bc30b903f8 SEC-398: Lazy update of 'filterApplied' to true 2007-07-25 05:34:40 +00:00
Luke Taylor
b646a06443 Fix for SEC-512. Removed unnecessary context creation. 2007-07-24 17:01:36 +00:00
Vishal Puri
5ea8232f84 SEC-484: fixed concurrency issue 2007-07-23 07:58:31 +00:00
Vishal Puri
0e46e5307c SEC-271: added Ordered interface to AcessDecisionVoters 2007-07-06 13:34:43 +00:00
Vishal Puri
b2c30277f4 SEC-271: work on security:autoconfig 2007-06-19 04:08:19 +00:00
Ben Alex
4561c3a1f1 Remove unused imports that were causing warnings. 2007-05-25 05:33:06 +00:00
Vishal Puri
b30162191e SEC-271: Moved spring security namespaces cnfig code to sandbox 2007-05-25 03:17:12 +00:00
Ben Alex
4f13db5552 SEC-398: Delay sending of redirect until after HttpSession updated with revised SecurityContextHolder contents. 2007-05-25 01:24:07 +00:00
Vishal Puri
4c6d132ead SEC-411: fixed broken unit tests as a consequence of adding anoter constructor argument 2007-05-24 23:35:01 +00:00
Ben Alex
0736f4ffa0 SEC-305: Retain SecurityContext when rendering error pages. 2007-05-24 02:04:47 +00:00
Ben Alex
6ea8899134 2007-05-24 00:47:12 +00:00
Ben Alex
5b8898c750 SEC-298: Ensure returned cookies have a maximum age equal to the TokenBasedRememberMeServices.tokenValiditySeconds property. 2007-05-23 06:43:47 +00:00