1103 Commits

Author SHA1 Message Date
Rob Winch
2feded5fc5 SEC-2194: Update samples to have jsp-api 2013-08-15 12:50:40 -05:00
Rob Winch
22e4d1646a SEC-2194: Remove login page from hellomvc and insecuremvc 2013-08-15 12:50:40 -05:00
Rob Winch
e8278f3b9b SEC-2249: AbstractSecurityWebApplicationInitializer allows register config 2013-08-08 14:33:54 -05:00
Rob Winch
976d9a9016 SEC-2194: Polish java config sample apps 2013-08-08 14:33:54 -05:00
Rob Winch
1f86d5dad9 SEC-2097: Add Tomcat Gradle plugin 2013-08-05 16:49:34 -05:00
Rob Winch
388a4dd9db SEC-2194: Add Java Config samples 2013-08-05 16:49:33 -05:00
Rob Winch
36418b964d Remove samples/runall.sh 2013-08-01 13:19:21 -05:00
Rob Winch
e242aeff3e SEC-2230: Polish and clickjacking demo 2013-08-01 10:19:36 -05:00
Rob Winch
8c3ac719bb SEC-2230: Added testing certificates 2013-08-01 09:48:09 -05:00
Rob Winch
0bc08f8a23 SEC-2230: Update contacts sample to use <headers> with no child elements 2013-08-01 09:47:57 -05:00
Marten Deinum
0adf5aea91 SEC-2098, SEC-2099: Created HeadersFilter
Created HeadersFilter for setting security headers added including a
bean definition parser for easy configuration of the headers. Enables
easy configuration for the X-Frame-Options, X-XSS-Protection and
X-Content-Type-Options headers. Also allows for additional headers to
be added.
2013-07-25 16:22:43 -05:00
Rob Winch
5e6ca12b01 SEC-2097: Update integrationTestCompile to use optional and provided
Also update slf4j version and remove explicit commons-logging from pom generation
2013-07-16 15:59:06 -05:00
Rob Winch
02551e1b7a SEC-2214: Update Spring Version 2013-07-16 15:15:47 -05:00
Rob Winch
faa8b354b7 SEC-2209: add pom.xml 2013-07-16 15:15:47 -05:00
Rob Winch
e5fc063680 SEC-2206: Gradle Propdeps 2013-07-16 15:15:42 -05:00
Rob Winch
07c3fdf8a7 SEC-2195: Update Groovy, Geb, Spock, httpcomponents, and Jetty 2013-07-16 15:02:39 -05:00
Luke Taylor
896339087f SEC-2122: Update samples to use bcrypt.
Data sources modified to store bcrypt hashes and configs now
use BCryptPassworEncoder.
2013-05-17 18:44:30 +01:00
Rob Winch
e8661913d1 SEC-2119: Update to 3.2 schema and use default schema version when available 2013-03-01 16:29:27 -06:00
Rob Winch
22e333b9c6 SEC-2092: Add servlet api example 2012-12-11 17:44:57 -06:00
Rob Winch
1ed643ca1f SEC-1998: Provide integration with WebAsyncManager#startCallableProcessing
Support integration of the Spring SecurityContext on Callable's used with
WebAsyncManager by registering SecurityContextCallableProcessingInterceptor.
2012-11-28 17:56:03 -06:00
Rob Winch
78cbdd2c93 Reserve Server Ports in integrationTests
Previously the build would look up a server port dynamically, but since
it closed the port immediately it may not be reserved by the time jetty
started up.

We now reserve the port and do not close it till just before Jetty starts.
While there is still a race condition, it is much smaller window of time
than it was previously.
2012-11-01 11:14:50 -05:00
Rob Winch
6af3e1958b Update to Groovy 1.8 2012-09-04 09:48:29 -05:00
Rob Winch
a2452ab514 SEC-1906: Update to Gradle 1.0 2012-07-05 12:41:56 -05:00
Abdull
dec44811fc Gave correct role name 2012-02-28 14:41:14 +01:00
Abdull
0e413cedcb Gave correct role name 2012-02-28 14:39:30 +01:00
Rob Winch
044861eb20 Renamed **/*Spec.groovy to **/*Tests.groovy to better follow conventions 2011-12-29 12:59:24 -06:00
Luke Taylor
b60367e30c Upgrade to validater 4.2 2011-11-01 00:20:45 +00:00
Luke Taylor
9d66e1fac3 Exclude static resources from filter chain in tutorial sample. 2011-09-25 22:30:14 +01:00
Luke Taylor
7e44580c75 Minor refactoring of aspects tests. 2011-07-20 17:42:05 +01:00
Luke Taylor
dc92baa257 Remove truststore settings from tutorial sample as they aren't required. 2011-06-13 15:03:51 +01:00
Luke Taylor
e4ecdd55f6 Enable https in tutorial sample. 2011-06-13 13:45:09 +01:00
Luke Taylor
80fd96df6d SEC-1650: Updates and corrections to tutorial sample to fit better with new tutorial. 2011-06-07 16:46:38 +01:00
Rob Winch
c9b328d8c7 SEC-1757: Updated tutorial sample to state that listing of accounts is allowed by anyone and to display accounts for the different types of access to posting to Accounts 2011-06-02 21:19:01 -05:00
Luke Taylor
e8a1a6e40b Added spring-expression to config module testCompile to fix build. 2011-05-19 23:50:35 +01:00
Rob Winch
3de0041874 Reverted cas Readme.txt from instructing to run from samples/cas/sample 2011-05-16 22:09:58 -05:00
Rob Winch
076a75d8c3 Cleaned up cas task dependency declarations 2011-05-15 22:09:28 -05:00
Rob Winch
11dc3363cc Moved cas server and cas sample into common parent folder (samples/cas) 2011-05-15 22:09:08 -05:00
Rob Winch
1c1ffe2f0f Added CA's to server.jks from cacerts included with Sun JDK
- Allow handshake to succeed for the build to upload to amazon
- Allows the same trust store to work for openid and CAS sample applications
2011-05-13 18:05:16 -05:00
Rob Winch
e1f4c3d325 Created a casserver module to better isolate it from the cas sample application now that an overlay is being done 2011-05-12 22:17:43 -05:00
Rob Winch
4d786d74cf Reworded CASSampleSpec test method to reflect single logout 2011-05-12 22:17:43 -05:00
Rob Winch
4c43bde064 Set log levels to ERROR level when running CAS integration tests 2011-05-12 22:17:43 -05:00
Rob Winch
9525403385 Added CAS Server overlay to make single logout be synchronous and enabled itests for the cas sample 2011-05-12 22:17:43 -05:00
Luke Taylor
d2175468ee Disable CAS interation tests until CI problems are resolved. 2011-04-28 19:17:29 +01:00
Luke Taylor
06faea8cfc Typos. 2011-04-28 18:55:38 +01:00
Rob Winch
97afb0c9ac SEC-965: Added assert to LoginPage.at 2011-04-18 23:52:20 -05:00
Rob Winch
01fb4bdb6d SEC-1718: Update documentation and sample application to demonstrate how to use a PGT to authenticate to stateless services using a PT 2011-04-17 18:17:14 -05:00
Rob Winch
abfa558c3c Removed Dummy.java from cas sample 2011-04-17 18:14:16 -05:00
Rob Winch
11331d34d9 SEC-1717: Document how to perform Single Logout with CAS and added integration test for sample application to test Single Logout 2011-04-17 18:14:16 -05:00
Rob Winch
761d5af6ec SEC-965: Added integration tests for CAS Sample Application 2011-04-17 18:14:14 -05:00
Rob Winch
f1c064b3b9 SEC-965: Updated CAS Sample application for proxy authentication
* Configured for proxy authentication
* Cleaned up the jsps
* Changed the cas sample context root to cas-sample so the CAS Server's JSESSIONID cookie doesn't remove the cas samples
2011-04-17 18:00:37 -05:00