Commit Graph

651 Commits

Author SHA1 Message Date
Rob Winch e8278f3b9b SEC-2249: AbstractSecurityWebApplicationInitializer allows register config 2013-08-08 14:33:54 -05:00
Rob Winch 976d9a9016 SEC-2194: Polish java config sample apps 2013-08-08 14:33:54 -05:00
Rob Winch 1f86d5dad9 SEC-2097: Add Tomcat Gradle plugin 2013-08-05 16:49:34 -05:00
Rob Winch 388a4dd9db SEC-2194: Add Java Config samples 2013-08-05 16:49:33 -05:00
Rob Winch 36418b964d Remove samples/runall.sh 2013-08-01 13:19:21 -05:00
Rob Winch e242aeff3e SEC-2230: Polish and clickjacking demo 2013-08-01 10:19:36 -05:00
Rob Winch 8c3ac719bb SEC-2230: Added testing certificates 2013-08-01 09:48:09 -05:00
Rob Winch 0bc08f8a23 SEC-2230: Update contacts sample to use <headers> with no child elements 2013-08-01 09:47:57 -05:00
Marten Deinum 0adf5aea91 SEC-2098, SEC-2099: Created HeadersFilter
Created HeadersFilter for setting security headers added including a
bean definition parser for easy configuration of the headers. Enables
easy configuration for the X-Frame-Options, X-XSS-Protection and
X-Content-Type-Options headers. Also allows for additional headers to
be added.
2013-07-25 16:22:43 -05:00
Rob Winch 5e6ca12b01 SEC-2097: Update integrationTestCompile to use optional and provided
Also update slf4j version and remove explicit commons-logging from pom generation
2013-07-16 15:59:06 -05:00
Rob Winch 02551e1b7a SEC-2214: Update Spring Version 2013-07-16 15:15:47 -05:00
Rob Winch faa8b354b7 SEC-2209: add pom.xml 2013-07-16 15:15:47 -05:00
Rob Winch e5fc063680 SEC-2206: Gradle Propdeps 2013-07-16 15:15:42 -05:00
Rob Winch 07c3fdf8a7 SEC-2195: Update Groovy, Geb, Spock, httpcomponents, and Jetty 2013-07-16 15:02:39 -05:00
Luke Taylor 896339087f SEC-2122: Update samples to use bcrypt.
Data sources modified to store bcrypt hashes and configs now
use BCryptPassworEncoder.
2013-05-17 18:44:30 +01:00
Rob Winch e8661913d1 SEC-2119: Update to 3.2 schema and use default schema version when available 2013-03-01 16:29:27 -06:00
Rob Winch 22e333b9c6 SEC-2092: Add servlet api example 2012-12-11 17:44:57 -06:00
Rob Winch 1ed643ca1f SEC-1998: Provide integration with WebAsyncManager#startCallableProcessing
Support integration of the Spring SecurityContext on Callable's used with
WebAsyncManager by registering SecurityContextCallableProcessingInterceptor.
2012-11-28 17:56:03 -06:00
Rob Winch 78cbdd2c93 Reserve Server Ports in integrationTests
Previously the build would look up a server port dynamically, but since
it closed the port immediately it may not be reserved by the time jetty
started up.

We now reserve the port and do not close it till just before Jetty starts.
While there is still a race condition, it is much smaller window of time
than it was previously.
2012-11-01 11:14:50 -05:00
Rob Winch 6af3e1958b Update to Groovy 1.8 2012-09-04 09:48:29 -05:00
Rob Winch a2452ab514 SEC-1906: Update to Gradle 1.0 2012-07-05 12:41:56 -05:00
Abdull dec44811fc Gave correct role name 2012-02-28 14:41:14 +01:00
Abdull 0e413cedcb Gave correct role name 2012-02-28 14:39:30 +01:00
Rob Winch 044861eb20 Renamed **/*Spec.groovy to **/*Tests.groovy to better follow conventions 2011-12-29 12:59:24 -06:00
Luke Taylor b60367e30c Upgrade to validater 4.2 2011-11-01 00:20:45 +00:00
Luke Taylor 9d66e1fac3 Exclude static resources from filter chain in tutorial sample. 2011-09-25 22:30:14 +01:00
Luke Taylor 7e44580c75 Minor refactoring of aspects tests. 2011-07-20 17:42:05 +01:00
Luke Taylor dc92baa257 Remove truststore settings from tutorial sample as they aren't required. 2011-06-13 15:03:51 +01:00
Luke Taylor e4ecdd55f6 Enable https in tutorial sample. 2011-06-13 13:45:09 +01:00
Luke Taylor 80fd96df6d SEC-1650: Updates and corrections to tutorial sample to fit better with new tutorial. 2011-06-07 16:46:38 +01:00
Rob Winch c9b328d8c7 SEC-1757: Updated tutorial sample to state that listing of accounts is allowed by anyone and to display accounts for the different types of access to posting to Accounts 2011-06-02 21:19:01 -05:00
Luke Taylor e8a1a6e40b Added spring-expression to config module testCompile to fix build. 2011-05-19 23:50:35 +01:00
Rob Winch 3de0041874 Reverted cas Readme.txt from instructing to run from samples/cas/sample 2011-05-16 22:09:58 -05:00
Rob Winch 076a75d8c3 Cleaned up cas task dependency declarations 2011-05-15 22:09:28 -05:00
Rob Winch 11dc3363cc Moved cas server and cas sample into common parent folder (samples/cas) 2011-05-15 22:09:08 -05:00
Rob Winch 1c1ffe2f0f Added CA's to server.jks from cacerts included with Sun JDK
- Allow handshake to succeed for the build to upload to amazon
- Allows the same trust store to work for openid and CAS sample applications
2011-05-13 18:05:16 -05:00
Rob Winch e1f4c3d325 Created a casserver module to better isolate it from the cas sample application now that an overlay is being done 2011-05-12 22:17:43 -05:00
Rob Winch 4d786d74cf Reworded CASSampleSpec test method to reflect single logout 2011-05-12 22:17:43 -05:00
Rob Winch 4c43bde064 Set log levels to ERROR level when running CAS integration tests 2011-05-12 22:17:43 -05:00
Rob Winch 9525403385 Added CAS Server overlay to make single logout be synchronous and enabled itests for the cas sample 2011-05-12 22:17:43 -05:00
Luke Taylor d2175468ee Disable CAS interation tests until CI problems are resolved. 2011-04-28 19:17:29 +01:00
Luke Taylor 06faea8cfc Typos. 2011-04-28 18:55:38 +01:00
Rob Winch 97afb0c9ac SEC-965: Added assert to LoginPage.at 2011-04-18 23:52:20 -05:00
Rob Winch 01fb4bdb6d SEC-1718: Update documentation and sample application to demonstrate how to use a PGT to authenticate to stateless services using a PT 2011-04-17 18:17:14 -05:00
Rob Winch abfa558c3c Removed Dummy.java from cas sample 2011-04-17 18:14:16 -05:00
Rob Winch 11331d34d9 SEC-1717: Document how to perform Single Logout with CAS and added integration test for sample application to test Single Logout 2011-04-17 18:14:16 -05:00
Rob Winch 761d5af6ec SEC-965: Added integration tests for CAS Sample Application 2011-04-17 18:14:14 -05:00
Rob Winch f1c064b3b9 SEC-965: Updated CAS Sample application for proxy authentication
* Configured for proxy authentication
* Cleaned up the jsps
* Changed the cas sample context root to cas-sample so the CAS Server's JSESSIONID cookie doesn't remove the cas samples
2011-04-17 18:00:37 -05:00
Luke Taylor ddaf9eb64f SEC-1705: Make sure a single OpenIDAuthenticationFilter bean is created by the namespace. Likewise for UsernamePasswordAuthenticationFilter. 2011-03-31 21:09:54 +01:00
Rob Winch a50c9afbab Modified jaas sample's LoginModule to prevent empty string username/password 2011-03-07 22:25:19 -06:00