Luke Taylor
55ef50a4df
Added checking of path ordering to FilterChainProxy to detect misplaced universal match ("/**").
2007-10-26 13:51:32 +00:00
Luke Taylor
1bcb62af2e
Remove use of autoconfig, as it was really just a conveniece for creating default access and authentication managers.
2007-10-26 13:05:31 +00:00
Luke Taylor
acf3966651
SEC-578: Refactored to remove FilterChainMap and use a LinkedHashMap instead to maintain the path ordering. Also made use of Springs ManagedList and ManagedMap to preform resolution of bean names to Filter objects at runtime, replacing the unnecessary bean which was performing this task for the filter lists.
2007-10-22 23:52:29 +00:00
Luke Taylor
cffd3131f0
Added building of filter chain in post-processing, support for basic authentication and automatic generation of login page, if no loginUrl supplied.
2007-10-20 23:17:01 +00:00
Luke Taylor
9b8c06e9f6
SEC-568: Introduced FilterChainMap as a simpler option for configuring FilterChainProxy and introduced a namespace-based for configuring it. The Url pattern matching is factored out into a separate strategy with ant and regex versions.
2007-10-20 23:05:03 +00:00
Luke Taylor
c51bcd9c1f
Changed method protection config to make it compatible with MethodDefinitionMap for the time being.
2007-10-14 14:29:15 +00:00
Luke Taylor
627b0b38ad
Intermediate checkin of experimental namespace config work.
2007-10-13 16:24:24 +00:00
Luke Taylor
acb02246e0
Refactored embedded LDAP server tests to make use of new namespace configuration. Use Junit 4 annotations in preference to AbstractDependencyInjectionSpringContextTests so that it is possible to clear up the context after each class is run rather than at JVM shutdown (causes problems with running embedded apache DS).
2007-10-02 10:52:06 +00:00
Luke Taylor
77b6503e2e
SEC-271: Added namespace handler class and experimental LDAP parser. The latter creates an embedded Apache DS server if no server URL is supplied, so changed dependencies on the latter to compile-time/optional.
2007-10-02 10:46:38 +00:00
Luke Taylor
5066fc5e39
SEC-562: Changed urls for login, logout, switch user etc.
2007-09-24 15:39:51 +00:00
Luke Taylor
eacbc71ba1
Switch ldap server port to 3999 (intermittent test failures occurring).
2007-09-23 20:57:01 +00:00
Luke Taylor
5a586c04a9
SEC-562: Repackaging core.
2007-09-21 18:18:21 +00:00
Luke Taylor
afaa169e97
SEC-449: Test data ldif file for ApacheDS.
2007-09-10 21:09:59 +00:00
Luke Taylor
0503c3e1ab
SEC-449: Refactoring towards more use of Spring LDAP. Also borrowed the Spring LDAP integration testing setup which is much better and makes use of the full LDAP stack. There were still problems with using Apache DS's CoreContextFactory (e.g. compare operations) so it is an improvement on that front too. Moved spring ldap to 1.2-RC1 version.
2007-09-10 21:09:02 +00:00
Vishal Puri
b30162191e
SEC-271: Moved spring security namespaces cnfig code to sandbox
2007-05-25 03:17:12 +00:00
Vishal Puri
e3435da9ae
SEC-271: removed autowiring by type and explicity introspected the applicationContext to detect the required dependencies of userDetailsService
2007-05-18 03:20:28 +00:00
Vishal Puri
a934f82af4
SEC-271: Fixed IllegalStateException being thrown by LogoutHandlerOrdereResolver and add an assert statement in the unit test
2007-05-17 13:42:51 +00:00
Vishal Puri
a01bb3bbee
Added more bean definition parsers
2007-05-17 12:57:16 +00:00
Vishal Puri
3eb9870162
SEC-271: Added more security elements
2007-05-17 12:30:36 +00:00
Vishal Puri
1203e9858a
SEC-271: Added BeanDefitnitionParser for principal-repository, extended security schema and added unit tests
2007-05-15 13:32:06 +00:00
Vishal Puri
51f306a19a
SEC-271: Added more BeanDefinitionParsers and extend spring-security.xsd to have more elements
2007-05-15 13:26:05 +00:00
Vishal Puri
ced5cb4f85
added new security element in the spring-security schema and wrote a parser for the element
2007-05-13 13:33:33 +00:00
Vishal Puri
e73421d7b2
Spring version upgrade to 2.0.4, changed svn urls in project.xml and poms
2007-05-13 12:30:53 +00:00
Vishal Puri
9794c518d6
SEC-271: Spring 2-based configuration simplification of Acegi Security
2007-05-11 00:09:56 +00:00
Vishal Puri
566314dae5
SEC-271: Spring 2-based configuration simplification of Acegi Security
2007-05-10 02:32:30 +00:00
Ben Alex
197a011ac5
Relocate resource files to comply with Maven directory conventions.
2006-11-17 03:06:30 +00:00
Ben Alex
1b4a098760
SEC-354: Add label-based voter.
2006-11-14 22:07:36 +00:00
Luke Taylor
9623eb3d04
Correct log category package name
2006-05-20 23:45:54 +00:00
Ben Alex
4e09777dec
SEC-247: Allow #NONE# to be used to specify paths that shouldn't have any filters fire.
2006-04-26 03:55:39 +00:00
Carlos Sanchez
88e8e60861
[SEC-240] Moved log4j.properties to test folder to avoid including it in jar
2006-04-26 02:39:56 +00:00
Ben Alex
484b0e3a51
SEC-126: Initial commit of WebInvocationPrivilegeEvaluator feature.
2006-01-28 01:26:58 +00:00
Luke Taylor
d7ae1ad21b
Refactoring to reduce code duplication, remove config files and use JMock to enforce expectations on whether FilterChain proceeds or not.
2006-01-05 00:59:10 +00:00
Luke Taylor
929b08c085
Spring config for ApacheDS is no longer used.
2005-12-19 17:04:09 +00:00
Luke Taylor
1db1a3cd62
Changes try to get Ldap tests working with the possibility of using a non-networked embedded server.
2005-12-16 01:07:31 +00:00
Luke Taylor
d014411d48
Corrections to DIT for apache-ds tests.
2005-12-15 02:16:13 +00:00
Luke Taylor
ce3d6f2129
Initial LDAP provider checkin.
2005-12-15 00:18:13 +00:00
Ben Alex
62fde4ede3
SEC-107: Finalize rename of AuthenticationDao to UserDetailsService with corresponding change in package from .providers.dao to .userdetails.
2005-11-30 00:20:13 +00:00
Ben Alex
a6e23d79ae
SEC-107: Rename AuthenticationDao to UserDetailsService.
2005-11-29 13:10:15 +00:00
Ben Alex
6a1a4abb1d
SEC-104: Move to org.acegisecurity package.
2005-11-17 00:56:49 +00:00
Ben Alex
b6dbfde55c
SEC-70: Refactor event publishing.
2005-11-03 06:55:47 +00:00
Luke Taylor
74588c8e53
Move acegifier code from core.
2005-07-16 19:35:30 +00:00
Luke Taylor
ab065923d4
Correct doctype for generated web.xml files and add declaration to test file.
2005-07-09 23:32:08 +00:00
Luke Taylor
22a28f3b39
Separate InMemoryResource class for use in Acegifier web application.
2005-07-09 21:37:50 +00:00
Luke Taylor
25fa471779
First version of web.xml to acegi translator
2005-06-26 17:30:36 +00:00
Ben Alex
a3818184f4
Added Digest Authentication support (RFC 2617 and RFC 2069).
2005-02-22 06:14:44 +00:00
Ben Alex
a5ea6f5436
Rewrite FilterChainProxy to separate functionality from FilterToBeanProxy and properly implement filter chaining issues.
2005-02-20 05:40:18 +00:00
Carlos Sanchez
7c9fad0477
Added filter chain
2005-02-18 20:08:03 +00:00
Ray Krueger
82c15b1874
The JaasAuthenticationCallbackHandler handle method now takes a callback and the authentication in progress, the setAuthentication method has been removed.
...
The JaasAuthenticationProvider afterPropertiesSet method now makes use of the java.security.auth.login.config System property before trying to use the login.config.url.X properties.
2005-01-31 05:16:32 +00:00
Ben Alex
4bcc1222e1
Modifications to support EH-CACHE upgrade (EH-CACHE appears to have changed the way the default cache configuration file gets handled).
2004-12-21 13:04:11 +00:00
Ben Alex
76c82db196
Refactor EH-CACHE integration classes to work with Spring IoC provided Cache rather than manage our own cache internally.
2004-12-05 04:37:05 +00:00
