Luke Taylor
192aa25b60
Addtional sample app files
2008-06-03 13:04:50 +00:00
Luke Taylor
d95a5597c8
Bug-testing changes to heavyduty sample
2008-06-03 12:58:13 +00:00
Luke Taylor
122e1c47ed
Changed rnc filename prior to 2.0.2 release
2008-06-01 19:34:50 +00:00
Luke Taylor
64ab7e534c
Spelling corrections in Javadoc.
2008-06-01 17:26:27 +00:00
Luke Taylor
ab6d29d927
SEC-862: Make logoutSuccessUrl accessible to sub-classes.
2008-06-01 16:15:09 +00:00
Luke Taylor
2a510f3539
Added question on login with multiple fields to faq
2008-06-01 15:25:39 +00:00
Luke Taylor
7c0f8b9756
Corrected typo in docbook.
2008-05-30 20:48:05 +00:00
Luke Taylor
1d9d7eb9a7
Removed accidental commit of SavedRequest clearing code in TargetUrlResolverImpl
2008-05-30 17:53:09 +00:00
Luke Taylor
0cfcc0e9f1
Tidying Javadoc
2008-05-30 17:51:23 +00:00
Luke Taylor
373f7b648b
Corrected outdated filter name in Javadoc
2008-05-30 17:49:03 +00:00
Luke Taylor
a5cae70949
SEC-800: Removed references to outdated method configuration classes.
2008-05-30 16:35:09 +00:00
Luke Taylor
ecd2cc6da7
Added some Assert calls to setters and improved comments.
2008-05-30 15:29:51 +00:00
Luke Taylor
f228d013d8
SEC-861: Change default value of justUseSavedRequestOnGet to false
2008-05-30 15:09:51 +00:00
Luke Taylor
4de4bb8e87
SEC-860: Added setter for authenticationDetailsSource to AbstractRememberMeServices
2008-05-30 14:29:32 +00:00
Luke Taylor
f8cded10ee
Typo.
2008-05-30 11:20:16 +00:00
Luke Taylor
c031588975
SEC-606: Added support for customizable credentials character set.
2008-05-29 18:00:15 +00:00
Luke Taylor
36a192b70f
SEC-858: Replaced integer properties in schema with strings to allow use of placeholders.
2008-05-29 16:13:14 +00:00
Luke Taylor
980a72f9a0
Removed TODO (done).
2008-05-29 15:54:50 +00:00
Luke Taylor
517a7f117a
SEC-857: Make request wrapper getParameterValues() consistent with getParameterMap() etc.
2008-05-29 15:49:43 +00:00
Luke Taylor
244579faf4
OPEN - issue SEC-856: GroupManager JdbcUserDetailsManager implementation: addGroupAuthority() method doesn't work.
...
http://jira.springframework.org/browse/SEC-856 . Refactored class to remove the JDBC-related inner classes.
2008-05-28 16:25:28 +00:00
Luke Taylor
87ba871605
Minor doc updates
2008-05-28 13:38:33 +00:00
Luke Taylor
d63536cc0d
SEC-821: Added support for eternal session registry and concurrent session controller to the 2.0.2 namespace.
2008-05-27 13:14:21 +00:00
Luke Taylor
8b5bbe3800
SEC-830: Changed SavedRequestAwareWrapper to make wrapped request parameters take precedence over saved request ones.
2008-05-25 22:57:03 +00:00
Luke Taylor
cf4072c517
Context file improvements (based on sts suggestions)
2008-05-25 20:57:07 +00:00
Luke Taylor
4b45e5d7c2
Fixed OSGi version numbers in ranges [x,y] by adding a property pom.version.osgi
2008-05-25 20:55:17 +00:00
Luke Taylor
45c3084502
SEC-836: Made LDAP namespace elements use subtree group searching by default.
2008-05-23 23:57:01 +00:00
Luke Taylor
871e529840
SEC-850: custom-authentication-provider Registering Separate Bean Definitions in App Context and Providers List
...
http://jira.springframework.org/browse/SEC-850 . Added extra test.
2008-05-23 23:32:57 +00:00
Luke Taylor
d1005e4cfb
SEC-850: custom-authentication-provider Registering Separate Bean Definitions in App Context and Providers List
...
http://jira.springframework.org/browse/SEC-850 . Changed bean decorator to add a bean reference to the ProviderManager rather than a bean definition.
2008-05-23 23:25:09 +00:00
Luke Taylor
9ce0270226
Fixed typo in test name
2008-05-23 22:57:30 +00:00
Luke Taylor
7603ce2f97
SEC-848: Remove all Spring LDAP dependecy loading from namespace parsers
...
http://jira.springframework.org/browse/SEC-848 . Replaced class references with class names.
2008-05-23 21:30:57 +00:00
Luke Taylor
859e99edf4
SEC-851: Fix port number in LDAP sample.
2008-05-23 21:24:48 +00:00
Luke Taylor
25ba269db0
SEC-835: use setContentType on response for J2EE 1.3 compatibility.
2008-05-23 20:55:10 +00:00
Luke Taylor
11b448c0e0
SEC-847: Updated the xsl file to inline openid-login and other elements
2008-05-23 16:29:44 +00:00
Luke Taylor
08c5fe8925
Fixed autoboxing issue
2008-05-22 12:19:00 +00:00
Luke Taylor
fbe3ca48f4
SEC-823, SEC-843: Allow setting of custom RememberMeServices and token validity periodon remember-me namespace element
2008-05-21 16:03:05 +00:00
Luke Taylor
3e33b8a880
Update InMemoryXmlApplicationContext to use 2.0.2 schema
2008-05-20 22:46:37 +00:00
Luke Taylor
b60c578b25
SEC-844: Support for SHA-256 hashing.
2008-05-20 22:45:02 +00:00
Luke Taylor
03981ab6a0
SEC-844: Added sec-256 to namespace schema
2008-05-20 22:32:03 +00:00
Luke Taylor
e9adbd4d62
SEC-844, SEC-843, SEC-823: Added support for sha-256, custom remember-me services and setting of remember me token validity period to namespace schema. Also added 2.0.2 XSD file
2008-05-20 19:48:32 +00:00
Luke Taylor
29d31b72d0
SEC-837: Add special character filtering to LDAP search filters
2008-05-20 19:25:37 +00:00
Luke Taylor
3fb1f59fde
SEC-837: Add special character filtering to LDAP search filterscore/src/test/java/org/springframework/security/ldap
2008-05-20 19:22:49 +00:00
Luke Taylor
219d2e8962
Corrected link
2008-05-20 10:57:17 +00:00
Luke Taylor
ff215e6750
Minor doc fixes
2008-05-20 10:54:29 +00:00
Luke Taylor
6ae81d553b
SEC-842: Minor doc fixes
2008-05-20 10:48:59 +00:00
Luke Taylor
5af53da106
Improved doc for'filters' attribute
2008-05-18 11:09:50 +00:00
Luke Taylor
2329dadf48
Removed jalopy parameter comments
2008-05-15 17:58:15 +00:00
Luke Taylor
fb5eefeea5
SEC-740: Finished preauth chapter
2008-05-15 17:00:45 +00:00
Luke Taylor
f269373442
IDE-791: Remove explicit Spring LDAP class dependencies from LdapServerBDP.
2008-05-15 14:33:42 +00:00
Luke Taylor
4f6b4e4bfd
Make sample login pages use c:out for data output
2008-05-15 12:48:13 +00:00
Luke Taylor
8b2c0468ff
OPEN - issue SEC-834: Session fixation attack protection will cause problems with URL rewriting
...
http://jira.springframework.org/browse/SEC-834 . Modified HttpSecurityBDP to add session-fixation parameters to openId and form-login filters. Also added sessionRegistry property to AbstractProcessingFilter so that it doesn't conflict with concurrent session control.
2008-05-15 01:34:14 +00:00