Commit Graph

1420 Commits

Author SHA1 Message Date
Luke Taylor 89415e3ee5 SEC-693: RoleVoter can improve performance
http://jira.springframework.org/browse/SEC-693
2008-03-05 13:42:39 +00:00
Luke Taylor 5ec8aa797c SEC-694: Add check to LdapShaPasswordEncoder to detect use with non-SHA passwords
http://jira.springframework.org/browse/SEC-694
2008-03-05 13:29:26 +00:00
Luke Taylor 426e526694 Minor tidying. 2008-03-03 21:57:59 +00:00
Luke Taylor ff16c413dd [maven-release-plugin] prepare for next development iteration 2008-02-29 14:55:31 +00:00
Luke Taylor b8916ffaba [maven-release-plugin] prepare release release_2_0_M2 2008-02-29 14:54:15 +00:00
Luke Taylor 6c8adfc982 SEC-640: Test class for FilterInvocationDefinitionSourceParser 2008-02-28 19:36:22 +00:00
Luke Taylor 33023565a8 SEC-640: Add namespace support for FilterInvocationDefinitionSource configuration
http://jira.springframework.org/browse/SEC-640
2008-02-28 19:29:33 +00:00
Luke Taylor 93432b7626 SEC-680: Missed some additional method, method parameter & field names, JavaDoc
http://jira.springframework.org/browse/SEC-680
2008-02-28 12:28:17 +00:00
Luke Taylor 25c4db08b9 Updated class javadoc to reflect recent changes to AbstractProcessingFilter 2008-02-28 12:04:24 +00:00
Luke Taylor 709f78e481 SEC-688: java.lang.NullPointerException in AbstractAuthenticationToken.equals()
http://jira.springframework.org/browse/SEC-688
2008-02-28 11:44:15 +00:00
Luke Taylor e6e1f2586f SEC-213: Allow custom redirects based on "redirect" parameter in AbstractProcessingFilter. successfulAuthentication()
http://jira.springframework.org/browse/SEC-213
2008-02-28 11:03:05 +00:00
Luke Taylor 439b0be58e SEC-462: 302 redirect is not usable for SOAP clients
http://jira.springframework.org/browse/SEC-462
2008-02-26 14:54:29 +00:00
Luke Taylor 5e27b326d2 SEC-685: minor javadoc change 2008-02-26 13:02:59 +00:00
Luke Taylor 0f63084afe SEC-685: Improvement to Javadoc for FilterChainProxy and changed to use of LinkedHashSet in obtainAllDefinedFilters to guarantee order is preserved. 2008-02-26 12:59:33 +00:00
Luke Taylor 8c00bb1537 SEC-674: Updated samples to work with new module layout. Changed taglib build to copy tld file to META-INF directory.
Also standardized JSTL version to 1.1.0 (impl 1.1.2), moving deps to root sample pom.
2008-02-22 16:21:37 +00:00
Luke Taylor 5187f89fe8 SEC-679: Removed use of MockApplicationContext and improved use of ehcache (shutting down cache managers after tests are run). Upgraded ehcache version to 1.3 as used in Spring pom. 2008-02-22 13:34:20 +00:00
Luke Taylor ca9e64f857 SEC-674: Moved cas "ui" package to new module 2008-02-22 11:11:56 +00:00
Luke Taylor 2dd9faabc0 SEC-674: Created new project modules for cas, captcha, acls and taglibs 2008-02-19 20:30:53 +00:00
Luke Taylor 59651f5214 SEC-678: Moved extraInformation property to AuthenticationException so ti isn't only available in BadCredentialsException. Added clearExtraInformation flag to AbstractAuthenticationManager to allow the information to be removed if required before rethrowing. 2008-02-18 20:18:40 +00:00
Luke Taylor 1aec2a6d0a Tidying javadoc 2008-02-18 18:27:50 +00:00
Luke Taylor d7b3a1f734 SEC-603: Removed requirement for an entry point on BasicProcessingFilter if ignoreFailures is true. 2008-02-18 15:41:23 +00:00
Luke Taylor 5af9653a8e Import cleaning. 2008-02-18 12:35:55 +00:00
Luke Taylor 6575f5af1c SEC-536: Added account status checking to Siteminder provider 2008-02-18 12:35:18 +00:00
Luke Taylor 3c011685cd SEC-536: Added account status checking to pre-auth provider. 2008-02-18 12:15:30 +00:00
Andrei Stefan 84282ffabb SEC-532: added test method for SEC-655 2008-02-15 22:27:14 +00:00
Luke Taylor 48e2c38736 SEC-536: Added account status checking to Cas provider 2008-02-15 18:14:57 +00:00
Luke Taylor 04e187d1a7 Tiding up code in acl package (formatting, reduction onf nesting etc). 2008-02-15 18:09:26 +00:00
Luke Taylor 5e204e23f3 SEC-536: Introduced UserDetailsChecker strategy to extract code for checking status of accounts and allowing variation in pre/post authentication checks made by AbstractUserDetailsAuthenticationProvider 2008-02-15 18:05:12 +00:00
Luke Taylor da90b81e16 Corrected toString output (using "username" instead of "principal") 2008-02-15 17:15:20 +00:00
Luke Taylor 48e2d5ad62 Refactored AbstractSecurityInterceptor, extracting method authenticateIfRequired(); 2008-02-15 17:05:58 +00:00
Luke Taylor a930ce2bf6 SEC-577: Correct javadocs for switch user 2008-02-15 14:34:46 +00:00
Luke Taylor 985818ae2c SEC-581: Copy authentication details to CAS result token 2008-02-15 14:11:56 +00:00
Ben Alex bdc791649d SEC-656: Provide ability to dependency inject additional exception to event mappings, rather than require subclassing. 2008-02-15 11:56:53 +00:00
Andrei Stefan afca3d8adc tidying up changes 2008-02-15 10:56:05 +00:00
Andrei Stefan 24ff891fea tidying up changes 2008-02-15 10:55:27 +00:00
Andrei Stefan 69c2f31aa7 SEC-532: AclImpl tests class 2008-02-15 10:53:23 +00:00
Andrei Stefan 0eff5afc8f SEC-532: small bug-fix 2008-02-15 10:39:25 +00:00
Ben Alex c65ec2aa38 Make authentication-failure-url attribute optional. 2008-02-12 17:40:49 +00:00
Andrei Stefan b84c812305 SEC-532: added method that reproduces bug in SEC-590 2008-02-12 16:28:33 +00:00
Andrei Stefan 0dae2a2dfc SEC-532: added test methods; one method reproduces bug in SEC-590 2008-02-12 16:20:48 +00:00
Luke Taylor ae28169383 SEC-482: Load AclService implementations from parent app contexts. 2008-02-10 12:42:06 +00:00
Luke Taylor f0ec1eeabd Tidying. 2008-02-09 15:39:16 +00:00
Luke Taylor 3c775b5d0d Added access-decision-manager-ref attribute to intercept-methods element. Made interceptor bean autowired by default to pick up AfterInvocationManager. 2008-02-09 15:38:31 +00:00
Luke Taylor 10ab4136d1 SEC-309: Patch for Authentication tag to use property of authentication object, rather than invoking an operation on the principal. Allows use of nested properties. 2008-02-09 13:41:05 +00:00
Luke Taylor e0d0cc20c7 SEC-665: Missed a method name... 2008-02-08 18:19:27 +00:00
Luke Taylor bd5a64825d SEC-552: Replaced authorites populators in CAS and OpenID with a plain UserDetailsService 2008-02-08 13:23:43 +00:00
Luke Taylor 842c49c890 SEC-665: Renaming of rolemapping package to authoritymapping, and corresponding refactoring of classes. 2008-02-08 12:01:10 +00:00
Luke Taylor 549de2927e SEC-641: Avoid direct use of external classes in namespace parsing. 2008-02-07 15:03:27 +00:00
Luke Taylor 6e93ec92eb Added db creation message. 2008-02-07 13:35:27 +00:00
Luke Taylor 28153f2c7f Added TestDataSource class to cut down verbosity of in-memory test databases and to implement DisposableBean, so the database is destroyed when the application context containing it is closed. 2008-02-07 13:33:15 +00:00