1046 Commits

Author SHA1 Message Date
Luke Taylor
18c8ba4ac2 SEC-562: Changing constants and key names. 2007-09-23 11:16:01 +00:00
Luke Taylor
5a586c04a9 SEC-562: Repackaging core. 2007-09-21 18:18:21 +00:00
Luke Taylor
274658f9b0 SEC-272: Added group tables to test DB. 2007-09-21 15:51:36 +00:00
Luke Taylor
d19fe54c01 Renamed test class to match target (JdbcDaoImpl). 2007-09-21 15:50:23 +00:00
Luke Taylor
400a3b90f0 SEC-232: Additional updates to hierachical roles code from contributor. 2007-09-19 22:10:31 +00:00
Luke Taylor
eb0307bcd9 SEC-557: Reinstate use of default AccessDeniedHandlerImpl for the time being (2.0 branch). 2007-09-19 16:49:18 +00:00
Luke Taylor
477dc308f8 SEC-413: Consistent redirect behaviour between LogoutFilter and AbstractProcessingFilter. (previous commit of AbstractProcessingFilter has an erroneous message). 2007-09-19 16:27:23 +00:00
Luke Taylor
7139cbafbb Removed assertions on response buffer size. 2007-09-19 16:25:31 +00:00
Luke Taylor
dde3803532 Removed assertions on response buffer size. 2007-09-19 16:24:20 +00:00
Luke Taylor
03beaf0777 SEC-448: MD4 password encode implementation. 2007-09-19 15:28:57 +00:00
Luke Taylor
2ef2bfc514 SEC-561: Removed setting of respose buffer size prior to redirect. 2007-09-19 15:17:29 +00:00
Luke Taylor
809c962d3b Corrected method name in comment. 2007-09-19 15:04:30 +00:00
Luke Taylor
fdd3dfc51f Remove explicit commons-lang dependency. 2007-09-19 00:17:04 +00:00
Luke Taylor
2f03000b68 SEC-232: Add role hierarchy contribution. 2007-09-17 22:37:39 +00:00
Luke Taylor
1a4b32e50e Remove unused import. 2007-09-17 22:17:42 +00:00
Luke Taylor
e872823490 SEC-559: Throw an initialization exception if configured truststore file doesn't exist. 2007-09-17 21:29:40 +00:00
Luke Taylor
96eb11aadc SEC-399: Add support for invalidating the existing session on successful authentication. 2007-09-17 15:54:07 +00:00
Luke Taylor
0efa5c3090 SEC-458: implementy hashCode() in PrincipalSid and GrantedAuthoritySid. 2007-09-17 13:10:17 +00:00
Luke Taylor
d79d55c8b6 SEC-8: Changes to LDAP authenticator API to take an authentication object rather than username/password. 2007-09-17 12:28:07 +00:00
Luke Taylor
c7354c125a SEC-417: Fix. Remove hard-coded messages from JdbcDaoImpl to allow internationalized versions for "user not found" etc. 2007-09-16 22:20:08 +00:00
Luke Taylor
8a35f7da75 SEC-558: Combine user mapping implementations into a single interface and make more use of DirContextOperations in SS LDAP APIs. 2007-09-16 18:56:00 +00:00
Luke Taylor
56deb3dd83 SEC-549: Trim whitespace from username submitted with login form. 2007-09-14 14:25:21 +00:00
Luke Taylor
8398e940cf SEC-449: Corrected comment. 2007-09-14 14:18:54 +00:00
Luke Taylor
fdbcbec9d8 SEC-449: Reamed template test class to match tested class. Added test method for case when no attribute value is found. 2007-09-14 14:17:30 +00:00
Luke Taylor
223a597208 SEC-449: Changed role searching to use parent spring ldap template search method. 2007-09-14 14:16:28 +00:00
Luke Taylor
b7d9466f99 SEC-449: Remoned unnecessary declaration of ContextMapper interface. 2007-09-14 14:12:32 +00:00
Luke Taylor
97ef5f389f SEC-449: Remoned unnecessary declaration of ContextMapper interface. 2007-09-14 14:11:57 +00:00
Luke Taylor
d208cf3824 SEC-449: Make LdapUserDetailsMapper a pure ContextMapper so it can be used with LdapTemplate. 2007-09-13 20:42:50 +00:00
Luke Taylor
6d8f92e1b8 Allow an ldif file to be set in the configuration and loaded on initialization. 2007-09-13 20:40:49 +00:00
Luke Taylor
ae40919d13 Tidying up class. 2007-09-12 19:55:52 +00:00
Luke Taylor
c0f5230667 SEC-302: Add rolePrefix property to SecurityContextHolderAwareRequestFilter. 2007-09-11 17:29:47 +00:00
Luke Taylor
6a6bafa219 Make sure test classes which are setting the context clear it in their tearDown methods. 2007-09-11 14:13:50 +00:00
Luke Taylor
c56b8c4117 SEC-471: Allow names of username and password parameters to be customized in AuthenticationProcessingFilter. 2007-09-11 12:12:14 +00:00
Luke Taylor
3326525b65 SEC-368: Tidied up captcha spelling. 2007-09-11 11:16:07 +00:00
Luke Taylor
dd2a46c7ca SEC-368: Tidied up captcha spelling. 2007-09-11 11:11:05 +00:00
Luke Taylor
448e8cfb42 SEC-551: Convert RegExpBasedFilterInvocationDefinitionMap and DaoX509AuthoritiesPopulator to use JDK regexps. Removed ORO dependency from the project. 2007-09-10 23:09:36 +00:00
Luke Taylor
6eb17c8546 SEC-513: Ldap user manager implementation classes changed to use new spring ldap apis. 2007-09-10 21:13:45 +00:00
Luke Taylor
afaa169e97 SEC-449: Test data ldif file for ApacheDS. 2007-09-10 21:09:59 +00:00
Luke Taylor
0503c3e1ab SEC-449: Refactoring towards more use of Spring LDAP. Also borrowed the Spring LDAP integration testing setup which is much better and makes use of the full LDAP stack. There were still problems with using Apache DS's CoreContextFactory (e.g. compare operations) so it is an improvement on that front too. Moved spring ldap to 1.2-RC1 version. 2007-09-10 21:09:02 +00:00
Scott Battaglia
f7815e8da2 SEC-520
added parameter to determine whether to encode the session id or not and an explanation on when it should/should not be used.
2007-09-10 15:11:56 +00:00
Luke Taylor
e7ede68352 Update ldap test base class to use LdapContext by default. 2007-09-07 20:52:03 +00:00
Luke Taylor
ff1f1d8ef5 SEC-449: Rename internal LdapTemplate class to SpringSecurityLdapTemplate to avoid confusion. 2007-09-07 20:49:38 +00:00
Luke Taylor
70239a9769 SEC-513: First check in of user management stuff. 2007-09-07 20:01:46 +00:00
Luke Taylor
9b71b5aa00 SEC-449: Mostly changes to aid moving towards compatibility with spring-ldap. 2007-09-07 19:55:45 +00:00
Luke Taylor
3de8745494 Commented out (another) failing captcha test whose behaviour varies with speed of the build server (makes assumptions about the interval within which certain lines of code are executed). 2007-09-04 01:06:58 +00:00
Luke Taylor
6289503643 Commented out failing captcha test whose behaviour varies with speed of the build server (makes assumptions about the interval within which certain lines of code are executed). 2007-09-03 23:33:13 +00:00
Luke Taylor
15ee5b2364 SEC-540,SEC-541: Changes for maven 2 site generation and use of docbkx. 2007-09-02 13:22:24 +00:00
Luke Taylor
4e452046ec Comment out System.out.println 2007-09-01 14:59:41 +00:00
Ray Krueger
edd7bbeceb Removed repeated downcasting of ServletRequest and ServletResponse 2007-09-01 14:43:09 +00:00
Luke Taylor
b2799985f2 SEC-398: Added patch which uses response wrapper to set context in session on redirect or error. 2007-08-31 20:39:33 +00:00