Luke Taylor
|
1042305cfe
|
Renamed web.wrapper to web.servletapi. Added some package.html files.
|
2009-10-05 16:59:37 +00:00 |
|
Luke Taylor
|
673cf300fb
|
SEC-1229: Refactoring to remove package cycles.
|
2009-10-05 16:40:32 +00:00 |
|
Luke Taylor
|
acf13c74ca
|
SEC-1229: Refactored authentication.concurrent in core, moving classes into core.session
|
2009-10-05 15:51:00 +00:00 |
|
Luke Taylor
|
2b89ebdfbb
|
SEC-1229: Further doc and mods to namespace config/naming to make it more consistent
|
2009-10-03 16:08:51 +00:00 |
|
Luke Taylor
|
dd3b9553a0
|
SEC-1229: Partial doc update
|
2009-10-02 18:48:19 +00:00 |
|
Luke Taylor
|
073198886d
|
SEC-1255: Modified UrlUtils. Full request URL for redirects uses the requestURI (which is encoded). The URL for path comparsions is built using the servletpath, as before.
|
2009-10-02 17:29:43 +00:00 |
Scott Battaglia
|
df9e2eac9e
|
NOJIRA
updated license header and removed unneeded interface
|
2009-10-01 16:50:00 +00:00 |
|
Luke Taylor
|
abba569282
|
Tidying.
|
2009-09-30 15:53:46 +00:00 |
|
Luke Taylor
|
40759ab232
|
SEC-925: BasicLookupStrategy - support for schema qualifier. Added setters for ACL SQL statements.
|
2009-09-30 12:32:22 +00:00 |
|
Luke Taylor
|
c34d719004
|
SEC-1252: Remove 2.0.x schemas from 3.0. Removed files and updated spring.schemas to remove 2.0.x versions
|
2009-09-29 17:56:01 +00:00 |
|
Luke Taylor
|
2a1430f1ce
|
SEC-1229: Removed legacy concurrency classes
|
2009-09-29 16:18:25 +00:00 |
|
Luke Taylor
|
7247902911
|
SEC-1229: Updated sample and itest namespace concurrency configs.
|
2009-09-29 16:18:01 +00:00 |
|
Luke Taylor
|
ebada9fd12
|
SEC-1229: Added support for parsing error URL in session-management
|
2009-09-29 16:17:05 +00:00 |
|
Luke Taylor
|
203cc5a8dc
|
SEC-1229: Added error-url to concurrency-control element and changed "exception-if-max-exceeded" to "error-if-max-exceeded"
|
2009-09-29 16:16:06 +00:00 |
|
Luke Taylor
|
1ead8472d1
|
SEC-1229: Added failure handler to the SessionManagementFilter to deal with concurrent login errors.
|
2009-09-29 16:14:31 +00:00 |
|
Luke Taylor
|
bf39a5bb36
|
Added extra logging.
|
2009-09-29 16:13:16 +00:00 |
|
Luke Taylor
|
7109b7e183
|
Import cleaning.
|
2009-09-29 00:30:29 +00:00 |
|
Luke Taylor
|
aa153681bf
|
SEC-1229: Added session-management element to namespace and refactored existing session-related attributes and concurrency control. Refactored <http> parsing code to split it up into more manageable units.
|
2009-09-29 00:29:09 +00:00 |
|
Luke Taylor
|
b8c0bb71f1
|
Updated to Spring 3 RC1
|
2009-09-29 00:27:39 +00:00 |
|
Luke Taylor
|
9639340fef
|
SEC-1049: RoleHierarchy in SidRetrievalStrategy. Added optional RoleHierarchy injection to SidRetrievalStrategyImpl
|
2009-09-16 19:59:37 +00:00 |
|
Luke Taylor
|
9374bddceb
|
Added test class for AccessControlListTag.
|
2009-09-16 19:20:07 +00:00 |
|
Luke Taylor
|
9f76db0606
|
SEC-1022: Remove use of static methods/initializers in Acl Permissions. Added extra constructors to DefaultPermissionFactory to allow injection of custom permissions to the registry.
|
2009-09-16 18:42:44 +00:00 |
|
Luke Taylor
|
24155d4abe
|
SEC-1022: Remove use of static methods/initializers in Acl Permissions. Added setter for PermissionFactory to AclPermissionEvaluator
|
2009-09-16 15:32:17 +00:00 |
|
Luke Taylor
|
80dc0388c7
|
Fork compiler to attempt to stop build server errors
|
2009-09-16 13:50:57 +00:00 |
|
Luke Taylor
|
937e370fb4
|
SEC-1022: Minor reformatting.
|
2009-09-16 12:51:11 +00:00 |
|
Luke Taylor
|
3f70d79df5
|
SEC-1022: Remove use of static methods/initializers in Acl Permissions. Converted PermissionFactory to a strategy which is used to convert integers and names to Permission instances.
|
2009-09-16 12:45:53 +00:00 |
|
Luke Taylor
|
731402e9f5
|
SEC-525: [PATCH] Add AccessCheckerTag based on URL resource access permissions. Added functionality to "authorize" tag to allow evaluation of whether a particual url is accessible to the user. Uses a WebInvocationPrivilegeEvaluator registered in the application context.
|
2009-09-16 00:23:13 +00:00 |
|
Luke Taylor
|
1c4a809e09
|
SEC-1245: Add role hierarchy support to expression handlers. Done.
|
2009-09-15 17:17:21 +00:00 |
|
Luke Taylor
|
b531a81176
|
SEC-1246: Introduce EL-based authorization tag. Added optional access expression to authorize tag.
|
2009-09-15 16:34:05 +00:00 |
|
Luke Taylor
|
283aa1b34b
|
Fixed section boundaries in core-filters doc
|
2009-09-15 15:58:05 +00:00 |
|
Luke Taylor
|
e7486fc203
|
Removed Ordered interface from Http403EntryPoint (unused).
|
2009-09-14 16:06:15 +00:00 |
|
Luke Taylor
|
897960cd70
|
Add expression string to failed expression evaluation exception message to help clarify the context.
|
2009-09-13 22:29:07 +00:00 |
|
Luke Taylor
|
27be04f5be
|
SEC-1223: Remove ntlm module from pom
|
2009-09-13 22:13:24 +00:00 |
|
Luke Taylor
|
d52a806a1d
|
SEC-1233: Removed NTLM support for 3.0
|
2009-09-13 21:55:14 +00:00 |
|
Luke Taylor
|
40cf50fc98
|
SEC-1148: Javadoc.
|
2009-09-13 21:51:54 +00:00 |
|
Luke Taylor
|
ff78ec00f7
|
SEC-1226: Additional Javadoc.
|
2009-09-13 21:22:17 +00:00 |
|
Luke Taylor
|
23c8f479b8
|
SEC-1226: Renamed useRelativeContext to contextRelative to match corresponding flag name in Spring Framework.
|
2009-09-13 20:45:38 +00:00 |
|
Luke Taylor
|
593d2e227a
|
SEC-1226: Renamed useRelativeContext to contextRelative to match corresponding flag name in Spring Framework.
|
2009-09-13 20:44:52 +00:00 |
|
Luke Taylor
|
9c7423599e
|
SEC-1167: Extended SavedRequest interface to allow it to be used by wrapper. Removed null checks in wrapper, as the SavedRequest cannot now be null.
|
2009-09-13 16:27:35 +00:00 |
|
Luke Taylor
|
4064b7b4f6
|
SEC-1167: Introduce more flexible SavedRequest handling. Introduced interface for SavedRequest.
|
2009-09-13 15:03:14 +00:00 |
|
Luke Taylor
|
71ab83255d
|
SEC-1242: Check that RememberMeServices is an instance of AbstractRememberMeServices before attempting to inject a UserDetailsService.
|
2009-09-11 21:10:16 +00:00 |
|
Luke Taylor
|
acd10dd716
|
SEC-1243: Make determineTargetUrl protected.
|
2009-09-11 20:48:41 +00:00 |
|
Luke Taylor
|
fa7404741b
|
SEC-1167: Introduce more flexible SavedRequest handling. Add namespace support for a custom RequestCache through the request-cache element.
|
2009-09-09 21:40:12 +00:00 |
|
Luke Taylor
|
aa2999caec
|
SEC-1238: Removed portlet module
|
2009-09-09 20:54:10 +00:00 |
|
Luke Taylor
|
1d00b92d25
|
Removed portlet sample
|
2009-09-09 20:53:19 +00:00 |
|
Luke Taylor
|
aec730ae7e
|
SEC-1238: Disable portlet module
|
2009-09-09 20:03:00 +00:00 |
|
Luke Taylor
|
6851655ea9
|
SEC-1177: MethodInvocationUtils Returns Null With Valid Method String and Class. Added very simple checking of declared methods on class.
|
2009-09-09 19:49:44 +00:00 |
|
Luke Taylor
|
ef2df77889
|
SEC-1239: Special characters in JAAS config file location. Fix - convert Resource to a File before obtaining the URL from it. The URL.toString() obtained this way is different from the one obtained from Resource.getURL().toString().
|
2009-09-09 17:41:35 +00:00 |
|
Luke Taylor
|
6640eab9dc
|
SEC-1240: Added {ssha} support to PasswordEncoderParser.
|
2009-09-09 12:12:29 +00:00 |
|
Luke Taylor
|
ac4e7bbadb
|
SEC-1241: Make sure saved request is removed after a match.
|
2009-09-09 10:11:45 +00:00 |