Christopher Pelloux
9de369c25f
SEC-2800 Documentation typo in class name
2014-12-23 09:15:24 -06:00
Rob Winch
bf2d2d4597
SEC-2773: Add Test for static delegatingApplicationListener
2014-12-01 12:07:07 -06:00
Oliver Gierke
c05f27af6c
SEC-2773: Prevent premature container initialization in WebSecurityConfiguration.
...
Changed the bean definition method for the DelegatingApplicationListener
to be static to avoid the need to instantiate the configuration class which
caused further premature initializations to satisfy the dependencies
expressed in setFilterChainProxySecurityConfigurer(…).
2014-12-01 12:07:05 -06:00
Rob Winch
cdac4d990b
SEC-2747: Remove spring-core dependency from spring-security-crypto
2014-11-20 16:28:06 -06:00
Rob Winch
db66843e0b
SEC-2749: CsrfConfigurer.requireCsrfProtectionMatcher correct null check
2014-11-20 14:42:53 -06:00
Rob Winch
c36cc88ac4
SEC-2150: Support class level annotations on Spring Data Repositories
2014-11-20 12:17:47 -06:00
Rob Winch
7d82349b1e
SEC-2150: Add tests to verify JSR-250 Spec behavior
2014-11-20 12:17:44 -06:00
Rob Winch
b6ab9c85e9
SEC-2682: DelegatingSecurityContextRunnable/Callable delegate toString()
2014-11-20 11:51:26 -06:00
Rob Winch
29a8da4aa6
SEC-2574: Fix Bundlr
2014-11-20 11:10:58 -06:00
Rob Winch
b71989ecde
SEC-2574: JavaConfig default SessionRegistry processes SessionDestroyedEvents
2014-11-19 17:10:14 -06:00
Rob Winch
eeef91498a
SEC-2674: Documentation refers to httpStrictTransportSecurity() instead of hsts()
2014-11-19 13:33:27 -06:00
Spring Buildmaster
91bf099b01
Next development version
2014-08-15 11:20:59 -07:00
Rob Winch
137589325d
SEC-2547: Update to cas-client-core-3.3.3
2014-08-15 12:42:07 -05:00
Rob Winch
0a184a8d79
SEC-2697: Fix logging of Spring Version Check
2014-08-15 12:41:26 -05:00
Rob Winch
2cb99f0791
SEC-2688: CAS Proxy Ticket Authentication uses Service for host & port
2014-08-11 15:20:58 -05:00
Rob Winch
d85a0a20bc
SEC-2595: @EnableGlobalMethodSecurity AspectJ tweaks for Spring 3.2.x
2014-07-29 09:39:55 -05:00
Rob Winch
0a45d3170c
SEC-2595: @EnableGlobalMethodSecurity AspectJ fixes
2014-07-25 16:27:49 -05:00
Rob Winch
89c5c56849
SEC-2599: HttpSessionEventPublisher get required ApplicationContext
...
In order to get better error messages (avoid NullPointerException) the
HttpSessionEventPublisher now gets the required ApplicationContext which
throws an IllegalStateException with a good error message.
2014-07-22 09:20:38 -05:00
Rob Winch
47acf17323
SEC-2588: Javadoc fix channelSecurity->requiresChannel
2014-07-21 14:23:47 -05:00
Rob Winch
52c585aef1
SEC-2665: Fix samples/ldap-jc link in reference
2014-07-21 14:21:05 -05:00
Rob Winch
89d80ed5c9
SEC-2683: Correct spelling of assignamble in AuthenticationPrincipalResolver Exception
2014-07-18 13:57:40 -05:00
Mirko Zeibig
85a37bdc02
SEC-2656: Fix <frame-options> with whitelist strategy
2014-06-18 09:07:41 -05:00
Rob Winch
fb1f2dc888
Next development version ldap/pom.xml
2014-06-18 09:04:48 -05:00
Rob Winch
d5842f949b
SEC-2657: Test for multi dynamic ports for LDAP Java Config
2014-06-17 17:25:40 -05:00
Rob Winch
3e3d819526
SEC-2660: Move config integration-test *.groovy to groovy source folder
2014-06-17 17:23:18 -05:00
Rob Winch
143c513f5c
SEC-2659: ApacheDSContainer fails on import multiple ldif
2014-06-17 17:20:09 -05:00
Rob Winch
8eb89e3f12
SEC-2658: Java Config triggers usePasswordAttrCompare to be set
2014-06-17 17:11:20 -05:00
Rob Winch
bdde468e7d
SEC-2657: LdapAuthenticationProviderConfigurer find available port
2014-06-17 16:55:38 -05:00
Rob Winch
f574f2a2ac
SEC-2618: LdapAuthenticationProviderConfigurer passwordAttribute null check
...
If LdapAuthenticationProviderConfigurer passwordAttribute is null, do not
set on the PasswordComparisonAuthenticator
2014-06-17 16:52:04 -05:00
Rob Winch
439a15b108
SEC-2647: IntelliJ testSourceDirs
2014-06-17 16:40:43 -05:00
Rob Winch
44fbf678bb
Fix jdbc-jc to work with tomcat gradle plugin
...
It is necessary to ensure that src/main/webapp exists to ensure the
application starts with the Tomcat Gradle Plugin.
This commit adds a Manifest file to src/main/webapp/META-INF to ensure
that git contains the otherwise empty directory.
2014-06-13 12:24:45 -05:00
Rob Winch
9c94ef358d
SEC-2617: Add JSTL to sample poms
2014-06-12 15:07:50 -05:00
Rob Winch
655ad90813
SEC-2617: Fix JSTL Samples
2014-06-12 12:10:20 -05:00
Rob Winch
a0ee80bc61
SEC-2650: Fix Jetty Warn NoInitialContextException on shutdown
2014-06-12 12:10:08 -05:00
Rob Winch
6b977d9b4b
SEC-2649: Update to Tomcat 7.0.54
2014-06-12 12:09:58 -05:00
Rob Winch
7ea79bacbc
SEC-2648: Update to gradle-tomcat-plugin:1.2.3 for samples
2014-06-12 12:09:49 -05:00
Rob Winch
fa177a22b1
SEC-2647: Add integration test classpath in IntelliJ
2014-06-12 12:09:35 -05:00
Rob Winch
b9fbc568fb
SEC-2646: Update to Gradle 1.12
2014-06-12 12:09:21 -05:00
Spring Buildmaster
293e3e97ae
Next development version
2014-05-21 14:27:51 -07:00
Rob Winch
08ec5797db
SEC-2607: CAS Server logouts out synchronously
2014-05-21 15:43:05 -05:00
Rob Winch
b20438562d
SEC-2579: Ignore springio props in release checks
2014-05-21 14:04:18 -05:00
Rob Winch
d4e26864d9
SEC-2606: ApacheDSServerIntegrationTests scan for available port
2014-05-21 06:49:00 -05:00
Rob Winch
519d85877c
SEC-2603: Fix config groovy integration tests
2014-05-20 23:14:11 -05:00
Rob Winch
f31a5c5411
SEC-2472: Support LDAP crypto PasswordEncoder
2014-05-20 23:13:07 -05:00
Rob Winch
77b9209640
SEC-2579: Remove duplicate snapshot repo and dependencies closure
2014-05-19 15:58:04 -05:00
Rob Winch
ae39a4dcdd
SEC-2579: Polish so that platformVersion has a default
2014-05-19 15:33:30 -05:00
Andy Wilkinson
f37e414442
SEC-2579: Update Spring IO plugin configuration
...
- Upgrade to 0.0.3.RELEASE of the plugin
- Declare a dependency in the springIoVersions configuration on the
Platform’s platform-versions artifact. An external property is used to
provide the version of this artifact. This means that the build script
does not need to refer to a snapshot artifact (the only version
available at the time of writing) and also breaks a circular
dependency between Spring Security (a project that’s part of the
Platform) and the Platform itself.
- The plugin applied and the libs-snapshot repository is added only
if the external property is specified. This removes the possibility
of a release or milestone being shipped with a snapshot dependency
(unless the release build is performed with -PplatformVersion=foo).
2014-05-19 15:25:57 -05:00
Andy Wilkinson
be687d6a84
SEC-2600: Remove unused import
2014-05-19 12:28:05 -05:00
Rob Winch
d6b81abcf2
SEC-2578: HttpSessionSecurityContextRepository traverses HttpServletResponseWrapper
2014-05-02 15:06:28 -05:00
Rob Winch
bf918df7a3
SEC-2543: Logout with CSRF enabled requires POST by default
2014-05-02 11:17:57 -05:00