Ben Alex
a5ffda7369
SEC-63: Do not return an absolute URL unless switching from HTTP to HTTPS.
2005-10-21 08:00:15 +00:00
Ben Alex
c6d5363e5d
SEC-60: Make method more friendly towards Hibernate detached object. Please note my comments in the JIRA task, as I believing calling toString() is not an unreasonable expectation.
2005-10-21 07:53:34 +00:00
Ben Alex
b19d1f9d77
SEC-59: Fix NullPointerException caused by unnecessary check of application context path when a singleton is defined.
2005-10-21 07:46:06 +00:00
Ben Alex
55e552a846
Fix incorrect packages.
2005-10-21 07:38:57 +00:00
Ben Alex
d49198a944
SEC-43: Eliminate id column.
2005-10-21 07:32:48 +00:00
Ben Alex
41202112bc
SEC-37: Only update HttpSession if SecurityContext has actually been changed.
2005-10-21 07:26:16 +00:00
Ben Alex
494e35f009
Jalopy styling.
2005-10-21 07:23:33 +00:00
Ben Alex
e1c7a6bc86
Few more....
2005-10-21 06:34:07 +00:00
Ben Alex
76fe024302
Doc updates.
2005-10-21 01:24:33 +00:00
Luke Taylor
24a78be159
Corrected link in Javadoc.
2005-10-19 21:19:16 +00:00
Luke Taylor
c065c46668
Javadoc correction: ContextHolder -> SecurityContextHolder
2005-10-18 15:44:22 +00:00
Luke Taylor
df4b8f602f
Javadoc correction: SecureContext -> SecurityContext
2005-10-18 15:43:41 +00:00
Ben Alex
fc8ed33f64
Reduce to 50% size.
2005-10-17 12:27:54 +00:00
Carlos Sanchez
a7e977c31a
Use jars uploaded to ibiblio
2005-10-06 21:01:58 +00:00
Carlos Sanchez
f6487edf90
Removed uneeded jboss-jmx
2005-10-06 20:56:04 +00:00
Carlos Sanchez
b2363dfe07
SEC-62 Add maven 2 support
2005-10-06 20:53:08 +00:00
Carlos Sanchez
789b63090f
SEC-57 Make build compatible with maven 1.1
2005-10-06 20:24:07 +00:00
Carlos Sanchez
29e3daaab6
Removed redundant groupId (inherited from parent)
2005-10-06 20:01:29 +00:00
Ray Krueger
a39339674e
login.config.url should be set to a url, not a file path
...
The System property java.security.auth.login.config will only be used if the useSystemProperty option is enabled. This is the default.
2005-09-26 14:14:42 +00:00
Scott McCrory
bc14dd62db
Fixed CVS line break
2005-09-25 22:49:45 +00:00
Scott McCrory
4717b64b83
Updated Siteminder auth processing filter and added test case. As of this weekend, this version is in production at a large financial org.
2005-09-25 22:48:33 +00:00
Mark St. Godard
9b898e84c4
Added Java 5 Annotations version of Contacts sample (contacts-tiger).
...
Note: I have added a pre goal to add the source dir of the original Contacts example.
I also added an exclude on the main project.properties for the attributes sample, as the Commons Attributes plugin causes issues with Java 5 source compilation.
The Annotations version will eventually replace the Commons Attributes approach, for now those users will need to manually build the attributes example.
2005-09-25 05:58:49 +00:00
Ben Alex
2c539a03d2
Add Seraph link.
2005-09-23 01:14:39 +00:00
Ben Alex
0f5e9ad372
Fix NPE. Thanks to Tom Dunstan.
2005-09-22 01:49:12 +00:00
Ben Alex
f5741962ed
Add createSessionAllowed property, which should be set to false to avoid unnecessary session creation.
2005-09-22 00:54:27 +00:00
Mark St. Godard
84a723d035
Adding more Common User problems to FAQ
2005-09-21 01:53:35 +00:00
Marc-Antoine Garrigue
60d3b6505b
Finalizing the validation, entry point and channel processor concerning captchas. Replacing the Thread.sleep() in captchaChannelProcessorTest to avoid the build break issue.
2005-09-20 12:24:47 +00:00
Mark St. Godard
6f3e92e2e4
started adding Common User Problems to the FAQ..... I will add more as well go.. I will also add the Change Password and other usage patterns such as Disabling and Event publishing, etc
2005-09-20 02:31:23 +00:00
Mark St. Godard
fb3f4af3b2
when extracting the original user, fix by referencing by the interface (UserDetail) rather than the concrete class (User)
2005-09-20 02:28:01 +00:00
Mark St. Godard
24394b7b2b
added fix to preserve custom UserDetails implementations (Matt DeHoust fix recommendation)
2005-09-19 02:22:44 +00:00
Ben Alex
d44b570087
Disable failing tests until Marc-Antoine has a chance to look at them.
2005-09-18 22:38:37 +00:00
Ben Alex
ae9e7733db
Fix broken tests.
2005-09-18 22:38:05 +00:00
Ben Alex
1455029435
Refactor lifecycle methods into separate files, so that subclasses can extend specific classes or interfaces to achieve the desired subset of lifecycle capabilities.
2005-09-15 08:13:09 +00:00
Ben Alex
be578c99d1
Add setId(Long) back into class, as Hibernate 3.0.5 gives Lazy Initialization Exception if using field="access" when trying to do a getId() on a lazily loaded association.
2005-09-09 06:10:13 +00:00
Ben Alex
ddd69c751f
Automatically ensure Validators accessing DAOs receive detached instances. Also provide DetachmentContextHolder ThreadLocal, so that this behaviour can be specified whenever required.
2005-09-09 03:59:34 +00:00
Ben Alex
1119b665f8
Make createOrUpdate(E) delegate to Manager methods, not to the DAO method of the same name.
2005-09-09 03:58:04 +00:00
Ben Alex
3794c608ad
Remove setId(Long). This means access="field" needs to be used with Hibernate.
2005-09-09 03:56:58 +00:00
Ben Alex
35ca25f085
BasicAuthenticationProcessingFilter no longer creates HttpSession via WebAuthenticationDetails call.
2005-09-08 11:15:48 +00:00
Ben Alex
c64a3770de
Prove that 403 errors are handled by web.xml <error-page>.
2005-09-08 10:20:34 +00:00
Ben Alex
c7dcceb05c
Do not setAuthenticated(false) in the event of a public (unsecured) invocation. Thanks to Joseph Dane for reporting this issue on acegisecurity-developer on 3 September 2005.
2005-09-08 09:32:24 +00:00
Mark St. Godard
1bd4d0beca
Started adding Java 5 Annotation documentation, including example configuration and usage.
2005-09-05 05:56:39 +00:00
Mark St. Godard
e850849be5
Added Java 5 Annotations version of the BankService sample. Note: This project requires the Secured annotation which is in "core-tiger"... make sure you have built and installed the acegi-security-tiger-0.9.0-SNAPSHOT.jar in your local maven repo.
2005-09-05 04:38:45 +00:00
Ben Alex
61df8e9f7b
Support multiple SessionFactory instances (not just one).
2005-09-04 23:08:02 +00:00
Mark St. Godard
3f24824f66
updated config, added switchUserProcessingFilter to the filter chain, added the ROLE_SUPERVISOR the ability to switch to other users (i.e. ROLE_USER)
...
For example: 'marissa' can login, goto the /switchUser.jsp, then assume the role of another user such as 'scott'. marissa will then see scotts contacts, etc.
Then marissa can goto the /exitUser.jsp, and go back to 'marissa'
This is the similar to the Unix 'su' analogy that Ben made
2005-09-04 20:09:56 +00:00
Mark St. Godard
fce510fa9f
added core-tiger
2005-09-04 20:07:12 +00:00
Mark St. Godard
230d1946b9
added switchUserProcessingFilter config, not added to filter chain (yet)
2005-09-03 21:45:32 +00:00
Mark St. Godard
3dcea7ace0
initial pages for user switching
2005-09-03 21:44:05 +00:00
Mark St. Godard
486bbee35d
added context path to redirect
2005-09-03 21:43:08 +00:00
Mark St. Godard
9d359780d9
finish user context switch event publishing
2005-09-03 20:24:35 +00:00
Mark St. Godard
4ae14cc7bc
ignore target
2005-08-25 03:07:12 +00:00