Commit Graph

987 Commits

Author SHA1 Message Date
Ben Alex a5ffda7369 SEC-63: Do not return an absolute URL unless switching from HTTP to HTTPS. 2005-10-21 08:00:15 +00:00
Ben Alex c6d5363e5d SEC-60: Make method more friendly towards Hibernate detached object. Please note my comments in the JIRA task, as I believing calling toString() is not an unreasonable expectation. 2005-10-21 07:53:34 +00:00
Ben Alex b19d1f9d77 SEC-59: Fix NullPointerException caused by unnecessary check of application context path when a singleton is defined. 2005-10-21 07:46:06 +00:00
Ben Alex 55e552a846 Fix incorrect packages. 2005-10-21 07:38:57 +00:00
Ben Alex d49198a944 SEC-43: Eliminate id column. 2005-10-21 07:32:48 +00:00
Ben Alex 41202112bc SEC-37: Only update HttpSession if SecurityContext has actually been changed. 2005-10-21 07:26:16 +00:00
Ben Alex 494e35f009 Jalopy styling. 2005-10-21 07:23:33 +00:00
Ben Alex e1c7a6bc86 Few more.... 2005-10-21 06:34:07 +00:00
Ben Alex 76fe024302 Doc updates. 2005-10-21 01:24:33 +00:00
Luke Taylor 24a78be159 Corrected link in Javadoc. 2005-10-19 21:19:16 +00:00
Luke Taylor c065c46668 Javadoc correction: ContextHolder -> SecurityContextHolder 2005-10-18 15:44:22 +00:00
Luke Taylor df4b8f602f Javadoc correction: SecureContext -> SecurityContext 2005-10-18 15:43:41 +00:00
Ben Alex fc8ed33f64 Reduce to 50% size. 2005-10-17 12:27:54 +00:00
Carlos Sanchez a7e977c31a Use jars uploaded to ibiblio 2005-10-06 21:01:58 +00:00
Carlos Sanchez f6487edf90 Removed uneeded jboss-jmx 2005-10-06 20:56:04 +00:00
Carlos Sanchez b2363dfe07 SEC-62 Add maven 2 support 2005-10-06 20:53:08 +00:00
Carlos Sanchez 789b63090f SEC-57 Make build compatible with maven 1.1 2005-10-06 20:24:07 +00:00
Carlos Sanchez 29e3daaab6 Removed redundant groupId (inherited from parent) 2005-10-06 20:01:29 +00:00
Ray Krueger a39339674e login.config.url should be set to a url, not a file path
The System property java.security.auth.login.config will only be used if the useSystemProperty option is enabled. This is the default.
2005-09-26 14:14:42 +00:00
Scott McCrory bc14dd62db Fixed CVS line break 2005-09-25 22:49:45 +00:00
Scott McCrory 4717b64b83 Updated Siteminder auth processing filter and added test case. As of this weekend, this version is in production at a large financial org. 2005-09-25 22:48:33 +00:00
Mark St. Godard 9b898e84c4 Added Java 5 Annotations version of Contacts sample (contacts-tiger).
Note: I have added a pre goal to add the source dir of  the original Contacts example.

I also added an exclude on the main project.properties for the attributes sample, as the Commons Attributes plugin causes issues with Java 5 source compilation.

The Annotations version will eventually replace the Commons Attributes approach, for now those users will need to manually build the attributes example.
2005-09-25 05:58:49 +00:00
Ben Alex 2c539a03d2 Add Seraph link. 2005-09-23 01:14:39 +00:00
Ben Alex 0f5e9ad372 Fix NPE. Thanks to Tom Dunstan. 2005-09-22 01:49:12 +00:00
Ben Alex f5741962ed Add createSessionAllowed property, which should be set to false to avoid unnecessary session creation. 2005-09-22 00:54:27 +00:00
Mark St. Godard 84a723d035 Adding more Common User problems to FAQ 2005-09-21 01:53:35 +00:00
Marc-Antoine Garrigue 60d3b6505b Finalizing the validation, entry point and channel processor concerning captchas. Replacing the Thread.sleep() in captchaChannelProcessorTest to avoid the build break issue. 2005-09-20 12:24:47 +00:00
Mark St. Godard 6f3e92e2e4 started adding Common User Problems to the FAQ..... I will add more as well go.. I will also add the Change Password and other usage patterns such as Disabling and Event publishing, etc 2005-09-20 02:31:23 +00:00
Mark St. Godard fb3f4af3b2 when extracting the original user, fix by referencing by the interface (UserDetail) rather than the concrete class (User) 2005-09-20 02:28:01 +00:00
Mark St. Godard 24394b7b2b added fix to preserve custom UserDetails implementations (Matt DeHoust fix recommendation) 2005-09-19 02:22:44 +00:00
Ben Alex d44b570087 Disable failing tests until Marc-Antoine has a chance to look at them. 2005-09-18 22:38:37 +00:00
Ben Alex ae9e7733db Fix broken tests. 2005-09-18 22:38:05 +00:00
Ben Alex 1455029435 Refactor lifecycle methods into separate files, so that subclasses can extend specific classes or interfaces to achieve the desired subset of lifecycle capabilities. 2005-09-15 08:13:09 +00:00
Ben Alex be578c99d1 Add setId(Long) back into class, as Hibernate 3.0.5 gives Lazy Initialization Exception if using field="access" when trying to do a getId() on a lazily loaded association. 2005-09-09 06:10:13 +00:00
Ben Alex ddd69c751f Automatically ensure Validators accessing DAOs receive detached instances. Also provide DetachmentContextHolder ThreadLocal, so that this behaviour can be specified whenever required. 2005-09-09 03:59:34 +00:00
Ben Alex 1119b665f8 Make createOrUpdate(E) delegate to Manager methods, not to the DAO method of the same name. 2005-09-09 03:58:04 +00:00
Ben Alex 3794c608ad Remove setId(Long). This means access="field" needs to be used with Hibernate. 2005-09-09 03:56:58 +00:00
Ben Alex 35ca25f085 BasicAuthenticationProcessingFilter no longer creates HttpSession via WebAuthenticationDetails call. 2005-09-08 11:15:48 +00:00
Ben Alex c64a3770de Prove that 403 errors are handled by web.xml <error-page>. 2005-09-08 10:20:34 +00:00
Ben Alex c7dcceb05c Do not setAuthenticated(false) in the event of a public (unsecured) invocation. Thanks to Joseph Dane for reporting this issue on acegisecurity-developer on 3 September 2005. 2005-09-08 09:32:24 +00:00
Mark St. Godard 1bd4d0beca Started adding Java 5 Annotation documentation, including example configuration and usage. 2005-09-05 05:56:39 +00:00
Mark St. Godard e850849be5 Added Java 5 Annotations version of the BankService sample. Note: This project requires the Secured annotation which is in "core-tiger"... make sure you have built and installed the acegi-security-tiger-0.9.0-SNAPSHOT.jar in your local maven repo. 2005-09-05 04:38:45 +00:00
Ben Alex 61df8e9f7b Support multiple SessionFactory instances (not just one). 2005-09-04 23:08:02 +00:00
Mark St. Godard 3f24824f66 updated config, added switchUserProcessingFilter to the filter chain, added the ROLE_SUPERVISOR the ability to switch to other users (i.e. ROLE_USER)
For example: 'marissa' can login,  goto the /switchUser.jsp, then assume the role of another user such as 'scott'. marissa will then see scotts contacts, etc.
Then marissa can goto the /exitUser.jsp, and go back to 'marissa'

This is the similar to the Unix 'su' analogy that Ben made
2005-09-04 20:09:56 +00:00
Mark St. Godard fce510fa9f added core-tiger 2005-09-04 20:07:12 +00:00
Mark St. Godard 230d1946b9 added switchUserProcessingFilter config, not added to filter chain (yet) 2005-09-03 21:45:32 +00:00
Mark St. Godard 3dcea7ace0 initial pages for user switching 2005-09-03 21:44:05 +00:00
Mark St. Godard 486bbee35d added context path to redirect 2005-09-03 21:43:08 +00:00
Mark St. Godard 9d359780d9 finish user context switch event publishing 2005-09-03 20:24:35 +00:00
Mark St. Godard 4ae14cc7bc ignore target 2005-08-25 03:07:12 +00:00