Commit Graph

5357 Commits

Author SHA1 Message Date
Rob Winch ae6af5d73c SEC-2915: Updated Java Code Formatting 2015-03-25 13:09:18 -05:00
Rob Winch 0a2e496a84 SEC-2915: groovy/gradle spaces->tabs 2015-03-25 13:08:59 -05:00
Rob Winch cf9f58a4ac SEC-2915: XML spaces->tabs 2015-03-25 13:08:52 -05:00
Rob Winch 8105b05dd0 SEC-2782: Migrate guide links include "current" in URL 2015-03-23 09:33:00 -05:00
Rob Winch fbf3672eca SEC-2908: mulitple invocations of http.requetMatchers() properly chains 2015-03-20 15:30:19 -05:00
Rob Winch b262c198d8 SEC-2782: Polish Migrating from 3 to 4 Guide 2015-03-20 14:14:55 -05:00
Rob Winch a18fa3f1db saving updates to migrate 2015-03-16 12:32:58 -05:00
Rob Winch b85ad33aef SEC-2888: Polish 2015-03-13 16:10:39 -05:00
Pascal Gehl 85955015f7 SEC-2888 AntPathRequestMatcher ignores variables in pattern when pattern
finishes with /**
2015-03-13 16:03:08 -05:00
Rob Winch e776a1fd35 SEC-2803: Add HttpStatusEntryPoint 2015-03-11 14:45:59 -05:00
Rob Winch 1da1b8b12f SEC-2892: Added Guides Back to dist 2015-03-11 13:29:18 -05:00
Rob Winch c0438efa6b Update samples pom files 2015-03-11 11:27:50 -05:00
Rob Winch 3adbf53502 SEC-2897: ActiveDirectoryLdapAuthenticationProvider uses bindPrincipal 2015-03-10 16:33:48 -05:00
Rob Winch 9169186d48 SEC-2889: Update documentation to use sameOriginDisabled 2015-03-10 14:48:19 -05:00
Rob Winch 90f0a6243c SEC-2890: Add README.adoc in -dist.zip 2015-03-10 14:40:39 -05:00
Rob Winch 9d0085bb64 SEC-2882: DefaultLoginPageGeneratingFilter match on /login
Previously DefaultLoginPageGeneratingFilter would match on /**/login
which was not ideal since other parts of the application may want to
match on the URL.

Now it matches on /login.
2015-03-10 11:52:26 -05:00
Rob Winch 217152c8fd Polish Http403ForbiddenEntryPoint whitespace 2015-03-10 10:58:58 -05:00
Rob Winch b04388ad62 SEC-2805: Remove unnecessary cast in Http403ForbiddenEntryPoint 2015-03-10 10:58:21 -05:00
Rob Winch 5e2720723a SEC-2884: Fix WebSocket reference link text 2015-03-10 10:51:53 -05:00
Rob Winch dea5723ecc SEC-2782: Finish Migration Guide from 3.x to 4.x 2015-03-09 17:09:00 -05:00
Rob Winch 9b4cbff58c SEC-2782: Additional Updates to Migration Guide from 3.x to 4.x 2015-03-06 17:10:06 -06:00
Rob Winch bed20db905 Remove Unnecessary @Override 2015-02-27 16:18:31 -06:00
Rob Winch ff4e9e6ad4 SEC-2782: Started Migration Guide from 3.x to 4.x 2015-02-27 16:18:18 -06:00
Rob Winch b076df15f1 Next Development Version 2015-02-25 11:35:09 -06:00
Spring Buildmaster 9cd80607cd Next development version 2015-02-25 09:14:27 -08:00
Rob Winch c081faf601 SEC-2871: Polish README.adoc 2015-02-25 09:46:33 -06:00
drdamour ff5a176675 trivial docs fixed a few typos and grammatical errors
I have signed and agree to the terms of the SpringSource Individual Contributor License Agreement.
2015-02-25 00:04:15 -06:00
Rob Winch 62d74aef3d Merge pull request #103 from bcecchinato/fix-logs
Trivial logging fix in saveContext method in HttpSessionSecurityContextRepository
2015-02-25 00:02:44 -06:00
Chris Bonham d579d00892 SEC-2559: Added missing givenName attribute to Person 2015-02-24 23:50:09 -06:00
Rob Winch c0fbd30e65 SEC-2071: Move optional constructor arg last 2015-02-24 23:35:45 -06:00
Henri Tremblay fbb902c9b5 SEC-2071: ActiveDirectoryLdapAuthenticationProvider custom rootDn
Allow to provide a root DN different from the domain
2015-02-24 23:33:42 -06:00
Rob Winch 6fd45df1e4 SEC-2879: Add Test 2015-02-24 23:19:04 -06:00
Michael Cramer 8c0b16820b SEC-2879: JdbcTokenRepositoryImpl updateToken should use lastUsed arg 2015-02-24 23:18:38 -06:00
Marcin Mielnicki 9ea7372405 SEC-2878: Clean imports in UsernamePasswordAuthenticationFilter 2015-02-24 22:53:44 -06:00
Eugene Wolfson 4ca99ef88c SEC-2877: Fix doc typo in index.adoc
Replace "a`" with "a `"
2015-02-24 22:28:07 -06:00
Romain Fromi 8b78194f31 SEC-2876: HttpSecurityBuilder addFilterAfter javadoc before->after 2015-02-24 22:19:50 -06:00
Michael Cramer c8b79289c9 add setter for using a custom name for the rememberMeParameter 2015-02-24 21:45:23 -06:00
Rob Winch cd352f665b SEC-1915: Polish
* Restore default search filter to remain passive
* Check the search filter in setSearchFilter
* Add additional tests
2015-02-24 21:37:49 -06:00
Mateusz Rasiński c54346b690 SEC-1915: Custom ActiveDirectory search filter
Currently the search filter used when retrieving user details is hard coded.

New property in ActiveDirectoryLdapAuthenticationProvider:
- searchFilter - the LDAP search filter to use when searching for authorities,
default to search using 'userPrincipalName' (current) OR 'sAMAccountName'
2015-02-24 21:14:58 -06:00
Rob Winch 5f57e5b0c3 SEC-2873: Remember Me XML Configuration Defaults Should Match Java Config 2015-02-24 20:49:56 -06:00
Rob Winch f198804504 SEC-2825: Polish 2015-02-24 18:12:54 -06:00
Pascal Gehl ef3b9de766 SEC-2825: Add And/Or MessageMatcher implementations 2015-02-24 18:12:00 -06:00
Kazuki Shimizu 67cd8465c3 SEC-2826: Add remember-me-cookie attribute in xml namespace 2015-02-24 17:54:54 -06:00
Rob Winch d2fd852711 SEC-2832: Fix config tests 2015-02-24 17:53:39 -06:00
Rob Winch 76d9ef4ec3 SEC-2872: CsrfAuthenticationStrategy Delay Saving CsrfToken 2015-02-24 17:30:57 -06:00
Rob Winch 98ae03fc40 SEC-2832: Add Tests 2015-02-24 17:30:56 -06:00
Stillglade 310e5bb285 SEC-2832: Update request attributes with new CsrfToken 2015-02-24 17:30:19 -06:00
Rob Winch 440fc0aba1 SEC-2871: Polish README.adoc 2015-02-24 17:01:03 -06:00
shaehnel f0be6e5a61 SEC-2871: readme.txt->README.adoc 2015-02-24 17:00:54 -06:00
Rob Winch d973f5f80c SEC-2078: AbstractPreAuthenticatedProcessingFilter requriesAuthentication support for non-String Principals
Previously, if the Principal returned by getPreAuthenticatedPrincipal was not a String,
it prevented requiresAuthentication from detecting when the Principal was the same.
This caused the need to authenticate the user for every request even when the Principal
did not change.

Now requiresAuthentication will check to see if the result of
getPreAuthenticatedPrincipal is equal to the current Authentication.getPrincipal().
2015-02-24 16:37:55 -06:00