Ben Alex
c6ea734d8f
SEC-589: Fine-tune NotFoundException handling and JavaDocs generally.
2008-04-05 08:07:20 +00:00
Ben Alex
340020ad3a
SEC-655: Evict from the cache any children ACLs of the ACL being updated.
2008-04-05 06:17:05 +00:00
Ben Alex
5cf5140029
SEC-527: Correct serialization issues with EH-CACHE.
2008-04-05 05:58:11 +00:00
Ben Alex
f5a464bc39
Make compile Java 1.4 compatible (no autoboxing).
2008-04-05 05:17:19 +00:00
Ben Alex
8f645f97f7
Improve toString() method to use Class.getName().
2008-04-05 04:05:07 +00:00
Ben Alex
833b76c011
SEC-676: Remove child ACLs from cache during delete.
2008-04-05 03:42:16 +00:00
Ben Alex
1036074d26
More robust null handling in equals(Object) method.
2008-04-05 03:41:25 +00:00
Ben Alex
af9715c168
SEC-697: Add setOwner(Sid) to MutableAcl interface.
2008-04-05 03:08:45 +00:00
Ben Alex
337155f0ea
SEC-602: Retrieve true underlaying class, properly handling CGLIB enhanced versions.
2008-04-05 02:46:27 +00:00
Luke Taylor
e5956c2935
Added Michael's updated petclinic tutorial
2008-04-04 23:03:13 +00:00
Luke Taylor
a43d054bd7
Removed comment about status checking as it is not entirely correct and misleads people.
2008-04-04 19:40:28 +00:00
Ben Alex
bf41423b5b
Various modest documentation improvements.
2008-04-04 00:49:34 +00:00
Luke Taylor
b7188b11d8
Removed reference to Spring WS in docbook xsl
2008-04-03 14:23:16 +00:00
Luke Taylor
d5a751e784
Added log4j dependency
2008-04-01 19:14:41 +00:00
Luke Taylor
9c1be03d44
Added excludeDependencies to pom.xml to prevent core classes from being bundled into core-tiger jar
2008-04-01 19:03:37 +00:00
Ben Alex
f7ae69880c
Minor tweaking so the tutorial is a little more illustrative of the present namespace capabilities.
2008-04-01 17:15:31 +00:00
Luke Taylor
21e83e8364
[maven-release-plugin] prepare for next development iteration
2008-04-01 15:03:29 +00:00
Luke Taylor
91ed7dceb6
[maven-release-plugin] prepare release release_2_0_0_RC1
2008-04-01 15:01:30 +00:00
Luke Taylor
3ef5833996
Fixed link
2008-04-01 14:35:10 +00:00
Luke Taylor
ca500db43e
minor readme corrections
2008-04-01 14:33:37 +00:00
Luke Taylor
3cb504fa95
Fixed jdk 1.4 compatibility issues
2008-04-01 14:32:31 +00:00
Luke Taylor
4d306c2c1e
Fix spring-portlet dep at 2.0.8
2008-04-01 12:43:08 +00:00
Luke Taylor
e05d1da102
Refactored AuthenticationUserDetailsService to userdetails package as it isn't preauth specific
2008-03-31 23:08:30 +00:00
Luke Taylor
f898bec370
OPEN - issue SEC-742: IllegalArgumentException if namespace configuration defines RememberMeServices without BasicProcessingFilter
...
http://jira.springframework.org/browse/SEC-742 . Fix. Post processor was assuming there was a BasicProcessinFilter in the app context when a remember-me services was present.
2008-03-31 22:44:11 +00:00
Luke Taylor
c347834401
OPEN - issue SEC-605: JdbcDaoImpl of UserDetailsService should provide a method for customizing creation of the final UserDetails object
...
http://jira.springframework.org/browse/SEC-605 . Added a createUserDetails method and also some other methods which are responsible for executing the individual queries for loading the userinformation and authorities.
2008-03-31 18:01:07 +00:00
Luke Taylor
40e51dd5fe
OPEN - issue SEC-649: Add user-service-ref attribute to remember-me namespace element
...
http://jira.springframework.org/browse/SEC-649 . Added attribute to namespace and parsing support.
2008-03-31 17:27:58 +00:00
Luke Taylor
cc752cfc28
OPEN - issue SEC-732: Encapsulate query objects in JdbcDaoImpl and JdbcUserDetailsManager
...
http://jira.springframework.org/browse/SEC-732 . Updated these classes to hide the internal query and update objects to allow future refactoring.
2008-03-31 16:52:31 +00:00
Luke Taylor
53b084e2f9
Simple tests to detect invalid configurations, particularly when the namespace has been updated without applying the spring-security.xsl transformation, which prevents certain elements from appearing at top level.
2008-03-31 16:30:28 +00:00
Luke Taylor
b1ae4922d2
SEC-726: Added entry-point-ref to <http> namespace element to allow customization of authentication process.
2008-03-31 16:22:40 +00:00
Luke Taylor
f523cef578
Fixed broken portlet test
2008-03-31 13:30:29 +00:00
Luke Taylor
9db55f336c
SEC-739: Removed siteminder provider code.
2008-03-31 12:23:32 +00:00
Luke Taylor
512c64fb98
SEC-738: Add session-registry-alias attribute to concurrent-session-control
...
http://jira.springframework.org/browse/SEC-738 . Added this attribute. Also various bugfixes in handling of attribute names for concurrent session control.
2008-03-31 12:01:37 +00:00
Luke Taylor
07f820f1a6
Minor portlet-related changes suggested by John Lewis: Javadoc and default values of booleans.
2008-03-31 10:10:13 +00:00
Luke Taylor
c9b6fe9555
OPEN - issue SEC-657: Create pre-authenticated processing filter which obtains username from request header
...
http://jira.springframework.org/browse/SEC-657 . Added filter and test class.
2008-03-30 13:37:13 +00:00
Luke Taylor
b98c72056a
SEC-728: Change use of String.getBytes() in password encoders to use UTF-8
2008-03-29 15:21:31 +00:00
Luke Taylor
91a5a6c266
SEC-737: sandboxed captcha
2008-03-29 14:49:40 +00:00
Luke Taylor
52875e2c12
updated wtp version to 2.0
2008-03-29 14:48:31 +00:00
Luke Taylor
e74f826d6f
Fixed broken sandbox build
2008-03-29 14:45:31 +00:00
Scott Battaglia
ea489baf6f
SEC-730
...
updated configuration to new CAS client
2008-03-28 18:25:02 +00:00
Luke Taylor
1463b9769d
SEC-629: authentication-provider doesn't support caching.
...
http://jira.springframework.org/browse/SEC-629 . Added support for cache-ref elements on jdbc-user-service and ldap-user-service
2008-03-28 17:55:12 +00:00
Luke Taylor
db6fafaf56
SEC-629: authentication-provider doesn't support caching. Refactored MockUserCache class to top level
2008-03-28 14:17:05 +00:00
Ben Alex
1490fe0b0a
Various fine-tuning so people can see AspectJ expressions and a simple, minimal configuration.
2008-03-28 00:47:08 +00:00
Ben Alex
595a14dbd5
Sample should permit people to anonymously call all methods except post(Account).
2008-03-28 00:44:42 +00:00
Luke Taylor
1fece47b49
SEC-691: Applied patch to allow setting of returned user attributes from LDAP search.
2008-03-27 14:41:11 +00:00
Luke Taylor
350a626587
SEC-477: Added preauthenticated websphere contribution.
2008-03-27 14:25:17 +00:00
Luke Taylor
608e8d3610
SEC-672. Forgot to set core-tiger packaging type to 'bundle'
2008-03-26 21:54:48 +00:00
Luke Taylor
584853bbcb
Tidied imports.
2008-03-26 21:49:26 +00:00
Luke Taylor
ef5b3e2f9c
SEC-733: Changed names of <global-method-security> attributes as discussed with Ben and updated sample to reflect the changes. Also changed explicit instantiation of Jsr250 and Secured annotation MethodDefinitionSource beans in GlobalMethodSecurityBDP into bean definitions to make more tooling friendly.
2008-03-26 21:48:24 +00:00
Luke Taylor
9ea2408ac6
Fixed error in choosing main entry point (it's an alias not a bean name, so doesn't appear in the entry map - you have to get it direct from the bean factory).
2008-03-26 17:34:42 +00:00
Luke Taylor
071c91540c
SEC-722: Added explicit login page to open-id element in openid sample.
2008-03-26 17:01:54 +00:00
