Luke Taylor
d66b9693ba
SEC-507: Initial support for JSR-250 "RolesAllowed" attributes.
...
Added jsr250 boolean to annotation-driven element to determine whether JSR-250 annotations should be used in preference to the traditional Acegi "Secured" attribute.
2008-01-10 20:19:15 +00:00
Luke Taylor
dfb60e2f62
Clarifying Javadoc
2008-01-10 13:38:12 +00:00
Luke Taylor
9a23ec4937
Clarifying Javadoc
2008-01-10 13:37:47 +00:00
Luke Taylor
06c6c3b9f3
Reformatting.
2008-01-10 13:09:23 +00:00
Luke Taylor
518ccada8c
Tidying.
2008-01-10 12:42:02 +00:00
Luke Taylor
dac911ac08
Fixed test failures caused by reordering of authorities loading order in JdbcDaoImpl.
2008-01-09 18:31:54 +00:00
Luke Taylor
c77475cda6
SEC-272: Added groups support to JdbcDaoImpl.
2008-01-09 18:06:41 +00:00
Luke Taylor
f983ff204d
SEC-414: Add useRelativeContext and sendRedirectMethod to SwitchUserProcessingFilter.
2008-01-08 22:41:28 +00:00
Luke Taylor
96dd564b79
Renamed obtainFullRequestUrl to obtainFullSavedRequestUrl.
2008-01-08 22:17:56 +00:00
Luke Taylor
28d4fa4665
Reformatting.
2008-01-08 18:41:06 +00:00
Luke Taylor
07db88a367
Import cleaning.
2008-01-08 18:13:53 +00:00
Luke Taylor
2eca8ee7b0
SEC-572: Added allowSessionCreation (default=true) property to AbstractProcessingFilter and modified it and AuthenticationProcessingFilter to stop them creating a new session for storing data if this property is set to false.
2008-01-08 18:11:20 +00:00
Luke Taylor
41d90e9bdb
SEC-399: Added tests for new session creation/attribute migration options.
2008-01-08 15:44:21 +00:00
Luke Taylor
c5e6a4cdfd
SEC-546: Added AccountStatusException as base class for dibled, locked etc. Modified ProviderManager to prevent it querying further providers if either this exception or a ConcurrentLoginException is thrown.
2008-01-08 13:33:20 +00:00
Luke Taylor
99b7510482
Tidied up getters/setters in AbstractProcessingFilter. Removed unused getters and reduced the scope of others where possible.
2008-01-07 16:10:50 +00:00
Luke Taylor
c5bc0fc683
SEC-623: Added login success and failure hooks to RememberMeProcessingFilter. Also moved MockApplicationEventPublisher implementations to a single class.
2008-01-07 15:06:29 +00:00
Luke Taylor
10ec13e4e2
[maven-release-plugin] prepare for next development iteration
2008-01-02 22:42:21 +00:00
Luke Taylor
2c5090da90
[maven-release-plugin] prepare release release_2_0_M1
2008-01-02 22:41:31 +00:00
Luke Taylor
09242ec66d
[maven-release-plugin] rollback the release of release_2_0_M1
2008-01-02 22:31:09 +00:00
Luke Taylor
42dcccd1b7
[maven-release-plugin] prepare release release_2_0_M1
2008-01-02 22:18:28 +00:00
Luke Taylor
aafbb5bb67
[maven-release-plugin] rollback the release of release_2_0_M1
2008-01-02 22:10:46 +00:00
Luke Taylor
425508d70d
[maven-release-plugin] prepare release release_2_0_M1
2008-01-02 22:01:34 +00:00
Luke Taylor
0b1e17f69a
[maven-release-plugin] rollback the release of release_2_0_M1
2008-01-02 21:54:37 +00:00
Luke Taylor
07aa0c6880
[maven-release-plugin] prepare release release_2_0_M1
2008-01-02 21:52:42 +00:00
Luke Taylor
5b9042ae07
Removed outdated scm elements from sub poms.
2008-01-02 20:33:09 +00:00
Luke Taylor
b115f4aa83
Removed unecessary rethrow of AuthenticationException from AbstractSecurityInterceptor and tidied up javadoc etc.
2008-01-01 16:43:34 +00:00
Luke Taylor
7ee049c824
Refactored SwitchUserProcessingFilter to extend SpringSecurityFilter.
2007-12-23 16:41:30 +00:00
Luke Taylor
5f1eea42fc
Moved configuration of security interceptors with access and authentication manangers from post processing stage to bean creation stage.
2007-12-23 16:40:29 +00:00
Luke Taylor
27de29f469
Corrected cut and paste error when parsing jdbc-user-service within AuthenticationProvider BDP.
2007-12-23 01:26:46 +00:00
Luke Taylor
ea8914f9ba
Moved Http post processor bean name to BeanIds class.
2007-12-23 01:06:22 +00:00
Luke Taylor
9d671fbdbf
Deleted original Ldap BD parser.
2007-12-23 01:05:35 +00:00
Luke Taylor
14e68618a5
Make constants class abstract.
2007-12-23 01:02:48 +00:00
Luke Taylor
46285a0ec0
SwitchUserProcessingFilter should come after FilterSecurityInterceptor (See SEC-376).
2007-12-23 01:02:12 +00:00
Luke Taylor
a38ed3cfde
Added check for multiple RememberMeServices beans.
2007-12-23 00:18:14 +00:00
Luke Taylor
debfbe47cf
Improvements to LDAP namespace configuration - splitting "ldap" element into ldap-server and ldap-authentication-provider. Also some minor changes to authentication-provider.
2007-12-23 00:17:37 +00:00
Luke Taylor
cf80292de3
Changes to namespace reinstating authentication-provider element in preference to "repository" to wrap convey that a user-service will be used as to authenticate against. Also introduced separate password-encoder element for use within authentication-provider.
2007-12-21 15:50:56 +00:00
Luke Taylor
70286f1197
Fixed problem caused by maven-2.0.8 change in test classpath. ldif file wasn't being loaded for tests. Default path should be "classpath*:" not "classpath:". (See discussing in Spring's PathMatchingResourcePatternResolver).
2007-12-20 20:53:26 +00:00
Luke Taylor
6e74d925fb
Boosted logging to try to resolve issues on bamboo server.
2007-12-20 19:45:43 +00:00
Luke Taylor
78e376312a
Added logging of working directory location.
2007-12-20 18:29:05 +00:00
Luke Taylor
85b10f79c2
Made servlet-api integration into an attribute of http, rather than a child element since it has no configuration.
2007-12-20 17:51:27 +00:00
Luke Taylor
31c09896ea
Fixed problem with relative name being used in (member={0}) search in DefaultAuthoritiesPopulator.
2007-12-14 20:41:00 +00:00
Luke Taylor
1a171ea316
SEC-595: Introduced loadUserAuthorities method. This can be overridden to allow loading of authorities with the authenticated user's credentials (by setting the security context). The Ldap ContextSource used in the authorities populator would also be configured with a SpringSecurityAuthentcationSource, to make use of the information in the security context.
2007-12-14 14:13:39 +00:00
Ben Alex
fa510b3187
Modify attribute names to use "ref" instead of "id", plus use a hyphen
...
as an attribute value separator rather than a colon. This was changed
for compatibility with other components in the Spring Portfolio. tests
pass.
2007-12-13 20:19:56 +00:00
Luke Taylor
0f12d31d90
Corrected code for choosing entry point in namespace configuration.
2007-12-12 19:44:54 +00:00
Ben Alex
9728f48adf
Convert to using AopNamespaceUtils, to avoid potentially creating
...
duplicate DefaultAdvisorAutoProxyCreator bean instances.
2007-12-11 18:46:20 +00:00
Luke Taylor
82cfa722be
Upgrade Spring-LDAP to 1.2.1 version.
2007-12-11 18:08:44 +00:00
Luke Taylor
ca996de2dc
Added tests for SpringSecurityAuthenticationSource.
2007-12-10 23:37:08 +00:00
Luke Taylor
894c90dadd
Moved AbstractAuthenticationManagerTests into ProviderManager as tested methods have already been moved there (maven wasn't running Abstract* tests but they were actually failing).
2007-12-10 23:36:27 +00:00
Luke Taylor
32038d8b92
Tidying.
2007-12-10 19:14:17 +00:00
Luke Taylor
47dec4e597
Make getters in AbstractRememberMeServices protected rather than public
2007-12-10 16:00:49 +00:00
