Commit Graph

542 Commits

Author SHA1 Message Date
Ben Alex 3401072368 Made Serializable as per acegisecurity-developer list discussion on 20 May 2005. 2005-05-22 03:56:37 +00:00
Ben Alex 4e55780e7c Performance optimisations thanks to Paulo Neves. 2005-05-20 00:00:22 +00:00
Ben Alex cfb8271826 Reorder DaoAuthenticationProvider exception logic as per developer list discussion. 2005-05-18 01:40:45 +00:00
Ben Alex ecbfac2ff8 Made AclEntry Serializable (correct issue with BasicAclEntryCache). 2005-05-17 11:07:00 +00:00
Ben Alex fa6924a373 Update project workspace settings to Java 1.5. NB: Maven remains at 1.3 compatibility for all subprojects except "domain". It is recommended the Eclipse "Problems" view be customised to not display items containing "Type Safety:" in their description. Developers should NOT introduce 1.5+ dependencies to any projects apart from "domain". 2005-05-09 01:18:31 +00:00
Ben Alex e08e66dec6 Refactor SecurityContextHolder to return a SecurityContext instead of Authentication. 2005-05-08 23:42:14 +00:00
Ben Alex 6a9abe5d90 Remove ContextHolder and introduce SecurityContext. 2005-05-07 09:11:37 +00:00
Ray Krueger 47989c11bd HttpSessionEventPublisher now verifies that the ApplicationContext is not null 2005-05-02 20:31:18 +00:00
Ben Alex d169829f27 AbstractAuthenticationToken.getName() now returns username alone if UserDetails present. 2005-04-29 22:29:00 +00:00
Ray Krueger 54ccbf5617 The SecurityEnforcementFilter was forced to catch Throwable by the FilterInvocation.invoke(...) method. Therefore it was wrapping the throwable in ServletException, which left it wrapping SevletException and IOException in ServletException. 2005-04-29 02:53:02 +00:00
Ray Krueger 2c23c75f91 SecureContextLoginModule as requested from list with Test 2005-04-27 04:47:41 +00:00
Ray Krueger 6f286e2054 AuthorityGranter.grant now returns a java.util.Set of role names, instead of a single role name 2005-04-27 03:39:06 +00:00
Luke Taylor c29a5731be Moved credential expiry checking after password check. If the wrong password is presented, BadCredentialsException will now be thrown even if the password has expired. 2005-04-25 23:11:12 +00:00
Ben Alex cff9ba4988 AnonymousProcessingFilter offers protected method to control when it should execute as per http://forum.springframework.org/viewtopic.php?p=19766. 2005-04-21 23:02:58 +00:00
Ben Alex 4e1649c2b7 Fix NullPointerException caused by unit tests. 2005-04-20 12:39:14 +00:00
Luke Taylor 1fc79f04f1 Added AntPathMatcher member to bring into line with recent Spring refactoring which breaks the build. 2005-04-18 23:10:54 +00:00
Luke Taylor 48ad6496e4 Javadoc typo corrected 2005-04-18 16:24:33 +00:00
Luke Taylor ee32874308 Added X509 EhCache tests and fixed glaring bug in X509 EhCache implementation. 2005-04-17 22:18:01 +00:00
Ray Krueger ec80ae22c1 Templated out event publishing. Added getApplicationContext(). Fixed javadoc formatting 2005-04-17 14:13:13 +00:00
Luke Taylor 1a78f9e15f Refactored to use Spring Assert class (thanks IntelliJ :). 2005-04-15 01:21:41 +00:00
Ben Alex fdf5c63033 Add obtainUsername method as per http://forum.springframework.org/viewtopic.php?t=4757. 2005-04-13 22:17:05 +00:00
Ben Alex 8091b60194 Improve Javadocs. 2005-04-12 04:19:09 +00:00
Luke Taylor f2788c7cb6 Refactored to use Spring Assert class. Corrected some typos. 2005-04-11 01:18:46 +00:00
Luke Taylor 3d4f8eed31 Refactoring to use Spring mock web classes. 2005-04-11 01:07:04 +00:00
Luke Taylor d6f2b136ec Refactored to use Spring mock classes. 2005-04-09 23:37:18 +00:00
Luke Taylor 458a2c9e39 Refactored to use Spring mock classes. 2005-04-09 23:24:22 +00:00
Luke Taylor 021abb7369 Added check for "path parameters" to ensure the filterProcessesUrl matches rewritten URLs with a jsessionid included. Refactored property checking to use Spring Assert class. 2005-04-09 22:50:06 +00:00
Luke Taylor eaa5feb5f8 Refactored to use Spring mock objects for HttpRequest etc. 2005-04-09 21:48:47 +00:00
Ben Alex 204da55a0b PasswordDaoAuthenticationProvider no longer stores String against Authentication.setDetails(). 2005-04-03 21:48:45 +00:00
Ray Krueger 9649003d57 AbstractProcessingFilter no longer uses a set*FailureUrl approach for every exception, it now uses a properties object that maps authenticationExceptions to failure urls 2005-03-28 17:42:21 +00:00
Ben Alex 798ebb1a3d Correct NullPointerException as fixture missing an ApplicationContext and attempting to publish an event. 2005-03-27 08:40:09 +00:00
Ben Alex 684d5bc10e Handle null Authentication.getAuthorities() in AuthorizeTag. 2005-03-27 06:36:41 +00:00
Ben Alex 8ae2276843 TokenBasedRememberMeServices changed to use long instead of int for tokenValiditySeconds. 2005-03-25 22:07:00 +00:00
Ray Krueger 10c1926385 Added the ConcurrentSessionViolationEvent that will be published by the ConcurrentSessionControllerImpl before throwing the ConcurrentSessionViolationException 2005-03-25 00:53:46 +00:00
Ben Alex 8884ca51af Add credentialsExpiredFailureUrl getter/setter to AbstractProcessingFilter. 2005-03-23 23:22:51 +00:00
Ben Alex 9f66c0eae9 Update to current Spring JAR dependencies. 2005-03-22 11:17:22 +00:00
Ben Alex c936801842 DigestProcessingFilter now provides userCache getter and setter. 2005-03-21 08:03:11 +00:00
Ben Alex 0530351f0d Provide toString() method on User. 2005-03-21 05:33:51 +00:00
Ben Alex a2b9da7e22 StringSplitUtils.split() ignored delimiter argument. 2005-03-21 05:14:48 +00:00
Ben Alex 6f31ecb04b UserDetails now indicates locked accounts. 2005-03-21 03:22:59 +00:00
Luke Taylor ae47fb722d sendError now returns less informative forbidden message rather than the exception message. 2005-03-20 19:12:51 +00:00
Luke Taylor 944d11bb1a Changed to using DN in cache log messages rather than entire certificate. 2005-03-19 18:07:24 +00:00
Luke Taylor 918fc7c15a License header added. 2005-03-18 01:00:36 +00:00
Luke Taylor e755687a19 Updated to use Spring Assert class. 2005-03-18 00:59:32 +00:00
Luke Taylor 2a6c68deb6 Entry point tests 2005-03-18 00:52:23 +00:00
Ben Alex a056946c49 HttpSessionContextIntegrationFilter now handles HttpSession invalidation without redirection. 2005-03-18 00:50:12 +00:00
Luke Taylor 8592e3bcbf Added tearDown method which resets the Context to null 2005-03-18 00:45:48 +00:00
Luke Taylor 04366d2b12 Corrected Javadoc 2005-03-18 00:33:30 +00:00
Ben Alex 07e46fe4d5 Proper handling if the account is no longer allowed login. 2005-03-18 00:06:09 +00:00
Ben Alex 748f427a80 Prove SecureContextImpl.equals works as we want it to, in light of HttpSessionContextIntegrationFilter's attempts to avoid unnecessary HttpSession creation. 2005-03-17 23:35:29 +00:00
Luke Taylor abe9dfd234 Added caching and use of Spring's Assert to X509 provider 2005-03-17 21:43:42 +00:00
Luke Taylor 90914be3c2 Import cleaning 2005-03-17 19:58:08 +00:00
Luke Taylor 7db94cb5b7 X509 UserDetails cache interface and implementation 2005-03-17 19:57:12 +00:00
Luke Taylor 7c6a2911c9 Added package.html files 2005-03-17 19:49:18 +00:00
Luke Taylor 562a015aeb Javadoc typo corrected. 2005-03-17 14:14:18 +00:00
Luke Taylor cacc31004f Javadoc typo corrected. 2005-03-16 23:31:19 +00:00
Luke Taylor bb7d428617 Commence method now returns 403 error 2005-03-16 18:26:41 +00:00
Luke Taylor 452604ff3b Minor Javadoc corrections. 2005-03-16 16:57:28 +00:00
Ben Alex 52c42a7a40 Corrected Authz parsing of whitespace in GrantedAuthoritys. Contributed by Francois Beausoleil. 2005-03-14 06:09:33 +00:00
Ray Krueger 632617f693 Test that the ConcurrentSessioncontrollerImpl implements ApplicationListener. This is critical and was left out once. 2005-03-13 22:35:17 +00:00
Ray Krueger ff45047f5a This MUST implement ApplicationListener in order to receive the HttpSessionDestroyedEvents 2005-03-13 22:30:06 +00:00
Ray Krueger 169449bf24 In response to: http://forum.springframework.org/viewtopic.php?t=3874
JaasAuthenticationProvider now checks that the java.security.auth.login.config is null before attempting to use it.

Also, The loginConfig resource is attempted as a file first as spaces in the path name can cause FileNotFoundExceptions for URLs
2005-03-13 22:26:56 +00:00
Ben Alex df91d352cb AbstractBasicAclEntry improved compatibility with Hibernate, as per http://forum.springframework.org/viewtopic.php?t=3949. 2005-03-13 21:01:16 +00:00
Luke Taylor f594fdf751 Tidying and tests to bring Dao populator up to full coverage. 2005-03-12 21:56:04 +00:00
Luke Taylor 76f868c777 More tests. 2005-03-12 21:27:22 +00:00
Luke Taylor 765cc02599 Tidying. 2005-03-12 21:24:55 +00:00
Luke Taylor 9f62da7d1c Better test method names. 2005-03-12 21:20:43 +00:00
Luke Taylor 0a4fc1731a Tests added to bring X509ProcessingFilter up to full coverage. 2005-03-12 20:47:58 +00:00
Luke Taylor c3c5487b93 Now sets WebAuthenticationDetails on authentication request token. 2005-03-12 20:46:58 +00:00
Luke Taylor acee1ef696 Added "details" property 2005-03-12 20:40:05 +00:00
Luke Taylor 5d1cd29dfb Added tearDown method which resets the context to null to prevent occasional breaking of other test classes. 2005-03-12 13:44:00 +00:00
Luke Taylor f578915728 Test class for X509 filter. 2005-03-11 17:42:39 +00:00
Luke Taylor af02c42e9f First version that works. 2005-03-11 03:15:54 +00:00
Luke Taylor fbb4bc0873 Added regexp matching within the DN to extract the user name. 2005-03-11 02:47:43 +00:00
Luke Taylor 29050b29b2 Dao populator tests for X.509. Tests matching of regexps in the certificate Subject to extract the user name. 2005-03-11 02:08:07 +00:00
Ben Alex 4763f953d3 FilterChainProxy now supports replacement of ServletRequest and ServetResponse by Filter beans. 2005-03-11 01:41:43 +00:00
Luke Taylor 5c86b97f37 First working (kind of) version. 2005-03-11 00:39:36 +00:00
Ben Alex c5fe428400 Patch by Matt Raible which returns null if Authentication is anonymous. 2005-03-10 12:00:30 +00:00
Ben Alex b898b87ffb Enhance test coverage as part of diagnosis of reported bug at http://forum.springframework.org/viewtopic.php?p=15751. 2005-03-10 11:39:32 +00:00
Ben Alex 15535fff41 SecurityEnforcementFilter caused NullPointerException when anonymous authentication used with BasicProcessingFilterEntryPoint. 2005-03-10 11:11:25 +00:00
Luke Taylor 08dbf66880 (Currently functionless) entry point implementation for X.509 2005-03-10 03:21:25 +00:00
Luke Taylor aabcef4c69 Dao populator for X509, mirroring the CAS one. 2005-03-10 03:20:25 +00:00
Luke Taylor fea1725f39 Removed inappropriate inheritance from AbstractProcessingFilter (doesn't make sense for X509 case). 2005-03-10 03:16:45 +00:00
Luke Taylor ae91b58685 First stab at X509 authentication provider 2005-03-09 02:14:30 +00:00
Luke Taylor da3801b914 Javadoc improvements. 2005-03-09 02:02:05 +00:00
Luke Taylor 559f480f4b Corrected Javadoc typos. 2005-03-07 22:35:28 +00:00
Luke Taylor ab6d43ff08 Corrected Javadoc typo. 2005-03-07 16:53:42 +00:00
Ben Alex 051a34f859 Support credentialsExpiredUrl as per request made in http://forum.springframework.org/viewtopic.php?t=3862. 2005-03-07 12:23:48 +00:00
Luke Taylor 5c3799cd16 Changed "opal ticket" to "opaque ticket" in Javadoc. 2005-03-05 19:48:02 +00:00
Luke Taylor 124f33bb09 Corrected Javadoc typo 2005-03-05 18:27:05 +00:00
Luke Taylor 6b12779902 Minor Javadoc corrections 2005-03-05 18:23:04 +00:00
Luke Taylor 4ef54828c0 corrected javadoc link 2005-03-05 01:05:23 +00:00
Ben Alex f1e071b0f1 Added remember-me services. 2005-03-01 02:30:38 +00:00
Ben Alex 0d33b06990 Fix NullPointerException if a pattern is given without any config attributes (eg /**/*.css=). Contributed by Konstantin Shaposhnikov. 2005-02-28 22:06:53 +00:00
Ben Alex 873c3f6c3d Improve Linux and non-Sun JDK (specifically IBM JDK) compatibility. 2005-02-28 03:02:32 +00:00
Ben Alex d47a2190f7 Correct test failure on high performance JREs. 2005-02-27 07:16:38 +00:00
Ray Krueger 44397bb05d Committing ConcurrentSessionController feature and tests. Documentation is needed. 2005-02-26 21:48:07 +00:00
Ray Krueger 4125db5650 Added in a default constructor to use the original sessionid and a constructor for specifying the sessionId 2005-02-25 05:24:10 +00:00
Ben Alex 693ac5a24a Anonymous principal support. As requested by the community at various times, including in http://forum.springframework.org/viewtopic.php?t=1925. 2005-02-23 06:09:56 +00:00
Ray Krueger 3c4faf58c7 HttpSessionEventPublisher, HttpSessionCreatedEvent, HttpSessionDestroyedEvent
Used together to provide published events in the ApplicationContext about HttpSessions.

Useful for things like Single Session logins.
2005-02-23 02:54:41 +00:00
Ray Krueger 8b24b1cf7a MockFilterChain extended TestCase but had no public constructor and no test methods.
The expectedToProceed test is internally handled by a static call to TestCase.assertTrue() and TestCase.fail()
2005-02-23 02:47:31 +00:00
Ben Alex a3818184f4 Added Digest Authentication support (RFC 2617 and RFC 2069). 2005-02-22 06:14:44 +00:00
Ben Alex dda66a0454 Significantly refactor "well-known location model" to authentication processing mechanism and HttpSessionContextIntegrationFilter model. 2005-02-21 06:48:31 +00:00
Ben Alex ba02d45677 Clean up imports. 2005-02-21 06:34:16 +00:00
Ben Alex e52f3eacb1 Use WebAuthenticationDetails for Authentication.getDetails() by default. 2005-02-21 00:09:49 +00:00
Ben Alex a5ea6f5436 Rewrite FilterChainProxy to separate functionality from FilterToBeanProxy and properly implement filter chaining issues. 2005-02-20 05:40:18 +00:00
Ben Alex 57842d4ba8 IoC container vs servlet container lifecycle separation. 2005-02-20 05:38:57 +00:00
Ben Alex 44f1c83dab Move MockFilterChain to external class. 2005-02-20 05:38:14 +00:00
Ben Alex 6d693ac0d4 Improve logging. 2005-02-20 05:37:13 +00:00
Carlos Sanchez 7c9fad0477 Added filter chain 2005-02-18 20:08:03 +00:00
Ben Alex 0b296e7cf0 Correct issue with JdbcDaoImpl default SQL query not using consistent case sensitivity as per http://forum.springframework.org/viewtopic.php?t=3526. 2005-02-15 07:14:59 +00:00
Ray Krueger 1949c3b27e Added AuthenticationException to the commence method signature of the AutenticationEntryPoint. The best example of this
is the BasicProcessingFilterEntryPoint where the authException.getMessage() is used to send back an informative 401,
instead of just the error code.

Added AccessDeniedException to the sendAccessDeniedError method signature. The accessDeniedException.getMessage() result
is used to send an invormative 403 error back to the servletResponse by default.
2005-02-15 03:28:18 +00:00
Ben Alex beadf24610 Use static HttpServletResponse.SC_UNAUTHORIZED instead of 401 HTTP response code. 2005-02-13 00:59:48 +00:00
Ben Alex 6370fadfdc FilterSecurityInterceptor now only executes once per request (improves performance with SiteMesh). Suggested by Sanjiv Jivan. 2005-02-11 05:49:41 +00:00
Ben Alex cbe53e21b9 HttpSessionIntegrationFilter no longer creates a HttpSession unnecessarily. 2005-02-10 07:15:20 +00:00
Ben Alex 834f69168d Support getUserPrincipal(). 2005-02-04 22:38:07 +00:00
Ben Alex 0be77abe75 Allow empty passwords as per http://forum.springframework.org/viewtopic.php?p=13343. 2005-02-04 09:43:33 +00:00
Ben Alex 4e6a4742bd Tapestry integration improvements, as per http://forum.springframework.org/viewtopic.php?p=13327 2005-02-04 07:36:46 +00:00
Ray Krueger 82c15b1874 The JaasAuthenticationCallbackHandler handle method now takes a callback and the authentication in progress, the setAuthentication method has been removed.
The JaasAuthenticationProvider afterPropertiesSet method now makes use of the java.security.auth.login.config System property before trying to use the login.config.url.X properties.
2005-01-31 05:16:32 +00:00
Carlos Sanchez debc67fa6d Allow site deployment from each subproject 2005-01-19 22:18:37 +00:00
Ben Alex cc669f4e35 Retrieve bean from parent bean factory if not found, as per http://forum.springframework.org/viewtopic.php?t=3005. 2005-01-19 21:21:07 +00:00
Ben Alex 7e234869a5 Make Serializable. 2005-01-19 21:09:39 +00:00
Ben Alex 99088fe14c Fix JavaDoc error. 2005-01-16 03:57:43 +00:00
Ben Alex fd2cc5dbc7 Add subclass hook so it can customise request properties. 2005-01-06 20:32:36 +00:00
Ben Alex bb1e96c85a Add notice.txt to generated artifacts. 2005-01-04 22:05:40 +00:00
Ben Alex d6207106c0 Expand test coverage. 2005-01-04 20:20:21 +00:00
Ben Alex 9176aa0efb Add new AuthenticationFailure* events. 2005-01-04 20:19:42 +00:00
Ben Alex c939bcb176 Add account expiration and credentials expiration capabilities. 2005-01-03 01:14:26 +00:00
Ben Alex 6c1e2f23b2 Allow last attempted username to be displayed in views. 2004-12-25 23:38:39 +00:00
Ben Alex c77cb84f52 Fix group names etc as required to ensure a multiproject:install works from /docs if there is a CLEAN (empty) Maven repository. 2004-12-25 07:02:31 +00:00
Ben Alex 5689807f38 Make Maven sign generated JARs. The last stage of the transition from Ant. 2004-12-24 05:48:54 +00:00
Ben Alex 61a631af26 JavaDocs fix. 2004-12-22 23:49:25 +00:00
Ben Alex 8fb64e1e1b Fix repository URLs so "viewcvs" URLs (associated with changelog plugin) are all correct. 2004-12-22 03:47:55 +00:00
Ben Alex dc726ac75c Clarify and enforce interface interface contract for AuthenticationDao. 2004-12-21 20:53:32 +00:00
Ben Alex 4bcc1222e1 Modifications to support EH-CACHE upgrade (EH-CACHE appears to have changed the way the default cache configuration file gets handled). 2004-12-21 13:04:11 +00:00
Ben Alex 823a2e990b Add hook methods to AbstractProcessingFilter. 2004-12-20 11:14:34 +00:00
Ben Alex c5ea35d093 Extend After ACL provider to also filter arrays. Thanks to Joni Suominen. 2004-12-17 21:56:05 +00:00
Ray Krueger cb61c88478 Increased test coverate to 100% 2004-12-09 23:53:11 +00:00
Ray Krueger 8853ba28e2 Replaced $author$ stuff in javadocs with Ray Krueger 2004-12-09 22:35:53 +00:00
Ray Krueger 41310f26a6 Missed a DOCUMENT ME! spot... 2004-12-09 22:29:12 +00:00
Ray Krueger 3eb6149877 New LoginExceptionResolver interface and base implementation to handle LoginExceptions thrown in the Jaas API. I am commiting this now so that it isn't lost, while a PropertyEditor based solution is investigated. 2004-12-09 22:09:35 +00:00
Ben Alex c5900cab9c Added a ContextHolderAwareRequestWrapper to integrate with getRemoteUser() and isUserInRole(String). Thanks to Orlando Garcia Carmona ("paramosyermos" on Spring forums). 2004-12-05 06:11:18 +00:00
Ben Alex e3b9920d9c Fix default query string to remove ambiguous columns. Thanks to Aaron Tang. 2004-12-05 05:30:06 +00:00
Ben Alex 89ba20f057 Fix Tomcat compatibility issue where HttpSession unavailable during "logoff". Thanks to Aaron Tang. 2004-12-05 05:29:25 +00:00
Ben Alex 82ed7253d4 Refactor AbstractFilterInvocationDefinitionSource to use a standard URL String in its lookup method, rather than a full FilterInvocation. This will make it easier for views (taglibs etc) to access URI security details without needing to construct a MockFilterInvocation. 2004-12-05 05:04:52 +00:00
Ben Alex 76c82db196 Refactor EH-CACHE integration classes to work with Spring IoC provided Cache rather than manage our own cache internally. 2004-12-05 04:37:05 +00:00
Ben Alex 41b41ba316 Expand test coverage. Clover via Maven (without excluding appropriate patterns like *Exception and debug messages) has modified coverage from 77.2% to 95%. 2004-12-03 06:46:41 +00:00
Ben Alex 07e2037251 Find target domain object argument in a manner that works if nulls are presented for the domain object argument. 2004-12-03 06:43:17 +00:00
Ben Alex e75fc613b1 Gracefully handle null ContextHolder / Authentication etc. 2004-12-03 06:42:26 +00:00
Ben Alex 7a4a46cc7b General refactoring of taglibs. 2004-12-03 06:41:48 +00:00
Ben Alex 1b660d4d5b Handle usernames that are empty Strings. 2004-12-03 06:41:02 +00:00
Ben Alex ab6df6cfce Make InternalMethodInvocation package protected for better unit test support. 2004-12-03 06:40:11 +00:00
Ben Alex f73fc735c2 Improve startup error detection and eliminate unnecessary checks for null application context. 2004-12-03 06:39:07 +00:00
Ben Alex 4c1c7dcff5 Fix bugs. 2004-12-03 06:38:10 +00:00
Ben Alex 22f8cd0c44 Improve null handling. 2004-12-01 02:55:01 +00:00
Ben Alex 3a0e43337c Improve test coverage and error detection at startup time. 2004-12-01 02:22:24 +00:00
Ben Alex 699f97929a Fix bug where class should delegate to setDetails method - not set the details directly. 2004-12-01 02:09:15 +00:00
Ben Alex 89eed486e2 Add alwaysUseDefaultTargetUrl feature to AbstractProcessingFilter. 2004-11-22 21:38:14 +00:00
Carlos Sanchez b0f6c5179a Documentation improvement 2004-11-20 10:28:01 +00:00
Ben Alex a159d89ffd Initial commit. 2004-11-20 05:24:16 +00:00
Ben Alex 4ca1e2fd99 Add logging. 2004-11-20 04:10:05 +00:00
Ben Alex f251436a99 Improve logging and enable ACL determination to use an Object obtained from an internal method of the located processDomainObjectClass. 2004-11-20 04:09:14 +00:00
Ben Alex 61580d1973 Move RMI context propagation support classes to core, and rename and document to more clearly reflect function. 2004-11-20 04:07:47 +00:00
Ben Alex ba16c01b90 Add toString() method so more informative when context propagation takes place, such as via ContextPropagatingRemoteInvocation. 2004-11-20 04:06:47 +00:00
Carlos Sanchez 58306157df *** empty log message *** 2004-11-19 22:20:49 +00:00
Ben Alex 177c00556d Support just creating the acl_object_identity, without necessarily an acl_permission as well. 2004-11-16 12:22:43 +00:00
Ben Alex af5917b685 Added BasicAclExtendedDao interface and JdbcExtendedDaoImpl for ACL CRUD. 2004-11-15 13:04:12 +00:00
Ben Alex bc9a599bf7 Remove noisy logging. 2004-11-15 02:43:21 +00:00
Ben Alex d6beb9804f Place authz taglib in correct JAR location (META-INF). 2004-11-15 01:46:23 +00:00
Ben Alex 612971e134 Initial commit of a concrete AfterInvocationManager. 2004-11-15 01:45:03 +00:00
Ben Alex 694bdb603d Initial commit. 2004-11-15 01:44:20 +00:00
Ben Alex 5f6aa9c49e Refactoring to support "after invocation" processing. 2004-11-15 01:43:48 +00:00
Ben Alex 03a530b36b Improve JavaDocs. 2004-11-15 01:42:47 +00:00
Ben Alex d639e5c02f Expand logging. 2004-11-15 01:41:45 +00:00
Ben Alex 9972c69408 Support Authentication.getPrincipal() of UserDetails and improve logging. 2004-11-15 01:40:18 +00:00
Ben Alex e462c5a201 Minor polishing. 2004-11-15 01:36:41 +00:00
Ben Alex 68dc38841f Add an Authentication and Acl taglib. 2004-11-15 00:46:18 +00:00
Ben Alex 70a9c76f69 Remove unnecessary console output from tests. 2004-11-15 00:37:00 +00:00
Ben Alex ef2e45df77 Update tests to support incompatible collaborator detection now in AbstractSecurityInterceptor. 2004-11-15 00:36:12 +00:00
Ben Alex e83c66bb37 Expand test coverage so GrantedAuthorityEffectiveAclsResolver properly handles Authentication with a principal of type UserDetails. 2004-11-15 00:34:32 +00:00
Ben Alex 695948c31d Remove unused import. 2004-11-12 01:07:59 +00:00
Ben Alex f1d993f47b Made BasicAclProvider to only respond to specified ACL object requests. 2004-11-09 21:09:14 +00:00
Carlos Sanchez cd56f2ed4a Moved from test to main 2004-11-03 22:35:12 +00:00
Carlos Sanchez 8cf6867cba Moved name to subprojects 2004-11-01 20:05:42 +00:00
Ben Alex fde59c2f29 Ad mock method implementation now we're using HttpSession.removeAttribute(). 2004-10-30 23:32:53 +00:00
Ben Alex 565c2e580b Remove debug messages. 2004-10-30 23:32:28 +00:00
Carlos Sanchez d27fb49803 *** empty log message *** 2004-10-30 22:49:58 +00:00
Carlos Sanchez 55624cf5dd Moved resources from java dir to resources dir 2004-10-30 22:49:12 +00:00
Carlos Sanchez 928498b53d Removed AutoIntegrationFilter 2004-10-30 22:45:35 +00:00
Carlos Sanchez b25a6e002b *** empty log message *** 2004-10-30 17:15:54 +00:00
Ben Alex 89f6fcf5c9 Refactor to use an application context, thus enabling event publishing and use of DefaultAdvisorAutoProxyCreator. 2004-10-30 06:09:09 +00:00
Ben Alex 537a58d754 Added net.sf.acegisecurity.intercept.event package. 2004-10-30 06:07:17 +00:00
Ben Alex 26f5f1a9b3 Add the AccessDeniedException to the HttpSession as per http://forum.springframework.org/viewtopic.php?t=1515. 2004-10-30 03:06:05 +00:00
Ben Alex 21f29bbbb3 Fix JRun rejection of null in httpSession.setAttribute() as per http://livedocs.macromedia.com/jrun/4/javadocs/jrun/servlet/session/JRunSession.html.
Discussed at http://forum.springframework.org/viewtopic.php?t=1417.
2004-10-30 02:56:01 +00:00
Ben Alex 73349bf8f8 Add convenience method so subclasses can specify Authentication.setDetails(). 2004-10-30 01:19:22 +00:00
Ben Alex 7b0145fba7 Initial AspectJ support. 2004-10-18 06:41:20 +00:00
Ben Alex 992cf44b36 Refactor MethodDefinitionMap to use Method, not MethodInvocation. Refactor AbstractSecurityInterceptor to not force use of Throwable. Move AOP Alliance based MethodSecurityInterceptor to separate package. 2004-10-18 06:38:44 +00:00
Ben Alex ba163d51ae Documentation correction. 2004-10-17 07:56:19 +00:00
Ben Alex f123e9c333 Make MethodDefinitionMap query interfaces defined by secure objects, to properly support MethodDefinitionSourceAdvisor. 2004-10-15 03:47:53 +00:00
Ben Alex 8ec0d89fe4 Improve documentation for abstract contract. 2004-10-15 03:17:57 +00:00