Ben Alex
3401072368
Made Serializable as per acegisecurity-developer list discussion on 20 May 2005.
2005-05-22 03:56:37 +00:00
Ben Alex
4e55780e7c
Performance optimisations thanks to Paulo Neves.
2005-05-20 00:00:22 +00:00
Ben Alex
cfb8271826
Reorder DaoAuthenticationProvider exception logic as per developer list discussion.
2005-05-18 01:40:45 +00:00
Ben Alex
ecbfac2ff8
Made AclEntry Serializable (correct issue with BasicAclEntryCache).
2005-05-17 11:07:00 +00:00
Ben Alex
fa6924a373
Update project workspace settings to Java 1.5. NB: Maven remains at 1.3 compatibility for all subprojects except "domain". It is recommended the Eclipse "Problems" view be customised to not display items containing "Type Safety:" in their description. Developers should NOT introduce 1.5+ dependencies to any projects apart from "domain".
2005-05-09 01:18:31 +00:00
Ben Alex
e08e66dec6
Refactor SecurityContextHolder to return a SecurityContext instead of Authentication.
2005-05-08 23:42:14 +00:00
Ben Alex
6a9abe5d90
Remove ContextHolder and introduce SecurityContext.
2005-05-07 09:11:37 +00:00
Ray Krueger
47989c11bd
HttpSessionEventPublisher now verifies that the ApplicationContext is not null
2005-05-02 20:31:18 +00:00
Ben Alex
d169829f27
AbstractAuthenticationToken.getName() now returns username alone if UserDetails present.
2005-04-29 22:29:00 +00:00
Ray Krueger
54ccbf5617
The SecurityEnforcementFilter was forced to catch Throwable by the FilterInvocation.invoke(...) method. Therefore it was wrapping the throwable in ServletException, which left it wrapping SevletException and IOException in ServletException.
2005-04-29 02:53:02 +00:00
Ray Krueger
2c23c75f91
SecureContextLoginModule as requested from list with Test
2005-04-27 04:47:41 +00:00
Ray Krueger
6f286e2054
AuthorityGranter.grant now returns a java.util.Set of role names, instead of a single role name
2005-04-27 03:39:06 +00:00
Luke Taylor
c29a5731be
Moved credential expiry checking after password check. If the wrong password is presented, BadCredentialsException will now be thrown even if the password has expired.
2005-04-25 23:11:12 +00:00
Ben Alex
cff9ba4988
AnonymousProcessingFilter offers protected method to control when it should execute as per http://forum.springframework.org/viewtopic.php?p=19766 .
2005-04-21 23:02:58 +00:00
Ben Alex
4e1649c2b7
Fix NullPointerException caused by unit tests.
2005-04-20 12:39:14 +00:00
Luke Taylor
1fc79f04f1
Added AntPathMatcher member to bring into line with recent Spring refactoring which breaks the build.
2005-04-18 23:10:54 +00:00
Luke Taylor
48ad6496e4
Javadoc typo corrected
2005-04-18 16:24:33 +00:00
Luke Taylor
ee32874308
Added X509 EhCache tests and fixed glaring bug in X509 EhCache implementation.
2005-04-17 22:18:01 +00:00
Ray Krueger
ec80ae22c1
Templated out event publishing. Added getApplicationContext(). Fixed javadoc formatting
2005-04-17 14:13:13 +00:00
Luke Taylor
1a78f9e15f
Refactored to use Spring Assert class (thanks IntelliJ :).
2005-04-15 01:21:41 +00:00
Ben Alex
fdf5c63033
Add obtainUsername method as per http://forum.springframework.org/viewtopic.php?t=4757 .
2005-04-13 22:17:05 +00:00
Ben Alex
8091b60194
Improve Javadocs.
2005-04-12 04:19:09 +00:00
Luke Taylor
f2788c7cb6
Refactored to use Spring Assert class. Corrected some typos.
2005-04-11 01:18:46 +00:00
Luke Taylor
3d4f8eed31
Refactoring to use Spring mock web classes.
2005-04-11 01:07:04 +00:00
Luke Taylor
d6f2b136ec
Refactored to use Spring mock classes.
2005-04-09 23:37:18 +00:00
Luke Taylor
458a2c9e39
Refactored to use Spring mock classes.
2005-04-09 23:24:22 +00:00
Luke Taylor
021abb7369
Added check for "path parameters" to ensure the filterProcessesUrl matches rewritten URLs with a jsessionid included. Refactored property checking to use Spring Assert class.
2005-04-09 22:50:06 +00:00
Luke Taylor
eaa5feb5f8
Refactored to use Spring mock objects for HttpRequest etc.
2005-04-09 21:48:47 +00:00
Ben Alex
204da55a0b
PasswordDaoAuthenticationProvider no longer stores String against Authentication.setDetails().
2005-04-03 21:48:45 +00:00
Ray Krueger
9649003d57
AbstractProcessingFilter no longer uses a set*FailureUrl approach for every exception, it now uses a properties object that maps authenticationExceptions to failure urls
2005-03-28 17:42:21 +00:00
Ben Alex
798ebb1a3d
Correct NullPointerException as fixture missing an ApplicationContext and attempting to publish an event.
2005-03-27 08:40:09 +00:00
Ben Alex
684d5bc10e
Handle null Authentication.getAuthorities() in AuthorizeTag.
2005-03-27 06:36:41 +00:00
Ben Alex
8ae2276843
TokenBasedRememberMeServices changed to use long instead of int for tokenValiditySeconds.
2005-03-25 22:07:00 +00:00
Ray Krueger
10c1926385
Added the ConcurrentSessionViolationEvent that will be published by the ConcurrentSessionControllerImpl before throwing the ConcurrentSessionViolationException
2005-03-25 00:53:46 +00:00
Ben Alex
8884ca51af
Add credentialsExpiredFailureUrl getter/setter to AbstractProcessingFilter.
2005-03-23 23:22:51 +00:00
Ben Alex
9f66c0eae9
Update to current Spring JAR dependencies.
2005-03-22 11:17:22 +00:00
Ben Alex
c936801842
DigestProcessingFilter now provides userCache getter and setter.
2005-03-21 08:03:11 +00:00
Ben Alex
0530351f0d
Provide toString() method on User.
2005-03-21 05:33:51 +00:00
Ben Alex
a2b9da7e22
StringSplitUtils.split() ignored delimiter argument.
2005-03-21 05:14:48 +00:00
Ben Alex
6f31ecb04b
UserDetails now indicates locked accounts.
2005-03-21 03:22:59 +00:00
Luke Taylor
ae47fb722d
sendError now returns less informative forbidden message rather than the exception message.
2005-03-20 19:12:51 +00:00
Luke Taylor
944d11bb1a
Changed to using DN in cache log messages rather than entire certificate.
2005-03-19 18:07:24 +00:00
Luke Taylor
918fc7c15a
License header added.
2005-03-18 01:00:36 +00:00
Luke Taylor
e755687a19
Updated to use Spring Assert class.
2005-03-18 00:59:32 +00:00
Luke Taylor
2a6c68deb6
Entry point tests
2005-03-18 00:52:23 +00:00
Ben Alex
a056946c49
HttpSessionContextIntegrationFilter now handles HttpSession invalidation without redirection.
2005-03-18 00:50:12 +00:00
Luke Taylor
8592e3bcbf
Added tearDown method which resets the Context to null
2005-03-18 00:45:48 +00:00
Luke Taylor
04366d2b12
Corrected Javadoc
2005-03-18 00:33:30 +00:00
Ben Alex
07e46fe4d5
Proper handling if the account is no longer allowed login.
2005-03-18 00:06:09 +00:00
Ben Alex
748f427a80
Prove SecureContextImpl.equals works as we want it to, in light of HttpSessionContextIntegrationFilter's attempts to avoid unnecessary HttpSession creation.
2005-03-17 23:35:29 +00:00
Luke Taylor
abe9dfd234
Added caching and use of Spring's Assert to X509 provider
2005-03-17 21:43:42 +00:00
Luke Taylor
90914be3c2
Import cleaning
2005-03-17 19:58:08 +00:00
Luke Taylor
7db94cb5b7
X509 UserDetails cache interface and implementation
2005-03-17 19:57:12 +00:00
Luke Taylor
7c6a2911c9
Added package.html files
2005-03-17 19:49:18 +00:00
Luke Taylor
562a015aeb
Javadoc typo corrected.
2005-03-17 14:14:18 +00:00
Luke Taylor
cacc31004f
Javadoc typo corrected.
2005-03-16 23:31:19 +00:00
Luke Taylor
bb7d428617
Commence method now returns 403 error
2005-03-16 18:26:41 +00:00
Luke Taylor
452604ff3b
Minor Javadoc corrections.
2005-03-16 16:57:28 +00:00
Ben Alex
52c42a7a40
Corrected Authz parsing of whitespace in GrantedAuthoritys. Contributed by Francois Beausoleil.
2005-03-14 06:09:33 +00:00
Ray Krueger
632617f693
Test that the ConcurrentSessioncontrollerImpl implements ApplicationListener. This is critical and was left out once.
2005-03-13 22:35:17 +00:00
Ray Krueger
ff45047f5a
This MUST implement ApplicationListener in order to receive the HttpSessionDestroyedEvents
2005-03-13 22:30:06 +00:00
Ray Krueger
169449bf24
In response to: http://forum.springframework.org/viewtopic.php?t=3874
...
JaasAuthenticationProvider now checks that the java.security.auth.login.config is null before attempting to use it.
Also, The loginConfig resource is attempted as a file first as spaces in the path name can cause FileNotFoundExceptions for URLs
2005-03-13 22:26:56 +00:00
Ben Alex
df91d352cb
AbstractBasicAclEntry improved compatibility with Hibernate, as per http://forum.springframework.org/viewtopic.php?t=3949 .
2005-03-13 21:01:16 +00:00
Luke Taylor
f594fdf751
Tidying and tests to bring Dao populator up to full coverage.
2005-03-12 21:56:04 +00:00
Luke Taylor
76f868c777
More tests.
2005-03-12 21:27:22 +00:00
Luke Taylor
765cc02599
Tidying.
2005-03-12 21:24:55 +00:00
Luke Taylor
9f62da7d1c
Better test method names.
2005-03-12 21:20:43 +00:00
Luke Taylor
0a4fc1731a
Tests added to bring X509ProcessingFilter up to full coverage.
2005-03-12 20:47:58 +00:00
Luke Taylor
c3c5487b93
Now sets WebAuthenticationDetails on authentication request token.
2005-03-12 20:46:58 +00:00
Luke Taylor
acee1ef696
Added "details" property
2005-03-12 20:40:05 +00:00
Luke Taylor
5d1cd29dfb
Added tearDown method which resets the context to null to prevent occasional breaking of other test classes.
2005-03-12 13:44:00 +00:00
Luke Taylor
f578915728
Test class for X509 filter.
2005-03-11 17:42:39 +00:00
Luke Taylor
af02c42e9f
First version that works.
2005-03-11 03:15:54 +00:00
Luke Taylor
fbb4bc0873
Added regexp matching within the DN to extract the user name.
2005-03-11 02:47:43 +00:00
Luke Taylor
29050b29b2
Dao populator tests for X.509. Tests matching of regexps in the certificate Subject to extract the user name.
2005-03-11 02:08:07 +00:00
Ben Alex
4763f953d3
FilterChainProxy now supports replacement of ServletRequest and ServetResponse by Filter beans.
2005-03-11 01:41:43 +00:00
Luke Taylor
5c86b97f37
First working (kind of) version.
2005-03-11 00:39:36 +00:00
Ben Alex
c5fe428400
Patch by Matt Raible which returns null if Authentication is anonymous.
2005-03-10 12:00:30 +00:00
Ben Alex
b898b87ffb
Enhance test coverage as part of diagnosis of reported bug at http://forum.springframework.org/viewtopic.php?p=15751 .
2005-03-10 11:39:32 +00:00
Ben Alex
15535fff41
SecurityEnforcementFilter caused NullPointerException when anonymous authentication used with BasicProcessingFilterEntryPoint.
2005-03-10 11:11:25 +00:00
Luke Taylor
08dbf66880
(Currently functionless) entry point implementation for X.509
2005-03-10 03:21:25 +00:00
Luke Taylor
aabcef4c69
Dao populator for X509, mirroring the CAS one.
2005-03-10 03:20:25 +00:00
Luke Taylor
fea1725f39
Removed inappropriate inheritance from AbstractProcessingFilter (doesn't make sense for X509 case).
2005-03-10 03:16:45 +00:00
Luke Taylor
ae91b58685
First stab at X509 authentication provider
2005-03-09 02:14:30 +00:00
Luke Taylor
da3801b914
Javadoc improvements.
2005-03-09 02:02:05 +00:00
Luke Taylor
559f480f4b
Corrected Javadoc typos.
2005-03-07 22:35:28 +00:00
Luke Taylor
ab6d43ff08
Corrected Javadoc typo.
2005-03-07 16:53:42 +00:00
Ben Alex
051a34f859
Support credentialsExpiredUrl as per request made in http://forum.springframework.org/viewtopic.php?t=3862 .
2005-03-07 12:23:48 +00:00
Luke Taylor
5c3799cd16
Changed "opal ticket" to "opaque ticket" in Javadoc.
2005-03-05 19:48:02 +00:00
Luke Taylor
124f33bb09
Corrected Javadoc typo
2005-03-05 18:27:05 +00:00
Luke Taylor
6b12779902
Minor Javadoc corrections
2005-03-05 18:23:04 +00:00
Luke Taylor
4ef54828c0
corrected javadoc link
2005-03-05 01:05:23 +00:00
Ben Alex
f1e071b0f1
Added remember-me services.
2005-03-01 02:30:38 +00:00
Ben Alex
0d33b06990
Fix NullPointerException if a pattern is given without any config attributes (eg /**/*.css=). Contributed by Konstantin Shaposhnikov.
2005-02-28 22:06:53 +00:00
Ben Alex
873c3f6c3d
Improve Linux and non-Sun JDK (specifically IBM JDK) compatibility.
2005-02-28 03:02:32 +00:00
Ben Alex
d47a2190f7
Correct test failure on high performance JREs.
2005-02-27 07:16:38 +00:00
Ray Krueger
44397bb05d
Committing ConcurrentSessionController feature and tests. Documentation is needed.
2005-02-26 21:48:07 +00:00
Ray Krueger
4125db5650
Added in a default constructor to use the original sessionid and a constructor for specifying the sessionId
2005-02-25 05:24:10 +00:00
Ben Alex
693ac5a24a
Anonymous principal support. As requested by the community at various times, including in http://forum.springframework.org/viewtopic.php?t=1925 .
2005-02-23 06:09:56 +00:00
Ray Krueger
3c4faf58c7
HttpSessionEventPublisher, HttpSessionCreatedEvent, HttpSessionDestroyedEvent
...
Used together to provide published events in the ApplicationContext about HttpSessions.
Useful for things like Single Session logins.
2005-02-23 02:54:41 +00:00
Ray Krueger
8b24b1cf7a
MockFilterChain extended TestCase but had no public constructor and no test methods.
...
The expectedToProceed test is internally handled by a static call to TestCase.assertTrue() and TestCase.fail()
2005-02-23 02:47:31 +00:00
Ben Alex
a3818184f4
Added Digest Authentication support (RFC 2617 and RFC 2069).
2005-02-22 06:14:44 +00:00
Ben Alex
dda66a0454
Significantly refactor "well-known location model" to authentication processing mechanism and HttpSessionContextIntegrationFilter model.
2005-02-21 06:48:31 +00:00
Ben Alex
ba02d45677
Clean up imports.
2005-02-21 06:34:16 +00:00
Ben Alex
e52f3eacb1
Use WebAuthenticationDetails for Authentication.getDetails() by default.
2005-02-21 00:09:49 +00:00
Ben Alex
a5ea6f5436
Rewrite FilterChainProxy to separate functionality from FilterToBeanProxy and properly implement filter chaining issues.
2005-02-20 05:40:18 +00:00
Ben Alex
57842d4ba8
IoC container vs servlet container lifecycle separation.
2005-02-20 05:38:57 +00:00
Ben Alex
44f1c83dab
Move MockFilterChain to external class.
2005-02-20 05:38:14 +00:00
Ben Alex
6d693ac0d4
Improve logging.
2005-02-20 05:37:13 +00:00
Carlos Sanchez
7c9fad0477
Added filter chain
2005-02-18 20:08:03 +00:00
Ben Alex
0b296e7cf0
Correct issue with JdbcDaoImpl default SQL query not using consistent case sensitivity as per http://forum.springframework.org/viewtopic.php?t=3526 .
2005-02-15 07:14:59 +00:00
Ray Krueger
1949c3b27e
Added AuthenticationException to the commence method signature of the AutenticationEntryPoint. The best example of this
...
is the BasicProcessingFilterEntryPoint where the authException.getMessage() is used to send back an informative 401,
instead of just the error code.
Added AccessDeniedException to the sendAccessDeniedError method signature. The accessDeniedException.getMessage() result
is used to send an invormative 403 error back to the servletResponse by default.
2005-02-15 03:28:18 +00:00
Ben Alex
beadf24610
Use static HttpServletResponse.SC_UNAUTHORIZED instead of 401 HTTP response code.
2005-02-13 00:59:48 +00:00
Ben Alex
6370fadfdc
FilterSecurityInterceptor now only executes once per request (improves performance with SiteMesh). Suggested by Sanjiv Jivan.
2005-02-11 05:49:41 +00:00
Ben Alex
cbe53e21b9
HttpSessionIntegrationFilter no longer creates a HttpSession unnecessarily.
2005-02-10 07:15:20 +00:00
Ben Alex
834f69168d
Support getUserPrincipal().
2005-02-04 22:38:07 +00:00
Ben Alex
0be77abe75
Allow empty passwords as per http://forum.springframework.org/viewtopic.php?p=13343 .
2005-02-04 09:43:33 +00:00
Ben Alex
4e6a4742bd
Tapestry integration improvements, as per http://forum.springframework.org/viewtopic.php?p=13327
2005-02-04 07:36:46 +00:00
Ray Krueger
82c15b1874
The JaasAuthenticationCallbackHandler handle method now takes a callback and the authentication in progress, the setAuthentication method has been removed.
...
The JaasAuthenticationProvider afterPropertiesSet method now makes use of the java.security.auth.login.config System property before trying to use the login.config.url.X properties.
2005-01-31 05:16:32 +00:00
Carlos Sanchez
debc67fa6d
Allow site deployment from each subproject
2005-01-19 22:18:37 +00:00
Ben Alex
cc669f4e35
Retrieve bean from parent bean factory if not found, as per http://forum.springframework.org/viewtopic.php?t=3005 .
2005-01-19 21:21:07 +00:00
Ben Alex
7e234869a5
Make Serializable.
2005-01-19 21:09:39 +00:00
Ben Alex
99088fe14c
Fix JavaDoc error.
2005-01-16 03:57:43 +00:00
Ben Alex
fd2cc5dbc7
Add subclass hook so it can customise request properties.
2005-01-06 20:32:36 +00:00
Ben Alex
bb1e96c85a
Add notice.txt to generated artifacts.
2005-01-04 22:05:40 +00:00
Ben Alex
d6207106c0
Expand test coverage.
2005-01-04 20:20:21 +00:00
Ben Alex
9176aa0efb
Add new AuthenticationFailure* events.
2005-01-04 20:19:42 +00:00
Ben Alex
c939bcb176
Add account expiration and credentials expiration capabilities.
2005-01-03 01:14:26 +00:00
Ben Alex
6c1e2f23b2
Allow last attempted username to be displayed in views.
2004-12-25 23:38:39 +00:00
Ben Alex
c77cb84f52
Fix group names etc as required to ensure a multiproject:install works from /docs if there is a CLEAN (empty) Maven repository.
2004-12-25 07:02:31 +00:00
Ben Alex
5689807f38
Make Maven sign generated JARs. The last stage of the transition from Ant.
2004-12-24 05:48:54 +00:00
Ben Alex
61a631af26
JavaDocs fix.
2004-12-22 23:49:25 +00:00
Ben Alex
8fb64e1e1b
Fix repository URLs so "viewcvs" URLs (associated with changelog plugin) are all correct.
2004-12-22 03:47:55 +00:00
Ben Alex
dc726ac75c
Clarify and enforce interface interface contract for AuthenticationDao.
2004-12-21 20:53:32 +00:00
Ben Alex
4bcc1222e1
Modifications to support EH-CACHE upgrade (EH-CACHE appears to have changed the way the default cache configuration file gets handled).
2004-12-21 13:04:11 +00:00
Ben Alex
823a2e990b
Add hook methods to AbstractProcessingFilter.
2004-12-20 11:14:34 +00:00
Ben Alex
c5ea35d093
Extend After ACL provider to also filter arrays. Thanks to Joni Suominen.
2004-12-17 21:56:05 +00:00
Ray Krueger
cb61c88478
Increased test coverate to 100%
2004-12-09 23:53:11 +00:00
Ray Krueger
8853ba28e2
Replaced $author$ stuff in javadocs with Ray Krueger
2004-12-09 22:35:53 +00:00
Ray Krueger
41310f26a6
Missed a DOCUMENT ME! spot...
2004-12-09 22:29:12 +00:00
Ray Krueger
3eb6149877
New LoginExceptionResolver interface and base implementation to handle LoginExceptions thrown in the Jaas API. I am commiting this now so that it isn't lost, while a PropertyEditor based solution is investigated.
2004-12-09 22:09:35 +00:00
Ben Alex
c5900cab9c
Added a ContextHolderAwareRequestWrapper to integrate with getRemoteUser() and isUserInRole(String). Thanks to Orlando Garcia Carmona ("paramosyermos" on Spring forums).
2004-12-05 06:11:18 +00:00
Ben Alex
e3b9920d9c
Fix default query string to remove ambiguous columns. Thanks to Aaron Tang.
2004-12-05 05:30:06 +00:00
Ben Alex
89ba20f057
Fix Tomcat compatibility issue where HttpSession unavailable during "logoff". Thanks to Aaron Tang.
2004-12-05 05:29:25 +00:00
Ben Alex
82ed7253d4
Refactor AbstractFilterInvocationDefinitionSource to use a standard URL String in its lookup method, rather than a full FilterInvocation. This will make it easier for views (taglibs etc) to access URI security details without needing to construct a MockFilterInvocation.
2004-12-05 05:04:52 +00:00
Ben Alex
76c82db196
Refactor EH-CACHE integration classes to work with Spring IoC provided Cache rather than manage our own cache internally.
2004-12-05 04:37:05 +00:00
Ben Alex
41b41ba316
Expand test coverage. Clover via Maven (without excluding appropriate patterns like *Exception and debug messages) has modified coverage from 77.2% to 95%.
2004-12-03 06:46:41 +00:00
Ben Alex
07e2037251
Find target domain object argument in a manner that works if nulls are presented for the domain object argument.
2004-12-03 06:43:17 +00:00
Ben Alex
e75fc613b1
Gracefully handle null ContextHolder / Authentication etc.
2004-12-03 06:42:26 +00:00
Ben Alex
7a4a46cc7b
General refactoring of taglibs.
2004-12-03 06:41:48 +00:00
Ben Alex
1b660d4d5b
Handle usernames that are empty Strings.
2004-12-03 06:41:02 +00:00
Ben Alex
ab6df6cfce
Make InternalMethodInvocation package protected for better unit test support.
2004-12-03 06:40:11 +00:00
Ben Alex
f73fc735c2
Improve startup error detection and eliminate unnecessary checks for null application context.
2004-12-03 06:39:07 +00:00
Ben Alex
4c1c7dcff5
Fix bugs.
2004-12-03 06:38:10 +00:00
Ben Alex
22f8cd0c44
Improve null handling.
2004-12-01 02:55:01 +00:00
Ben Alex
3a0e43337c
Improve test coverage and error detection at startup time.
2004-12-01 02:22:24 +00:00
Ben Alex
699f97929a
Fix bug where class should delegate to setDetails method - not set the details directly.
2004-12-01 02:09:15 +00:00
Ben Alex
89eed486e2
Add alwaysUseDefaultTargetUrl feature to AbstractProcessingFilter.
2004-11-22 21:38:14 +00:00
Carlos Sanchez
b0f6c5179a
Documentation improvement
2004-11-20 10:28:01 +00:00
Ben Alex
a159d89ffd
Initial commit.
2004-11-20 05:24:16 +00:00
Ben Alex
4ca1e2fd99
Add logging.
2004-11-20 04:10:05 +00:00
Ben Alex
f251436a99
Improve logging and enable ACL determination to use an Object obtained from an internal method of the located processDomainObjectClass.
2004-11-20 04:09:14 +00:00
Ben Alex
61580d1973
Move RMI context propagation support classes to core, and rename and document to more clearly reflect function.
2004-11-20 04:07:47 +00:00
Ben Alex
ba16c01b90
Add toString() method so more informative when context propagation takes place, such as via ContextPropagatingRemoteInvocation.
2004-11-20 04:06:47 +00:00
Carlos Sanchez
58306157df
*** empty log message ***
2004-11-19 22:20:49 +00:00
Ben Alex
177c00556d
Support just creating the acl_object_identity, without necessarily an acl_permission as well.
2004-11-16 12:22:43 +00:00
Ben Alex
af5917b685
Added BasicAclExtendedDao interface and JdbcExtendedDaoImpl for ACL CRUD.
2004-11-15 13:04:12 +00:00
Ben Alex
bc9a599bf7
Remove noisy logging.
2004-11-15 02:43:21 +00:00
Ben Alex
d6beb9804f
Place authz taglib in correct JAR location (META-INF).
2004-11-15 01:46:23 +00:00
Ben Alex
612971e134
Initial commit of a concrete AfterInvocationManager.
2004-11-15 01:45:03 +00:00
Ben Alex
694bdb603d
Initial commit.
2004-11-15 01:44:20 +00:00
Ben Alex
5f6aa9c49e
Refactoring to support "after invocation" processing.
2004-11-15 01:43:48 +00:00
Ben Alex
03a530b36b
Improve JavaDocs.
2004-11-15 01:42:47 +00:00
Ben Alex
d639e5c02f
Expand logging.
2004-11-15 01:41:45 +00:00
Ben Alex
9972c69408
Support Authentication.getPrincipal() of UserDetails and improve logging.
2004-11-15 01:40:18 +00:00
Ben Alex
e462c5a201
Minor polishing.
2004-11-15 01:36:41 +00:00
Ben Alex
68dc38841f
Add an Authentication and Acl taglib.
2004-11-15 00:46:18 +00:00
Ben Alex
70a9c76f69
Remove unnecessary console output from tests.
2004-11-15 00:37:00 +00:00
Ben Alex
ef2e45df77
Update tests to support incompatible collaborator detection now in AbstractSecurityInterceptor.
2004-11-15 00:36:12 +00:00
Ben Alex
e83c66bb37
Expand test coverage so GrantedAuthorityEffectiveAclsResolver properly handles Authentication with a principal of type UserDetails.
2004-11-15 00:34:32 +00:00
Ben Alex
695948c31d
Remove unused import.
2004-11-12 01:07:59 +00:00
Ben Alex
f1d993f47b
Made BasicAclProvider to only respond to specified ACL object requests.
2004-11-09 21:09:14 +00:00
Carlos Sanchez
cd56f2ed4a
Moved from test to main
2004-11-03 22:35:12 +00:00
Carlos Sanchez
8cf6867cba
Moved name to subprojects
2004-11-01 20:05:42 +00:00
Ben Alex
fde59c2f29
Ad mock method implementation now we're using HttpSession.removeAttribute().
2004-10-30 23:32:53 +00:00
Ben Alex
565c2e580b
Remove debug messages.
2004-10-30 23:32:28 +00:00
Carlos Sanchez
d27fb49803
*** empty log message ***
2004-10-30 22:49:58 +00:00
Carlos Sanchez
55624cf5dd
Moved resources from java dir to resources dir
2004-10-30 22:49:12 +00:00
Carlos Sanchez
928498b53d
Removed AutoIntegrationFilter
2004-10-30 22:45:35 +00:00
Carlos Sanchez
b25a6e002b
*** empty log message ***
2004-10-30 17:15:54 +00:00
Ben Alex
89f6fcf5c9
Refactor to use an application context, thus enabling event publishing and use of DefaultAdvisorAutoProxyCreator.
2004-10-30 06:09:09 +00:00
Ben Alex
537a58d754
Added net.sf.acegisecurity.intercept.event package.
2004-10-30 06:07:17 +00:00
Ben Alex
26f5f1a9b3
Add the AccessDeniedException to the HttpSession as per http://forum.springframework.org/viewtopic.php?t=1515 .
2004-10-30 03:06:05 +00:00
Ben Alex
21f29bbbb3
Fix JRun rejection of null in httpSession.setAttribute() as per http://livedocs.macromedia.com/jrun/4/javadocs/jrun/servlet/session/JRunSession.html .
...
Discussed at http://forum.springframework.org/viewtopic.php?t=1417 .
2004-10-30 02:56:01 +00:00
Ben Alex
73349bf8f8
Add convenience method so subclasses can specify Authentication.setDetails().
2004-10-30 01:19:22 +00:00
Ben Alex
7b0145fba7
Initial AspectJ support.
2004-10-18 06:41:20 +00:00
Ben Alex
992cf44b36
Refactor MethodDefinitionMap to use Method, not MethodInvocation. Refactor AbstractSecurityInterceptor to not force use of Throwable. Move AOP Alliance based MethodSecurityInterceptor to separate package.
2004-10-18 06:38:44 +00:00
Ben Alex
ba163d51ae
Documentation correction.
2004-10-17 07:56:19 +00:00
Ben Alex
f123e9c333
Make MethodDefinitionMap query interfaces defined by secure objects, to properly support MethodDefinitionSourceAdvisor.
2004-10-15 03:47:53 +00:00
Ben Alex
8ec0d89fe4
Improve documentation for abstract contract.
2004-10-15 03:17:57 +00:00