122e1c47ed
Changed rnc filename prior to 2.0.2 release
2008-06-01 19:34:50 +00:00
64ab7e534c
Spelling corrections in Javadoc.
2008-06-01 17:26:27 +00:00
ab6d29d927
SEC-862: Make logoutSuccessUrl accessible to sub-classes.
2008-06-01 16:15:09 +00:00
2a510f3539
Added question on login with multiple fields to faq
2008-06-01 15:25:39 +00:00
7c0f8b9756
Corrected typo in docbook.
2008-05-30 20:48:05 +00:00
1d9d7eb9a7
Removed accidental commit of SavedRequest clearing code in TargetUrlResolverImpl
2008-05-30 17:53:09 +00:00
0cfcc0e9f1
Tidying Javadoc
2008-05-30 17:51:23 +00:00
373f7b648b
Corrected outdated filter name in Javadoc
2008-05-30 17:49:03 +00:00
a5cae70949
SEC-800: Removed references to outdated method configuration classes.
2008-05-30 16:35:09 +00:00
ecd2cc6da7
Added some Assert calls to setters and improved comments.
2008-05-30 15:29:51 +00:00
f228d013d8
SEC-861: Change default value of justUseSavedRequestOnGet to false
2008-05-30 15:09:51 +00:00
4de4bb8e87
SEC-860: Added setter for authenticationDetailsSource to AbstractRememberMeServices
2008-05-30 14:29:32 +00:00
f8cded10ee
Typo.
2008-05-30 11:20:16 +00:00
c031588975
SEC-606: Added support for customizable credentials character set.
2008-05-29 18:00:15 +00:00
36a192b70f
SEC-858: Replaced integer properties in schema with strings to allow use of placeholders.
2008-05-29 16:13:14 +00:00
980a72f9a0
Removed TODO (done).
2008-05-29 15:54:50 +00:00
517a7f117a
SEC-857: Make request wrapper getParameterValues() consistent with getParameterMap() etc.
2008-05-29 15:49:43 +00:00
244579faf4
OPEN - issue SEC-856: GroupManager JdbcUserDetailsManager implementation: addGroupAuthority() method doesn't work.
...
http://jira.springframework.org/browse/SEC-856 . Refactored class to remove the JDBC-related inner classes.
2008-05-28 16:25:28 +00:00
87ba871605
Minor doc updates
2008-05-28 13:38:33 +00:00
d63536cc0d
SEC-821: Added support for eternal session registry and concurrent session controller to the 2.0.2 namespace.
2008-05-27 13:14:21 +00:00
8b5bbe3800
SEC-830: Changed SavedRequestAwareWrapper to make wrapped request parameters take precedence over saved request ones.
2008-05-25 22:57:03 +00:00
cf4072c517
Context file improvements (based on sts suggestions)
2008-05-25 20:57:07 +00:00
4b45e5d7c2
Fixed OSGi version numbers in ranges [x,y] by adding a property pom.version.osgi
2008-05-25 20:55:17 +00:00
45c3084502
SEC-836: Made LDAP namespace elements use subtree group searching by default.
2008-05-23 23:57:01 +00:00
871e529840
SEC-850: custom-authentication-provider Registering Separate Bean Definitions in App Context and Providers List
...
http://jira.springframework.org/browse/SEC-850 . Added extra test.
2008-05-23 23:32:57 +00:00
d1005e4cfb
SEC-850: custom-authentication-provider Registering Separate Bean Definitions in App Context and Providers List
...
http://jira.springframework.org/browse/SEC-850 . Changed bean decorator to add a bean reference to the ProviderManager rather than a bean definition.
2008-05-23 23:25:09 +00:00
9ce0270226
Fixed typo in test name
2008-05-23 22:57:30 +00:00
7603ce2f97
SEC-848: Remove all Spring LDAP dependecy loading from namespace parsers
...
http://jira.springframework.org/browse/SEC-848 . Replaced class references with class names.
2008-05-23 21:30:57 +00:00
859e99edf4
SEC-851: Fix port number in LDAP sample.
2008-05-23 21:24:48 +00:00
25ba269db0
SEC-835: use setContentType on response for J2EE 1.3 compatibility.
2008-05-23 20:55:10 +00:00
11b448c0e0
SEC-847: Updated the xsl file to inline openid-login and other elements
2008-05-23 16:29:44 +00:00
08c5fe8925
Fixed autoboxing issue
2008-05-22 12:19:00 +00:00
fbe3ca48f4
SEC-823, SEC-843: Allow setting of custom RememberMeServices and token validity periodon remember-me namespace element
2008-05-21 16:03:05 +00:00
3e33b8a880
Update InMemoryXmlApplicationContext to use 2.0.2 schema
2008-05-20 22:46:37 +00:00
b60c578b25
SEC-844: Support for SHA-256 hashing.
2008-05-20 22:45:02 +00:00
03981ab6a0
SEC-844: Added sec-256 to namespace schema
2008-05-20 22:32:03 +00:00
e9adbd4d62
SEC-844, SEC-843, SEC-823: Added support for sha-256, custom remember-me services and setting of remember me token validity period to namespace schema. Also added 2.0.2 XSD file
2008-05-20 19:48:32 +00:00
29d31b72d0
SEC-837: Add special character filtering to LDAP search filters
2008-05-20 19:25:37 +00:00
3fb1f59fde
SEC-837: Add special character filtering to LDAP search filterscore/src/test/java/org/springframework/security/ldap
2008-05-20 19:22:49 +00:00
219d2e8962
Corrected link
2008-05-20 10:57:17 +00:00
ff215e6750
Minor doc fixes
2008-05-20 10:54:29 +00:00
6ae81d553b
SEC-842: Minor doc fixes
2008-05-20 10:48:59 +00:00
5af53da106
Improved doc for'filters' attribute
2008-05-18 11:09:50 +00:00
2329dadf48
Removed jalopy parameter comments
2008-05-15 17:58:15 +00:00
fb5eefeea5
SEC-740: Finished preauth chapter
2008-05-15 17:00:45 +00:00
f269373442
IDE-791: Remove explicit Spring LDAP class dependencies from LdapServerBDP.
2008-05-15 14:33:42 +00:00
4f6b4e4bfd
Make sample login pages use c:out for data output
2008-05-15 12:48:13 +00:00
8b2c0468ff
OPEN - issue SEC-834: Session fixation attack protection will cause problems with URL rewriting
...
http://jira.springframework.org/browse/SEC-834 . Modified HttpSecurityBDP to add session-fixation parameters to openId and form-login filters. Also added sessionRegistry property to AbstractProcessingFilter so that it doesn't conflict with concurrent session control.
2008-05-15 01:34:14 +00:00
d17a2da9e0
SEC-834: Session fixation attack protection will cause problems with URL rewriting
...
http://jira.springframework.org/browse/SEC-834 . Changed position of SessionFixationProtectionFilter and modified it to make a decision about whether authentication has taken place prior to calling doFilter(). Previously it did this on the return through the filter chain, which caused the problem described in this issue.
2008-05-15 00:26:27 +00:00
7f38c656ca
SEC-820: Expand regular expression used in hierarchical roles.
2008-05-14 22:59:33 +00:00
Luke Taylor