Luke Taylor
|
d253f5e109
|
SEC-1768: Use AopProxyUtils.ultimateTargetClass() to cater for the situation where the security interceptor is being applied to a proxy.
|
2011-06-18 14:35:56 +01:00 |
Luke Taylor
|
5a1ddc660b
|
SEC-1768: Added tests to reproduce "double-proxying" issue combining intercept-methods and tx-annotation-driven. Problem is caused by use of ProxyFactoryBean with auto-proxying.
|
2011-06-18 14:32:31 +01:00 |
Luke Taylor
|
b0a60a7ff2
|
Reset to snapshot version.
|
2011-06-17 11:49:18 +01:00 |
Luke Taylor
|
926be1ca78
|
Intermediate crypto release version.
|
2011-06-17 11:46:19 +01:00 |
Luke Taylor
|
2861a951aa
|
Minor FAQ update on version info.
|
2011-06-17 11:45:56 +01:00 |
Luke Taylor
|
1f1faa6da0
|
Use getClass() in logger instantiation in AbstractLdapAuthenticationProvider.
|
2011-06-15 14:06:57 +01:00 |
Luke Taylor
|
d9ccebd565
|
Add crypto module to LDAP bundlor template
|
2011-06-15 11:47:29 +01:00 |
Luke Taylor
|
89b7b2b935
|
SEC-1764: Remove use of Java 6 method Arrays.copyOfRange.
|
2011-06-15 11:22:17 +01:00 |
Luke Taylor
|
571bfc4869
|
Refactoring to use Utf8 encoder instead of String.getBytes("UTF-8").
|
2011-06-14 18:47:50 +01:00 |
Luke Taylor
|
361b77685d
|
Add crypto as an exported dependency of core in IDEA configuration.
|
2011-06-14 18:47:49 +01:00 |
Luke Taylor
|
2b8d4684a1
|
SEC-1764: Ensure password encoders use UTF-8 charset when creating strings from byte arrays.
|
2011-06-14 18:47:49 +01:00 |
Luke Taylor
|
dc92baa257
|
Remove truststore settings from tutorial sample as they aren't required.
|
2011-06-13 15:03:51 +01:00 |
Luke Taylor
|
e4ecdd55f6
|
Enable https in tutorial sample.
|
2011-06-13 13:45:09 +01:00 |
Luke Taylor
|
52c0ee6756
|
Improve error reporting of missing web classes in namespace handler. Now catches and logs the class-loading error.
|
2011-06-13 13:39:55 +01:00 |
Luke Taylor
|
e27f655e9d
|
SEC-1689: Re-instate crypto as separate library (for use in non-Spring Security apps), as well as packaging with core.
|
2011-06-10 00:01:25 +01:00 |
Luke Taylor
|
ecfffaaa3f
|
Make aspectj dependencies optional throughout and spring-jdbc/tx optional in core poms. Reduces exclusions required in third-party poms (e.g. spring-social).
|
2011-06-09 22:57:49 +01:00 |
Luke Taylor
|
80fd96df6d
|
SEC-1650: Updates and corrections to tutorial sample to fit better with new tutorial.
|
2011-06-07 16:46:38 +01:00 |
Luke Taylor
|
685f12c5a0
|
SEC-1733: Support explicit zero netmask correctly.
|
2011-06-07 12:15:07 +01:00 |
Rob Winch
|
c9b328d8c7
|
SEC-1757: Updated tutorial sample to state that listing of accounts is allowed by anyone and to display accounts for the different types of access to posting to Accounts
|
2011-06-02 21:19:01 -05:00 |
Luke Taylor
|
132163ec2e
|
Add FAQ on accessing password from a UserDetailsService.
|
2011-05-26 18:38:45 +01:00 |
Luke Taylor
|
f5f410ae3b
|
Clean unused imports.
|
2011-05-25 20:39:16 +01:00 |
Luke Taylor
|
ec97b70df9
|
SEC-1668: Allow customization of username parameter in SwitchUserFilter.
|
2011-05-25 20:03:02 +01:00 |
Luke Taylor
|
6d04670f87
|
SEC-1695: Allow customization of the session key under which the SecurityContext is stored.
|
2011-05-25 19:51:47 +01:00 |
Luke Taylor
|
42e0e158b4
|
Simplify Digester utility class.
|
2011-05-25 19:09:08 +01:00 |
Luke Taylor
|
84902ebb50
|
Javadoc correction.
|
2011-05-24 12:01:04 +01:00 |
Luke Taylor
|
b53d430798
|
Doc update to reflect change in cas integration module name since 3.0.
|
2011-05-23 21:29:40 +01:00 |
Luke Taylor
|
21295a58e5
|
SEC-1751: Applied patch to use zero-IV for queryable text encryption.
|
2011-05-23 20:10:16 +01:00 |
Luke Taylor
|
5a4aed238c
|
SEC-1752: Fixed Utf8 codec to take account of the limit of the ByteBuffer returned by CharsetEncoder.encode().
|
2011-05-23 18:55:25 +01:00 |
Luke Taylor
|
e8a1a6e40b
|
Added spring-expression to config module testCompile to fix build.
|
2011-05-19 23:50:35 +01:00 |
Luke Taylor
|
27caecd53f
|
SEC-1452: Added namespace support for custom expression handler for use with web access expressions.
|
2011-05-19 15:27:58 +01:00 |
Luke Taylor
|
63f160dc72
|
SEC-1749: Add support for PageContext lookup of objects and use of PermissionEvaluator when using web access expressions.
|
2011-05-19 15:27:35 +01:00 |
Luke Taylor
|
c758f36629
|
Forgot to add version information test previously
|
2011-05-17 23:54:43 +01:00 |
Luke Taylor
|
3e18be1478
|
SEC-1747: Upgrade to Spring LDAP 1.3.1
|
2011-05-17 23:39:19 +01:00 |
Luke Taylor
|
ce19b470e2
|
SEC-1560: Change AccessControlListTag to use PermissionEvaluator rather than explicit ACL classes.
|
2011-05-17 22:55:20 +01:00 |
Luke Taylor
|
3541099634
|
Correct typo in FAQ.
|
2011-05-17 18:23:48 +01:00 |
Rob Winch
|
3de0041874
|
Reverted cas Readme.txt from instructing to run from samples/cas/sample
|
2011-05-16 22:09:58 -05:00 |
Rob Winch
|
076a75d8c3
|
Cleaned up cas task dependency declarations
|
2011-05-15 22:09:28 -05:00 |
Rob Winch
|
11dc3363cc
|
Moved cas server and cas sample into common parent folder (samples/cas)
|
2011-05-15 22:09:08 -05:00 |
Luke Taylor
|
1b8eee6f07
|
Improve "missing web classes" message in SecurityNamespaceHandler, by indicating that a missing transitive dependency may also be the problem.
|
2011-05-16 00:19:30 +01:00 |
Luke Taylor
|
295ea27526
|
SEC-1743: Separate remoting from core into separate module.
|
2011-05-16 00:19:30 +01:00 |
Rob Winch
|
1c1ffe2f0f
|
Added CA's to server.jks from cacerts included with Sun JDK
- Allow handshake to succeed for the build to upload to amazon
- Allows the same trust store to work for openid and CAS sample applications
|
2011-05-13 18:05:16 -05:00 |
Rob Winch
|
e1f4c3d325
|
Created a casserver module to better isolate it from the cas sample application now that an overlay is being done
|
2011-05-12 22:17:43 -05:00 |
Rob Winch
|
4d786d74cf
|
Reworded CASSampleSpec test method to reflect single logout
|
2011-05-12 22:17:43 -05:00 |
Rob Winch
|
4c43bde064
|
Set log levels to ERROR level when running CAS integration tests
|
2011-05-12 22:17:43 -05:00 |
Rob Winch
|
9525403385
|
Added CAS Server overlay to make single logout be synchronous and enabled itests for the cas sample
|
2011-05-12 22:17:43 -05:00 |
Rob Winch
|
d1cbaf609c
|
Ignore *.log.* since cas uses a rolling log
|
2011-05-12 22:17:43 -05:00 |
Rob Winch
|
be974b398d
|
Added bin/ to ignored files for Eclipse users
|
2011-05-12 22:17:42 -05:00 |
Rob Winch
|
92face623a
|
SEC-1738: removed accidental commit of writeNewPom task
|
2011-05-10 23:23:13 -05:00 |
Rob Winch
|
3d24d6f672
|
SEC-1738: Changed openid4java to be testCompile dependency of spring security config
|
2011-05-10 23:17:36 -05:00 |
Luke Taylor
|
6e91786f92
|
SEC-1734: AbstractRememberMeServices will now default to using a secure cookie if the connection is secure. The behaviour can be overridden by setting the useSecureCookie property in which case the cookie will either always be secure (true) or never (false).
|
2011-05-09 13:36:23 +01:00 |