3961 Commits

Author SHA1 Message Date
Luke Taylor
3469a8d4a3 Javadoc. 2009-12-07 21:40:06 +00:00
Luke Taylor
ac564fc34e SEC-1317: Forgot to commit test from config module. 2009-12-07 21:39:49 +00:00
Luke Taylor
02a9db7bcf SEC-1317: Removed check in ProviderManager.getProviders() for empty provider list. A ProviderManager with a non-null parent may have an empty provider list. The afterPropertiesSet() method performs the necessary checks. 2009-12-07 21:38:40 +00:00
Luke Taylor
444d93b13f SEC-1316: Remove 'removeAfterRequest' property from AnonymousAuthenticationFilter 2009-12-07 13:54:39 +00:00
Luke Taylor
b53af68215 Corrected config error in concurrent session docs. 2009-12-07 00:07:53 +00:00
Luke Taylor
d4e4a09801 SEC-1312: Add detection of 2.0 schemas. Added check to SecurityNamespaceHandler and reinstated old schemas. 2009-12-06 21:15:11 +00:00
Luke Taylor
ab48d72cc2 Extra doc info on sharing of SecurityContext between threads 2009-12-06 19:30:23 +00:00
Luke Taylor
b27d7afd24 SEC-1315: Modify HttpSessionSecurityContextRepository to check for anonymous token before creating a session. Moved the anonymity check to be before the session creation. 2009-12-06 15:28:03 +00:00
Luke Taylor
aee6b8f3f9 SEC-1314: Deprecate cloneFromHttpSession and securityContextClass in HttpSessionSecurityContextRepository. Both deprecated. 2009-12-06 15:09:33 +00:00
Luke Taylor
dab76249db Added gradle build files (experimental) 2009-12-04 21:33:17 +00:00
Luke Taylor
40056f2e4a Minor doc corrections 2009-12-02 23:45:29 +00:00
Luke Taylor
48dcc211e9 SEC-1148: Simple classname mapping from 2.0 to 3.0 2009-12-02 22:44:30 +00:00
Luke Taylor
2d1a5db9a0 Updated to Spring RC3 2009-12-01 17:48:35 +00:00
Luke Taylor
910c1163e8 Minor doc updates 2009-12-01 16:49:42 +00:00
Scott Battaglia
dada789814 NOJIRA
removed unnecessary cast and use StringBuilder rather than non-final String and concatenation.
2009-12-01 15:19:56 +00:00
Luke Taylor
ed92d5ea71 SEC-1304: Removed unused compareTo method from custom GrantedAuthority. 2009-12-01 14:32:57 +00:00
Luke Taylor
eddde8ea28 SEC-1309: Namespace configurations should support Spring EL. Removed premature conversion of URL paths to lower case, which messes up if they are case-sensitive expressions or placeholders. Some other minor changes to suppport EL configuration. 2009-12-01 14:23:58 +00:00
Luke Taylor
8a0f69b955 SEC-1295: Placing Security on Roo Aspected method fails. Added suggested fix - check for null target and use Signature.declaredType instead. 2009-11-30 22:00:49 +00:00
Luke Taylor
7e0c7ffc0e SEC-1304: Removed "Comparable" from GrantedAuthority 2009-11-30 21:27:13 +00:00
Luke Taylor
e72cfd58d4 SEC-1304: Remove Comparable interface from GrantedAuthority to enable it to be imlemented by an enum. 2009-11-30 21:22:11 +00:00
Luke Taylor
1df82654e3 SEC-1310: Added toString() implementations to Pre and PostInvocationExpressionAttribute classes. 2009-11-30 17:32:03 +00:00
Luke Taylor
4582afa739 Spelling fix in Javadoc 2009-11-29 13:17:58 +00:00
Luke Taylor
38dcf3859e Minor doc correction 2009-11-28 12:35:38 +00:00
Luke Taylor
c9ab463af7 Minor docbook updates and fixes to class/interface index generation script and xsl 2009-11-27 19:04:35 +00:00
Luke Taylor
6688d41705 Added faq on role prefix 2009-11-27 13:30:11 +00:00
Luke Taylor
999eadc540 Minor refactoring to use generics and avoid converting collections to arrays. 2009-11-25 22:51:53 +00:00
Luke Taylor
330e71eb8f Minor Javadoc. 2009-11-25 21:01:04 +00:00
Luke Taylor
8571571eaa SEC-1306: OpenIDAttribute class is not marked as Serializable. Added Serializable interface. 2009-11-24 14:50:01 +00:00
Luke Taylor
30b7000875 SEC-1178: Updates to EL docs 2009-11-24 14:41:17 +00:00
Luke Taylor
e9402fa0f9 Removed commented deps from pom. 2009-11-24 09:34:05 +00:00
Luke Taylor
69699431b1 SEC-1303: Added internal Hex and Base64 classes, and moved commons-codec dependency to test scope 2009-11-24 09:31:03 +00:00
Luke Taylor
cd6711d21a Doc updates. 2009-11-24 09:29:22 +00:00
Scott Battaglia
46ef4239ca SEC-1228
added NO_PASSWORD instead of passing in NULL since the User object does not allowe NULL for the password.
2009-11-18 15:19:55 +00:00
Scott Battaglia
585311aa4a SEC-1299
upgraded to CAS Client for Java 3.1.9
2009-11-18 15:10:16 +00:00
Scott Battaglia
f35cb48407 NOJIRA
changed constructor back to collection.  Accidentally set to List due to old code residing on notebook.
2009-11-18 15:09:56 +00:00
Luke Taylor
6eec9c4d95 Added custom-filter element to namespace appendix in manual 2009-11-17 23:59:36 +00:00
Scott Battaglia
e812c58e04 NOJIRA
fixed changed constructor
2009-11-17 23:52:26 +00:00
Luke Taylor
5546698fef SEC-1253: Decouple spring-security-config module from spring-security-web. Added ClassUtils.isPresent() check for FilterChainProxy before attempting to register web-related parsers and decorators. Added use of namespace to dms sample for testing. 2009-11-17 23:39:42 +00:00
Luke Taylor
4d8956a227 SEC-1288: Changed claimedIdentityFieldName in OpenIDAuthenticationFilter to "openid_identifier", as recommended by the 2.0 spec. 2009-11-17 22:05:38 +00:00
Luke Taylor
693d2bce03 SEC-1286: Fixed toString() output. 2009-11-17 21:44:52 +00:00
Luke Taylor
66b1b1957c SEC-1298: Deleted custom-filter BeanDefinitionDecorator 2009-11-17 21:36:11 +00:00
Luke Taylor
9b49dce8b5 SEC-1297: Added bundlor support to taglibs jar 2009-11-17 17:58:51 +00:00
Luke Taylor
3444b31615 SEC-1291: Add logout namespace support for custom success handler. Added attribute "success-handler-ref" to <logout> element in namespace. 2009-11-17 17:29:43 +00:00
Scott Battaglia
f0a5572188 SEC-1228
fixed mistyped class name
2009-11-17 16:26:53 +00:00
Luke Taylor
9eae7b899c SEC-1284: Added proxy-target-class attribute to method security namespace 2009-11-17 16:19:05 +00:00
Luke Taylor
d84542cf88 SEC-1285: minor vulnerability in BasicProcessingFilter. Changed logging of Basic authentication information. 2009-11-17 15:29:07 +00:00
Luke Taylor
afdd80235c SEC-1272: <authentication-manager> does not register default event handler DefaultAuthenticationEventPublisher. Fixed Spring RC1 - RC2 regression problem with test (addApplicationListener() behaviour has changed). 2009-11-17 14:34:43 +00:00
Luke Taylor
b39db5b711 Removed jaxen from template.mf 2009-11-17 14:25:20 +00:00
Luke Taylor
c922021d28 SEC-1287: Regression with fix SEC-1022 - cannot register custom permissions w/BasicLookupStrategy. Added setter method for PermissionFactory field. 2009-11-17 13:13:54 +00:00
Luke Taylor
d4d5012035 SEC-1272: <authentication-manager> does not register default event handler DefaultAuthenticationEventPublisher. Update AuthenticationManagerBeanDefinitionParser to register a DefaultAuthenticationeventPublisher and set it on the registered ProviderManager. 2009-11-17 12:55:53 +00:00