Luke Taylor
|
dc5417f1d5
|
SEC-1352: Added support for placeholders in <user-service>
The username, password and authorities attributes can now be placeholders.
|
2010-01-05 22:34:10 +00:00 |
|
Luke Taylor
|
893f212fa5
|
Tidying
|
2010-01-02 19:53:19 +00:00 |
|
Luke Taylor
|
bcb1ff8921
|
SEC-1342: Introduced extra factory method in SecurityConfig to get round problem with Spring converting a string with commas to an array
|
2009-12-23 14:12:59 +00:00 |
|
Luke Taylor
|
85a58fd473
|
SEC-1331: Modify namespace to allow omission of user passwords in user-service element and generate random ones internally, preventing authentication against the data..
|
2009-12-18 15:39:13 +00:00 |
|
Luke Taylor
|
1dc4bb112e
|
SEC-1318: Correct logic for checking combination of session-management attributes.
|
2009-12-07 22:40:47 +00:00 |
|
Luke Taylor
|
ac564fc34e
|
SEC-1317: Forgot to commit test from config module.
|
2009-12-07 21:39:49 +00:00 |
|
Luke Taylor
|
d4e4a09801
|
SEC-1312: Add detection of 2.0 schemas. Added check to SecurityNamespaceHandler and reinstated old schemas.
|
2009-12-06 21:15:11 +00:00 |
|
Luke Taylor
|
eddde8ea28
|
SEC-1309: Namespace configurations should support Spring EL. Removed premature conversion of URL paths to lower case, which messes up if they are case-sensitive expressions or placeholders. Some other minor changes to suppport EL configuration.
|
2009-12-01 14:23:58 +00:00 |
|
Luke Taylor
|
3444b31615
|
SEC-1291: Add logout namespace support for custom success handler. Added attribute "success-handler-ref" to <logout> element in namespace.
|
2009-11-17 17:29:43 +00:00 |
|
Luke Taylor
|
9eae7b899c
|
SEC-1284: Added proxy-target-class attribute to method security namespace
|
2009-11-17 16:19:05 +00:00 |
|
Luke Taylor
|
afdd80235c
|
SEC-1272: <authentication-manager> does not register default event handler DefaultAuthenticationEventPublisher. Fixed Spring RC1 - RC2 regression problem with test (addApplicationListener() behaviour has changed).
|
2009-11-17 14:34:43 +00:00 |
|
Luke Taylor
|
d4d5012035
|
SEC-1272: <authentication-manager> does not register default event handler DefaultAuthenticationEventPublisher. Update AuthenticationManagerBeanDefinitionParser to register a DefaultAuthenticationeventPublisher and set it on the registered ProviderManager.
|
2009-11-17 12:55:53 +00:00 |
|
Luke Taylor
|
a2468c523a
|
SEC-1283: AuthenticationConfigBuilder.createAnonymousFilter uses httpElt instead of anonymousElt. Corrected element name.
|
2009-11-04 17:39:26 +00:00 |
|
Luke Taylor
|
197737a2b4
|
SEC-1281: make sure correct 'key' value is used for RememberMeAuthenticationProvider when external RememberMeServices is used
|
2009-11-04 14:55:58 +00:00 |
|
Luke Taylor
|
799b96520b
|
SEC-1269: Combining <form-login> and <open-id> fails to find entry point. Fixed entry point choice conditions when using openID and/or form-login
|
2009-10-14 00:30:28 +00:00 |
|
Luke Taylor
|
ed2ddf9323
|
SEC-1263: Add FactoryBean for namespace AuthenticationManager. <http> now uses AuthenticationManagerFactoryBean. Method security already uses a delegate object to lookup the AuthenticationManager. This now uses the same error message if the bean isn't found, rather than allowing the BeanFactory NoSuchBeanDefinitionException to be thrown directly.
|
2009-10-09 14:41:34 +00:00 |
|
Luke Taylor
|
e398922f85
|
Removing elements that are no longer supported from the namespace
|
2009-10-08 14:40:52 +00:00 |
|
Luke Taylor
|
80eb47c6fe
|
SEC-1261: Convert FilterChainOrder to an enum (SecurityFilters).
|
2009-10-08 13:18:32 +00:00 |
|
Luke Taylor
|
1286741c7c
|
SEC-1259: Improve consistency of authentication filter names.
|
2009-10-07 14:43:55 +00:00 |
|
Luke Taylor
|
f213cc5d9e
|
SEC-1257: APIs using List<ConfigAttribute> should use a Collection instead. Converted.
|
2009-10-06 19:46:44 +00:00 |
|
Luke Taylor
|
5d486a51b6
|
SEC-1256: Added support for expression attributes in filter-security-metadata-source configuration.
|
2009-10-06 16:39:56 +00:00 |
|
Luke Taylor
|
07d7c0ddae
|
Renamed form and openID filters to shorten names
|
2009-10-05 17:33:34 +00:00 |
|
Luke Taylor
|
1042305cfe
|
Renamed web.wrapper to web.servletapi. Added some package.html files.
|
2009-10-05 16:59:37 +00:00 |
|
Luke Taylor
|
673cf300fb
|
SEC-1229: Refactoring to remove package cycles.
|
2009-10-05 16:40:32 +00:00 |
|
Luke Taylor
|
acf13c74ca
|
SEC-1229: Refactored authentication.concurrent in core, moving classes into core.session
|
2009-10-05 15:51:00 +00:00 |
|
Luke Taylor
|
2b89ebdfbb
|
SEC-1229: Further doc and mods to namespace config/naming to make it more consistent
|
2009-10-03 16:08:51 +00:00 |
|
Luke Taylor
|
073198886d
|
SEC-1255: Modified UrlUtils. Full request URL for redirects uses the requestURI (which is encoded). The URL for path comparsions is built using the servletpath, as before.
|
2009-10-02 17:29:43 +00:00 |
|
Luke Taylor
|
2a1430f1ce
|
SEC-1229: Removed legacy concurrency classes
|
2009-09-29 16:18:25 +00:00 |
|
Luke Taylor
|
ebada9fd12
|
SEC-1229: Added support for parsing error URL in session-management
|
2009-09-29 16:17:05 +00:00 |
|
Luke Taylor
|
7109b7e183
|
Import cleaning.
|
2009-09-29 00:30:29 +00:00 |
|
Luke Taylor
|
aa153681bf
|
SEC-1229: Added session-management element to namespace and refactored existing session-related attributes and concurrency control. Refactored <http> parsing code to split it up into more manageable units.
|
2009-09-29 00:29:09 +00:00 |
|
Luke Taylor
|
fa7404741b
|
SEC-1167: Introduce more flexible SavedRequest handling. Add namespace support for a custom RequestCache through the request-cache element.
|
2009-09-09 21:40:12 +00:00 |
|
Luke Taylor
|
d099d14e9b
|
SEC-1235: Added test to attempt to verify (failed to reproduce).
|
2009-09-05 14:14:12 +00:00 |
|
Luke Taylor
|
8632946f30
|
SEC-1213: Added "order" atrribute to global-method-security
|
2009-09-04 15:54:42 +00:00 |
|
Luke Taylor
|
2039200617
|
SEC-1217: AbstractRememberMeServices should set 'secure' attribute on remember-me cookie if in secure context. Added "useSecureCookie" configuration property and corresponding use-secure-cookie attribute in namespace.
|
2009-09-01 16:08:20 +00:00 |
|
Luke Taylor
|
dbcb13ad14
|
SEC-1229: Redesign Concurrent Session Control implementation. Renamed session strategy interface and introduced SessionAuthenticationException for rejection of session/Authentication combination.
|
2009-08-31 22:48:49 +00:00 |
|
Luke Taylor
|
471206a29d
|
SEC-1229: Redesign Concurrent Session Control implementation. Added ConcurrentSessionControlAuthenticatedSessionStrategy
|
2009-08-27 10:43:01 +00:00 |
|
Luke Taylor
|
fe33f08b73
|
SEC-1201: Allow requires-channel attribute to take placeholders.
|
2009-08-23 16:42:06 +00:00 |
|
Luke Taylor
|
ea01e9cdf7
|
SEC-1201: PropertyPlaceholderConfigurer does not work for intercept-url attributes. Ensure that channel processing handles paths which are placeholders.
|
2009-08-23 15:57:59 +00:00 |
|
Luke Taylor
|
9bf8656d66
|
SEC-1201: PropertyPlaceholderConfigurer does not work for intercept-url attributes. Added use of ManagedMaps and BeanDefinitions to support placeholders in the pattern and access attributes.
|
2009-08-22 21:09:34 +00:00 |
|
Luke Taylor
|
579644fa95
|
SEC-1225: Use bean references for authentication providers. Updated AuthenticationManagerBDP to regsiter the providers as top level beans.
|
2009-08-22 12:37:14 +00:00 |
|
Luke Taylor
|
48988bde84
|
SEC-935: Support for OpenID attribute exchange and changes to namespace syntax to allow simple configuration of attributes to request.
|
2009-08-13 23:55:25 +00:00 |
|
Luke Taylor
|
f536c80020
|
SEC-1202: Removed SpringSecurityFilter and replaced with use of GenericFilterBean from spring-web
|
2009-08-10 14:18:18 +00:00 |
|
Luke Taylor
|
966f3e4101
|
SEC-1182: Added tst to confirm that this is no longer an issue due to other changes
|
2009-08-10 11:32:02 +00:00 |
|
Luke Taylor
|
b4bb489638
|
SEC-1164: Further registering on bean components for tooling and removal of global ids.
|
2009-08-08 21:08:12 +00:00 |
|
Luke Taylor
|
229866e293
|
SEC-1142: Support for session timeout detection. Added namespace support for invalid-session-url
|
2009-08-07 23:57:10 +00:00 |
|
Luke Taylor
|
0f6642d3ab
|
SEC-1216: Replacement of custom-after-invocation-provider with after-invocation-provider element. Some changes to help prevent proxying of aop infrastructure classes (use of AopInfrastructureBean marker interface)
|
2009-08-04 00:18:07 +00:00 |
|
Luke Taylor
|
5953af0f6b
|
SEC-1196: Change use of <authentication-manager> to actually register the global ProviderManager instance. This element now registers the global ProviderManager instance and must contain any authentication-provider elements (or ldap-authentication-provider elements).
|
2009-08-03 00:21:11 +00:00 |
|
Luke Taylor
|
c5d6484b54
|
SEC-1210: RememberMe filter misses UserDetailsService in default <http /> tag config when it is declared in parent app context. Fixed by getting the UserDetailsServiceInjectionPostProcessor to check ancestor bean factories for a UserDetailsService if one isn't found in the current bean factory.
|
2009-07-31 19:40:20 +00:00 |
|
Luke Taylor
|
6ae61f95db
|
Minor updates to test XML context implementation.
|
2009-07-31 19:37:05 +00:00 |
|