de886e36fa
SEC-624: Expanded general info on obtaining samples and added pointers to ldap and cas versions
2008-05-10 17:21:18 +00:00
ad9a667b75
SEC-624: Inserted sub-sections for key class definitions so they appear in toc
2008-05-10 17:19:46 +00:00
f70701d55a
SEC-624: Added section on 'getting the source' for reference from samples chapter
2008-05-10 17:18:29 +00:00
e1b226ee57
Added 2.0.2 namespace file
2008-05-10 17:16:46 +00:00
af0153d833
Extended intro to Authentication part to include pointers to tech overview and namespace config
2008-05-10 17:10:49 +00:00
d78a021fe1
Added basic intro to preauth
2008-05-10 16:07:39 +00:00
e1c17450b3
Updated faqs to add infinite loop and access denied debug message
2008-05-10 12:31:14 +00:00
add2649397
Javadoc typo.
2008-05-09 18:09:56 +00:00
781d88bd30
OPEN - issue SEC-825: Query string isn't beig stripped from URLs when ant matcher is in use (regression issue)
...
http://jira.springframework.org/browse/SEC-825 . Make sure the property is set on DefaultFilterInvocationDefinitionSource when ant paths are in use.
2008-05-09 18:08:32 +00:00
1030dca353
SEC-786: Added information on the need ofor a UserDetailsService if using auto-config/remember-me
2008-05-09 15:01:39 +00:00
b99f9d343d
SEC-624: Added some info on use of role-prefix
2008-05-09 14:25:42 +00:00
c0e829a41d
SEC-700: Added info on new remember-me imlementation and namespace config examples
2008-05-08 15:59:01 +00:00
5a1258a4ca
Corrected references to parts and reading order
2008-05-08 15:54:27 +00:00
883b92e7bd
SEC-822: Converted to long arithmetic to prevent integer overflowing with long token validity periods
2008-05-08 15:07:40 +00:00
301d021bf5
SEC-817: NPE in org.springframework.security.config.FilterChainProxyPostProcessor
...
Reversed order of beanName.equals() call as suggested.
2008-05-07 13:58:53 +00:00
8ad2d681ab
SEC-818: Changed redirect URL validation to ignore potential property placeholders at parsing time and report a warning through the parser context rather than an error. Also validated the URLs in the beans themselves using Asserts, so an exception will occur later when the beans have been created rather than while assembling the bean definitions.
2008-05-07 13:49:20 +00:00
5cf0c84e2f
SEC-814: Added standard bean config to ldap example and updated doc to provide some pointers to DefaultLdapAuthoritiesPopulator
2008-05-06 14:50:14 +00:00
afc757e618
Removed reference to LdapDataAccessException since it isn't actually mentioned except in javadoc
2008-05-06 14:43:52 +00:00
c333070fe3
Javadoc tidying
2008-05-06 13:59:46 +00:00
fca3a2a709
SEC-812: Added missing TextUtils file
2008-05-05 19:09:09 +00:00
fa44c74993
SEC-812: Added entity-escaping of username stored under last username key, to prevent problems if it is rendered in a page without escaping the text.
2008-05-05 18:37:02 +00:00
06719053f1
Removed commons lang dependency.
2008-05-05 17:18:47 +00:00
e7b6fe09e1
Corrected css for 'poweredBy'
2008-05-03 16:18:19 +00:00
9961c7f867
Moved to correct build location.
2008-05-02 10:52:57 +00:00
7a2e1e13d3
SEC-811: Provide a mechanism to allocate and rebuild cryptographically strong, randomised tokens.
2008-05-02 10:38:56 +00:00
a599ef5398
[maven-release-plugin] prepare for next development iteration
2008-05-01 20:09:03 +00:00
3e808335a4
[maven-release-plugin] prepare release spring-security-parent-2.0.1
2008-05-01 20:07:46 +00:00
054e2f6c38
SEC-624: Start of preauth document
2008-05-01 19:51:35 +00:00
79ca0d1612
Set correct 'test' scope on core-tests dependency
2008-05-01 19:47:47 +00:00
18a9965b80
Moved dummy file out of default package for easy exclusion from javadoc
2008-05-01 19:45:36 +00:00
de179c3e46
Fixed javadoc links
2008-05-01 19:44:34 +00:00
fc498954c6
Updated sample context files to point at 2.0.1 schema
2008-05-01 17:51:48 +00:00
014f21ee85
Deleted attributes sample
2008-05-01 17:50:47 +00:00
6ecfa0541f
SEC-806: Osgi-ified more modules
2008-05-01 17:11:31 +00:00
4984d4be65
OPEN - issue SEC-757: Add validation of redirect URLs on namespace
...
http://jira.springframework.org/browse/SEC-757 . Added validation method to ConfigUtils and calls to it for url attributes.
2008-05-01 16:39:31 +00:00
af3dc22586
added Ruud S. to contributors list
2008-05-01 16:37:33 +00:00
26d2b03667
Updates to heavyduty sample
2008-05-01 16:36:16 +00:00
e7e256a9d5
SEC-787: Consistently use lowercase in all ACL module SQL statements.
2008-05-01 07:48:10 +00:00
0df9dee9dd
SEC-806: Improved OSGi bundle version information support
2008-04-30 18:02:47 +00:00
81ebd094ff
OPEN - issue SEC-808: Switch namespace schema version to 2.0.1 and update spring.schemas
...
http://jira.springframework.org/browse/SEC-808 . Replaced 2.0 text with that from the 2.0 release, rather than the website schema.
2008-04-29 18:59:25 +00:00
473f6a32c6
OPEN - issue SEC-808: Switch namespace schema version to 2.0.1 and update spring.schemas
...
http://jira.springframework.org/browse/SEC-808 . Created new 2.0.1 schema files and updated tests to use them.
2008-04-29 18:53:33 +00:00
8281aeb0da
SEC-807: Allow mapping to a standard Ldap UserDetails through the namespace
...
http://jira.springframework.org/browse/SEC-807 . Added extra test for Ldap provider parser.
2008-04-29 18:01:59 +00:00
e4b32b8d29
OPEN - issue SEC-807: Allow mapping to a standard Ldap UserDetails through the namespace
...
http://jira.springframework.org/browse/SEC-807 . Added support for user-details-class attribute to ldap-authentication-provider and ldap-user-service.
2008-04-29 16:53:24 +00:00
104716fedb
SEC-805: Add extra fields to InetOrgPerson
...
http://jira.springframework.org/browse/SEC-805 . Added a substantial number of new fields to the class.
2008-04-29 14:39:58 +00:00
49bec559a9
SEC-804: Added notes to LDAP section to explain how to customize returned UserDetails
2008-04-29 10:57:52 +00:00
f96fa66a60
Added Michael Mayr to contributors list
2008-04-29 10:56:47 +00:00
ef112f7967
Fixed autoboxing problem.
2008-04-28 15:26:20 +00:00
341455cde4
SEC-799: Import cleaning following other changes.
2008-04-28 15:19:25 +00:00
2d692718e0
SEC-799: Add better detection of missing server-ref element for <ldap-user-service> and <ldap-authentication-provider />
...
http://jira.springframework.org/browse/SEC-799 . Updated ContextSourceSettingPostProcessor to set the standard ContextSource as an alias if it is needed by a bean but has not been set (because the user specified their own server id on <ldap-server />).
2008-04-28 15:01:20 +00:00
270fa92780
Improved Javadoc comment
2008-04-28 09:20:37 +00:00
Luke Taylor
Ben Alex