Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							df1def412e 
							
						 
					 
					
						
						
							
							Changed to using new alias for security filter chain in samples.  
						
						
						
						
					 
					
						2008-02-01 14:28:04 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							5738a51040 
							
						 
					 
					
						
						
							
							SEC-651: Support for ldap-user-service bean.  
						
						
						
						
					 
					
						2008-01-28 00:47:34 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							acf5601714 
							
						 
					 
					
						
						
							
							SEC-645: Reimplementation of X509 provider and namespace implementation.  
						
						
						
						
					 
					
						2008-01-27 22:45:44 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							aeba732ba5 
							
						 
					 
					
						
						
							
							SEC-647: Created separate "certificates" directory so SSL certificates and keys can be shared between different sample applications. Added key for user "scott" and separate certificate authority pem file (can be installed in a browser).  
						
						
						
						
					 
					
						2008-01-27 20:42:10 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							82940db6c8 
							
						 
					 
					
						
						
							
							SEC-648: Added custom-authentication-provider support.  
						
						
						
						
					 
					
						2008-01-27 13:31:34 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							e44e641106 
							
						 
					 
					
						
						
							
							SEC-647: Updated server keystore (new certificate using our own Test CA) and added client certificates for users rod and dianne.  
						
						
						
						
					 
					
						2008-01-26 17:21:23 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							b85f76e6c1 
							
						 
					 
					
						
						
							
							Added SSL support to the tutorial app Jetty plugin configuration and added a requirement for SSL on the "extremely secure" page.  
						
						
						
						
					 
					
						2008-01-24 16:30:06 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							342677fabc 
							
						 
					 
					
						
						
							
							Removed auto-config from tutorial sample and added commented out ldap support. Updated ldif file to match sample users.  
						
						
						
						
					 
					
						2008-01-23 22:21:39 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							462b4b450f 
							
						 
					 
					
						
						
							
							Added use of authz tag to tutorial. Upgraded to use webapp 2.4 xsd. Changed JSTL dependency to 1.2  
						
						
						
						
					 
					
						2008-01-18 18:17:09 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							10ec13e4e2 
							
						 
					 
					
						
						
							
							[maven-release-plugin] prepare for next development iteration  
						
						
						
						
					 
					
						2008-01-02 22:42:21 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							2c5090da90 
							
						 
					 
					
						
						
							
							[maven-release-plugin] prepare release release_2_0_M1  
						
						
						
						
					 
					
						2008-01-02 22:41:31 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							09242ec66d 
							
						 
					 
					
						
						
							
							[maven-release-plugin] rollback the release of release_2_0_M1  
						
						
						
						
					 
					
						2008-01-02 22:31:09 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							42dcccd1b7 
							
						 
					 
					
						
						
							
							[maven-release-plugin] prepare release release_2_0_M1  
						
						
						
						
					 
					
						2008-01-02 22:18:28 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							aafbb5bb67 
							
						 
					 
					
						
						
							
							[maven-release-plugin] rollback the release of release_2_0_M1  
						
						
						
						
					 
					
						2008-01-02 22:10:46 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							425508d70d 
							
						 
					 
					
						
						
							
							[maven-release-plugin] prepare release release_2_0_M1  
						
						
						
						
					 
					
						2008-01-02 22:01:34 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							0b1e17f69a 
							
						 
					 
					
						
						
							
							[maven-release-plugin] rollback the release of release_2_0_M1  
						
						
						
						
					 
					
						2008-01-02 21:54:37 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							07aa0c6880 
							
						 
					 
					
						
						
							
							[maven-release-plugin] prepare release release_2_0_M1  
						
						
						
						
					 
					
						2008-01-02 21:52:42 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							46c99d1991 
							
						 
					 
					
						
						
							
							Converted tutorial context file to match namespace changes.  
						
						
						
						
					 
					
						2007-12-23 16:36:44 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							e65cb9b472 
							
						 
					 
					
						
						
							
							Made group names singular and added "teller" role.  
						
						
						
						
					 
					
						2007-12-14 20:41:33 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							09f68400ec 
							
						 
					 
					
						
						
							
							Add <intercept-methods> to example, but it is disabled in favour of @Secured annotation. Still, we include it so people can have a play around and switch between the two syntaxes easily in demos etc.  
						
						
						
						
					 
					
						2007-12-14 19:56:31 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							55e4568003 
							
						 
					 
					
						
						
							
							Throw an exception instead of sending back a HTTP error code. This is necessary so any demonstration of upgrading from Servlet Spec authorization to Spring Security authorization, as the latter's ExceptionTranslationFilter expects specific exceptions to be thrown if you wish to commence the authentication process.  
						
						
						
						
					 
					
						2007-12-14 19:44:50 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							2e4773525b 
							
						 
					 
					
						
						
							
							Updated tutorial to allow authentication against ldap provider using <ldap /> namespace element.  
						
						
						
						
					 
					
						2007-12-14 19:18:18 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							d90ff50686 
							
						 
					 
					
						
						
							
							Use Java 5 to illustrate annotation support.  
						
						
						
						
					 
					
						2007-12-14 16:54:10 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							b1bc39a0df 
							
						 
					 
					
						
						
							
							Provide some shell scripts that help with demos. These assume the application is deployed to  http://localhost:8080/spring-security-samples-tutorial .  
						
						
						
						
					 
					
						2007-12-14 02:45:01 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							f4c3e701d5 
							
						 
					 
					
						
						
							
							Enhance sample to show method authorization.  
						
						
						
						
					 
					
						2007-12-14 02:27:48 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							77d286c36f 
							
						 
					 
					
						
						
							
							Enhance tutorial to also demonstrate Spring Security method  
						
						... 
						
						
						
						authorization, and add a services layer accordingly. 
						
						
					 
					
						2007-12-14 02:26:27 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							fa510b3187 
							
						 
					 
					
						
						
							
							Modify attribute names to use "ref" instead of "id", plus use a hyphen  
						
						... 
						
						
						
						as an attribute value separator rather than a colon. This was changed 
for compatibility with other components in the Spring Portfolio. tests 
pass. 
						
						
					 
					
						2007-12-13 20:19:56 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							1cae1719bc 
							
						 
					 
					
						
						
							
							Fix bean referencing error.  
						
						
						
						
					 
					
						2007-12-11 19:18:44 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							2655955a40 
							
						 
					 
					
						
						
							
							Add MethodSecurityInterceptor, to more accurately reflect the capabilities offered by auto-config="true".  
						
						
						
						
					 
					
						2007-12-11 19:14:34 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							1bbe6ca456 
							
						 
					 
					
						
						
							
							Proper comparison with auto-configure="true".  
						
						
						
						
					 
					
						2007-12-11 16:44:24 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							4770c29094 
							
						 
					 
					
						
						
							
							Use hyphens in attribute names, and not Camel Case. This is to maintain  
						
						... 
						
						
						
						consistency with the rest of Spring Portfolio. Camel Case was preserved 
for attribute values, consistent with Spring Portfolio usage such as 
autowiring modes (byName, byType etc). 
						
						
					 
					
						2007-12-09 03:42:20 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							85085abf9e 
							
						 
					 
					
						
						
							
							Add namespace support for Servlet API integration.  
						
						
						
						
					 
					
						2007-12-04 12:23:41 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							a205f95c19 
							
						 
					 
					
						
						
							
							No need for an access denied page.  
						
						
						
						
					 
					
						2007-12-04 11:24:54 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							8c3cc5c67b 
							
						 
					 
					
						
						
							
							Add hash code support.  
						
						
						
						
					 
					
						2007-12-04 11:21:39 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							8e7c540b16 
							
						 
					 
					
						
						
							
							General refactorings and improvements to namespace support, including  
						
						... 
						
						
						
						autoDetect="true" attribute for <http> element. 
						
						
					 
					
						2007-12-04 10:35:08 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							2441ab6d9a 
							
						 
					 
					
						
						
							
							Move "realm" attribute to be on <http> element rather than <http-basic>.  
						
						... 
						
						
						
						This faciltiates reuse with other mechanisms (like Digest) whilst also 
moving towards the <http-auto-configure> element (which benefits from 
having shared configuration in <http> as opposed to mechanism-specific 
elements). 
						
						
					 
					
						2007-12-04 08:02:40 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							0b0b174eda 
							
						 
					 
					
						
						
							
							Support <repository> and JbcUserDetailsManager.  
						
						
						
						
					 
					
						2007-12-04 05:27:17 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							53fca59301 
							
						 
					 
					
						
						
							
							Add namespace support for anonymous requests. Remove unnecessary files from tutorial sample.  
						
						
						
						
					 
					
						2007-12-03 08:07:10 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							7aa28ea742 
							
						 
					 
					
						
						
							
							SEC-614: Use DelegatingFilterProxy instead of FilterToBeanProxy.  
						
						
						
						
					 
					
						2007-12-03 06:31:03 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							1694242855 
							
						 
					 
					
						
						
							
							Make project name consistent with other MVN modules.  
						
						
						
						
					 
					
						2007-12-03 04:07:21 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							47229be5cb 
							
						 
					 
					
						
						
							
							Make samples and tests use username "rod".  
						
						
						
						
					 
					
						2007-12-03 02:56:52 +00:00 
						 
				 
			
				
					
						
							
							
								Ben Alex 
							
						 
					 
					
						
						
						
						
							
						
						
							38284a1117 
							
						 
					 
					
						
						
							
							Corrections to product name.  
						
						
						
						
					 
					
						2007-11-30 02:40:59 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							843a20e691 
							
						 
					 
					
						
						
							
							Changed default namespace in config files to "security" for clarity.  
						
						
						
						
					 
					
						2007-11-29 13:14:15 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							9f2bc9a842 
							
						 
					 
					
						
						
							
							SEC-582: Namespace configuration implementation for remember-me support.  
						
						
						
						
					 
					
						2007-11-06 23:20:25 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							d3b165749f 
							
						 
					 
					
						
						
							
							SEC-583: Implementation of namespace config for concurrent session support.  
						
						... 
						
						
						
						Also some minor adjustments to ordering of different http features in schema. 
						
						
					 
					
						2007-10-27 00:28:24 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							c2db942852 
							
						 
					 
					
						
						
							
							Namespace version of tutorial config. Currently lacks support for remember me and anonymous authentication.  
						
						
						
						
					 
					
						2007-10-20 23:20:36 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							bd740a91a2 
							
						 
					 
					
						
						
							
							Corrected remember-me parameter name in samples and log file name in tutorial sample (was "contacts.log").  
						
						
						
						
					 
					
						2007-10-16 13:52:01 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							3f2b9cd6fb 
							
						 
					 
					
						
						
							
							SEC-562: More changes of Acegi name in comments, docs etc.  
						
						
						
						
					 
					
						2007-10-03 14:02:39 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							50990b4291 
							
						 
					 
					
						
						
							
							Fixed version of jetty plugin at 6.1.5  
						
						
						
						
					 
					
						2007-09-26 12:15:20 +00:00 
						 
				 
			
				
					
						
							
							
								Luke Taylor 
							
						 
					 
					
						
						
						
						
							
						
						
							9a88d7737a 
							
						 
					 
					
						
						
							
							SEC-562: Correct class names in web.xml files.  
						
						
						
						
					 
					
						2007-09-26 11:33:54 +00:00