8a2a1b7a5b
SEC-2595: Polish
2014-07-25 16:27:19 -05:00
b2d66e2a78
SEC-2595: @EnableGlobalMethodSecurity AspectJ fixes
2014-07-25 16:03:18 -05:00
b72c1ad314
SEC-2686: Create SecurityMockMvcConfigurer
2014-07-22 15:11:37 -05:00
906a0cb0e2
SEC-2684: Correct spelling of WithSecurityContextTestExecutionListener
2014-07-18 13:53:41 -05:00
66c926f2c7
SEC-2653: Remove explicit port for ldap-xml so can be dynamic for ci
2014-06-18 08:27:39 -05:00
6b121c7543
SEC-2637: Add Geb integration tests for ldap-xml
2014-06-13 13:53:33 -05:00
19ce54e4ff
SEC-2653: ldap-xml logout is post with CSRF token
2014-06-13 13:53:19 -05:00
f7d09c6b62
SEC-2633: Remove springSecurityFilterChain from insecuremvc tests
2014-06-13 13:09:59 -05:00
025c0857f4
SEC-2635: Add Geb integration tests for jdbc-jc
2014-06-13 12:24:03 -05:00
0e9999e429
Fix jdbc-jc to work with tomcat gradle plugin
...
It is necessary to ensure that src/main/webapp exists to ensure the
application starts with the Tomcat Gradle Plugin.
This commit adds a Manifest file to src/main/webapp/META-INF to ensure
that git contains the otherwise empty directory.
2014-06-13 12:23:26 -05:00
6964c2e3de
SEC-2633: Add MockMvc tests for insecuremvc
2014-06-13 11:26:28 -05:00
8f84921713
SEC-2632: Add Geb Integration Tests for insecure sample
2014-06-13 11:20:57 -05:00
11d83cdce1
SEC-2651: Fix hellojs-jc after Thymeleaf Spring 4 changes
2014-06-13 09:43:32 -05:00
80c0f5fa17
SEC-2626: Add Geb integration tests for form-jc
2014-06-12 17:06:05 -05:00
2aea199001
SEC-2636: Added Geb integration tests for ldap-jc
2014-06-12 16:49:12 -05:00
10c4d8f1af
SEC-2651: Update Thymeleaf to Spring 4 variants in samples
2014-06-12 16:48:04 -05:00
cb94fb2c99
SEC-2631: Add spring-security-test to inmemory-jc pom
2014-06-12 15:08:53 -05:00
ac712f9f17
SEC-2617: Add JSTL to sample poms
2014-06-12 15:07:25 -05:00
5953a35c95
SEC-2624: Add Geb integration tests to contacts-xml
2014-06-12 15:05:54 -05:00
91b2b7f875
SEC-2634: Add Geb integration tests for jaas-xml
2014-06-12 12:18:56 -05:00
1bff58577c
SEC-2631: Add inmemory-jc MockMvc integration tests
2014-06-12 12:18:04 -05:00
15ab3316b3
SEC-2630: Add helloworld-jc Gebintegration tests
2014-06-12 12:18:04 -05:00
fb25273672
SEC-2617: Fix JSTL Samples
2014-06-12 12:01:04 -05:00
dd0253048e
SEC-2650: Fix Jetty Warn NoInitialContextException on shutdown
2014-06-12 11:53:22 -05:00
e9d9a83df4
SEC-2607: CAS Server logouts out synchronously
2014-05-21 15:43:56 -05:00
76bf378077
SEC-2580: Include ApacheDS in samples/ldap-xml
2014-05-01 11:28:27 -05:00
00e1094178
Add springio-platform plugin
2014-04-23 14:35:22 -05:00
8baf82532c
SEC-2015: Add spring-security-test
2014-04-22 16:47:48 -05:00
1c75d33adb
SEC-2560: Remove samples from .gitignore and add missing sample files
2014-04-16 21:17:02 -05:00
5b216bd0b2
Revert "SEC-2547: Consistent CAS client version"
...
This reverts commit f6cc9d87d5
2014-04-15 10:36:37 -05:00
f6cc9d87d5
SEC-2547: Consistent CAS client version
2014-04-14 22:48:55 -05:00
ccf96a4d69
SEC-2542: Polish dependency exclusions
...
This cleans up exclusions so the pom.xml are not as cluttered.
2014-04-02 09:47:29 -05:00
3118e39de8
SEC-2542: Use exclusions to remove duplicate dependencies
...
A number of projects had duplicate dependencies on their classpaths
as a result of the same classes being available in more than one
artifact, each with different Maven coordinates. Typically this only
affected the tests, but meant that the actual classes that were
loaded was somewhat unpredictable and had the potential to vary
between an IDE and the command line depending on the order in which
the aritfacts appeared on the classpath. This commit adds a number of
exclusions to remove such duplicates.
In addition to the new exclusions, notable other changes are:
- Spring Data JPA has been updated to 1.4.1. This brings its
transitive dependency upon spring-data-commons into line with
Spring LDAP's and prevents both spring-data-commons-core and
spring-data-commons from being on the classpath
- All Servlet API dependencies have been updated to use the official
artifact with all transitive dependencies on unofficial servlet API
artifacts being excluded.
- In places, groovy has been replaced with groovy-all. This removes
some duplicates caused by groovy's transitive dependencies.
- JUnit has been updated to 4.11 which brings its transitive Hamcrest
dependency into line with other components.
There appears to be a bug in Gradle which means that some exclusions
applied to an artifact do not work reliably. To work around this
problem it has been necessary to apply some exclusions at the
configuration level
Conflicts:
samples/messages-jc/pom.xml
2014-04-02 09:47:26 -05:00
9988fa141c
Update Spring Security version in pom.xml
2014-03-06 08:13:52 -06:00
8afa8d8588
Fix integration tests
2014-03-06 07:56:40 -06:00
6dfdb10e31
Fix move to 4.0
2014-03-05 16:52:19 -06:00
7f99a2dfbb
SEC-2487: Update to Spring 3.2.8.RELEASE
2014-02-19 09:30:40 -06:00
ec8b48150d
SEC-2474: Update poms
2014-02-07 17:01:11 -06:00
8c580dc170
SEC-2444: Polish Thymeleaf for samples
2013-12-16 09:51:00 -06:00
b7041ed00e
SEC-2436: Add @EnableWebMvcSecurity
2013-12-14 14:40:01 -06:00
2df5541905
SEC-2448: Update to HSQL 2.3.1
2013-12-14 10:19:06 -06:00
4708287ad3
SEC-2444: Convert Java Config samples to thymeleaf and tiles
2013-12-13 15:47:28 -06:00
a34178bc40
SEC-2434: Update to Spring 3.2.6 and Spring 4.0 GA
2013-12-12 08:16:59 -06:00
4460e84b29
Updates to pom.xml author and repo
2013-12-09 08:57:30 -06:00
feeb380b51
Polish Guides
2013-12-06 11:12:07 -06:00
ec524da6cb
SEC-2416: Fix Hello MVC guide
2013-12-05 15:47:38 -06:00
fc6fc19eed
Fix guides
2013-12-05 13:16:59 -06:00
2c8946c406
Next development version
2013-11-01 14:20:55 -05:00
9c703a3051
Release version 3.2.0.RC2
2013-11-01 14:20:49 -05:00
348e3a22b6
SEC-2365: registerAuthentication->configure
2013-10-16 13:59:56 -05:00
0978c12c47
SEC-2361: Java Config Sampels use @Autowired AuthenticationManagerBuilder
2013-10-15 12:35:32 -05:00
0b0e7dbea9
SEC-2359: Merge DefaultLoginPageViewFilter w/ DefaultLoginPageGeneratingFilter
2013-10-14 15:00:24 -05:00
4ef0460ef6
SEC-2321: Improve Java Config defaults for JavaScript clients
2013-10-11 14:53:11 -05:00
76a8bbe98d
SEC-2354: Add failOnMissingWebXml=false to sample pom.xml
2013-10-07 08:12:35 -05:00
88f41cdf62
SEC-2341: Update to Gradle 1.8
...
Some dependencies were necessary to update due to issues with JUnit
integration.
2013-09-24 15:35:51 -05:00
3d2f23602f
SEC-2294: Update Spring Version to 3.2.4.RELEASE
2013-08-31 11:26:43 -05:00
658a93178c
SEC-2252: Add custom form guide
2013-08-19 15:22:04 -05:00
51b9c4a19a
Hide logout in main.jsp if not logged in
2013-08-17 14:38:39 -05:00
d62c2e0835
SEC-2244: Defaults based on loginPage are now updated when loginPage changes
2013-08-16 14:48:45 -05:00
e9bb9e766e
SEC-1574: Add CSRF Support
2013-08-15 14:49:21 -05:00
54c2166567
SEC-2194: Remove unnecessary MessageSecurityWebApplicationInitializer from helloworld
2013-08-15 12:50:41 -05:00
fea4d01aad
SEC-2194: hello samples displays username and logout properly
2013-08-15 12:50:41 -05:00
b5ecaf61ed
SEC-2194: Remove samples errors/tabs folders
2013-08-15 12:50:41 -05:00
f036970f8b
SEC-2194: Add margin to links in header of samples
2013-08-15 12:50:41 -05:00
2feded5fc5
SEC-2194: Update samples to have jsp-api
2013-08-15 12:50:40 -05:00
22e4d1646a
SEC-2194: Remove login page from hellomvc and insecuremvc
2013-08-15 12:50:40 -05:00
e8278f3b9b
SEC-2249: AbstractSecurityWebApplicationInitializer allows register config
2013-08-08 14:33:54 -05:00
976d9a9016
SEC-2194: Polish java config sample apps
2013-08-08 14:33:54 -05:00
1f86d5dad9
SEC-2097: Add Tomcat Gradle plugin
2013-08-05 16:49:34 -05:00
388a4dd9db
SEC-2194: Add Java Config samples
2013-08-05 16:49:33 -05:00
36418b964d
Remove samples/runall.sh
2013-08-01 13:19:21 -05:00
e242aeff3e
SEC-2230: Polish and clickjacking demo
2013-08-01 10:19:36 -05:00
8c3ac719bb
SEC-2230: Added testing certificates
2013-08-01 09:48:09 -05:00
0bc08f8a23
SEC-2230: Update contacts sample to use <headers> with no child elements
2013-08-01 09:47:57 -05:00
0adf5aea91
SEC-2098, SEC-2099: Created HeadersFilter
...
Created HeadersFilter for setting security headers added including a
bean definition parser for easy configuration of the headers. Enables
easy configuration for the X-Frame-Options, X-XSS-Protection and
X-Content-Type-Options headers. Also allows for additional headers to
be added.
2013-07-25 16:22:43 -05:00
5e6ca12b01
SEC-2097: Update integrationTestCompile to use optional and provided
...
Also update slf4j version and remove explicit commons-logging from pom generation
2013-07-16 15:59:06 -05:00
02551e1b7a
SEC-2214: Update Spring Version
2013-07-16 15:15:47 -05:00
faa8b354b7
SEC-2209: add pom.xml
2013-07-16 15:15:47 -05:00
e5fc063680
SEC-2206: Gradle Propdeps
2013-07-16 15:15:42 -05:00
07c3fdf8a7
SEC-2195: Update Groovy, Geb, Spock, httpcomponents, and Jetty
2013-07-16 15:02:39 -05:00
896339087f
SEC-2122: Update samples to use bcrypt.
...
Data sources modified to store bcrypt hashes and configs now
use BCryptPassworEncoder.
2013-05-17 18:44:30 +01:00
e8661913d1
SEC-2119: Update to 3.2 schema and use default schema version when available
2013-03-01 16:29:27 -06:00
22e333b9c6
SEC-2092: Add servlet api example
2012-12-11 17:44:57 -06:00
1ed643ca1f
SEC-1998: Provide integration with WebAsyncManager#startCallableProcessing
...
Support integration of the Spring SecurityContext on Callable's used with
WebAsyncManager by registering SecurityContextCallableProcessingInterceptor.
2012-11-28 17:56:03 -06:00
78cbdd2c93
Reserve Server Ports in integrationTests
...
Previously the build would look up a server port dynamically, but since
it closed the port immediately it may not be reserved by the time jetty
started up.
We now reserve the port and do not close it till just before Jetty starts.
While there is still a race condition, it is much smaller window of time
than it was previously.
2012-11-01 11:14:50 -05:00
6af3e1958b
Update to Groovy 1.8
2012-09-04 09:48:29 -05:00
a2452ab514
SEC-1906: Update to Gradle 1.0
2012-07-05 12:41:56 -05:00
dec44811fc
Gave correct role name
2012-02-28 14:41:14 +01:00
0e413cedcb
Gave correct role name
2012-02-28 14:39:30 +01:00
044861eb20
Renamed **/*Spec.groovy to **/*Tests.groovy to better follow conventions
2011-12-29 12:59:24 -06:00
b60367e30c
Upgrade to validater 4.2
2011-11-01 00:20:45 +00:00
9d66e1fac3
Exclude static resources from filter chain in tutorial sample.
2011-09-25 22:30:14 +01:00
7e44580c75
Minor refactoring of aspects tests.
2011-07-20 17:42:05 +01:00
dc92baa257
Remove truststore settings from tutorial sample as they aren't required.
2011-06-13 15:03:51 +01:00
e4ecdd55f6
Enable https in tutorial sample.
2011-06-13 13:45:09 +01:00
80fd96df6d
SEC-1650: Updates and corrections to tutorial sample to fit better with new tutorial.
2011-06-07 16:46:38 +01:00
c9b328d8c7
SEC-1757: Updated tutorial sample to state that listing of accounts is allowed by anyone and to display accounts for the different types of access to posting to Accounts
2011-06-02 21:19:01 -05:00
e8a1a6e40b
Added spring-expression to config module testCompile to fix build.
2011-05-19 23:50:35 +01:00
3de0041874
Reverted cas Readme.txt from instructing to run from samples/cas/sample
2011-05-16 22:09:58 -05:00
076a75d8c3
Cleaned up cas task dependency declarations
2011-05-15 22:09:28 -05:00
Rob Winch
Hans-Joachim Kliemeck
Rob Winch
Spring Buildmaster
Marten Deinum
Luke Taylor
Abdull
Rob Winch