2374 Commits

Author SHA1 Message Date
Luke Taylor
f0c15f5b1a SEC-25: Rolled back addition of EJB integration docbook to ref manual. 2008-01-28 17:33:08 +00:00
Luke Taylor
934e59a562 SEC-652: Fixed CasAuthenticationProvider to be compatible with Ray's recent AuthoritiesPopulator refactoring. 2008-01-28 16:05:39 +00:00
Luke Taylor
26ea65ddb1 SEC-652: Add a trustPassword to AbstractTicketValidator for use with password protected keystores (as in the sample application). 2008-01-28 16:04:38 +00:00
Luke Taylor
46a69b6d93 SEC-652: CAS sample application and server using maven jetty plugin. 2008-01-28 16:03:28 +00:00
Luke Taylor
511ebb5af4 Reformat pom.xml. 2008-01-28 14:30:15 +00:00
Luke Taylor
eb620f09eb Switched preauth default namespace to "beans" for readability. 2008-01-28 13:22:50 +00:00
Luke Taylor
5738a51040 SEC-651: Support for ldap-user-service bean. 2008-01-28 00:47:34 +00:00
Luke Taylor
544df3ea09 Updated SpringSecurityLdapTemplate to include base LDAP context in returned DirContextAdapter entry to make sure the result gives a correct value for getNameInNamespace(). This is necessary when a search is used to obtain entries to pass to DefaultLdapAuthoritiesPopulator, for example. 2008-01-28 00:39:42 +00:00
Luke Taylor
80b6111641 SEC-650: Change default scope to sub-tree. 2008-01-28 00:24:54 +00:00
Luke Taylor
e6d6e88117 Corrections to calculated order values from "before" and "after" attributes. 2008-01-27 22:46:24 +00:00
Luke Taylor
acf5601714 SEC-645: Reimplementation of X509 provider and namespace implementation. 2008-01-27 22:45:44 +00:00
Luke Taylor
9af7ab68bf Removed duplicate setting of bean property in BasicAuthenticationBeanDefinitionParser. 2008-01-27 20:48:37 +00:00
Luke Taylor
d8d657da7f Removed classname from log message (normally output by log4j anyway) 2008-01-27 20:44:58 +00:00
Luke Taylor
aeba732ba5 SEC-647: Created separate "certificates" directory so SSL certificates and keys can be shared between different sample applications. Added key for user "scott" and separate certificate authority pem file (can be installed in a browser). 2008-01-27 20:42:10 +00:00
Luke Taylor
82940db6c8 SEC-648: Added custom-authentication-provider support. 2008-01-27 13:31:34 +00:00
Luke Taylor
dbc901fba9 Deleted 2008-01-27 13:30:11 +00:00
Luke Taylor
384af268ab Import cleaning. 2008-01-27 13:28:58 +00:00
Luke Taylor
c7792458b4 SEC-645: Reimplementation of X509 authentication. 2008-01-27 11:12:50 +00:00
Ray Krueger
718eddadd7 Promoting OpenID out of the Sandbox 2008-01-27 02:57:57 +00:00
Luke Taylor
ae71e9a5bd SEC-632: Changed user-filter to custom-filter to avoid confusion with system "users". 2008-01-27 00:48:53 +00:00
Luke Taylor
cd16dac290 SEC-648: Added custom-authentication-provider element. 2008-01-27 00:42:35 +00:00
Luke Taylor
e852cf53a8 SEC-644: Fix broken NtlmProcessingFilter and add AuthenticationDetailsSource to it. 2008-01-27 00:31:55 +00:00
Luke Taylor
619c7b0dbf SEC-632: Explicit filter chain ordering is now achieved using "after" or "before". Setting the order value directly in the context is fragile due to potential future changes in the order values of standard filters. 2008-01-26 23:56:04 +00:00
Luke Taylor
e44e641106 SEC-647: Updated server keystore (new certificate using our own Test CA) and added client certificates for users rod and dianne. 2008-01-26 17:21:23 +00:00
Luke Taylor
0005da3b63 Corrected spelling of class name. 2008-01-26 11:36:24 +00:00
Andrei Stefan
83ecb3e9e0 test classes 2008-01-26 11:35:49 +00:00
Andrei Stefan
0e58e816a2 2008-01-26 11:31:49 +00:00
Luke Taylor
483068d486 SEC-647: Delete unused certificated directory and outdated certificates. 2008-01-26 11:28:36 +00:00
Andrei Stefan
0f32b3fc40 reverted to junit 3 2008-01-25 15:04:29 +00:00
Andrei Stefan
630efbf536 AclFormattingUtils and AccessControlEntryImpl test classes 2008-01-24 22:11:17 +00:00
Luke Taylor
b85f76e6c1 Added SSL support to the tutorial app Jetty plugin configuration and added a requirement for SSL on the "extremely secure" page. 2008-01-24 16:30:06 +00:00
Luke Taylor
d10450cfb7 SEC-531: Provide support for HTTP methods in FilterInvocationDefinitionSource. Path/Regex versions of FIDS are now deprecated and in favour of using their (no longer abstract) parent class with a UrlPathMatcher strategy. 2008-01-24 14:39:47 +00:00
Luke Taylor
342677fabc Removed auto-config from tutorial sample and added commented out ldap support. Updated ldif file to match sample users. 2008-01-23 22:21:39 +00:00
Andrei Stefan
b4c37db9f9 test classes for AuditLogger and security checks in AclImpl and AclAuthorizationStrategyImpl 2008-01-23 21:50:49 +00:00
Luke Taylor
837ecd85ec SEC-576: Tidied up code, added preauth sample demo app. 2008-01-23 20:02:11 +00:00
Luke Taylor
a9ff309b02 Deleted as test now uses inline context snippets. 2008-01-22 21:08:33 +00:00
Luke Taylor
06f3bcbf6a Converted all namespace attributes which refer to bean IDs to use "-ref" suffix (or "ref"). 2008-01-22 20:58:12 +00:00
Luke Taylor
11570d9584 SEC-576: Test web.xml files. 2008-01-22 20:42:09 +00:00
Luke Taylor
24caad5a67 Make sure default lower/upper case is respected for regex and ant paths when not set explicitly using the lowercase-comparisons attribute. Added much more comprehensive testing of HttpSecurityBeanDefinitionParser. 2008-01-22 20:25:46 +00:00
Luke Taylor
b9561cc4e0 SEC-643: Fix to allow namespace configuration without remember-me authentication. 2008-01-22 18:32:18 +00:00
Luke Taylor
7854e36029 SEC-576: Tidying. 2008-01-22 15:07:37 +00:00
Luke Taylor
c8b9f24038 SEC-576: Committed pre-autheticated contribution. Still has to be more thoroughly reviewed. 2008-01-22 13:55:19 +00:00
Luke Taylor
35a7928cb9 SEC-635: Convert xsd:IDREF types to xsd:string to allow references to beans outside the current file. 2008-01-22 11:38:50 +00:00
Luke Taylor
b29bcfebe8 Converted test class to use in memory XML snippets - makes it easier to work out which one is causing a failure. 2008-01-22 11:36:15 +00:00
Luke Taylor
ca8dff7abb Delete unused ldap namespace test context file 2008-01-21 20:09:07 +00:00
Luke Taylor
1b8f13aa4c Use "'" for XML attributes in in-memory test contexts for readability. 2008-01-21 20:08:24 +00:00
Luke Taylor
7d88ee8c48 Formatted ACL SQL for readability. 2008-01-21 18:35:22 +00:00
Luke Taylor
aff568efb9 Tidied up getters/setters (undoing jalopy ordering). Made getters protected. 2008-01-21 17:23:48 +00:00
Luke Taylor
9836bda5b3 SEC-630: Support for "properties" attribute in user-service namespace element. 2008-01-21 17:15:53 +00:00
Luke Taylor
59a947bbe5 SEC-636: Support for use of "ref" attribute in salt-source element. 2008-01-21 15:06:43 +00:00