1238 Commits

Author SHA1 Message Date
Luke Taylor
b12a4939df SEC-619: LdapUserDetailsService implementation. 2007-12-07 13:16:44 +00:00
Luke Taylor
a569ff01e2 Tidying. 2007-12-07 12:32:54 +00:00
Luke Taylor
382dc50f3c SEC-299: Change ConcurrentSessionFilter to delegate to an array of LogoutHandlers rather than invalidating an expired session directly. 2007-12-06 17:39:04 +00:00
Luke Taylor
cb980f12d5 Tidying. 2007-12-06 17:26:04 +00:00
Luke Taylor
628227f5e7 Corrected out of date comment (constructor doesn't create a session). Removed unnecessary default constructor. 2007-12-06 16:53:35 +00:00
Luke Taylor
4b8455c831 Tidying comments. 2007-12-06 16:40:16 +00:00
Luke Taylor
4c6e41af7d Tidying comments. 2007-12-06 16:33:59 +00:00
Ben Alex
c66a3ba323 @deprecate FilterToBeanProxy in favour of the simpler and Spring Core provided DelegatingFilterProxy. 2007-12-06 09:43:43 +00:00
Luke Taylor
ab23fe56ad Added log msg for loading of ldif files. 2007-12-06 00:14:25 +00:00
Luke Taylor
a1abcc39d2 SEC-513: Minor work on LDAP UserDetailsManager implementation. 2007-12-06 00:13:42 +00:00
Luke Taylor
e3432c2407 Some changes suggested by Spring LDAP guys to improve template usage. 2007-12-06 00:13:00 +00:00
Luke Taylor
4d133be0d0 Tidying. 2007-12-06 00:12:24 +00:00
Luke Taylor
3ddcc203bf LdapUserDetailsMapper now throws UnsupportedOperationException for mapUserToContext method as only subclasses of this which implement actual LDAP object classes should be used for writing to a directory. 2007-12-06 00:12:06 +00:00
Luke Taylor
22052115b6 SEC-617: Make LDAPAuthenticationProvider a standalone class. 2007-12-05 14:39:46 +00:00
Ben Alex
88ab9671c6 Correct attribute name. 2007-12-04 14:24:53 +00:00
Ben Alex
9b6c798a52 SEC-496: <annotation-driven> element. 2007-12-04 14:14:17 +00:00
Ben Alex
949205b369 Correction of equals(Object) and hashCode() methods. 2007-12-04 12:44:40 +00:00
Ben Alex
85085abf9e Add namespace support for Servlet API integration. 2007-12-04 12:23:41 +00:00
Ben Alex
8c3cc5c67b Add hash code support. 2007-12-04 11:21:39 +00:00
Ben Alex
8e7c540b16 General refactorings and improvements to namespace support, including
autoDetect="true" attribute for <http> element.
2007-12-04 10:35:08 +00:00
Ben Alex
2441ab6d9a Move "realm" attribute to be on <http> element rather than <http-basic>.
This faciltiates reuse with other mechanisms (like Digest) whilst also 
moving towards the <http-auto-configure> element (which benefits from 
having shared configuration in <http> as opposed to mechanism-specific 
elements).
2007-12-04 08:02:40 +00:00
Ben Alex
d9ec944579 Refactor strings to static fields. To facilitate unit testing, package
protected visibility was adopted for all element names, attribute names, 
and attribute default values. A public access modifier was used for all 
bean IDs assigned to bean definitions created by the 
BeanDefinitionParsers.
2007-12-04 07:12:08 +00:00
Ben Alex
4e55bd0117 Make extend Spring Security's exception, for consistency with all other Spring Security exceptions. 2007-12-04 06:58:43 +00:00
Ben Alex
9b4bb0ffd8 <repository> element and JdbcUserDetailsManager support. 2007-12-04 05:58:54 +00:00
Ben Alex
5f98ee6817 <repository> element and JdbcUserDetailsManager support. 2007-12-04 05:54:58 +00:00
Ben Alex
0b0b174eda Support <repository> and JbcUserDetailsManager. 2007-12-04 05:27:17 +00:00
Ben Alex
8cf46ad0f8 Remove, as not used. 2007-12-04 05:12:39 +00:00
Ben Alex
8c9138b443 Typos. 2007-12-04 02:11:16 +00:00
Ben Alex
021f03487e Enhancements to correctly handle authentication failures. 2007-12-04 01:50:45 +00:00
Ben Alex
2a83843e7d Correct username key. 2007-12-04 01:46:26 +00:00
Luke Taylor
75391e89de Tidied up Id tag. 2007-12-04 00:01:09 +00:00
Luke Taylor
794795712d Parameter renamed. 2007-12-04 00:00:50 +00:00
Luke Taylor
97030e8942 Changed LDAP namespace parsing to make sure LDAP provider is registered with ProviderManager. 2007-12-03 23:58:38 +00:00
Luke Taylor
248d97c9d6 SEC-513: Added support for cache flushing after updating or deleting data in JdbcUserDetailsManager. 2007-12-03 22:12:02 +00:00
Ben Alex
d086815d75 Add namespace support for anonymous requests. Also minor improvements to .rnc file as Trang didn't appear to be properly translating multi-line comments to the XSD (all multi-line comments were made single lines). 2007-12-03 07:46:52 +00:00
Ben Alex
5c9009a391 Use new SpringSecurityFilter so compatible with enhanced FilterChainProxy class. 2007-12-03 07:44:32 +00:00
Ben Alex
239fd05d37 Mark the unused Servlet Container callback methods as final to ensure subclasses do not rely upon them. 2007-12-03 07:33:18 +00:00
Ben Alex
a53357778f Remove superfluous method. 2007-12-03 07:32:23 +00:00
Ben Alex
cb765bc34b SEC-615: Automatically focus on login name HTML element on page load. 2007-12-03 06:34:43 +00:00
Ben Alex
86fb6f2dea Remove OrderedUtils (was used for old namespace testing). 2007-12-03 05:06:11 +00:00
Ben Alex
f04f9097b1 Make name consistent with other MVN modules. 2007-12-03 04:10:19 +00:00
Ben Alex
47229be5cb Make samples and tests use username "rod". 2007-12-03 02:56:52 +00:00
Ben Alex
3123d24337 SEC-613: Rename tag libraries. 2007-12-03 01:46:11 +00:00
Ben Alex
c24958d7b8 Spelling correction. 2007-12-03 01:33:19 +00:00
Ben Alex
08db4a1358 SEC-610: Reauthenticate even if AnonymousAuthenticationToken is present. 2007-12-02 02:15:43 +00:00
Luke Taylor
843a20e691 Changed default namespace in config files to "security" for clarity. 2007-11-29 13:14:15 +00:00
Luke Taylor
09c588a138 Removed unecessary check in additionalAuthenticationChecks() for null credentials in authentication object. Previous line already throws an exception if null is found. 2007-11-28 19:20:33 +00:00
Luke Taylor
88e01624eb SEC-560: Removed local password comparison form PasswordComparisonAuthenticator. 2007-11-28 18:29:04 +00:00
Luke Taylor
0e1ae11fca Tidying. 2007-11-28 18:00:43 +00:00
Luke Taylor
292320bd33 SEC-607: Changed NtlmUsernamePasswordAuthenticationToken to make authenticated=true the default state when an instance is created. NtlmAwareLdapAuthenticator now rejects tokens with authenticated=false (e.g. if the token has been passed remotely). 2007-11-24 20:13:29 +00:00