Spring Security
Go to file
Rob Winch 1a650acbcc SEC-1998: DummyRequest extend HttpServletRequestWrapper
Previously DummyRequest implemented HttpServletRequest which caused complications
since Servlet 2.5 and Servlet 3 had non passive changes. While we were "safe" if the
Servlet 3 methods were never invoked reflective access of the methods would also
problems. We could prevent users from accessing the methods of DummyRequest by
returning new HttpServletRequestWrapper(DummyRequest), but a debugger could
potentially try to iterate over the methods triggering a NoClassDefFoundError.

DummyRequest now extends HttpServletRequestWrapper which will be dynamically
linked to the proper version of HttpServletRequest. We use a Dynamic Proxy that
throws UnsupportedOperationException to implement any methods we are not
interested in.
2012-12-11 14:21:03 -06:00
acl update to spring snapshot dependencies 2012-11-08 22:49:20 -06:00
aspects Fixing bundlor warnings. 2011-03-08 16:20:37 +00:00
buildSrc Update to 3.2.x and added eclipse suffix to eclipse projects 2012-11-02 10:48:50 -05:00
cas SEC-1998: Provide integration with WebAsyncManager#startCallableProcessing 2012-11-28 17:56:03 -06:00
config SEC-1998: Provide integration with WebAsyncManager#startCallableProcessing 2012-11-28 17:56:03 -06:00
core SEC-1998: Provide integration with WebAsyncManager#startCallableProcessing 2012-11-28 17:56:03 -06:00
crypto SEC-2035: Add template.mf to crypto 2012-08-17 14:13:56 -05:00
docs Use AspectJMethodSecurityInterceptor in reference 2012-12-04 10:06:27 -06:00
gradle Update to Gradle 1.3 2012-11-30 16:33:44 -06:00
itest SEC-1998: Provide integration with WebAsyncManager#startCallableProcessing 2012-11-28 17:56:03 -06:00
ldap SEC-2017: Convert IncorrectResultsSizeException.size() == 0 to BadCredentialsException in ActiveDirectoryAuthenticationProvider 2012-08-01 16:19:57 -05:00
openid SEC-1998: Provide integration with WebAsyncManager#startCallableProcessing 2012-11-28 17:56:03 -06:00
remoting SEC-1975: Ignore anonymous users for AuthenticationSimpleHttpInvokerRequestExecutor 2012-08-09 09:56:07 -05:00
samples SEC-1998: Provide integration with WebAsyncManager#startCallableProcessing 2012-11-28 17:56:03 -06:00
sandbox SEC-1998: Provide integration with WebAsyncManager#startCallableProcessing 2012-11-28 17:56:03 -06:00
taglibs SEC-1998: Provide integration with WebAsyncManager#startCallableProcessing 2012-11-28 17:56:03 -06:00
web SEC-1998: DummyRequest extend HttpServletRequestWrapper 2012-12-11 14:21:03 -06:00
.gitignore SEC-1995: Move version to gradle.properties so Bamboo can update on releases 2012-07-26 17:26:50 -05:00
build.gradle Update to Gradle 1.3 2012-11-30 16:33:44 -06:00
class_mapping_from_2.0.x.txt SEC-1148: Simple classname mapping from 2.0 to 3.0 2009-12-02 22:44:30 +00:00
gradle.properties Update to 3.2.x and added eclipse suffix to eclipse projects 2012-11-02 10:48:50 -05:00
gradlew Update to Gradle 1.3 2012-11-30 16:33:44 -06:00
gradlew.bat SEC-1906: Fix EmmaPlugin for Gradle 1.0 2012-07-05 22:57:16 -05:00
license.txt Change to Apache License version 2.0. 2004-03-23 04:44:48 +00:00
notice.txt Broaden list of names used and correct URL. 2007-12-03 04:39:17 +00:00
readme.txt SEC-1988: Add contributor guide link to readme.txt 2012-07-10 22:27:19 -05:00
settings.gradle SEC-1995: Use Gradle Artifactory integration for releases 2012-08-09 14:20:57 -05:00

readme.txt

===============================================================================
                    SPRING SECURITY - README FILE
===============================================================================

-------------------------------------------------------------------------------
OVERVIEW
-------------------------------------------------------------------------------

Spring Security provides security services for the Spring Framework
(http://www.springframework.org). Spring Security 3.1 requires Spring 3.0.3 as
a minimum and also requires Java 5.

For a detailed list of features and access to the latest release, please visit
http://www.springframework.org/projects/.

Spring Security is released under an Apache 2.0 license. See the accompanying
license.txt file.

-------------------------------------------------------------------------------
BUILDING
-------------------------------------------------------------------------------

Please read the "Building from Source" page at
http://static.springframework.org/spring-security/site/.

-------------------------------------------------------------------------------
DOCUMENTATION
-------------------------------------------------------------------------------

Be sure to read the Reference Guide  (docs/reference/html/springsecurity.html).
Extensive JavaDoc for the Spring Security code is also available (in docs/apidocs).
Both can also be found on the website.

-------------------------------------------------------------------------------
QUICK START
-------------------------------------------------------------------------------

We recommend you visit http://static.springframework.org/spring-security/site and
read the "Getting Started" page.

-------------------------------------------------------------------------------
MAVEN REPOSITORY DOWNLOADS
-------------------------------------------------------------------------------

Release jars for the project are available from the central maven repository

http://repo1.maven.org/maven2/org/springframework/security/

Note that milestone releases and snapshots are not uploaded to the central
repository, but can be obtained from the Spring milestone repository, using the
maven repository http://maven.springframework.org/snapshot/. You can't browse this
URL directly, but there is a separate browser interface. Check the downloads page
for more information
http://static.springsource.org/spring-security/site/downloads.html


-------------------------------------------------------------------------------
OBTAINING SUPPORT
-------------------------------------------------------------------------------

There are two types of support available, commercial and community. For
commercial support, please contact SpringSource. SpringSource employ the
people who wrote Spring Security, and lead the development of the project:

  http://www.springsource.com

For peer help and assistance, please use the Spring Security forum
located at the Spring Community's forum site:

  http://forum.springframework.org

Links to the forums, and other useful resources are
available from the web site.

-------------------------------------------------------------------------------
CONTRIBUTING
-------------------------------------------------------------------------------

Contributions are welcome. Please refer to the Contributor Guidelines for details

  https://github.com/SpringSource/spring-security/wiki/Contributor-Guidelines