Эхлэл Бүгдийг харах Тусламж
Бүртгүүлэх Нэвтрэх
github
/
spring-security
-ын хуулбар https://github.com/spring-projects/spring-security
2
0
Салаа 0
Файлууд Асуудлууд 0 Мэдлэгийн сан
Эх сурвалжийг харах

Allow empty passwords as per http://forum.springframework.org/viewtopic.php?p=13343.

Ben Alex 20 жил өмнө
parent
4e6a4742bd
commit
0be77abe75
2 өөрчлөгдсөн 6 нэмэгдсэн , 3 устгасан
Өөрчлөлтийг ялгаж харах Өөрчлөлтийн статистик харах
  1. 2 2
      core/src/main/java/org/acegisecurity/userdetails/User.java
  2. 4 1
      doc/xdocs/changes.xml

+ 2 - 2
core/src/main/java/org/acegisecurity/userdetails/User.java
Файл харах 

@@ -1,4 +1,4 @@
 
-/* Copyright 2004 Acegi Technology Pty Limited
 
+/* Copyright 2004, 2005 Acegi Technology Pty Limited
 
  *
 
  * Licensed under the Apache License, Version 2.0 (the "License");
 
  * you may not use this file except in compliance with the License.
 
@@ -93,7 +93,7 @@ public class User implements UserDetails {
 
         boolean accountNonExpired, boolean credentialsNonExpired,
 
         GrantedAuthority[] authorities) throws IllegalArgumentException {
 
         if (((username == null) || "".equals(username)) || (password == null)
 
-            || "".equals(password) || (authorities == null)) {
 
+            || (authorities == null)) {
 
             throw new IllegalArgumentException(
 
                 "Cannot pass null or empty values to constructor");
 
         }

+ 4 - 1
doc/xdocs/changes.xml
Файл харах 

@@ -3,7 +3,7 @@
 
 <!--
 
  * ========================================================================
 
  * 
- * Copyright 2004 Acegi Technology Pty Limited
 
+ * Copyright 2004, 2005 Acegi Technology Pty Limited
 
  *
 
  * Licensed under the Apache License, Version 2.0 (the "License");
 
  * you may not use this file except in compliance with the License.
 
@@ -27,7 +27,10 @@
 
   <body>
 
     <release version="0.7.1" date="CVS">
 
       <action dev="benalex" type="update">Made ConfigAttributeDefinition and ConfigAttribute Serializable</action>
 
+      <action dev="benalex" type="update">User now accepted blank passwords (null passwords still rejected)</action>
 
       <action dev="benalex" type="update">FilterToBeanProxy now searches hierarchical bean factories</action>
 
+      <action dev="benalex" type="update">Improved Tapestry support in AbstractProcessingFilter</action>
 
+      <action dev="benalex" type="update">User now accepted blank passwords (null passwords still rejected)</action>
 
       <action dev="benalex" type="fix">Contacts sample web.xml no longer expect Log4j to be in classpath</action>
 
       <action dev="raykrueger" type="update">JaasAuthenticatinProvider now uses System.property "java.security.auth.login.config"</action>
 
       <action dev="raykrueger" type="update">JaasAuthenticationCallbackHandler Authentication is passed to handle method setAuthenticatoin removed</action>