 Luke Taylor
|
01c9c4e4db
SEC-1697: Don't publish authorization success events in AbstractSecurityInterceptor by default.
|
14 years ago |
|
Luke Taylor
|
74b0c1780e
SEC-1707: Added metadata-source-ref attribute to namespace appendix.
|
14 years ago |
|
Luke Taylor
|
8d99918798
SEC-1491: Add support for an external priority SecurityMetadataSource to be referenced from global-method-security.
|
14 years ago |
|
Luke Taylor
|
3084ad878f
SEC-1491: Added AnnotationMetadataExtractor to SecuredAnnotationSecurityMetadataSource to allow a custom security annotation to be used.
|
14 years ago |
|
Luke Taylor
|
244047ffe9
Delete unused test entities.
|
14 years ago |
|
Luke Taylor
|
ead669f10c
Move single-use annotation test classes into SecuredAnnotationSecurityMetadataDefinitionSourceTests.
|
14 years ago |
|
Luke Taylor
|
ddaf9eb64f
SEC-1705: Make sure a single OpenIDAuthenticationFilter bean is created by the namespace. Likewise for UsernamePasswordAuthenticationFilter.
|
14 years ago |
 Rob Winch
|
79e17e22bc
SEC-1703: Updated namespace for intercept-url
|
14 years ago |
|
Rob Winch
|
d9d5ee1114
SEC-1703: Updated cas custom-filter@ref to match example bean id and custom-filter@position to be CAS_FILTER
|
14 years ago |
|
Luke Taylor
|
9c88576992
Added extra FAQ on "Bad Credentials" message and on testing LDAP authentication. Minor mods to LDAP doc.
|
14 years ago |
|
Luke Taylor
|
78d5495945
SEC-1702: Add Burt's patch implementing hashcode method in AntPathRequestMatcher
|
14 years ago |
|
Luke Taylor
|
4a1908188a
SEC-1701: Trim claimed identity parameter value before submitting to OpenID4Java.
|
14 years ago |
|
Rob Winch
|
236efadfb7
SEC-1698: Update documentation to use correct package for RequestHeaderAuthenticationFilter
|
14 years ago |
|
Luke Taylor
|
1dc309b041
SEC-1689: Minor doc updates related to use of password encoding and the crypto package.
|
14 years ago |
|
Luke Taylor
|
e470eaa41d
SEC-1689: Moved core codec code into crypto package and removed existing duplication (Hex encoding etc). Refactoring of crypto code to use CharSequence for where possible instead of String.
|
14 years ago |
|
Luke Taylor
|
3a3b2df1c5
Minor rewording of "child web context" FAQ.
|
14 years ago |
|
Rob Winch
|
bb3b8e4683
Update AspectJPlugin to configure EclipseProject and EclipseClasspath tasks
|
14 years ago |
|
Luke Taylor
|
315c225bcb
Removed unused aspectj gradle file
|
14 years ago |
|
Luke Taylor
|
4654f7065a
SEC-1693: Expand upper bound on EHCache OSGi version to version 2.5
|
14 years ago |
|
Luke Taylor
|
9c09f0b73d
Remove unnecessary repos from main build file (EBR should only be needed for bundlor) and we generally have no need to build against snapshots other than for one-off testing.
|
14 years ago |
|
Luke Taylor
|
50828cdd43
SEC-1689: Move crypto module code to core for simplicity.
|
14 years ago |
|
Luke Taylor
|
a25d131f21
Some doc clarifications on the use of UserDetailService vs AuthenticationProvider.
|
14 years ago |
|
Luke Taylor
|
b26f2309f4
Add paragraph to manual database appendix to clarify that the standard schema is completely optional if you aren't using JdbcDaoImpl.
|
14 years ago |
|
Luke Taylor
|
9cf8ba02ba
Adding some extra section IDs in namespace appendix to provide bookmarkable URLs.
|
14 years ago |
|
Luke Taylor
|
ccc548b9e4
Fixing bundlor warnings.
|
14 years ago |
|
Luke Taylor
|
5a6afbff95
SEC-1688: Allow injection of a PasswordEncoder from the crypto module into DaoAuthenticationProvider.
|
14 years ago |
|
Luke Taylor
|
885f0270dc
Some adjustments to the core build to make sure crypto classes are correctly exported to other tasks.
|
14 years ago |
|
Luke Taylor
|
57c3afd31a
SEC-1689: Adjust manual to remove references to separate crypto module.
|
14 years ago |
|
Rob Winch
|
a50c9afbab
Modified jaas sample's LoginModule to prevent empty string username/password
|
14 years ago |
|
Rob Winch
|
9e5d35235c
Made the principal for jaas sample serializable
|
14 years ago |
