 Luke Taylor
|
077af5e187
SEC-1661: Use a DistinguishedName to wrap the search base to avoid the need for JNDI escaping.
|
14 anos atrás |
|
Luke Taylor
|
866615ceaa
SEC-1662: Cater for the case where a user uses two <http> elements without patterns and the RequestMatcher does not have two arguments.
|
14 anos atrás |
|
Luke Taylor
|
d58dd79a52
SEC-1494: Updated the tutorial webapp to use CSS and make use of the securityHiddenUI element when UI security is disabled.
|
14 anos atrás |
|
Luke Taylor
|
00200cecbc
SEC-1494: Added system property "spring.security.disableUISecurity" which will prevent authorize tags from hiding content. By default, the property will also cause the area that would normally be hidden to be decorated with a <span class="securityHiddenUI"> tag, thus allowing the area to be rendered with some distinguishing css (e.g. a different background colour).
|
14 anos atrás |
 Rob Winch
|
1b32babbf9
SEC-1545: Removed unused i18n keys, changed keys to follow naming conventions, found missing keys based upon old keys, sorted keys, any unknown keys are entered as a comment with the English value.
|
14 anos atrás |
|
Luke Taylor
|
95b416b0e7
SEC-1660: Minor addition to FAQ text.
|
14 anos atrás |
|
Luke Taylor
|
b542c73907
SEC-1660: Updated FAQ to explain that session-fixation protection may cause problems if switching between HTTP and HTTPS, and also updated information to advise against switching in the first place.
|
14 anos atrás |
|
Luke Taylor
|
6b1b012e2c
Added check for maximum AES key size in crypto.gradle to skip tests if limited strength crypto policy files are in place.
|
14 anos atrás |
|
Luke Taylor
|
594f6694bb
Add logging of jdk version to crypto build file
|
14 anos atrás |
|
Luke Taylor
|
d686f64f26
Skip EncryptorsTests when using <JDK 1.6 as AES isn't available
|
14 anos atrás |
|
Luke Taylor
|
60befb063a
SEC-1659: Added crypto module to list of project modules in reference manual intro and to dependencies appendix.
|
14 anos atrás |
|
Luke Taylor
|
162cb64baa
SEC-1659: Label crypto utils package as only for internal use.
|
14 anos atrás |
 Keith Donald
|
38327d1b16
SEC-1659: crypto docs
|
14 anos atrás |
|
Keith Donald
|
b646e44646
SEC-1659: fixed bundlor step of build
|
14 anos atrás |
|
Keith Donald
|
ea76efdb2c
SEC-1659: favor AES encryption instead of DES as standard symmetric encryption algorithm
|
14 anos atrás |
|
Keith Donald
|
ffa7301e7f
SEC-1569: initial commit of spring-security-crypto module, consisting of encrypt, keygen, password, and util packages
|
14 anos atrás |
|
Luke Taylor
|
afd586c96e
Re-instate the CAS integration sequence description in the CAS chapter, with corrections (and minus proxying).
|
14 anos atrás |
|
Luke Taylor
|
2eefbf3a23
SEC-1657: Added support for 'name' attribute in <http> element to expose filter chain as a list bean.
|
14 anos atrás |
|
Rob Winch
|
f20649f035
SEC-1648: added null check for getTargetUrlParameter() in SavedRequestAwareAuthenticationSuccessHandler.onAuthenticationSuccess and updated validation for AbstractAuthenticationTargetUrlRequestHandler.setTargetUrlParameter
|
14 anos atrás |
|
Luke Taylor
|
075b30ab44
SEC-1651: Added paragraph to FAQ mentioning dependencies appendix.
|
14 anos atrás |
|
Luke Taylor
|
8da0de459b
SEC-1651: Added remaining module information to dependencies appendix.
|
14 anos atrás |
|
Luke Taylor
|
79b8edbd1e
Update CAS client to 3.1.12
|
14 anos atrás |
|
Luke Taylor
|
eeb466b613
SEC-1648: Implemented Rob's suggestion to use a null value for the targetUrlParameter rather than a boolean property. It should thus only be used if this value is set.
|
14 anos atrás |
|
Luke Taylor
|
6de2197c0f
SEC-1653: Ensure UserDetailsServiceFactoryBean is registered using the tools API to prevent errors in STS.
|
14 anos atrás |
|
Luke Taylor
|
19e56f4397
Stripping out unnecessary dependencies from sample jars.
|
14 anos atrás |
|
Luke Taylor
|
39b48c6d95
Update gradle wrapper to 0.9.1 in order to use mavenLocal() repo syntax.
|
14 anos atrás |
|
Luke Taylor
|
bf59c75886
Test class to improve coverage of WAS-specific preauth code.
|
14 anos atrás |
|
Luke Taylor
|
b858b23927
SEC-1651: Added first draft of dependencies appendix to reference manual.
|
14 anos atrás |
|
Luke Taylor
|
6779822325
Remove GRADLE-1090 workarounds from config.gradle.
|
14 anos atrás |
|
Luke Taylor
|
8d7830a1ee
SEC-1603: Add support in namespace for use of AuthenticationSuccessHandler with remember-me.
|
14 anos atrás |
