 Ben Alex
|
09f68400ec
Add <intercept-methods> to example, but it is disabled in favour of @Secured annotation. Still, we include it so people can have a play around and switch between the two syntaxes easily in demos etc.
|
18 anos atrás |
|
Ben Alex
|
55e4568003
Throw an exception instead of sending back a HTTP error code. This is necessary so any demonstration of upgrading from Servlet Spec authorization to Spring Security authorization, as the latter's ExceptionTranslationFilter expects specific exceptions to be thrown if you wish to commence the authentication process.
|
18 anos atrás |
 Luke Taylor
|
2e4773525b
Updated tutorial to allow authentication against ldap provider using <ldap /> namespace element.
|
18 anos atrás |
|
Ben Alex
|
d90ff50686
Use Java 5 to illustrate annotation support.
|
18 anos atrás |
|
Luke Taylor
|
1a171ea316
SEC-595: Introduced loadUserAuthorities method. This can be overridden to allow loading of authorities with the authenticated user's credentials (by setting the security context). The Ldap ContextSource used in the authorities populator would also be configured with a SpringSecurityAuthentcationSource, to make use of the information in the security context.
|
18 anos atrás |
|
Ben Alex
|
b1bc39a0df
Provide some shell scripts that help with demos. These assume the application is deployed to http://localhost:8080/spring-security-samples-tutorial.
|
18 anos atrás |
|
Ben Alex
|
f4c3e701d5
Enhance sample to show method authorization.
|
18 anos atrás |
|
Ben Alex
|
77d286c36f
Enhance tutorial to also demonstrate Spring Security method
|
18 anos atrás |
|
Ben Alex
|
fa510b3187
Modify attribute names to use "ref" instead of "id", plus use a hyphen
|
18 anos atrás |
|
Luke Taylor
|
0f12d31d90
Corrected code for choosing entry point in namespace configuration.
|
18 anos atrás |
|
Ben Alex
|
7ff533735f
Changes (made by Ben Hale) to support publishing of snapshots and
|
18 anos atrás |
|
Luke Taylor
|
6f7590eb05
Updates to sandbox to allow it to compile against latest core changes.
|
18 anos atrás |
|
Ben Alex
|
1cae1719bc
Fix bean referencing error.
|
18 anos atrás |
|
Ben Alex
|
2655955a40
Add MethodSecurityInterceptor, to more accurately reflect the capabilities offered by auto-config="true".
|
18 anos atrás |
|
Ben Alex
|
9728f48adf
Convert to using AopNamespaceUtils, to avoid potentially creating
|
18 anos atrás |
|
Luke Taylor
|
82cfa722be
Upgrade Spring-LDAP to 1.2.1 version.
|
18 anos atrás |
|
Ben Alex
|
1bbe6ca456
Proper comparison with auto-configure="true".
|
18 anos atrás |
|
Luke Taylor
|
ca996de2dc
Added tests for SpringSecurityAuthenticationSource.
|
18 anos atrás |
|
Luke Taylor
|
894c90dadd
Moved AbstractAuthenticationManagerTests into ProviderManager as tested methods have already been moved there (maven wasn't running Abstract* tests but they were actually failing).
|
18 anos atrás |
|
Luke Taylor
|
32038d8b92
Tidying.
|
18 anos atrás |
|
Luke Taylor
|
47dec4e597
Make getters in AbstractRememberMeServices protected rather than public
|
18 anos atrás |
|
Luke Taylor
|
ee31305fd5
Deprecated InitialDirContextFactory
|
18 anos atrás |
|
Luke Taylor
|
5382627d4a
Added property to LdapAuthenticationProvider to allow the credentials to be set either using the submitted password (the default) or the credentials from the loaded UserDetails object (which may be null if the attribute isn't readable).
|
18 anos atrás |
|
Luke Taylor
|
78529f6d28
SEC-620: AuthenticationSource implementation.
|
18 anos atrás |
|
Luke Taylor
|
5e0cb21c8d
SEC-619: Added test class for LdapUserDetailsService. The LdapAuthoritiesPopulator interface and also implementations have been moved to the org.springframework.security.ldap package since they are now used by both the ldap provider and the user service.
|
18 anos atrás |
|
Ben Alex
|
4770c29094
Use hyphens in attribute names, and not Camel Case. This is to maintain
|
18 anos atrás |
|
Luke Taylor
|
6ad176ce1a
Tidying.
|
18 anos atrás |
|
Luke Taylor
|
4984024314
SEC-618: Moved copyDetails method down to ProviderManager so that it can be called prior to checking if authentication is allowed by ConcurrentSessionController.
|
18 anos atrás |
|
Luke Taylor
|
b12a4939df
SEC-619: LdapUserDetailsService implementation.
|
18 anos atrás |
|
Luke Taylor
|
a569ff01e2
Tidying.
|
18 anos atrás |
