Luke Taylor
|
0d8be5012d
Corrected comment.
|
18 rokov pred |
Luke Taylor
|
c021bf4682
SEC-542: Made SessionInformation serializable. Also remove unused default constructor.
|
18 rokov pred |
Luke Taylor
|
0adf0d6f1c
SEC-529: Added French translation of messages from Laurent Pireyn
|
18 rokov pred |
Luke Taylor
|
bc411c7c3b
SEC-457: Added Czech translation of messages from Jan Novotný
|
18 rokov pred |
Luke Taylor
|
ea61964f56
SEC-483: Fix. Make getGroupSearchBase protected.
|
18 rokov pred |
Luke Taylor
|
0c4916ee98
SEC-427: Fix. Added NullAuthoritiesPopulator and extra constructor.
|
18 rokov pred |
Luke Taylor
|
301626fd6e
SEC-346: Fix. Added suggested change. Also some minor tidying up of comments etc.
|
18 rokov pred |
Luke Taylor
|
8cb836c6cf
SEC-441: Fix. Added suggested changes.
|
18 rokov pred |
Luke Taylor
|
2e8d16c538
SEC-484: Multithreaded tests for SessionRegistryImpl.
|
18 rokov pred |
Luke Taylor
|
ad43d433b4
SEC-484: Fix for NPE concurreny issue. Also reinstated synchronized on registerNewSession (had removed it for testing).
|
18 rokov pred |
Luke Taylor
|
aa4ee54f86
Added logging to SessionRegistryImpl.
|
18 rokov pred |
Luke Taylor
|
7fcdd4a6ff
More tidying...
|
18 rokov pred |
Luke Taylor
|
510cd5050f
Tidied up SessionRegistryImpl and rolled back reformatting of its test class to incorrect width.
|
18 rokov pred |
Luke Taylor
|
6c169d9acf
SEC-508: Added CDATA sections to multi-line text values in tutorial and contacts sample context files to prevent eclipse reforatting bug from messing them up.
|
18 rokov pred |
Luke Taylor
|
e87956358f
Added missing "'" to login page in tutorial app.
|
18 rokov pred |
Luke Taylor
|
5f993e5627
SEC-534: Refactored JaasAuthenticationProvider to use ApplicationPublisherAware rather than ApplicationContextAware.
|
18 rokov pred |
Luke Taylor
|
1467527c0a
SEC-538: Deleted maven 1 files.
|
18 rokov pred |
Luke Taylor
|
5b7ed79b6a
SEC-539: Reformatted "divider" comments (//~ Methods=== etc). Simplified boolean expression in afterPropertiesSet.
|
18 rokov pred |
Luke Taylor
|
d7cef1ba31
SEC-539: Moved SecurityContextHolder.setContext() call into the try {} block to emphasize that it is only set for the duration of chain.doFilter() and immediately cleared afterwards. Changed the debug messages about setting the context, since it has not strictly taken place when they are logged.
|
18 rokov pred |
Luke Taylor
|
47c5a6d43f
SEC-539: Renamed extractSecurityContextFromSession to readSecurityContextFromSession to emphasize that it doesn't actually modify anything (the context is still stored in the session).
|
18 rokov pred |
Luke Taylor
|
f7a6129657
SEC-539: Removed unnecessary check for a null request object. Removed unnecessary catch/rethrow of IOException and ServletException from try/finally around chain.doFilter.
|
18 rokov pred |
Luke Taylor
|
d1be9f9980
SEC-539: Refactored so that SecurityContextHolder.setContext() is called in exactly one place. Moved setting of httpSession = null to point immediately after its last use.
|
18 rokov pred |
Luke Taylor
|
3dd0716611
SEC-539: Altered storeSecurityContextInSession to take the SecurityContext as a parameter rather than calling SecurityContextHolder.getContext(). This allows SecurityContextHolder.clearContext() to be called immediately after reading the context in the finally block of doFilter().
|
18 rokov pred |
Luke Taylor
|
fa63d8ecfb
SEC-539: Refactored if (httpSession == null) block in storeSecurityContextInSession()
|
18 rokov pred |
Luke Taylor
|
ce3eb599ed
SEC-539: Renamed populateSecurityContextFromSession to extractSecurityContextFromSession and removed the side-effect of setting SecurityContextHolder. It now returns the context found in the session (or null) and SecurityContextHolder.setContext() is called in a single place in doFilter().
|
18 rokov pred |
Luke Taylor
|
ba88214d1d
SEC-539: Refactored populateSecurityContextFromSession() to reduce nested blocks and clarify logic.
|
18 rokov pred |
Luke Taylor
|
27ef2caf45
SEC-539: Removed filterApplied boolean.
|
18 rokov pred |
Luke Taylor
|
e8d11f28f2
SEC-539: Extracted storeSecurityContextInSession() method.
|
18 rokov pred |
Luke Taylor
|
bcf69cbe3d
SEC-539: Extracted populateSecurityContextFromSession() method.
|
18 rokov pred |
Luke Taylor
|
6651a240de
Replaced massive if/else with guard clause to reduce nesting. Moved declaration of filterApplied boolean to where it is actually set. It is only used when removing the attribute from the request at the end of the invocation, so should probably not be needed at all. request.removeAttribute() can be called regardless of whether the attribute is set or not.
|
18 rokov pred |