 Luke Taylor
|
2443cf6615
Disable itest module prior to release
|
16 gadi atpakaļ |
|
Luke Taylor
|
d47abbc35f
SEC-1223: Added break to bindWithDnLoop when non-null use is returned.
|
16 gadi atpakaļ |
|
Luke Taylor
|
2f9a98c7ce
SEC-214: Update keywords.
|
16 gadi atpakaļ |
|
Luke Taylor
|
8ed9f8a057
Remove wrongly named file
|
16 gadi atpakaļ |
|
Luke Taylor
|
4df370b100
SEC-214: Add functionality to be able to use LDAP password policy request/response controls. Added PasswordPolicyAwareContextSource, ppolicy control implementations (from Sandbox) and modified BindAuthenticator to check for the presence of the response control, adding the control to the retured DirContextAdapter if appropriate. LdapUserDetailsImpl also contains the data for grace logins remaining and time till password expiry. Added OpenLDAP startup script with test data and integration test which operates against the data (must be run manually).
|
16 gadi atpakaļ |
|
Luke Taylor
|
48988bde84
SEC-935: Support for OpenID attribute exchange and changes to namespace syntax to allow simple configuration of attributes to request.
|
16 gadi atpakaļ |
|
Luke Taylor
|
5e4743d8f2
Updated to Spring 3 M4 prior to M2 release
|
16 gadi atpakaļ |
|
Luke Taylor
|
e6631be778
Import cleaning
|
16 gadi atpakaļ |
|
Luke Taylor
|
faa6be2011
SEC-935: Updated to OpenID4Java 0.9.5 release
|
16 gadi atpakaļ |
|
Luke Taylor
|
6f76fe6fbb
Import cleaning
|
16 gadi atpakaļ |
|
Luke Taylor
|
eb059cfd12
SEC-1211: removed SessionUtils (no longer used)
|
16 gadi atpakaļ |
|
Luke Taylor
|
f536c80020
SEC-1202: Removed SpringSecurityFilter and replaced with use of GenericFilterBean from spring-web
|
16 gadi atpakaļ |
|
Luke Taylor
|
b807f7cbdd
Added comment to pom to explain spring-web requirement
|
16 gadi atpakaļ |
|
Luke Taylor
|
972cd0a53c
javadoc
|
16 gadi atpakaļ |
|
Luke Taylor
|
d65b1b3581
SEC-1200: Ukranian messages file
|
16 gadi atpakaļ |
|
Luke Taylor
|
966f3e4101
SEC-1182: Added tst to confirm that this is no longer an issue due to other changes
|
16 gadi atpakaļ |
|
Luke Taylor
|
b4bb489638
SEC-1164: Further registering on bean components for tooling and removal of global ids.
|
16 gadi atpakaļ |
|
Luke Taylor
|
b387d63aba
Removing unnecessary global bean names.
|
16 gadi atpakaļ |
|
Luke Taylor
|
a67448c867
SEC-1216: Remove unused code.
|
16 gadi atpakaļ |
|
Luke Taylor
|
229866e293
SEC-1142: Support for session timeout detection. Added namespace support for invalid-session-url
|
16 gadi atpakaļ |
|
Luke Taylor
|
c12e5b4d0b
SEC-1142: Renamed setter argument to match property.
|
16 gadi atpakaļ |
|
Luke Taylor
|
ea73fd0130
SEC-1142: Simplified implementation by removing template method.
|
16 gadi atpakaļ |
|
Luke Taylor
|
90d76373cc
SEC-1142: Support for session timeout detection. Added redirect to invalidSessionUrl in SessionManagementFilter when an invalid session Id is supplied in the request.
|
16 gadi atpakaļ |
|
Luke Taylor
|
0f6642d3ab
SEC-1216: Replacement of custom-after-invocation-provider with after-invocation-provider element. Some changes to help prevent proxying of aop infrastructure classes (use of AopInfrastructureBean marker interface)
|
16 gadi atpakaļ |
|
Luke Taylor
|
eaa0dc4fce
typo
|
16 gadi atpakaļ |
|
Luke Taylor
|
e40b9fbc75
SEC-1196: Introduce AuthenticationManagerDelegator is MethodSecurityInterceptor which is configured by global-method-security. Prevents regression of SEC-933 caused by eager init of AuthenitcationManager and dependent beans
|
16 gadi atpakaļ |
|
Luke Taylor
|
997faabe1e
SEC-1196: Removed ConfigUtils (no longer used).
|
16 gadi atpakaļ |
|
Luke Taylor
|
5953af0f6b
SEC-1196: Change use of <authentication-manager> to actually register the global ProviderManager instance. This element now registers the global ProviderManager instance and must contain any authentication-provider elements (or ldap-authentication-provider elements).
|
16 gadi atpakaļ |
|
Luke Taylor
|
c5d6484b54
SEC-1210: RememberMe filter misses UserDetailsService in default <http /> tag config when it is declared in parent app context. Fixed by getting the UserDetailsServiceInjectionPostProcessor to check ancestor bean factories for a UserDetailsService if one isn't found in the current bean factory.
|
16 gadi atpakaļ |
|
Luke Taylor
|
160aa512a1
Remove "infrastructure" type from authentication provider bean.
|
16 gadi atpakaļ |
