 Luke Taylor
|
3e6054b69f
SEC-1211: Rename SessionFixationProtectionFilter to SessionManagementFilter, since it no longer performs session-fixation protection directly, but just executes the AuthenticatedSessionStrategy.
|
пре 16 година |
|
Luke Taylor
|
5e285b3692
SEC-1211: Set the default AuthenticatedSessionStrategy to a null implementation to preserve existing behaviour.
|
пре 16 година |
|
Luke Taylor
|
609a68b12a
SEC-1077: Added DefaultAuthenticatedSessionStrategy test to check that saved request attribute is retained when migrateAttributes is false.
|
пре 16 година |
|
Luke Taylor
|
db90122179
SEC-1211: Create strategy for session handling on successful authentication. Added AuthenticatedSessionStrategy interface and default implementation which encapsulates the functionality that was previously in SessionFixationProtectionFilter and AbstractAuthentictationProcessingFilter. Updated the namespace to make use of these.
|
пре 16 година |
|
Luke Taylor
|
4a12b80470
Minor updates to x509 doc and update of remember-me doc (no longer part of auto-config)
|
пре 16 година |
|
Luke Taylor
|
fdb7325cbc
Javadoc update
|
пре 16 година |
|
Luke Taylor
|
9c27bced5b
Corrected typo
|
пре 16 година |
|
Luke Taylor
|
40efe6db57
Minor doc updates
|
пре 16 година |
|
Luke Taylor
|
0a37aed4b9
SEC-1207. Fixed class name in jsp
|
пре 16 година |
|
Luke Taylor
|
719a5e09d8
SEC-1205: Added comment to Javadoc for PasswordComparisonAuthenticator to indicate that it won't work with SSHA passwords
|
пре 16 година |
|
Luke Taylor
|
931cf90dbb
SEC-1203: Allow configuration of X509 subject-dn-regex attribute using PropertyPlaceholderConfigurer. Modified parser to use a BeanDefinition for the SubjectPrincipalDnExtractor to allow property subsititution.
|
пре 16 година |
|
Luke Taylor
|
8b115e2a21
SEC-1167: Added setRequestCache to SavedRequestAwareAuthenticationSuccessHandler and updated namespace parsing to set PortResolver on created HttpRequestCache.
|
пре 16 година |
|
Luke Taylor
|
f404bb3d74
SEC-1167: Introduce more flexible SavedRequest handling. Separated the concept of SavedRequest from SecurityContextHolderAwareFilter since the two are orthogonal requirements. This no longer takes a wrapper class property or uses reflection. SavedRequest functionality is accessed through the RequestCache interface, with the default implementation being HttpSessionRequestCache. A separate filter RequestCacheAwareFilter is now responsible for reconstituting the SavedRequest if it matches the current request. The functionality for matching and returning the wrapper is contained in the RequestCache method though.
|
пре 16 година |
|
Luke Taylor
|
efd1dbf54a
Removed public modifier from getSessionController() method on ProviderManager.
|
пре 16 година |
|
Luke Taylor
|
491837ae34
SEC-1197: Moved support from session-controller-ref from authentication-manager to concurrent-session-control element. Plus refactoring of config classes into separate packages.
|
пре 16 година |
|
Luke Taylor
|
83da7be2ea
Remove (ticket) cache package from CAS module. Unnecesary and has a circular reference.
|
пре 16 година |
|
Luke Taylor
|
1afa67c954
SEC-1195: Added internal AuthenticationManager for use by beans which are generated by the <http> block.
|
пре 16 година |
|
Luke Taylor
|
6346e31517
SEC-1195: Change <http> parsing behaviour to use an internal AuthenticationManager instance. Implemented "parent" AuthenticationManager in ProviderManager which is delegated to when no authentication is returned by the instances list of authentication providers. Extracted the Authentication success/failure publishing into a separate strategy.
|
пре 16 година |
|
Luke Taylor
|
1ca2e6e6fc
Tidying.
|
пре 16 година |
|
Luke Taylor
|
5d389d953d
RoleVoter test class.
|
пре 16 година |
|
Luke Taylor
|
946f3d1067
Converted to use mockito.
|
пре 16 година |
|
Luke Taylor
|
e63fba3a36
Tidying
|
пре 16 година |
|
Luke Taylor
|
d59bdc0cbc
Reducing use of global bean Ids as part of SEC-1186
|
пре 16 година |
|
Luke Taylor
|
7622dfe092
SEC-1194: Added support for services-alias to remember-me
|
пре 16 година |
|
Luke Taylor
|
b795d22e51
Upgraded junit and bundlor deps
|
пре 16 година |
|
Luke Taylor
|
3b1cdc3ab4
Tidying.
|
пре 16 година |
|
Luke Taylor
|
8a3930e673
Refactoring of ProviderManager to ensure that any AuthenticationException from the ConcurrentSessionController will prevent further polling of providers.
|
пре 16 година |
|
Luke Taylor
|
d02bbbf560
import cleaning.
|
пре 16 година |
|
Luke Taylor
|
43dab4c3b3
SEC-1186: Additional changes to remove custom-filter decorator functionality.
|
пре 16 година |
|
Luke Taylor
|
abddcb044a
SEC-1186: Remove functionality from CustomFilterBeanDefinitionDecorator and report a warning instead.
|
пре 16 година |
