 Luke Taylor
|
99621a225d
SEC-481: Refactoring commence method of AuthenticationProcessingFilterEtryPoint to allow alternative redirect options. Extracted two methods, "buildRedirectUrlToLoginPage" and "buildHttpsRedirectUrlForRequest" and introduced a RedirectUrlBuilder class for assembling the URLs from schemes, ports etc.
|
17 years ago |
|
Luke Taylor
|
adbf18a091
SEC-507: Updated JSR-250 impl to include better support for PermitAll and DenyAll as suggested by Ryan Heaton. Includes JSR-250 voter which is now used by AnnotationDriverbeanDefinitionParser.
|
17 years ago |
|
Luke Taylor
|
c1895acb6b
Changed package doc which mentioned adding filter to web.xml rather than filter chain.
|
17 years ago |
 Andrei Stefan
|
98ccaa61e7
SEC-532: test class for ObjectIdentityRetrievalStrategyImpl
|
17 years ago |
|
Andrei Stefan
|
5d09f1264b
SEC-532: Added test method for different hashCode calculation when different Serializable classes are used (the method is commmented as, now, it doesn't pass the test)
|
17 years ago |
|
Andrei Stefan
|
419a7a6426
SEC-532: added more test methods for JdbcAclService implementation
|
17 years ago |
|
Luke Taylor
|
2c0c731aaa
SEC-552: Removed accidentally commited incomplete caching-related classes.
|
17 years ago |
|
Luke Taylor
|
b82fbb698d
SEC-641: Updated to set "source" values on BeanDefinitions where possible.
|
17 years ago |
|
Luke Taylor
|
8859034d11
SEC-641: Reomove use of SecurityConfigException during parsing.
|
17 years ago |
|
Luke Taylor
|
717ab0b3cc
SEC-641: Replaced use of Assert with more tooling friendly calls to parserContext.getReaderContext().error()
|
17 years ago |
|
Luke Taylor
|
abb6402cec
Import cleaning.
|
17 years ago |
|
Luke Taylor
|
adba67326f
Removed accidentally committed version of tutorial app context file.
|
17 years ago |
|
Luke Taylor
|
84c7ac5e57
SEC-664: Removed validateUserDetails method from AbstractRememberMeServices, wrapped the UserDetailsService in a status-checking one and added a catch block for AccountStatusExceptions. Also some minor tidying up of other remember-me classes.
|
17 years ago |
|
Luke Taylor
|
d3f26f09b6
Added support for locking user accounts in namespace <user-service> "user" elements (for use in testing).
|
17 years ago |
|
Luke Taylor
|
2343577fec
Update new X509 namespace config to use status checking of user accounts by default.
|
17 years ago |
|
Luke Taylor
|
600ab04cc7
SEC-663: Added null check for pre-authenticated principal value (and skip authentication attempt if null).
|
17 years ago |
|
Luke Taylor
|
3f1ab233dc
SEC-662: Add check for a null authentication object returned by provider and skip passing it to session controller.
|
17 years ago |
|
Andrei Stefan
|
9be3f20faa
|
17 years ago |
 Ray Krueger
|
26fa0c143b
Added myself to the users list because I can :P
|
17 years ago |
|
Luke Taylor
|
1191701d8b
SEC-372: Added switchFailureUrl to SwitchUserProcessingFilter. Also did some refactoring to use the StatusCheckingUserDetailsService decorator, rather than checking status internally.
|
17 years ago |
|
Luke Taylor
|
b93583164d
SEC-659: Change CAS sample to use authentication-manager element.
|
17 years ago |
|
Luke Taylor
|
424ac4f117
Commented out tests which are breaking build.
|
17 years ago |
|
Luke Taylor
|
ab5d416e00
SEC-516: Make default SavedRequest a "GET" in test to prevent NPE.
|
17 years ago |
|
Ray Krueger
|
c0e2842f90
General cleanup and removal of unused stuff
|
17 years ago |
|
Luke Taylor
|
e42fdf29ae
Don't add exception to session if allowSessionCreation is false.
|
17 years ago |
|
Luke Taylor
|
3da2471b7f
Some tidying up of OpenID login form.
|
17 years ago |
|
Luke Taylor
|
abe62f9146
Modified to store the login name in the session when login fails, so that it is available to the view (as in AuthenticationProcessingFilter).
|
17 years ago |
|
Andrei Stefan
|
842dec0180
|
17 years ago |
|
Luke Taylor
|
677012a5de
Added Robin as author.
|
17 years ago |
|
Luke Taylor
|
bd9138d78a
Import cleaning.
|
17 years ago |
