Luke Taylor
|
9a2d0c2cb5
SEC-1493: Added namespace support.
|
15 жил өмнө |
Luke Taylor
|
73b62497a3
SEC-1493: Added CredentialsContainer interface and implemented it in User, AbstractAuthenticationToken and UsernamePasswordAuthenticationToken. ProviderManager makes use of this to erase the credentials of the returned Authentication object (and its contents) if configured to do so by setting the 'eraseCredentialsAfterAuthentication' property.
|
15 жил өмнө |
Luke Taylor
|
09aba3906c
SEC-1496: Added support for use of any non-standard URL schemes in DefaultRedirectStrategy.
|
15 жил өмнө |
Luke Taylor
|
57cfff6f5c
SEC-1500: Convert AbstractRetryEntryPoint to use requestURI to correctly encode URLs.
|
15 жил өмнө |
Luke Taylor
|
b7b6b2bac7
Update to Spring 3.0.3.RELEASE
|
15 жил өмнө |
Luke Taylor
|
8602ae3863
Upgrade maven build to Spring 3.0.3.BUILD-SNAPSHOT
|
15 жил өмнө |
Luke Taylor
|
8737fe3acb
SEC-1495: Convert User class equals and hashcode methods to only use the "username" property.
|
15 жил өмнө |
Luke Taylor
|
27faad3402
SEC-1488: Remove commons-logging dependencies from maven poms and use slf4j in all samples.
|
15 жил өмнө |
Luke Taylor
|
aaa7bd90b2
SEC-1481: Updated constructors of Authentication types to use a generic wildcard for authorities collection.
|
15 жил өмнө |
Luke Taylor
|
295e0ded18
SEC-1483: Change User constructor to use a generic wildcard for authorities collection.
|
15 жил өмнө |
Luke Taylor
|
304f12fb63
SEC-1455: Load namespace parsers when required, rather than on init() call, to avoid classloaded issue with dmServer failing to resolve web classes when the namespace handler is first used.
|
15 жил өмнө |
Luke Taylor
|
8cbe232fbf
SEC-1480: Add simple equals and hashcode methods based on DN value to LdapUserDetailsImpl to allow its use as a map key (in SessionRegistry, for example).
|
15 жил өмнө |
Luke Taylor
|
5ac106808e
Remove outdated scm information from pom.xml.
|
15 жил өмнө |
Luke Taylor
|
8c605516b3
SEC-1463: Change namespace user-service parser to store username in lower-case when building map for in-memory UserDetailsService. Lookups are supposed to be case-insensitive with this class.
|
15 жил өмнө |
Luke Taylor
|
e6e168f127
SEC-1456: Set rtexprvalue=true for "url" attribute in access tag to allow dynamic values (such as URL of current page).
|
15 жил өмнө |
Luke Taylor
|
6d6c2d31ef
SEC-1462: Only apply session fixation protection strategy if request.isRequestedSessionIdValid() returns true. We don't need to create a new session if the current one already has a different Id from the client.
|
15 жил өмнө |
Luke Taylor
|
8f6aecac9b
Clarify that multiple authentication-provider elements can be used in combination.
|
15 жил өмнө |
Luke Taylor
|
0760bb947b
SEC-1458: Remove logger field in HttpSessionEventPublisher in favour of direct lookup. Prevents early initialization of logging system when listener is initialized.
|
15 жил өмнө |
Luke Taylor
|
9d2e2ca11d
SEC-1232: Add config dependency to maven build for aspectj sample.
|
15 жил өмнө |
Luke Taylor
|
6354c7e052
SEC-1232: GlobalMethodSecurityBeanDefinitionParser support for mode='aspectj'
|
15 жил өмнө |
Luke Taylor
|
42cdaa0ce2
Latest gradle syntax updates.
|
15 жил өмнө |
Luke Taylor
|
eda60b72b1
SEC-1448: Fixed failure to resolve generic method argument names in MethodSecurityEvaluationContext.
|
15 жил өмнө |
Luke Taylor
|
0d198d42ae
SEC-1444: Fix JNDI escaping problems in LDAP authentication.
|
15 жил өмнө |
Luke Taylor
|
f000aaa7e8
SEC-1440: Implement support for separate entry-point-ref on htt-basic namespace element. Changes ported from master branch.
|
15 жил өмнө |
Luke Taylor
|
634e340d80
Update schema version to 3.0.3
|
15 жил өмнө |
Luke Taylor
|
4c8e9e2d7e
SEC-1450: Replace use of ClassUtils.getMostSpecificMethod() in AbstractFallbackMethodDefinitionSource with AopUtils.getMostSpecificMethod() equivalent.
|
15 жил өмнө |
Luke Taylor
|
e518adbef1
SEC-1443: Modify Jsr250Voter to handle multiple "RolesAllowed" roles.
|
15 жил өмнө |
Luke Taylor
|
59b69f6f48
SEC-1434: Remove use of BeanDefinition of type java.lang.String which causes problems in Google App Engine.
|
15 жил өмнө |
Luke Taylor
|
b8e50c0933
SEC-1439: Make getters and setters public on HttpRequestResponseHolder.
|
15 жил өмнө |
Luke Taylor
|
677576ea8b
SEC-1429: Fix test. Wasn't setting allowSessionCreation=false on failure handler.
|
15 жил өмнө |