 Luke Taylor
|
8cbe232fbf
SEC-1480: Add simple equals and hashcode methods based on DN value to LdapUserDetailsImpl to allow its use as a map key (in SessionRegistry, for example).
|
vor 15 Jahren |
|
Luke Taylor
|
5ac106808e
Remove outdated scm information from pom.xml.
|
vor 15 Jahren |
 Luke Taylor
|
8c605516b3
SEC-1463: Change namespace user-service parser to store username in lower-case when building map for in-memory UserDetailsService. Lookups are supposed to be case-insensitive with this class.
|
vor 15 Jahren |
|
Luke Taylor
|
e6e168f127
SEC-1456: Set rtexprvalue=true for "url" attribute in access tag to allow dynamic values (such as URL of current page).
|
vor 15 Jahren |
|
Luke Taylor
|
6d6c2d31ef
SEC-1462: Only apply session fixation protection strategy if request.isRequestedSessionIdValid() returns true. We don't need to create a new session if the current one already has a different Id from the client.
|
vor 15 Jahren |
|
Luke Taylor
|
8f6aecac9b
Clarify that multiple authentication-provider elements can be used in combination.
|
vor 15 Jahren |
|
Luke Taylor
|
0760bb947b
SEC-1458: Remove logger field in HttpSessionEventPublisher in favour of direct lookup. Prevents early initialization of logging system when listener is initialized.
|
vor 15 Jahren |
|
Luke Taylor
|
9d2e2ca11d
SEC-1232: Add config dependency to maven build for aspectj sample.
|
vor 15 Jahren |
|
Luke Taylor
|
6354c7e052
SEC-1232: GlobalMethodSecurityBeanDefinitionParser support for mode='aspectj'
|
vor 15 Jahren |
|
Luke Taylor
|
42cdaa0ce2
Latest gradle syntax updates.
|
vor 15 Jahren |
|
Luke Taylor
|
eda60b72b1
SEC-1448: Fixed failure to resolve generic method argument names in MethodSecurityEvaluationContext.
|
vor 15 Jahren |
|
Luke Taylor
|
0d198d42ae
SEC-1444: Fix JNDI escaping problems in LDAP authentication.
|
vor 15 Jahren |
|
Luke Taylor
|
f000aaa7e8
SEC-1440: Implement support for separate entry-point-ref on htt-basic namespace element. Changes ported from master branch.
|
vor 15 Jahren |
|
Luke Taylor
|
634e340d80
Update schema version to 3.0.3
|
vor 15 Jahren |
|
Luke Taylor
|
4c8e9e2d7e
SEC-1450: Replace use of ClassUtils.getMostSpecificMethod() in AbstractFallbackMethodDefinitionSource with AopUtils.getMostSpecificMethod() equivalent.
|
vor 15 Jahren |
|
Luke Taylor
|
e518adbef1
SEC-1443: Modify Jsr250Voter to handle multiple "RolesAllowed" roles.
|
vor 15 Jahren |
|
Luke Taylor
|
59b69f6f48
SEC-1434: Remove use of BeanDefinition of type java.lang.String which causes problems in Google App Engine.
|
vor 15 Jahren |
|
Luke Taylor
|
b8e50c0933
SEC-1439: Make getters and setters public on HttpRequestResponseHolder.
|
vor 15 Jahren |
|
Luke Taylor
|
677576ea8b
SEC-1429: Fix test. Wasn't setting allowSessionCreation=false on failure handler.
|
vor 15 Jahren |
|
Luke Taylor
|
91153df78d
SEC-1262: Added new (replacement) AspectJ interceptor which wraps the JoinPoint in a MethodInvocation adapter to provide compatibility with classes which only support MethodInvocation instances.
|
vor 15 Jahren |
|
Luke Taylor
|
1b0ac9c785
Porting of gradle changes from master.
|
vor 15 Jahren |
|
Luke Taylor
|
8c9159f273
Added repo for aws-maen 3.0.0 dep
|
vor 15 Jahren |
|
Luke Taylor
|
4c8b0faa88
Upgrade aws-maven to 3.0.0.RELEASE (mvn 2.2.x compatible)
|
vor 15 Jahren |
|
Luke Taylor
|
5a5b62e2cb
SEC-1429: Removed cached authentication from session after successful authentication.(cherry picked from commit 43f0e111067dec72f2a496ad7d9df9fc10de43dc)
|
vor 15 Jahren |
|
Luke Taylor
|
6ac8588144
Fix to Javadoc for AbstractAuthenticationProcessingFilter.(cherry picked from commit a3263753d93bba781471135448c4de5564fe464a)
|
vor 15 Jahren |
|
Luke Taylor
|
5690f1c581
SEC-1428: Check if response has been committed before redirecting to target URL in AbstractAuthenticationTargetUrlRequestHandler.
|
vor 15 Jahren |
|
Luke Taylor
|
87cf27ab7c
SEC-1429: Move logic for saving of AuthenticationException into the SimpleUrlAuthenticationFailurehandler from AbstractAuthenticationProcessingFilter. It will also now use request scope if configured to do a forward instead of a redirect.
|
vor 15 Jahren |
|
Luke Taylor
|
41e06152b3
SEC-1420: JSP for itest of authentication tags with and without escaping.
|
vor 15 Jahren |
|
Luke Taylor
|
a7e21318bf
SEC-1425: Replace use of Java 1.6 String.isEmpty().
|
vor 15 Jahren |
|
Luke Taylor
|
bc6aae132b
SEC-1420: Add htmlEscape attribute to authentication JSP tag.
|
vor 15 Jahren |
