 Luke Taylor
|
5f6dab67e1
SEC-1492: Added SimpleAuthoritiesMapper which provides a one-to-one authority mapping with case-conversion and the addition of a "role" prefix to the authority name.
|
15 yıl önce |
|
Luke Taylor
|
3547cfcc92
SEC-1641: Remove the private setGroupSearchBase method and allowed a null value to be set for the group search base in the constructor.
|
15 yıl önce |
|
Luke Taylor
|
f1fe3ce7e6
Update wrapper to gradle 0.9 release
|
15 yıl önce |
|
Luke Taylor
|
48ea0a6249
SEC-1638: Added paragraph to docs explaining that for complete security, an app should not switch out of HTTPS at all.
|
15 yıl önce |
|
Luke Taylor
|
7cf9740fd4
SEC-1638: Added an example configuration to the Javadoc for ChannelProcessingFilter and a pointer from the reference manual.
|
15 yıl önce |
 Rob Winch
|
1ed5227d75
Removed @Override from HttpFirewallBeanDefinitionParser.parse since it does not override a method definition, it implements one.
|
15 yıl önce |
|
Rob Winch
|
7c04fdbc90
SEC-1639: FirewalledRequest is now called on the specific FirewalledRequest instance rather that looping through ServletRequestWrappers.
|
15 yıl önce |
|
Luke Taylor
|
46f83c8a08
SEC-1492: Added RoleHierarchyAuthoritiesMapper as the new preferred way of using a RoleHierarchy.
|
15 yıl önce |
|
Luke Taylor
|
c8820166c8
SEC-1576: Parameterize the secured object type in AccessDecisionVoter.
|
15 yıl önce |
|
Luke Taylor
|
85d685f7d3
SEC-1611: Make access attribute in authorize tag a runtime expression
|
15 yıl önce |
|
Luke Taylor
|
ce421f22bf
SEC-1635: Stop security interceptors from calling AfterInvocationManager if exception occurs during invocation
|
15 yıl önce |
|
Luke Taylor
|
2be2660b13
SEC-1636: Add optimizations for simple pattern cases in AntPathRequestMatcher. "/**" and "**" are treated as universal matches and a trailing "/**" is now optimized using a substring match.
|
15 yıl önce |
|
Luke Taylor
|
523f6add60
Javadoc fix
|
15 yıl önce |
|
Luke Taylor
|
4a40d80da1
SEC-1418: Deprecate GrantedAuthorityImpl in favour of final SimpleGrantedAuthority.
|
15 yıl önce |
|
Luke Taylor
|
978b7d4707
SEC-1631: Reduced use of reflection in DefaultAuthenticationEventPublisher and added tests.
|
15 yıl önce |
|
Luke Taylor
|
bfb723feac
SEC-1557: Added getter to DelegatingMethodSecurityMetadataSource. Also added some optimizations of cache lookup key equals method. A class type check is unnecessary since the key class is a private inner class.
|
15 yıl önce |
|
Luke Taylor
|
441aa25383
SEC-1615: Changed key generation for anonymous provider to only use SecureRandom on demand.
|
15 yıl önce |
|
Luke Taylor
|
4ad0652787
Removed array of authorities constructor from TestingAuthenticationToken and RunAsUserToken.
|
15 yıl önce |
|
Luke Taylor
|
ca679e1479
Reformatting.
|
15 yıl önce |
|
Luke Taylor
|
9b29dcb8bf
SEC-1430: Removed username attribute from WebAttributes class.
|
15 yıl önce |
|
Luke Taylor
|
43be9ea2a4
SEC-1430: Removed caching of username in session upon failed authentication. Improved Javadoc.
|
15 yıl önce |
|
Luke Taylor
|
d64efe9747
SEC-1492: Added GrantedAuthoritiesMapper to provide mapping of loaded authorities to those which are eventually stored in the user Authentication object.
|
15 yıl önce |
|
Luke Taylor
|
89f80659a1
Move docs on request matching to correct file and delete unused one
|
15 yıl önce |
|
Luke Taylor
|
49242729e4
Added imgSrcPath parameter for use in docbookFopPdf task.
|
15 yıl önce |
|
Luke Taylor
|
51a53ddbaa
Minor refactoring of GAE code to use specific GrantedAuthority type.
|
15 yıl önce |
|
Luke Taylor
|
60970dd9c4
Added some tests for web expression handling code.
|
15 yıl önce |
|
Luke Taylor
|
2d9f98d535
SEC-1412: DefaultSavedRequest should ignore "If-Modified-Since" headers to prevent re-displaying the login form (the cached result of the original request).
|
15 yıl önce |
|
Luke Taylor
|
fc00d7ef1d
Move the unix scripts for the tutorial sample into a subdirectory
|
15 yıl önce |
|
Luke Taylor
|
37810a19c4
SEC-1619: Added check in GAE sample for change of Google user while still logged into the app.
|
15 yıl önce |
|
Luke Taylor
|
8b51c2c97d
SEC-1587: Add explicit call to removeAttribute() to remove the context from the session if the current context is empty or anonymous.
|
15 yıl önce |
