 Rob Winch
|
f5fc94e1be
SEC-2056: DaoAuthenticationProvider performs isPasswordValid when user not found
|
13 éve |
|
Rob Winch
|
a4f13a9ae0
Added SCM information to pom for OSS requirements
|
13 éve |
|
Rob Winch
|
5c308c0215
Further maven 3 cleanup
|
13 éve |
|
Rob Winch
|
a0f91b2dd2
Update maven-resources-plugin to 2.6 to work with m2e
|
13 éve |
|
Rob Winch
|
6cf44b9de0
Update maven-dependency-plugin to 2.5.1 to support m2e
|
13 éve |
 Luke Taylor
|
55e501711d
Set version to 2.0.8.CI-SNAPSHOT
|
14 éve |
|
Luke Taylor
|
d5e6f0b575
Set release version to 2.0.7.RELEASE
|
14 éve |
|
Luke Taylor
|
76dc21469e
SEC-1750: Make sure RunAs replacement is constrained to the SecurityContext of the current thread.
|
14 éve |
|
Luke Taylor
|
22b7c9b905
SEC-1742: Make extraInformation in AuthenticationException transient.
|
14 éve |
|
Luke Taylor
|
0cdf202b10
SEC-1744: Do not trust authorities contained in the authentication request in JaasAuthenticationProvider.
|
14 éve |
|
Luke Taylor
|
a507e3612a
SEC-1741: Modify ContextPropagatingRemoteInvocation to pass a simple combination of principal/credentials as Strings, rather than serializing the whole SecurityContext object from the client.
|
14 éve |
|
Luke Taylor
|
f5fbda42e5
SEC-1790: Reject redirect locations containing CR or LF.
|
14 éve |
 Rob Winch
|
d5b72275e5
SEC-1639: FirewalledRequest is now called on the specific FirewalledRequest instance rather that looping through ServletRequestWrappers.
|
14 éve |
|
Luke Taylor
|
08a933f930
SEC-1608: Ensure request wrapper is reset for empty filter chains.
|
15 éve |
|
Rob Winch
|
54ffc98bb4
SEC-1606: Added a FirewalledRequestAwareRequestDispatcher that will call FirewalledRequest.reset() before a forward
|
15 éve |
|
Luke Taylor
|
1c3d530b60
Switch versions to 2.0.7.CI-SNAPSHOT
|
15 éve |
|
Luke Taylor
|
beb0ec4ba9
Version 2.0.6.RELEASE
|
15 éve |
|
Luke Taylor
|
dec2e59fba
SEC-1584: Backport of namespace support for injecting custom HttpFirewall instance into FilterChainProxy.
|
15 éve |
|
Luke Taylor
|
ed7f589998
SEC-1584: Additional integration tests.
|
15 éve |
|
Luke Taylor
|
8f6ddb0f17
SEC-1584: Backport to 2.0.x branch of request firewalling (normalization checks and path-parameter stripping from servletPath and pathInfo).
|
15 éve |
|
Luke Taylor
|
62a8aca853
.gitignore updates
|
15 éve |
|
Luke Taylor
|
9c6a5135a3
SEC-1532: Patch applied to 2.0.x branch
|
15 éve |
 Luke Taylor
|
0acf262546
SEC-1462: Added suggested patch (effectively the same as changes in 3.0.x and master branches).
|
15 éve |
|
Luke Taylor
|
6ad652ae97
Update 2.0 branch pom versions.
|
15 éve |
|
Luke Taylor
|
068b3d48ec
Add .gitignore to 2.0.x branch
|
15 éve |
|
Luke Taylor
|
d6f6a54455
SEC-1444: Backport of changes to 2.0.x
|
15 éve |
|
Luke Taylor
|
4361211c21
Change release from milestone to release
|
16 éve |
|
Luke Taylor
|
71adc26b0f
[maven-release-plugin] prepare release spring-security-2.0.5.RELEASE
|
16 éve |
|
Luke Taylor
|
eb3288ca34
Removing unnecessary repository declarations
|
16 éve |
|
Luke Taylor
|
f3f4cfe804
Minor changes to readme
|
16 éve |
