Sākums Izpētīt Palīdzība
Reģistrēties Pierakstīties
github
/
spring-security
spogulis no https://github.com/spring-projects/spring-security
2
0
Atdalīts 0
Faili Problēmas 0 Vikivietne
Koks: f5741962ed
Atzari Tagi
spring-security
/
doc
/
xdocs
/
changes.xml

changes.xml 32 KB
Vēsture Neapstrādāts

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313 
  1. <?xml version="1.0" encoding="UTF-8"?>
    2. 

  2. 

  3. <!--
    4. 

  4.  * ========================================================================
    5. 

  5.  * 
    6. 

  6.  * Copyright 2004, 2005 Acegi Technology Pty Limited
    7. 

  7.  *
    8. 

  8.  * Licensed under the Apache License, Version 2.0 (the "License");
    9. 

  9.  * you may not use this file except in compliance with the License.
    10. 

  10.  * You may obtain a copy of the License at
    11. 

  11.  *
    12. 

  12.  *     http://www.apache.org/licenses/LICENSE-2.0
    13. 

  13.  *
    14. 

  14.  * Unless required by applicable law or agreed to in writing, software
    15. 

  15.  * distributed under the License is distributed on an "AS IS" BASIS,
    16. 

  16.  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    17. 

  17.  * See the License for the specific language governing permissions and
    18. 

  18.  * limitations under the License.
    19. 

  19.  * 
    20. 

  20.  * ========================================================================
    21. 

  21. -->
    22. 

  22. 

  23. <document>
    24. 

  24.   <properties>
    25. 

  25.     <title>Acegi Security changes</title>
    26. 

  26.   </properties>
    27. 

  27.   <body>
    28. 

  28.     <release version="0.9.0" date="In CVS">
    29. 

  29.       <action dev="markstg" type="add">SwitchUserProcessingFilter to provide user security context switching</action>
    30. 

  30.       <action dev="markstg" type="add">Java 1.5 annotation support</action>
    31. 

  31.       <action dev="benalex" type="update">BasicAuthenticationProcessingFilter no longer creates HttpSession via WebAuthenticationDetails call</action>
    32. 

  32.       <action dev="benalex" type="update">JdbcDaoImpl modified to support synthetic primary keys</action>
    33. 

  33.       <action dev="benalex" type="update">Greatly improve BasicAclEntryAfterInvocationCollectionFilteringProvider performance with large collections (if the principal has access to relatively few collection elements)</action>
    34. 

  34.       <action dev="benalex" type="update">Reorder DaoAuthenticationProvider exception logic as per developer list discussion</action>
    35. 

  35.       <action dev="benalex" type="update">ContextHolder refactored and replaced by SecurityContextHolder</action>
    36. 

  36.       <action dev="benalex" type="fix">Made AclEntry Serializable (correct issue with BasicAclEntryCache)</action>
    37. 

  37.       <action dev="luke_t" type="update">Changed order of credentials verification and expiry checking in DaoAuthenticationProvider. Password must now be successfully verified before expired credentials are reported. </action>
    38. 

  38.       <action dev="benalex" type="update">AnonymousProcessingFilter offers protected method to control when it should execute</action>
    39. 

  39.       <action dev="benalex" type="fix">AbstractAuthenticationToken.getName() now returns username alone if UserDetails present</action>
    40. 

  40.       <action dev="raykrueger" type="update">AuthorityGranter.grant now returns a java.util.Set of role names, instead of a single role name</action>
    41. 

  41.       <action dev="benalex" type="update">JavaDoc improvements</action>
    42. 

  42.       <action dev="benalex" type="fix">Correct synchronization issue with FilterToBeanProxy initialization</action>
    43. 

  43.       <action dev="benalex" type="update">Refactor Authentication.isAuthenticated() handling to be more performant</action>
    44. 

  44.       <action dev="benalex" type="fix">Silently catch NotSerializableException in AbstractProcessingFilter if rootCause is not Serializable</action>
    45. 

  45.       <action dev="benalex" type="fix">Remove getters and setters from JdbcDaoImpl so IoC container cannot modify MappingSqlQuerys</action>
    46. 

  46.       <action dev="benalex" type="update">Refactor DAO authentication failure events under a consistent abstract superclass</action>
    47. 

  47.       <action dev="benalex" type="fix">JBoss container adapter to use getName() instead to toString() (see http://opensource.atlassian.com/projects/spring/browse/SEC-22)</action>
    48. 

  48.       <action dev="benalex" type="fix">HttpSessionContextIntegrationFilter elegantly handles IOExceptions and ServletExceptions within filter chain (see http://opensource.atlassian.com/projects/spring/browse/SEC-20)</action>
    49. 

  49.       <action dev="benalex" type="update">Form, CAS, X509 and Remember-Me authentication mechanisms now publish an InteractiveAuthenticationSuccessEvent (see http://opensource.atlassian.com/projects/spring/browse/SEC-5)</action>
    50. 

  50.       <action dev="benalex" type="update">FilterSecurityInterceptor now has an observeOncePerRequest boolean property, allowing multiple fragments of the HTTP request to be individually authorized (see http://opensource.atlassian.com/projects/spring/browse/SEC-14)</action>
    51. 

  51.       <action dev="benalex" type="update">AnonymousProcessingFilter cleans up the Authentication object, avoiding HttpSession creation overhead</action>
    52. 

  52.       <action dev="benalex" type="update">SecurityEnforcementFilter now has a createSessionAllowed property, which should be set to false to avoid unnecessary session creation</action>
    53. 

  53.       <action dev="luke_t" type="fix">UserAttributeEditor now removes trailing spaces</action>
    54. 

  54.       <action dev="raykrueger" type="update">SecureContextLoginModule now provides ignoreMissingAuthentication property</action>
    55. 

  55.       <action dev="raykrueger" type="fix">SecureContextLoginModuleTests fixes (see http://opensource.atlassian.com/projects/spring/browse/SEC-36)</action>
    56. 

  56.       <action dev="smccrory" type="add">SiteMinder authentication services (see http://opensource.atlassian.com/projects/spring/browse/SEC-35)</action>
    57. 

  57.       <action dev="luke_t" type="add">Acegifier sample added (see http://opensource.atlassian.com/projects/spring/browse/SEC-1)</action>
    58. 

  58.       <action dev="smccrory" type="fix">CVS changes to help new Eclipse-based developers get started</action>
    59. 

  59.       <action dev="smccrory" type="fix">AuthorizeTag no longer depends on JDK 1.4.  Tested on Websphere 5.0 w/JDK 1.3 (see http://opensource.atlassian.com/projects/spring/browse/SEC-11)</action>
    60. 

  60.       <action dev="smccrory" type="update">Added debug statement to AbstractTicketValidator to help with Acegi+CAS+SSL setup (thanks Seth Ladd for the patch) (see http://opensource.atlassian.com/projects/spring/browse/SEC-34)</action>
    61. 

  61.       <action dev="smccrory" type="update">Added package.html files to empty resources dirs so CVS serves them to new developers</action>
    62. 

  62.       <action dev="smccrory" type="update">Added package.html files to reamining java packages (see http://opensource.atlassian.com/projects/spring/browse/SEC-41)</action>
    63. 

  63.       <action dev="benalex" type="update">Relocated JdbcDaoExtendedImpl.convertAclObjectIdentityToString to superclass</action>
    64. 

  64.     </release>
    65. 

  65.     <release version="0.8.3" date="2005-05-12">
    66. 

  66.       <action dev="benalex" type="fix">HttpSessionContextIntegrationFilter elegantly handles IOExceptions and ServletExceptions within filter chain (see http://opensource.atlassian.com/projects/spring/browse/SEC-20)</action>
    67. 

  67.     </release>
    68. 

  68.     <release version="0.8.1.1" date="2005-07-12">
    69. 

  69.       <action dev="benalex" type="fix">HttpSessionContextIntegrationFilter elegantly handles IOExceptions and ServletExceptions within filter chain (see http://opensource.atlassian.com/projects/spring/browse/SEC-20)</action>
    70. 

  70.     </release>
    71. 

  71.     <release version="0.7.1" date="2005-07-12">
    72. 

  72.       <action dev="benalex" type="fix">AbstractIntegrationFilter elegantly handles IOExceptions and ServletExceptions within filter chain (see http://opensource.atlassian.com/projects/spring/browse/SEC-20)</action>
    73. 

  73.     </release>
    74. 

  74.     <release version="0.8.2" date="2005-04-20">
    75. 

  75.       <action dev="benalex" type="fix">Correct location of AuthenticationSimpleHttpInvokerRequestExecutor in clientContext.xml</action>
    76. 

  76.       <action dev="benalex" type="fix">TokenBasedRememberMeServices changed to use long instead of int for tokenValiditySeconds (SPR-807)</action>
    77. 

  77.       <action dev="benalex" type="fix">Handle null Authentication.getAuthorities() in AuthorizeTag</action>
    78. 

  78.       <action dev="benalex" type="fix">PasswordDaoAuthenticationProvider no longer stores String against Authentication.setDetails()</action>
    79. 

  79.       <action dev="benalex" type="update">Update commons-codec dependency to 1.3</action>
    80. 

  80.       <action dev="raykrueger" type="update">AbstractProcessingFilter no longer has setters for failures, it uses the exceptionMappings property</action>
    81. 

  81.       <action dev="benalex" type="update">Update to match Spring 1.2-RC2 official JAR dependencies</action>
    82. 

  82.       <action dev="raykrueger" type="update">AuthenticationProcessingFilter now provides an obtainUsername method</action>
    83. 

  83.       <action dev="luke_t" type="update">Correct PathBasedFilterInvocationDefinitionMap compatibility with Spring 1.2-RC2</action>
    84. 

  84.       <action dev="luke_t" type="update">Refactoring to leverage Spring's Assert class and mocks where possible</action>
    85. 

  85.     </release>
    86. 

  86.     <release version="0.8.1" date="2005-03-22">
    87. 

  87.       <action dev="luke_t" type="add">X509 (certificate-based) authentication support</action>
    88. 

  88.       <action dev="benalex" type="update">UserDetails now advises locked accounts, with corresponding DaoAuthenticationProvider events and enforcement</action>
    89. 

  89.       <action dev="benalex" type="update">ContextHolderAwareRequestWrapper methods return null if user is anonymous</action>
    90. 

  90.       <action dev="benalex" type="update">AbstractBasicAclEntry improved compatibility with Hibernate</action>
    91. 

  91.       <action dev="benalex" type="update">User now provides a more useful toString() method</action>
    92. 

  92.       <action dev="benalex" type="update">Update to match Spring 1.1.5 official JAR dependencies (NB: now using Servlet 2.4 and related JSP/taglib JARs)</action>
    93. 

  93.       <action dev="benalex" type="fix">SecurityEnforcementFilter caused NullPointerException when anonymous authentication used with BasicProcessingFilterEntryPoint</action>
    94. 

  94.       <action dev="benalex" type="fix">FilterChainProxy now supports replacement of ServletRequest and ServetResponse by Filter beans</action>
    95. 

  95.       <action dev="fbos" type="fix">Corrected Authz parsing of whitespace in GrantedAuthoritys</action>
    96. 

  96.       <action dev="benalex" type="fix">TokenBasedRememberMeServices now respects expired users, expired credentials and disabled users</action>
    97. 

  97.       <action dev="benalex" type="fix">HttpSessionContextIntegrationFilter now handles HttpSession invalidation without redirection</action>
    98. 

  98.       <action dev="benalex" type="fix">StringSplitUtils.split() ignored delimiter argument</action>
    99. 

  99.       <action dev="benalex" type="fix">DigestProcessingFilter now provides userCache getter and setter</action>
    100. 

  100.       <action dev="benalex" type="fix">Contacts Sample made to work with UserDetails-based Principal</action>
    101. 

  101.       <action dev="benalex" type="update">Documentation improvements</action>
    102. 

  102.       <action dev="benalex" type="update">Test coverage improvements</action>
    103. 

  103.     </release>
    104. 

  104.     <release version="0.8.0" date="2005-03-03">
    105. 

  105.       <action dev="benalex" type="add">Added Digest Authentication support (RFC 2617 and RFC 2069)</action>
    106. 

  106.       <action dev="benalex" type="add">Added pluggable remember-me services</action>
    107. 

  107.       <action dev="benalex" type="add">Added pluggable mechnism to prevent concurrent login sessions</action>
    108. 

  108.       <action dev="benalex" type="add">FilterChainProxy added to significantly simplify web.xml configuration of Acegi Security</action>
    109. 

  109.       <action dev="benalex" type="add">AuthenticationProcessingFilter now provides hook for extra credentials (eg postcodes)</action>
    110. 

  110.       <action dev="benalex" type="add">New WebAuthenticationDetails class now used by processing filters for Authentication.setDetails()</action>
    111. 

  111.       <action dev="benalex" type="add">Additional debug-level logging</action>
    112. 

  112.       <action dev="benalex" type="add">Improved Tapestry support in AbstractProcessingFilter</action>
    113. 

  113.       <action dev="benalex" type="update">Made ConfigAttributeDefinition and ConfigAttribute Serializable</action>
    114. 

  114.       <action dev="benalex" type="update">User now accepts blank passwords (null passwords still rejected)</action>
    115. 

  115.       <action dev="benalex" type="update">FilterToBeanProxy now searches hierarchical bean factories</action>
    116. 

  116.       <action dev="benalex" type="update">User now accepted blank passwords (null passwords still rejected)</action>
    117. 

  117.       <action dev="benalex" type="update">ContextHolderAwareRequestWrapper now provides a getUserPrincipal() method</action>
    118. 

  118.       <action dev="benalex" type="update">HttpSessionIntegrationFilter no longer creates a HttpSession unnecessarily</action>
    119. 

  119.       <action dev="benalex" type="update">FilterSecurityInterceptor now only executes once per request (improves performance with SiteMesh)</action>
    120. 

  120.       <action dev="raykrueger" type="update">JaasAuthenticatinProvider now uses System.property "java.security.auth.login.config"</action>
    121. 

  121.       <action dev="raykrueger" type="update">JaasAuthenticationCallbackHandler Authentication is passed to handle method setAuthentication removed</action>
    122. 

  122.       <action dev="raykrueger" type="update">Added AuthenticationException to the AutenticationEntryPoint.commence method signature</action>
    123. 

  123.       <action dev="raykrueger" type="update">Added AccessDeniedException to the SecurityEncorcementFilter.sendAccessDeniedError method signature</action>
    124. 

  124.       <action dev="benalex" type="update">FilterToBeanProxy now addresses lifecycle mismatch (IoC container vs servlet container) issue</action>
    125. 

  125.       <action dev="benalex" type="update">Significantly refactor "well-known location model" to authentication processing mechanism and HttpSessionContextIntegrationFilter model</action>
    126. 

  126.       <action dev="benalex" type="fix">Correct issue with JdbcDaoImpl default SQL query not using consistent case sensitivity</action>
    127. 

  127.       <action dev="benalex" type="fix">Improve Linux and non-Sun JDK (specifically IBM JDK) compatibility</action>
    128. 

  128.       <action dev="benalex" type="fix">Log4j now included in generated WAR artifacts (fixes issue with Log4j listener)</action>
    129. 

  129.       <action dev="benalex" type="fix">Correct NullPointerException in FilterInvocationDefinitionSource implementations</action>
    130. 

  130.     </release>
    131. 

  131.     <release version="0.7.0" date="2005-01-16">
    132. 

  132.       <action dev="carlossg" type="add">Major CVS repository restructure to support Maven and eliminate libraries</action>
    133. 

  133.       <action dev="benalex" type="update">Major improvements to Contacts sample application (now demos ACL security)</action>
    134. 

  134.       <action dev="benalex" type="add">Added AfterInvocationManager to mutate objects return from invocations</action>
    135. 

  135.       <action dev="benalex" type="add">Added BasicAclEntryAfterInvocationProvider to ACL evaluate returned Object</action>
    136. 

  136.       <action dev="benalex" type="add">Added BasicAclEntryAfterInvocationCollectionFilteringProvider</action>
    137. 

  137.       <action dev="benalex" type="add">Added security propagation during RMI invocations (from sandbox)</action>
    138. 

  138.       <action dev="benalex" type="add">Added security propagation for Spring's HTTP invoker</action>
    139. 

  139.       <action dev="benalex" type="add">Added BasicAclEntryVoter, which votes based on AclManager permissions</action>
    140. 

  140.       <action dev="benalex" type="add">Added AspectJ support (especially useful for instance-level security)</action>
    141. 

  141.       <action dev="benalex" type="add">Added MethodDefinitionSourceAdvisor for performance and autoproxying</action>
    142. 

  142.       <action dev="benalex" type="add">Added MethodDefinitionMap querying of interfaces defined by secure objects</action>
    143. 

  143.       <action dev="benalex" type="add">Added AuthenticationProcessingFilter.setDetails for use by subclasses</action>
    144. 

  144.       <action dev="benalex" type="add">Added 403-causing exception to HttpSession via SecurityEnforcementFilter</action>
    145. 

  145.       <action dev="benalex" type="add">Added net.sf.acegisecurity.intercept.event package</action>
    146. 

  146.       <action dev="benalex" type="add">Added BasicAclExtendedDao interface and JdbcExtendedDaoImpl for ACL CRUD</action>
    147. 

  147.       <action dev="benalex" type="add">Added additional remoting protocol demonstrations to Contacts sample</action>
    148. 

  148.       <action dev="benalex" type="add">Added AbstractProcessingFilter property to always use defaultTargetUrl</action>
    149. 

  149.       <action dev="benalex" type="add">Added ContextHolderAwareRequestWrapper to integrate with getRemoteUser()</action>
    150. 

  150.       <action dev="benalex" type="add">Added attempted username to view if processed by AuthenticationProcessingFilter</action>
    151. 

  151.       <action dev="benalex" type="add">Added UserDetails account and credentials expiration methods</action>
    152. 

  152.       <action dev="benalex" type="add">Added exceptions and events to support new UserDetails methods</action>
    153. 

  153.       <action dev="benalex" type="add">Added new exceptions to JBoss container adapter</action>
    154. 

  154.       <action dev="benalex" type="update">Improved BasicAclProvider to only respond to specified ACL object requests</action>
    155. 

  155.       <action dev="benalex" type="update">Refactored MethodDefinitionSource to work with Method, not MethodInvocation</action>
    156. 

  156.       <action dev="benalex" type="update">Refactored AbstractFilterInvocationDefinitionSource to work with URL Strings alone</action>
    157. 

  157.       <action dev="benalex" type="update">Refactored AbstractSecurityInterceptor to better support other AOP libraries</action>
    158. 

  158.       <action dev="benalex" type="update">Improved performance of JBoss container adapter (see reference docs)</action>
    159. 

  159.       <action dev="benalex" type="update">Made DaoAuthenticationProvider detect null in Authentication.principal</action>
    160. 

  160.       <action dev="benalex" type="update">Improved JaasAuthenticationProvider startup error detection</action>
    161. 

  161.       <action dev="benalex" type="update">Refactored EH-CACHE implementations to use Spring IoC defined caches instead</action>
    162. 

  162.       <action dev="benalex" type="update">AbstractProcessingFilter now has various hook methods to assist subclasses</action>
    163. 

  163.       <action dev="benalex" type="update">DaoAuthenticationProvider better detects AuthenticationDao interface violations</action>
    164. 

  164.       <action dev="benalex" type="update">The User class has a new constructor (the old constructor is deprecated)</action>
    165. 

  165.       <action dev="benalex" type="fix">Fixed ambiguous column references in JdbcDaoImpl default query</action>
    166. 

  166.       <action dev="benalex" type="fix">Fixed AbstractProcessingFilter to use removeAttribute (JRun compatibility)</action>
    167. 

  167.       <action dev="benalex" type="fix">Fixed GrantedAuthorityEffectiveAclResolver support of UserDetails principals</action>
    168. 

  168.       <action dev="benalex" type="fix">Fixed HttpSessionIntegrationFilter "cannot commit to container" during logoff</action>
    169. 

  169.       <action dev="benalex" type="update">Moved MethodSecurityInterceptor to ...intercept.method.aopalliance package</action>
    170. 

  170.       <action dev="benalex" type="update">Documentation improvements</action>
    171. 

  171.       <action dev="benalex" type="update">Test coverage improvements</action>
    172. 

  172.     </release>
    173. 

  173.     <release version="0.6.1" date="2004-09-24">
    174. 

  174.       <action dev="benalex" type="update">Resolved to use http://apr.apache.org/versioning.html for future versioning</action>
    175. 

  175.       <action dev="benalex" type="add">Added additional DaoAuthenticationProvider event when user not found</action>
    176. 

  176.       <action dev="benalex" type="add">Added Authentication.getDetails() to DaoAuthenticationProvider response</action>
    177. 

  177.       <action dev="benalex" type="add">Added DaoAuthenticationProvider.hideUserNotFoundExceptions (default=true)</action>
    178. 

  178.       <action dev="benalex" type="add">Added PasswordAuthenticationProvider for password-validating DAOs (eg LDAP)</action>
    179. 

  179.       <action dev="benalex" type="add">Added FilterToBeanProxy compatibility with ContextLoaderServlet (lazy inits)</action>
    180. 

  180.       <action dev="benalex" type="add">Added convenience methods to ConfigAttributeDefinition</action>
    181. 

  181.       <action dev="benalex" type="update">Improved sample applications' bean reference notation</action>
    182. 

  182.       <action dev="benalex" type="update">Clarified contract for ObjectDefinitionSource.getAttributes(Object)</action>
    183. 

  183.       <action dev="benalex" type="update">Extracted removeUserFromCache(String) to UserCache interface</action>
    184. 

  184.       <action dev="benalex" type="update">Improved ConfigAttributeEditor so it trims preceding and trailing spaces</action>
    185. 

  185.       <action dev="benalex" type="update">Refactored UsernamePasswordAuthenticationToken.getDetails() to Object</action>
    186. 

  186.       <action dev="benalex" type="fix">Fixed MethodDefinitionAttributes to implement ObjectDefinitionSource change</action>
    187. 

  187.       <action dev="benalex" type="fix">Fixed EH-CACHE-based caching implementation behaviour when cache exists</action>
    188. 

  188.       <action dev="benalex" type="fix">Fixed Ant "release" target not including project.properties</action>
    189. 

  189.       <action dev="benalex" type="fix">Fixed GrantedAuthorityEffectiveAclsResolver if null ACLs provided to method</action>
    190. 

  190.       <action dev="benalex" type="update">Documentation improvements</action>
    191. 

  191.     </release>
    192. 

  192.     <release version="0.6"   date="2004-08-08">
    193. 

  193.       <action dev="benalex" type="add">Added domain object instance access control list (ACL) packages</action>
    194. 

  194.       <action dev="benalex" type="add">Added feature so DaoAuthenticationProvider returns User in Authentication</action>
    195. 

  195.       <action dev="benalex" type="add">Added AbstractIntegrationFilter.secureContext property for custom contexts</action>
    196. 

  196.       <action dev="benalex" type="add">Added stack trace logging to SecurityEnforcementFilter</action>
    197. 

  197.       <action dev="benalex" type="add">Added exception-specific target URLs to AbstractProcessingFilter</action>
    198. 

  198.       <action dev="benalex" type="add">Added JdbcDaoImpl hook so subclasses can insert custom granted authorities</action>
    199. 

  199.       <action dev="raykrueger" type="add">Added AuthenticationProvider that wraps JAAS login modules</action>
    200. 

  200.       <action dev="fbos" type="add">Added support for EL expressions in the authz tag library</action>
    201. 

  201.       <action dev="benalex" type="add">Added failed Authentication object to AuthenticationExceptions</action>
    202. 

  202.       <action dev="benalex" type="add">Added signed JARs to all official release builds (see readme.txt)</action>
    203. 

  203.       <action dev="benalex" type="add">Added remote client authentication validation package</action>
    204. 

  204.       <action dev="benalex" type="add">Added protected sendAccessDeniedError method to SecurityEnforcementFilter</action>
    205. 

  205.       <action dev="benalex" type="update">Updated Authentication to be serializable (Weblogic support)</action>
    206. 

  206.       <action dev="benalex" type="update">Updated JAR to Spring 1.1 RC 1</action>
    207. 

  207.       <action dev="benalex" type="update">Updated to Clover 1.3</action>
    208. 

  208.       <action dev="benalex" type="update">Updated to HSQLDB version 1.7.2 Release Candidate 6D</action>
    209. 

  209.       <action dev="benalex" type="update">Refactored User to net.sf.acegisecurity.UserDetails interface</action>
    210. 

  210.       <action dev="benalex" type="update">Refactored CAS package to store UserDetails in CasAuthenticationToken</action>
    211. 

  211.       <action dev="benalex" type="update">Improved organisation of DaoAuthenticationProvider to facilitate subclassing</action>
    212. 

  212.       <action dev="benalex" type="update">Improved test coverage (now 98.3%)</action>
    213. 

  213.       <action dev="benalex" type="update">Improved JDBC-based tests to use in-memory database rather than filesystem</action>
    214. 

  214.       <action dev="benalex" type="update">Fixed Linux compatibility issues (directory case sensitivity etc)</action>
    215. 

  215.       <action dev="benalex" type="update">Fixed AbstractProcessingFilter to handle servlet spec container differences</action>
    216. 

  216.       <action dev="benalex" type="update">Fixed AbstractIntegrationFilter to resolve a Weblogic compatibility issue</action>
    217. 

  217.       <action dev="benalex" type="fix">Fixed CasAuthenticationToken if proxy granting ticket callback not requested</action>
    218. 

  218.       <action dev="benalex" type="fix">Fixed EH-CACHE handling on web context refresh</action>
    219. 

  219.       <action dev="benalex" type="update">Documentation improvements</action>
    220. 

  220.     </release>
    221. 

  221.     <release version="0.5.1" date="2004-06-05">
    222. 

  222.       <action dev="benalex" type="add">Added samples/quick-start</action>
    223. 

  223.       <action dev="benalex" type="add">Added NullRunAsManager and made default for AbstractSecurityInterceptor</action>
    224. 

  224.       <action dev="benalex" type="add">Added event notification (see net.sf.acegisecurity.providers.dao.event)</action>
    225. 

  225.       <action dev="benalex" type="update">Updated JAR to Spring 1.0.2</action>
    226. 

  226.       <action dev="benalex" type="update">Updated JAR to Commons Attributes CVS snapshot from Spring 1.0.2 release</action>
    227. 

  227.       <action dev="benalex" type="update">Updated GrantedAuthorityImpl to be serializable (JBoss support)</action>
    228. 

  228.       <action dev="benalex" type="update">Updated Authentication interface to present extra details for a request</action>
    229. 

  229.       <action dev="benalex" type="update">Updated Authentication interface to subclass java.security.Principal</action>
    230. 

  230.       <action dev="benalex" type="update">Refactored DaoAuthenticationProvider caching (refer to reference docs)</action>
    231. 

  231.       <action dev="benalex" type="update">Improved HttpSessionIntegrationFilter to manage additional attributes</action>
    232. 

  232.       <action dev="benalex" type="update">Improved URL encoding during redirects</action>
    233. 

  233.       <action dev="benalex" type="fix">Fixed issue with hot deploy of EhCacheBasedTicketCache (used with CAS)</action>
    234. 

  234.       <action dev="fbos" type="fix">Fixed issue with NullPointerExceptions in taglib</action>
    235. 

  235.       <action dev="benalex" type="update">Removed DaoAuthenticationToken and session-based caching</action>
    236. 

  236.       <action dev="benalex" type="update">Documentation improvements</action>
    237. 

  237.       <action dev="benalex" type="update">Upgrade Note: DaoAuthenticationProvider no longer has a "key" property</action>
    238. 

  238.     </release>
    239. 

  239.     <release version="0.5" date="2004-04-28">
    240. 

  240.       <action dev="benalex" type="add">Added single sign on support via Yale Central Authentication Service (CAS)</action>
    241. 

  241.       <action dev="benalex" type="add">Added full support for HTTP Basic Authentication</action>
    242. 

  242.       <action dev="benalex" type="add">Added caching for DaoAuthenticationProvider successful authentications</action>
    243. 

  243.       <action dev="benalex" type="add">Added Burlap and Hessian remoting to Contacts sample application</action>
    244. 

  244.       <action dev="colins" type="add">Added pluggable password encoders including plaintext, SHA and MD5</action>
    245. 

  245.       <action dev="benalex" type="add">Added pluggable salt sources to enhance security of hashed passwords</action>
    246. 

  246.       <action dev="benalex" type="add">Added FilterToBeanProxy to obtain filters from Spring application context</action>
    247. 

  247.       <action dev="colins" type="add">Added support for prepending strings to roles created by JdbcDaoImpl</action>
    248. 

  248.       <action dev="colins" type="add">Added support for user definition of SQL statements used by JdbcDaoImpl</action>
    249. 

  249.       <action dev="colins" type="add">Added definable prefixes to avoid expectation of "ROLE_" GrantedAuthoritys</action>
    250. 

  250.       <action dev="benalex" type="add">Added pluggable AuthenticationEntryPoints to SecurityEnforcementFilter</action>
    251. 

  251.       <action dev="benalex" type="add">Added Apache Ant path syntax support to SecurityEnforcementFilter</action>
    252. 

  252.       <action dev="benalex" type="add">Added filter to automate web channel requirements (eg HTTPS redirection)</action>
    253. 

  253.       <action dev="benalex" type="update">Updated JAR to Spring 1.0.1</action>
    254. 

  254.       <action dev="benalex" type="update">Updated several classes to use absolute (not relative) redirection URLs</action>
    255. 

  255.       <action dev="benalex" type="update">Refactored filters to use Spring application context lifecycle support</action>
    256. 

  256.       <action dev="benalex" type="update">Improved constructor detection of nulls in User and other key objects</action>
    257. 

  257.       <action dev="benalex" type="fix">Fixed FilterInvocation.getRequestUrl() to also include getPathInfo()</action>
    258. 

  258.       <action dev="benalex" type="fix">Fixed Contacts sample application <A></A> tags</action>
    259. 

  259.       <action dev="benalex" type="update">Established acegisecurity-developer mailing list</action>
    260. 

  260.       <action dev="benalex" type="update">Documentation improvements</action>
    261. 

  261.     </release>
    262. 

  262.     <release version="0.4" date="2004-04-03">
    263. 

  263.       <action dev="benalex" type="add">Added HTTP session authentication as an alternative to container adapters</action>
    264. 

  264.       <action dev="benalex" type="add">Added HTTP request security interceptor (offers considerable flexibility)</action>
    265. 

  265.       <action dev="fbos" type="add">Added security taglib</action>
    266. 

  266.       <action dev="benalex" type="add">Added Clover test coverage instrumentation (currently 97.2%)</action>
    267. 

  267.       <action dev="benalex" type="add">Added support for Catalina (Tomcat) 4.1.30 to in-container integration tests</action>
    268. 

  268.       <action dev="benalex" type="add">Added HTML test and summary reporting to in-container integration tests</action>
    269. 

  269.       <action dev="benalex" type="update">Updated JARs to Spring Framework release 1.0, with associated AOP changes</action>
    270. 

  270.       <action dev="benalex" type="update">Updated to Apache License version 2.0</action>
    271. 

  271.       <action dev="benalex" type="update">Updated copyright with permission of past contributors</action>
    272. 

  272.       <action dev="benalex" type="update">Refactored unit tests to use mock objects and focus on a single class each</action>
    273. 

  273.       <action dev="benalex" type="update">Refactored many classes to enable insertion of mock objects during testing</action>
    274. 

  274.       <action dev="benalex" type="update">Refactored core classes to ease support of new secure object types</action>
    275. 

  275.       <action dev="benalex" type="update">Changed package layout to better describe the role of contained items</action>
    276. 

  276.       <action dev="benalex" type="update">Changed the extractor to extract additional classes from JBoss and Catalina</action>
    277. 

  277.       <action dev="benalex" type="update">Changed Jetty container adapter configuration (see reference documentation)</action>
    278. 

  278.       <action dev="benalex" type="update">Improved AutoIntegrationFilter handling of deployments without JBoss JARs</action>
    279. 

  279.       <action dev="benalex" type="fix">Fixed case handling support in data access object authentication provider</action>
    280. 

  280.       <action dev="benalex" type="update">Documentation improvements</action>
    281. 

  281.     </release>
    282. 

  282.     <release version="0.3" date="2004-03-18">
    283. 

  283.       <action dev="benalex" type="add">Added "in container" unit test system for container adapters and sample app</action>
    284. 

  284.       <action dev="benalex" type="add">Added library extractor tool to reduce the "with deps" ZIP release sizes</action>
    285. 

  285.       <action dev="benalex" type="add">Added unit test to the attributes sample</action>
    286. 

  286.       <action dev="benalex" type="add">Added Jalopy source formatting</action>
    287. 

  287.       <action dev="benalex" type="update">Modified all files to use net.sf.acegisecurity namespace</action>
    288. 

  288.       <action dev="benalex" type="update">Renamed springsecurity.xml to acegisecurity.xml for consistency</action>
    289. 

  289.       <action dev="benalex" type="update">Reduced length of ZIP and JAR filenames</action>
    290. 

  290.       <action dev="benalex" type="update">Clarified licenses and sources for all included libraries</action>
    291. 

  291.       <action dev="benalex" type="update">Updated documentation to reflect new file and package names</action>
    292. 

  292.       <action dev="benalex" type="update">Setup Sourceforge.net project and added to CVS etc</action>
    293. 

  293.     </release>
    294. 

  294.     <release version="0.2"   date="2004-03-10">
    295. 

  295.       <action dev="benalex" type="add">Added Commons Attributes support and sample (thanks to Cameron Braid)</action>
    296. 

  296.       <action dev="benalex" type="add">Added JBoss container adapter</action>
    297. 

  297.       <action dev="benalex" type="add">Added Resin container adapter</action>
    298. 

  298.       <action dev="benalex" type="add">Added JDBC DAO authentication provider</action>
    299. 

  299.       <action dev="benalex" type="add">Added several filter implementations for container adapter integration</action>
    300. 

  300.       <action dev="benalex" type="add">Added SecurityInterceptor startup time validation of ConfigAttributes</action>
    301. 

  301.       <action dev="benalex" type="add">Added more unit tests</action>
    302. 

  302.       <action dev="benalex" type="update">Refactored ConfigAttribute to interface and added concrete implementation</action>
    303. 

  303.       <action dev="benalex" type="update">Enhanced diagnostics information provided by sample application debug.jsp</action>
    304. 

  304.       <action dev="benalex" type="update">Modified sample application for wider container portability (Resin, JBoss)</action>
    305. 

  305.       <action dev="benalex" type="fix">Fixed switch block in voting decision manager implementations</action>
    306. 

  306.       <action dev="benalex" type="update">Removed Spring MVC interceptor for container adapter integration</action>
    307. 

  307.       <action dev="benalex" type="update">Documentation improvements</action>
    308. 

  308.     </release>
    309. 

  309.     <release version="0.1"   date="2004-03-03">
    310. 

  310.       <action dev="benalex" type="add">Initial public release</action>
    311. 

  311.     </release>
    312. 

  312.   </body>
    313. 

  313. </document>
    314.