Release Notes - Spring JIRA

Release Notes - Spring Security - Version 2.0.1 - HTML format

Configure Release Notes

Bug

[SEC-761] - HttpSessionContextIntegrationFilter.contextObject should be created in afterPropertiesSet(), not the constructor
[SEC-771] - Acegi Security - java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.org.apache.catalina.connector)
[SEC-772] - Remember me java.lang.IllegalStateException
[SEC-773] - global-method-security fails with JPA
[SEC-776] - Http Session created for Anonymous request
[SEC-780] - Can't replace AuthenticationProcessingFilter with a custom AuthenticationProcessingFilter
[SEC-783] - GlobalMethodSecurityBeanDefinitionParser should support AfterInvocationProviders
[SEC-784] - LDAP sample dependencies should not be "optional"
[SEC-787] - ACL SQL statements have inconsistent use of case (mixed upper and lower).
[SEC-788] - x509 authentication does not work properly
[SEC-792] - Filters should only be added to the default stack if they are labelled using custom-filter.
[SEC-793] - ldap-authentication-provider element parser ignores hash attribute.

New Feature

[SEC-751] - Set default security level
[SEC-807] - Allow mapping to a standard Ldap UserDetails through the namespace
[SEC-811] - Provide a mechanism to allocate and rebuild cryptographically strong, randomised tokens

Task

[SEC-806] - Add more specific version information for OSGi dependencies
[SEC-808] - Switch namespace schema version to 2.0.1 and update spring.schemas

Improvement

[SEC-736] - Documentation error:
[SEC-757] - Add validation of redirect URLs on namespace
[SEC-775] - CLONE -impossible to specify "observeOncePerRequest" property in the namespace based configuration.
[SEC-790] - DefaultLoginPageGeneratingFilter should be a better HTTP citizen
[SEC-796] - X509 namespace issue
[SEC-797] - Javadoc bug on ConfigAttributeDefinition.getConfigAttributes says it returns an Iterator
[SEC-799] - Add better detection of missing server-ref element for <ldap-user-service> and <ldap-authentication-provider />
[SEC-805] - Add extra fields to InetOrgPerson

Edit/Copy Release Notes

The text area below allows the project release notes to be edited and copied to another document.

Release Notes - Spring Security - Version 2.0.1
                    
<h2>        Bug
</h2>
<ul>
<li>[<a href='https://jira.spring.io/browse/SEC-761'>SEC-761</a>] -         HttpSessionContextIntegrationFilter.contextObject should be created in afterPropertiesSet(), not the constructor
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-771'>SEC-771</a>] -         Acegi Security - java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.org.apache.catalina.connector) 
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-772'>SEC-772</a>] -         Remember me java.lang.IllegalStateException
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-773'>SEC-773</a>] -         global-method-security fails with JPA
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-776'>SEC-776</a>] -         Http Session created for Anonymous request
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-780'>SEC-780</a>] -         Can&#39;t replace AuthenticationProcessingFilter with a custom AuthenticationProcessingFilter
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-783'>SEC-783</a>] -         GlobalMethodSecurityBeanDefinitionParser should support AfterInvocationProviders
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-784'>SEC-784</a>] -         LDAP sample dependencies should not be &quot;optional&quot;
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-787'>SEC-787</a>] -         ACL SQL statements have inconsistent use of case (mixed upper and  lower).
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-788'>SEC-788</a>] -         x509 authentication does not work properly
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-792'>SEC-792</a>] -         Filters should only be added to the default stack if they are labelled using custom-filter.
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-793'>SEC-793</a>] -         ldap-authentication-provider element parser ignores hash attribute.
</li>
</ul>
    
<h2>        New Feature
</h2>
<ul>
<li>[<a href='https://jira.spring.io/browse/SEC-751'>SEC-751</a>] -         Set default security level
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-807'>SEC-807</a>] -         Allow mapping to a standard Ldap UserDetails through the namespace
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-811'>SEC-811</a>] -         Provide a mechanism to allocate and rebuild cryptographically strong, randomised tokens
</li>
</ul>
    
<h2>        Task
</h2>
<ul>
<li>[<a href='https://jira.spring.io/browse/SEC-806'>SEC-806</a>] -         Add more specific version information for OSGi dependencies
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-808'>SEC-808</a>] -         Switch namespace schema version to 2.0.1 and update spring.schemas
</li>
</ul>
    
<h2>        Improvement
</h2>
<ul>
<li>[<a href='https://jira.spring.io/browse/SEC-736'>SEC-736</a>] -         Documentation error: 
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-757'>SEC-757</a>] -         Add validation of redirect URLs on namespace
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-775'>SEC-775</a>] -         CLONE -impossible to specify &quot;observeOncePerRequest&quot; property in the namespace based configuration.
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-790'>SEC-790</a>] -         DefaultLoginPageGeneratingFilter should be a better HTTP citizen
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-796'>SEC-796</a>] -         X509 namespace issue
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-797'>SEC-797</a>] -         Javadoc bug on ConfigAttributeDefinition.getConfigAttributes says it returns an Iterator
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-799'>SEC-799</a>] -         Add better detection of missing server-ref element for &lt;ldap-user-service&gt; and &lt;ldap-authentication-provider /&gt;
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-805'>SEC-805</a>] -         Add extra fields to InetOrgPerson
</li>
</ul>