1. 3d9dc6e [maven-release-plugin] prepare release org.apache.sling.auth.core-1.3.2 by Antonio Sanso · 10 years ago
  2. 3275522 SLING-3991 - Support Password Change Upon Expiry Via SimpleCredentials Attribute (applied patch from Dominique Jaeggi) by Antonio Sanso · 10 years ago
  3. 469a868 Update to Sling Parent POM 22 with baselining enabled by Carsten Ziegeler · 10 years ago
  4. 7e9d5db [maven-release-plugin] prepare for next development iteration by Carsten Ziegeler · 10 years ago
  5. e78957b [maven-release-plugin] prepare release org.apache.sling.auth.core-1.3.0 by Carsten Ziegeler · 10 years ago
  6. ea59e08 SLING-3936 - Poor performance when adding a large (?) number of by Robert Munteanu · 10 years ago
  7. 5e344aa SLING-3922 : Login Failure Reason Code Not Propagated In AuthUtil#sendInvalid. Apply patch from Dominique Jäggi by Carsten Ziegeler · 10 years ago
  8. ab102e4 [maven-release-plugin] prepare for next development iteration by Carsten Ziegeler · 10 years ago
  9. 0b59440 [maven-release-plugin] prepare release org.apache.sling.auth.core-1.2.0 by Carsten Ziegeler · 10 years ago
  10. 2601837 SLING-3905 : Support Password Expired In Sling Authenticator. Apply slightly modified patch from Dominique Jäggi by Carsten Ziegeler · 10 years ago
  11. 325bb7b [maven-release-plugin] prepare for next development iteration by Carsten Ziegeler · 10 years ago
  12. ffc772a [maven-release-plugin] prepare release org.apache.sling.auth.core-1.1.8 by Carsten Ziegeler · 10 years ago
  13. ab4432a Updated to parent version 20 by Robert Munteanu · 10 years ago
  14. 5abb8f6 SLING-3794 : Fields for dynamic references must be volatile by Carsten Ziegeler · 10 years ago
  15. 193fb1a SLING-3492 use / as default when path is empty by Oliver Lietz · 10 years ago
  16. 81b8899 SLING-3488 : Redirect after authentication breaks with context path by Carsten Ziegeler · 10 years ago
  17. e330cdf Update to parent pom v19 by Carsten Ziegeler · 10 years ago
  18. 7cef26a [maven-release-plugin] prepare for next development iteration by Carsten Ziegeler · 10 years ago
  19. e1d3ebe [maven-release-plugin] prepare release org.apache.sling.auth.core-1.1.6 by Carsten Ziegeler · 10 years ago
  20. d35f84c SLING-3286 - Remove plugin version overrides from poms by Carsten Ziegeler · 10 years ago
  21. 62acb53 SLING-3286 - Remove plugin version overrides from poms by Robert Munteanu · 10 years ago
  22. 4a8d3a7 SLING-3271 : Properly xml escape web console output by Carsten Ziegeler · 10 years ago
  23. 72ecf59 [maven-release-plugin] prepare for next development iteration by Carsten Ziegeler · 11 years ago
  24. 10e5679 [maven-release-plugin] prepare release org.apache.sling.auth.core-1.1.4 by Carsten Ziegeler · 11 years ago
  25. d1cd9aa SLING-3141 : AbstractAuthenticationFormServlet should make sure resource is a valid redirect by Carsten Ziegeler · 11 years ago
  26. 81b61a5 SLING-2615 : allow the LogoutServlet to be configured to only respond to POST requests by Carsten Ziegeler · 11 years ago
  27. f2210e7 SLING-3079 : Move constant for "sling.auth.requirements" to AuthConstants by Carsten Ziegeler · 11 years ago
  28. 3475f83 SLING-2998 SlingAuthenticator fails because of pathInfo being null by Oliver Lietz · 11 years ago
  29. 478b62b Revert to old maven bundle plugin if DynamicImport-Package is used by Carsten Ziegeler · 11 years ago
  30. beeda5d Update to parent pom 18 by Carsten Ziegeler · 11 years ago
  31. e06dea8 Update to latest parent pom by Carsten Ziegeler · 11 years ago
  32. 3fa38cb SLING-2974 : XSS vulnerability in AbstractAuthenticationFormServlet by Carsten Ziegeler · 11 years ago
  33. f385892 SLING-2966 : Insufficient synchronization in SlingAuthenticator by Carsten Ziegeler · 11 years ago
  34. 8e908da Correct reactor pom and update to parent pom 16 by Carsten Ziegeler · 11 years ago
  35. b3639dd [maven-release-plugin] prepare for next development iteration by Carsten Ziegeler · 11 years ago
  36. a76f97e [maven-release-plugin] prepare release org.apache.sling.auth.core-1.1.2 by Carsten Ziegeler · 11 years ago
  37. aaa194e SLING-2812 : Access to handler map is not correctly synchronized by Carsten Ziegeler · 11 years ago
  38. ac8718a Managed versions of these plugins/dependencies are > the pom version so fix made in SLING-2267 r1198746 is not longer required. The impact of binding to the managed version of bnd is that the serviceComponents are listed in the manifest. by Ian Boston · 11 years ago
  39. 63545b1 SLING-2592 Patch from Dominik Smogór applied, thank you. by Ian Boston · 11 years ago
  40. fbf2dd4 Update to latest parent pom and use latest releases in launchpad by Carsten Ziegeler · 11 years ago
  41. 146de46 Use latest releases and update to new parent pom by Carsten Ziegeler · 11 years ago
  42. 370dd89 [maven-release-plugin] prepare for next development iteration by Carsten Ziegeler · 11 years ago
  43. 97affaf [maven-release-plugin] prepare release org.apache.sling.auth.core-1.1.0 by Carsten Ziegeler · 11 years ago
  44. d9f62a2 Use released versions by Carsten Ziegeler · 12 years ago
  45. 0acf6da Update to latest parent pom by Carsten Ziegeler · 12 years ago
  46. e6409b1 Revert "SLING-2441 - allowing put(AUTH_TYPE, null) in AuthenticationInfo. Bumping export version as it is an API change." by Justin Edelson · 12 years ago
  47. 2b45799 SLING-2480 : Add config for maven-sling-plugin to m2e configuration by Carsten Ziegeler · 12 years ago
  48. d91e3af SLING-2441 - allowing put(AUTH_TYPE, null) in AuthenticationInfo. Bumping export version as it is an API change. by Justin Edelson · 12 years ago
  49. ddd5650 SLING-2392 Synchronize AuthUtil.isRedirectValid and AuthUtil.sendRedirect for their expectation regarding the target path argument: Both expect the path to be prefixed with the request context path. The old AbstractAuthenticationHandler.sendRedirect is changed such that it prefixes the target with the servlet context path before calling AuthUtil.sendRedirect because we cannot change the semantics of the old method without breaking the API contract. by Felix Meschberger · 12 years ago
  50. d5f5ad6 SLING-2391 Ensure impersonation cookie is cleared on logout by Felix Meschberger · 12 years ago
  51. 8c9ee57 SLING-2390 Ensure sling.auth.redirect request parameter is respected if impersonation state changes by Felix Meschberger · 12 years ago
  52. 8b85291 SLING-2383 Redirect to servlet context root if the target path is not valid by Felix Meschberger · 12 years ago
  53. a5e2527 SLING-2349 - changing login event producing logic to be based on an AuthenticationInfo property (thanks Felix!) by Justin Edelson · 12 years ago
  54. 6b064cf SLING-2337 Revert commit #1221545 by Felix Meschberger · 12 years ago
  55. a4a4c16 SLING-2360 Ensure requesting the serlvet context root path does not fail by Felix Meschberger · 12 years ago
  56. 5e9f982 SLING-2360 Improve redirect path validity test by Felix Meschberger · 12 years ago
  57. b1c6174 SLING-2165 fixed regression loading the login page of the launchpad by Eric Norman · 12 years ago
  58. cdfcd13 SLING-2349 - changing auth handler class event property to auth type by Justin Edelson · 12 years ago
  59. acde516 SLING-2349 - adding login and logout events by Justin Edelson · 12 years ago
  60. 70095d3 SLING-2337 - introduce a flag which, if set as a request attribute, skips the session closing. Inline this constant into auth.core and engine so as to avoid requiring the new API bundle. by Justin Edelson · 12 years ago
  61. a8ed58f SLING-2329 Fix loop prevention by Felix Meschberger · 12 years ago
  62. 75c9f1f SLING-2329 Fix loop prevention by Felix Meschberger · 12 years ago
  63. cf580ff SLING-2318 Properly check the response whether it is committed and reset the output buffer before generating the response. by Felix Meschberger · 12 years ago
  64. 53ffb71 SLING-2300 Fixing support for AuthenticationInfo post processing: For anonymous requests, the AuthenticationInfo instance should always be prepared (even if it is just an empty map). This instance is then passed to the post processors and later used to access the anonymous resource resolver. In addition the J_WORKSPACE constant is removed from the AuthConstants class again because Auth Core has nothing to do with workspaces. by Felix Meschberger · 12 years ago
  65. efc1ccb SLING-2299 Consolidate utility methods in AuthUtil and constants in AuthConstants and adapt uses. Existing methods (mostly in AbstractAuthenticationHandler) are deprecated but remain implemented calling the new AuthUtil methods. The SlingAuthentication.isBrowserRequest (which was wrong) is also replaced by the AuthUtil.isBrowserRequest method (analyzing the User-Agent). by Felix Meschberger · 12 years ago
  66. cd6fc19 SLING-2276 Provide functionality to configure a user to be used for anonymous requests by Felix Meschberger · 12 years ago
  67. 6f49314 SLING-2280 Implement Option 2: Support AuthenticationHandler service registration property to indicate that browser requests are supported only. by Felix Meschberger · 12 years ago
  68. d77e43b SLING-2280 Implement Option 4: HTTP Basic Handler is fully enabled ignoring any conflicting configuration if anonymous access is disabled. This causes the HTTP Basic Handler to operate as a proper fallback for authentication. If anonymous access is allowed the HTTP Basic enablement configuration is still followed. by Felix Meschberger · 12 years ago
  69. ce607b7 SLING-2126 Move tests from AbstractAuthenticationHandlerTest to AuthUtilTest for methods moved to the new AuthUtil class. Adapt AbstractAuthenticationHandler and DefaultAuthenticationFeedbackHandler to use the new AuthUtil class. by Felix Meschberger · 12 years ago
  70. 2858a09 Fix log message to properly indicate the method it is logged in by Felix Meschberger · 12 years ago
  71. 5447c7b SLING-2287 Need the AuthUtil class for checking the valid redirect by Felix Meschberger · 12 years ago
  72. a5f6ab5 SLING-2287 Don't use the servlet context path as the default login resource because the actual redirect will automatically prefix the servlet context path by Felix Meschberger · 12 years ago
  73. f5e8487 SLING-2287 Check the redirect target for the redirect after logging out. Also ensure the target is prefixed with the context path by Felix Meschberger · 12 years ago
  74. 5f7ab7b SLING-2165 Form based login failure should stay on the same login page to show the login error by Eric Norman · 12 years ago
  75. 9f6fd29 Subtle casing bug causes build to break .... by Felix Meschberger · 13 years ago
  76. d7a3eaf SLING-2080 Apply slightly modified patch by Angela Schreiber (thank you very much) by Felix Meschberger · 13 years ago
  77. d1fa7c5 SLING-2267 Upgrade to Maven Bundle plugin 2.3.4 and make use of BND package level annotations for package exports by Felix Meschberger · 13 years ago
  78. d90af5a SLING-2266 Don't pass requests intended to be handled and terminated by authentication handlers by Felix Meschberger · 13 years ago
  79. 6547b1e using latest releases by Justin Edelson · 13 years ago
  80. eee98a2 temporarily using snapshots during release vote by Justin Edelson · 13 years ago
  81. b4861b2 SLING-2187 - adding new module to contain our custom notice file; adding remote-resources plugin configuration to parent pom and removing all existing appended-resources NOTICE files by Justin Edelson · 13 years ago
  82. ac5f69b Using latest released parent pom by Carsten Ziegeler · 13 years ago
  83. 3b73525 Update to recent snapshot by Carsten Ziegeler · 13 years ago
  84. c954c73 SLING-2150 : Update plugins to use the latest available versions by Carsten Ziegeler · 13 years ago
  85. fde6e48 SLING-2126 Add helper method to validate a target to redirect to after logging in. Also use this by Felix Meschberger · 13 years ago
  86. 2857783 [maven-release-plugin] prepare for next development iteration by Carsten Ziegeler · 13 years ago
  87. ab6f6d7 [maven-release-plugin] prepare release org.apache.sling.auth.core-1.0.6 by Carsten Ziegeler · 13 years ago
  88. 97a24c2 fixing SLING-1940 - resource attribute/param should be a full path, including the servlet context. by Justin Edelson · 13 years ago
  89. 139a323 better fix for SLING-1932 by Justin Edelson · 13 years ago
  90. 1d9674f fixing SLING-1933 by introducing a new variable contextPath which just contains the contextPath by Justin Edelson · 13 years ago
  91. e551d42 SLING-1932 - fixing SLING-1932. if requestContextPath is "/", make it "". also adding a unit test by Justin Edelson · 13 years ago
  92. 69755e4 [maven-release-plugin] prepare for next development iteration by Carsten Ziegeler · 13 years ago
  93. f88679a [maven-release-plugin] prepare release org.apache.sling.auth.core-1.0.4 by Carsten Ziegeler · 13 years ago
  94. 65ee530 Use latest releases. by Carsten Ziegeler · 13 years ago
  95. 194c0ff Update to recent snapshots by Carsten Ziegeler · 13 years ago
  96. b12419b SLING-1869 - upgrading to latest SCR plugin and putting scr.annotations in parent by Justin Edelson · 14 years ago
  97. db99b2c SLING-1855 Correctly set the form action path deduced not only from by Felix Meschberger · 14 years ago
  98. 403741c fixing relativePaths by Justin Edelson · 14 years ago
  99. 14311f0 updating all modules to parent 10-SNAPSHOT in anticipation of emma additions to parent by Justin Edelson · 14 years ago
  100. be27176 SLING-1841 Send cache control headers to prevent caching the result by Felix Meschberger · 14 years ago