Spring Security 3.0.0.RC1 Released

[Luke Taylor]

We're pleased to announce the first release candidate for Spring Security 3.0.0.

Full details can be found in the changelog as usual. If you are upgrading from the Milestone 2 release, then the things that are most likely to affect you are

• Changes in authentication filter names https://jira.springsource.org/browse/SEC-1259.
• Changes to concurrent session control syntax in the namespace https://jira.springsource.org/browse/SEC-1229. (see the reference manual for full details)

If you are still pre-M2, then read the release post for 3.0.0.M2 for information on namespace syntax changes which will affect you.

The blog entry on the M1 release is also still relevant so please read that if you haven't tried any of the 3.0.x releases yet.

[davdres]

Is there an estimated date for the final release of Spring Security 3.0.0? Thanks.

[mystic]

Great stuff!

I converted a project I'm working on, and I had a few small hickups. getAuthorities() was changed to a collection. I actually liked it as a List, because for testing purposes, it was easier to work with... having access to get(). Without get(), I have to convert to an array, and then type cast it

There is a breakage to security.authorize tag when ifNotGranted is used. If the principal is not logged in, the tag always returns false. I used this tag to render login/logout links and various other things.

I put a JIRA issue here:
https://jira.springsource.org/browse...6#action_47616

My suggestion is that if you intend to keep the breakage, add 2 more tags that would actually be more ideal for this purpose: ifAuthenticated and ifNotAuthenticated. I think people would like that (I would).

[Grubhart]

Hi Everybody

first: Congrats by the good job done!!
second: sorry by my english i know, it's bad... really bad

i have a problem when i tried add spring-security3.0.0 jars from maven repository y can't find the last jar file!!

i use this repository:
http://maven.springframework.org/milestone

and the last jar finded is:

2.0.5.release - spring-security-2.05.release.jar

i using springsource tool suite maven client

i lost some point, miss some url, or repository?

Kind Regards

Grubhart

[mystic]

This will get you started.

...
    <properties>
         .....
        <spring-security.version>3.0.0.RC1</spring-security.version>
    </properties>
...

    <repositories>
         ....
        <repository>
            <id>Springframework milestone</id>
            <url>http://maven.springframework.org/milestone</url>
        </repository>
    </repositories>

        <!-- Spring Security -->
        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-core</artifactId>
            <version>${spring-security.version}</version>
        </dependency>
        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-config</artifactId>
            <version>${spring-security.version}</version>
        </dependency>
        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-acl</artifactId>
            <version>${spring-security.version}</version>
        </dependency>
        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-web</artifactId>
            <version>${spring-security.version}</version>
        </dependency>
        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-taglibs</artifactId>
            <version>${spring-security.version}</version>
        </dependency>

[Grubhart]

that's work! Mystic

thanks a lot!

Regards
Grubhart

[asifsehzaad]

I am trying to add the URL to my artifactory (maven proxy) to serve items from there but it doesn't seem to recognize it.

the url that i am using is

http://maven.springframework.org/milestone

I gave the folllowing url and it started working

http://maven.springframework.org/release
http://maven.springframework.org/milestone [for RC's]
http://maven.springframework.org/external  [for external references]

[rauar]

Hi,

I upgraded the schema to version 3.0 but for some reason I can't get it up running.

<beans:beans xmlns:beans="http://www.springframework.org/schema/beans" xmlns:security="http://www.springframework.org/schema/security"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:aop="http://www.springframework.org/schema/aop"
	xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
              http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.0.xsd
			  http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop-3.0.xsd">

Error when starting the container (tomcat 6.0.18)

caused by: org.springframework.beans.factory.parsing.BeanDefinitionParsingException: Configuration problem: Unable to locate Spring NamespaceHandler for XML schema namespace [http://www.springframework.org/schema/security]
Offending resource: URL [jndi:/localhost/phenomate/WEB-INF/config/spring-security.xml]

Here's the authentication manager part:

	<security:authentication-manager>
		<security:authentication-provider>
			<security:user-service>
				<security:user name="alex" password="xxxx" authorities="ROLE_USER, ROLE_ADMIN"/>
			</security:user-service>
		</security:authentication-provider>
	</security:authentication-manager>

I can manually resolve and find the xsd here: http://www.springframework.org/schem...curity-3.0.xsd

Any ideas what is missing ? Already went through the milestone forum entries for upgrading to 3.0... what am I missing ?

Regards, Alex

PS: these are my deployed dependencies incl. versions:

com.springsource.javax.activation-1.1.1.jar
com.springsource.javax.mail-1.4.1.jar
com.springsource.org.aopalliance-1.0.0.jar
com.springsource.org.apache.commons.logging-1.1.1.jar
com.springsource.org.apache.log4j-1.2.15.jar
com.springsource.org.junit-4.7.0.jar
com.springsource.org.tuckey.web.filters.urlrewrite-3.1.0.jar
org.springframework.aop-3.0.0.RC2.jar
org.springframework.asm-3.0.0.RC2.jar
org.springframework.aspects-3.0.0.RC2.jar
org.springframework.beans-3.0.0.RC2.jar
org.springframework.binding-2.0.8.RELEASE.jar
org.springframework.context-3.0.0.RC2.jar
org.springframework.context.support-3.0.0.RC2.jar
org.springframework.core-3.0.0.RC2.jar
org.springframework.expression-3.0.0.RC2.jar
org.springframework.jdbc-3.0.0.RC2.jar
org.springframework.js-2.0.8.RELEASE.jar
org.springframework.orm-3.0.0.RC2.jar
org.springframework.transaction-3.0.0.RC2.jar
org.springframework.web-3.0.0.RC2.jar
org.springframework.web.servlet-3.0.0.RC2.jar
org.springframework.webflow-2.0.8.RELEASE.jar
spring-security-acl-3.0.0.RC1.jar
spring-security-core-3.0.0.RC1.jar
spring-security-taglibs-3.0.0.RC1.jar
spring-security-web-3.0.0.RC1.jar

[rauar]

Hi,

I upgraded the schema to version 3.0 but for some reason I can't get it up running.

Ok, I think I found the problem. For the record - this was missing as dependency:

		<dependency>
			<groupId>org.springframework.security</groupId>
			<artifactId>spring-security-config</artifactId>
			<version>${spring-security.version}</version>
		</dependency>