138 Commits

Author	SHA1	Message	Date
Mohamed Karray	9dc32fe128	add i18n Servlet	2018-10-19 11:15:37 +02:00
René Pfeuffer	e28f30fbea	Change correct filter for security	2018-09-28 15:55:42 +02:00
René Pfeuffer	ed9b10b86f	Permit unathenticated index access	2018-09-28 14:40:26 +02:00
René Pfeuffer	babea160c3	Incorporate peer review	2018-09-17 17:49:08 +02:00
René Pfeuffer	c21612bd8e	Fix permission git lfs integration test	2018-09-11 13:15:08 +02:00
René Pfeuffer	8c675f5dd8	Compute base url in webapp	2018-09-10 11:59:21 +02:00
René Pfeuffer	6bc41cee0a	Handle git urls with trailing .git suffix correctly	2018-09-10 11:03:10 +02:00
René Pfeuffer	6d659b8ac1	Correct extraction of namespace and name from path	2018-09-10 08:37:31 +02:00
René Pfeuffer	5b5bfd342a	Add POC protocol servlet with delegate to svn and hg	2018-09-06 17:39:47 +02:00
René Pfeuffer	4eb75bc621	Initialize servlet and fix paths	2018-09-06 15:33:24 +02:00
René Pfeuffer	be5c430bd2	Add POC protocol servlet with delegate to git	2018-09-06 10:58:09 +02:00
Maren Süwer	3cc87ede73	add restentpoint for login/logout, restructuring of modules and components, add flow usage	2018-07-04 16:43:46 +02:00
Sebastian Sdorra	3637a8de20	switch from jersey 1.x to resteasy	2017-06-27 20:16:05 +02:00
Sebastian Sdorra	5738fa2d66	redesign bearer tokens	2017-01-17 15:54:32 +01:00
Sebastian Sdorra	2388cfd35d	create a more flexible interface for the creation of access tokens ... Provide a AccessTokenBuilderFactory to simplify the creation of access tokens and a default implementation which is based on JWT. Added also an AccessTokenCookieIssuer to unify the creation of access token cookies. Removed old BearerTokenGenerator.	2017-01-17 14:40:50 +01:00
Sebastian Sdorra	bad99919f4	merge with branch 1.x	2017-01-12 19:50:39 +01:00
Sebastian Sdorra	d0032b09d8	use cached thread pool to process mercurial process error streams	2015-06-11 22:11:51 +02:00
Sebastian Sdorra	ef50b4f238	javadoc	2015-04-01 10:27:38 +02:00
Sebastian Sdorra	ab1b91e1c5	fix authentication on api requests	2015-03-26 21:07:28 +01:00
Sebastian Sdorra	be385e4f2e	implement a new authentication filter, which uses a set of WebTokenGenerator to handle authentication requests	2015-02-21 21:06:35 +01:00
Sebastian Sdorra	e5184ac6a0	merge with branch issue-627	2015-02-10 20:50:06 +01:00
Sebastian Sdorra	8ccaaf3695	remove auto login modules because they are not longer needed, since we can determine the order of the filter chain	2015-02-06 22:41:34 +01:00
Sebastian Sdorra	30b49490a7	make use of new WebElement and Priority annotation	2015-02-01 19:52:53 +01:00
Sebastian Sdorra	264cbbc9ad	do not catch throwable	2015-01-18 21:34:45 +01:00
Sebastian Sdorra	4fa8e6e88a	replace scm-manager 1.x security api with apache shiro and use PasswordService for stronger password hashes	2014-12-14 12:26:03 +01:00
Sebastian Sdorra	8e608d2439	created small user-agent detection framework to choose the right encoding for basic authentication	2014-10-17 15:43:28 +02:00
Sebastian Sdorra	3997c70926	merge with branch 1.x	2014-04-28 13:48:11 +02:00
Sebastian Sdorra	ded786209d	do not use subject run as for administration context, because it could affect other threads	2014-04-24 08:58:59 +02:00
Sebastian Sdorra	07363cbe82	move extension annotation from sonia.scm.plugin.ext to sonia.scm.plugin	2014-03-29 09:51:17 +01:00
Sebastian Sdorra	43b92f0aca	stop scanning classpath, bind extensions from plugin and module descriptor	2014-03-28 22:49:55 +01:00
Sebastian Sdorra	ffc12f2fa1	merge changes from branch 1.x	2014-02-18 21:25:29 +01:00
Sebastian Sdorra	7d198a2d95	added option to skip failed authenticators	2014-02-16 15:41:48 +01:00
Sebastian Sdorra	908f2fe6c8	simplify cache api	2014-01-09 20:06:07 +01:00
Sebastian Sdorra	796858868a	remove unused imports	2014-01-03 14:20:28 +01:00
Sebastian Sdorra	5e6259f3b7	remove old style listeners in favor of event bus	2014-01-03 11:32:40 +01:00
Sebastian Sdorra	aec7773239	remove deprecated stuff	2014-01-03 10:34:34 +01:00
Sebastian Sdorra	de94e93fef	merge with branch issue-481	2013-11-07 09:14:00 +01:00
Sebastian Sdorra	477a425b5a	remove setContentLength with -1 to fix CGI on jetty 9, see #481	2013-11-05 08:56:12 +01:00
Clemens Rabe	c06d3e7bee	Reverted ChainAuthenticatonManager.java	2013-10-16 19:51:16 +02:00
Clemens Rabe	814b940998	Reverted mess of eclipse formatting.	2013-10-15 20:57:38 +02:00
Clemens Rabe	2875794519	Added auto-login filter system.	2013-10-02 19:45:21 +02:00
Sebastian Sdorra	c09b92bc04	fix possible npe with unpacked war files	2013-09-10 21:11:30 +02:00
Sebastian Sdorra	2e7e4c457a	improve remember me	2013-04-24 08:33:32 +02:00
Sebastian Sdorra	6b910d2c40	default authentication handler should always be the first in the chain	2013-04-04 13:38:33 +02:00
Sebastian Sdorra	6ef8c2ce66	merge with branch issue-331	2013-02-16 17:12:10 +01:00
Sebastian Sdorra	a90cd565f3	use version 1.2.1-scm1 of apache shiro to fix issue #331	2013-02-08 17:23:17 +01:00
Sebastian Sdorra	9adc65d9e5	util classes should be final with a private constructor	2013-01-31 10:26:16 +01:00
Sebastian Sdorra	2d5fa22ca4	use index of char instead of index of string, if possible	2013-01-30 10:10:20 +01:00
Sebastian Sdorra	29a3f682a2	remove unnecessary provider	2013-01-23 13:38:26 +01:00
Sebastian Sdorra	b66ae705c2	fix privileged action is not executed, if the user is already an admin	2013-01-12 13:14:11 +01:00