Commit Graph

2543 Commits

Author SHA1 Message Date
Sebastian Sdorra
b6a49570cf refactor AuthenticationInfoCollector 2017-02-17 23:06:05 +01:00
Sebastian Sdorra
e0e765eaa3 start refactoring of ScmRealm to simplify shiro cache integration 2017-02-17 21:36:52 +01:00
Sebastian Sdorra
731337f2ab created adapter between scm and shiro caches, see issue #781 2017-02-16 22:15:36 +01:00
Sebastian Sdorra
e0d42d7c92 change authentication parameters to match oauth spec 2017-02-09 20:52:53 +01:00
Sebastian Sdorra
1b16613840 [maven-release-plugin] prepare for next development iteration 2017-02-09 13:33:00 +01:00
Sebastian Sdorra
da3a8b7cd3 [maven-release-plugin] prepare release 1.51 2017-02-09 13:32:59 +01:00
Sebastian Sdorra
dcf62ae991 added resolver to simplify parsing and validating of access tokens 2017-01-17 17:22:55 +01:00
Sebastian Sdorra
5738fa2d66 redesign bearer tokens 2017-01-17 15:54:32 +01:00
Sebastian Sdorra
70d5942250 token enricher should use new access token api 2017-01-17 15:33:19 +01:00
Sebastian Sdorra
2388cfd35d create a more flexible interface for the creation of access tokens
Provide a AccessTokenBuilderFactory to simplify the creation of access tokens and a default implementation which is based on JWT. Added also an AccessTokenCookieIssuer to unify the creation of access token cookies. Removed old BearerTokenGenerator.
2017-01-17 14:40:50 +01:00
Sebastian Sdorra
e7d6f50fd9 implement token scopes, scopes can be used to issue a token which is only suitable for a single or set explicit actions 2017-01-16 15:04:44 +01:00
Sebastian Sdorra
df6d9dacf8 implement LoginAttemptHandler for scm-manager 2 2017-01-15 20:27:06 +01:00
Sebastian Sdorra
cbc6dad0fe fixed duplicate filter bindings 2017-01-15 19:33:22 +01:00
Sebastian Sdorra
3536c29908 added DAORealmHelperFactory to simplify the creation of dao based realms 2017-01-15 12:50:29 +01:00
Sebastian Sdorra
76384de26f enabled xsrf be default and remove claim prefix to reduce size 2017-01-14 18:26:11 +01:00
Sebastian Sdorra
7d6d23b04d remove unnecessary use of local storage, extract the xsrf token on every request 2017-01-14 14:03:01 +01:00
Sebastian Sdorra
f142e1a83f merge with branch 1.x 2017-01-14 13:25:25 +01:00
Sebastian Sdorra
c149b180a1 use newer repository client api 2017-01-14 11:48:42 +01:00
Sebastian Sdorra
6e83a9a717 merge with branch 1.x 2017-01-13 22:47:54 +01:00
Sebastian Sdorra
b5d59fabd4 implement svn client provider 2017-01-13 22:38:54 +01:00
Sebastian Sdorra
86e0cba156 fix compiler warning 2017-01-13 20:22:49 +01:00
Sebastian Sdorra
ba11ed1a0f added missing unit tests for xsrf related classes 2017-01-13 06:59:44 +01:00
Sebastian Sdorra
7429a90424 fix broken build 2017-01-13 06:43:59 +01:00
Sebastian Sdorra
4e62f9552a re implement xsrf protection for scm-manager 2.0.0 2017-01-12 22:16:14 +01:00
Sebastian Sdorra
46d8b58810 introduce TokenClaimsEnricher and TokenClaimsValidator api 2017-01-12 22:04:19 +01:00
Sebastian Sdorra
0a22bc9919 remove merge comments 2017-01-12 20:51:55 +01:00
Sebastian Sdorra
fc6287fd40 remove deprecations and fixed some compiler warnings 2017-01-12 20:02:06 +01:00
Sebastian Sdorra
bad99919f4 merge with branch 1.x 2017-01-12 19:50:39 +01:00
Sebastian Sdorra
5332ac2466 refactor store api 2016-12-11 21:31:05 +01:00
Sebastian Sdorra
837df4b87c fix injection with java 8 2016-12-11 21:30:33 +01:00
Sebastian Sdorra
e76862fc47 improve unit tests of DefaultRepositoryManager 2016-12-11 13:02:59 +01:00
Sebastian Sdorra
4f124691d0 use shiro-unit for manager permission tests 2016-12-08 22:08:11 +01:00
Sebastian Sdorra
c673b0fb10 replace admin role check from SecurityUtil with permission checks 2016-12-08 07:56:40 +01:00
Sebastian Sdorra
64581e1f75 use already exists exceptions always with an appropriate message 2016-12-07 22:40:24 +01:00
Sebastian Sdorra
3709ce7602 fix typo 2016-12-07 22:28:06 +01:00
Sebastian Sdorra
2a6f51fa6d added message to GroupAlreadyExistsException 2016-12-07 22:24:59 +01:00
Sebastian Sdorra
d3adf8a893 use GroupPermissions for DefaultGroupManager 2016-12-07 22:22:53 +01:00
Sebastian Sdorra
26ece65363 use ssp for user and repository permission checks 2016-12-06 22:04:13 +01:00
Sebastian Sdorra
526d79b96d [maven-release-plugin] prepare for next development iteration 2016-11-24 14:11:36 +01:00
Sebastian Sdorra
0bbea7a47a [maven-release-plugin] prepare release 1.50 2016-11-24 14:11:36 +01:00
Sebastian Sdorra
5678520b59 fix hidden help text on default branch configuration 2016-11-24 14:03:14 +01:00
Sebastian Sdorra
d940c2e9b9 fix release build 2016-11-10 22:14:29 +01:00
Sebastian Sdorra
0c0bdfa376 #873 added default branch chooser to git settings 2016-11-10 20:54:20 +01:00
Sebastian Sdorra
f2137bd761 #873 added reusable components for branch and tag combo boxes 2016-11-10 19:48:13 +01:00
Sebastian Sdorra
807eccf459 added unit tests for security filters 2016-11-05 19:46:32 +01:00
Sebastian Sdorra
da8c997f59 added primary principal as request attribute, see issue #877 2016-10-31 22:16:21 +01:00
Sebastian Sdorra
d5fda27c33 fix java.lang.NoClassDefFoundError org/w3c/dom/ElementTraversal 2016-09-30 20:02:55 +02:00
Sebastian Sdorra
5da8f5f052 fix selenium integration tests and introduce page object pattern 2016-07-31 20:21:11 +02:00
Sebastian Sdorra
c4111ec73f [maven-release-plugin] prepare for next development iteration 2016-07-26 12:43:15 +02:00
Sebastian Sdorra
d2743ce5b0 [maven-release-plugin] prepare release 1.49 2016-07-26 12:43:15 +02:00