Sebastian Sdorra
b7568ea919
introducing new ExtensionPoint for repository path matching
...
The new ExtensionPoint was introduced to remove the tight coupling between the DefaultRepositoryManager and the GitRepositoryHandler.
Git has now its own RepositoryPathMatcher which allow the matching of repository with .git or without .git extension.
2017-06-06 10:46:44 +02:00
Oliver Milke
9b932a325e
refactor git repository matching for accepting optional .git suffix
2017-05-19 17:27:48 +02:00
Sebastian Sdorra
9ff0d1863c
improve rest api documentation of Repository, RepositoryImport, Search, SecuritySystem and User resource
2017-05-10 08:56:43 +02:00
Sebastian Sdorra
42f412faa4
improve rest api documentation of Authentication, ChangePassword, Cipher, Group, Key and Plugin resource
2017-05-09 16:06:08 +02:00
Sebastian Sdorra
9ffb07acee
update enunciate to version 2.9.1
2017-05-09 15:18:14 +02:00
Sebastian Sdorra
a6120f0b16
rename SessionStore to CredentialsStore
2017-02-26 14:54:01 +01:00
Sebastian Sdorra
402d2cfdb7
#781 added missing unit tests for authentication related classes
2017-02-26 14:28:00 +01:00
Sebastian Sdorra
acc3ff791b
#781 process all kinds authorization relevant event and produce AuthorizationChangedEvent
2017-02-26 13:19:35 +01:00
Sebastian Sdorra
b6a49570cf
refactor AuthenticationInfoCollector
2017-02-17 23:06:05 +01:00
Sebastian Sdorra
e0e765eaa3
start refactoring of ScmRealm to simplify shiro cache integration
2017-02-17 21:36:52 +01:00
Sebastian Sdorra
731337f2ab
created adapter between scm and shiro caches, see issue #781
2017-02-16 22:15:36 +01:00
Sebastian Sdorra
e0d42d7c92
change authentication parameters to match oauth spec
2017-02-09 20:52:53 +01:00
Sebastian Sdorra
dcf62ae991
added resolver to simplify parsing and validating of access tokens
2017-01-17 17:22:55 +01:00
Sebastian Sdorra
5738fa2d66
redesign bearer tokens
2017-01-17 15:54:32 +01:00
Sebastian Sdorra
70d5942250
token enricher should use new access token api
2017-01-17 15:33:19 +01:00
Sebastian Sdorra
2388cfd35d
create a more flexible interface for the creation of access tokens
...
Provide a AccessTokenBuilderFactory to simplify the creation of access tokens and a default implementation which is based on JWT. Added also an AccessTokenCookieIssuer to unify the creation of access token cookies. Removed old BearerTokenGenerator.
2017-01-17 14:40:50 +01:00
Sebastian Sdorra
e7d6f50fd9
implement token scopes, scopes can be used to issue a token which is only suitable for a single or set explicit actions
2017-01-16 15:04:44 +01:00
Sebastian Sdorra
df6d9dacf8
implement LoginAttemptHandler for scm-manager 2
2017-01-15 20:27:06 +01:00
Sebastian Sdorra
cbc6dad0fe
fixed duplicate filter bindings
2017-01-15 19:33:22 +01:00
Sebastian Sdorra
3536c29908
added DAORealmHelperFactory to simplify the creation of dao based realms
2017-01-15 12:50:29 +01:00
Sebastian Sdorra
76384de26f
enabled xsrf be default and remove claim prefix to reduce size
2017-01-14 18:26:11 +01:00
Sebastian Sdorra
ba11ed1a0f
added missing unit tests for xsrf related classes
2017-01-13 06:59:44 +01:00
Sebastian Sdorra
7429a90424
fix broken build
2017-01-13 06:43:59 +01:00
Sebastian Sdorra
4e62f9552a
re implement xsrf protection for scm-manager 2.0.0
2017-01-12 22:16:14 +01:00
Sebastian Sdorra
46d8b58810
introduce TokenClaimsEnricher and TokenClaimsValidator api
2017-01-12 22:04:19 +01:00
Sebastian Sdorra
0a22bc9919
remove merge comments
2017-01-12 20:51:55 +01:00
Sebastian Sdorra
fc6287fd40
remove deprecations and fixed some compiler warnings
2017-01-12 20:02:06 +01:00
Sebastian Sdorra
bad99919f4
merge with branch 1.x
2017-01-12 19:50:39 +01:00
Sebastian Sdorra
5332ac2466
refactor store api
2016-12-11 21:31:05 +01:00
Sebastian Sdorra
837df4b87c
fix injection with java 8
2016-12-11 21:30:33 +01:00
Sebastian Sdorra
c673b0fb10
replace admin role check from SecurityUtil with permission checks
2016-12-08 07:56:40 +01:00
Sebastian Sdorra
64581e1f75
use already exists exceptions always with an appropriate message
2016-12-07 22:40:24 +01:00
Sebastian Sdorra
3709ce7602
fix typo
2016-12-07 22:28:06 +01:00
Sebastian Sdorra
2a6f51fa6d
added message to GroupAlreadyExistsException
2016-12-07 22:24:59 +01:00
Sebastian Sdorra
d3adf8a893
use GroupPermissions for DefaultGroupManager
2016-12-07 22:22:53 +01:00
Sebastian Sdorra
26ece65363
use ssp for user and repository permission checks
2016-12-06 22:04:13 +01:00
Sebastian Sdorra
807eccf459
added unit tests for security filters
2016-11-05 19:46:32 +01:00
Sebastian Sdorra
da8c997f59
added primary principal as request attribute, see issue #877
2016-10-31 22:16:21 +01:00
Sebastian Sdorra
2b97f285ac
reduce event bus logging
2016-07-25 18:59:59 +02:00
Sebastian Sdorra
a729f0f207
fix debug service hook for non admin users
2016-07-25 18:59:33 +02:00
Sebastian Sdorra
37228c329c
improve javadoc
2016-07-25 18:28:58 +02:00
Sebastian Sdorra
8a19193799
added RepositoryHookITCase to test repository post receive hooks
2016-07-25 18:27:47 +02:00
Sebastian Sdorra
7d8613b6bb
added request method to mdc filter
2016-06-28 12:06:28 +02:00
Sebastian Sdorra
7ef8e1ebd5
removed unnecessary log level check
2016-06-28 12:06:02 +02:00
Sebastian Sdorra
f8133f4c6b
improve logging
2016-06-28 11:32:30 +02:00
Sebastian Sdorra
1529ef99d7
log authorization summary to trace level
2016-06-28 10:54:14 +02:00
Sebastian Sdorra
5433317692
improve logging of AuthorizationCollector
2016-06-28 10:26:01 +02:00
Sebastian Sdorra
353e4c4f7b
removed duplicate clear cache log message
2016-06-28 10:15:59 +02:00
Sebastian Sdorra
8e38d95dcf
added name of the repository to access denied exceptions
2016-06-28 09:32:25 +02:00
Sebastian Sdorra
9dc1c6fd8e
improve cache invalidation on group events
2016-06-26 15:03:28 +02:00
