Sebastian Sdorra
70d5942250
token enricher should use new access token api
2017-01-17 15:33:19 +01:00
Sebastian Sdorra
2388cfd35d
create a more flexible interface for the creation of access tokens
...
Provide a AccessTokenBuilderFactory to simplify the creation of access tokens and a default implementation which is based on JWT. Added also an AccessTokenCookieIssuer to unify the creation of access token cookies. Removed old BearerTokenGenerator.
2017-01-17 14:40:50 +01:00
Sebastian Sdorra
e7d6f50fd9
implement token scopes, scopes can be used to issue a token which is only suitable for a single or set explicit actions
2017-01-16 15:04:44 +01:00
Sebastian Sdorra
df6d9dacf8
implement LoginAttemptHandler for scm-manager 2
2017-01-15 20:27:06 +01:00
Sebastian Sdorra
3536c29908
added DAORealmHelperFactory to simplify the creation of dao based realms
2017-01-15 12:50:29 +01:00
Sebastian Sdorra
f142e1a83f
merge with branch 1.x
2017-01-14 13:25:25 +01:00
Sebastian Sdorra
c149b180a1
use newer repository client api
2017-01-14 11:48:42 +01:00
Sebastian Sdorra
6e83a9a717
merge with branch 1.x
2017-01-13 22:47:54 +01:00
Sebastian Sdorra
b5d59fabd4
implement svn client provider
2017-01-13 22:38:54 +01:00
Sebastian Sdorra
86e0cba156
fix compiler warning
2017-01-13 20:22:49 +01:00
Sebastian Sdorra
ba11ed1a0f
added missing unit tests for xsrf related classes
2017-01-13 06:59:44 +01:00
Sebastian Sdorra
4e62f9552a
re implement xsrf protection for scm-manager 2.0.0
2017-01-12 22:16:14 +01:00
Sebastian Sdorra
46d8b58810
introduce TokenClaimsEnricher and TokenClaimsValidator api
2017-01-12 22:04:19 +01:00
Sebastian Sdorra
fc6287fd40
remove deprecations and fixed some compiler warnings
2017-01-12 20:02:06 +01:00
Sebastian Sdorra
bad99919f4
merge with branch 1.x
2017-01-12 19:50:39 +01:00
Sebastian Sdorra
5332ac2466
refactor store api
2016-12-11 21:31:05 +01:00
Sebastian Sdorra
e76862fc47
improve unit tests of DefaultRepositoryManager
2016-12-11 13:02:59 +01:00
Sebastian Sdorra
4f124691d0
use shiro-unit for manager permission tests
2016-12-08 22:08:11 +01:00
Sebastian Sdorra
807eccf459
added unit tests for security filters
2016-11-05 19:46:32 +01:00
Sebastian Sdorra
5da8f5f052
fix selenium integration tests and introduce page object pattern
2016-07-31 20:21:11 +02:00
Sebastian Sdorra
1cf399ab2d
implement mercurial repository test client
2016-07-26 00:16:14 +02:00
Sebastian Sdorra
5340bea7f1
re enable repository it cases
2016-07-25 18:49:57 +02:00
Sebastian Sdorra
8a19193799
added RepositoryHookITCase to test repository post receive hooks
2016-07-25 18:27:47 +02:00
Sebastian Sdorra
7d8613b6bb
added request method to mdc filter
2016-06-28 12:06:28 +02:00
Sebastian Sdorra
f8133f4c6b
improve logging
2016-06-28 11:32:30 +02:00
Sebastian Sdorra
9dc1c6fd8e
improve cache invalidation on group events
2016-06-26 15:03:28 +02:00
Sebastian Sdorra
89660e8ac3
improve cache invalidation on permission change events
2016-06-26 12:53:41 +02:00
Sebastian Sdorra
a592484f0f
improve cache invalidation on repository events
2016-06-26 12:41:00 +02:00
Sebastian Sdorra
6428245506
improve cache invalidation on user events
2016-06-26 12:20:32 +02:00
Sebastian Sdorra
1eb5a6c9ad
unit tests for AuthorizationCollector
2016-06-25 14:02:18 +02:00
Sebastian Sdorra
c86ec11f09
start implementation of unit tests for AuthorizationCollector
2016-06-24 19:46:16 +02:00
Sebastian Sdorra
981d203723
added request uri to mdc logging context
2016-06-23 14:06:03 +02:00
Sebastian Sdorra
13bea6e502
implemented small scheduler engine
2016-05-25 16:32:25 +02:00
Sebastian Sdorra
8475acbba0
#809 fix order of script resources in production stage
2016-05-25 08:41:47 +02:00
Sebastian Sdorra
9497d88ee3
merge with branch issue-793
2016-05-24 21:27:44 +02:00
Sebastian Sdorra
652b98f53c
#793 added configuration parameter to enable/disable xsrf protection. The protection is disabled by default until it is battle tested.
2016-05-24 21:12:09 +02:00
Sebastian Sdorra
920b2eca39
added option for plugins to change ssl context
2016-03-17 09:42:34 +01:00
Sebastian Sdorra
488d4e3323
implemented xsrf protection, see issue #793
2016-01-23 22:02:25 +01:00
Sebastian Sdorra
e949d5ae87
JsonContentTransformer should not fail on unknown json properties
2015-10-21 21:00:04 +02:00
Sebastian Sdorra
6dd765e3be
start implementation of repository permissions
2015-07-09 20:29:07 +02:00
Sebastian Sdorra
a7d33529fd
mark old http-client api as deprecated
2015-05-03 17:06:35 +02:00
Sebastian Sdorra
1f4524bb20
added json and xml support to ahc
2015-05-03 15:51:21 +02:00
Sebastian Sdorra
722d2616a8
return error stream, if input stream could not be returned
2015-05-01 14:21:15 +02:00
Sebastian Sdorra
3c6306059f
more unit tests for ahc
2015-05-01 12:36:49 +02:00
Sebastian Sdorra
325ca0c795
added restful endpoint for jwt authentication
2015-03-15 11:40:29 +01:00
Sebastian Sdorra
be385e4f2e
implement a new authentication filter, which uses a set of WebTokenGenerator to handle authentication requests
2015-02-21 21:06:35 +01:00
Sebastian Sdorra
2029166b03
start implementation of jwt based authentication
2015-02-21 15:58:13 +01:00
Sebastian Sdorra
e5184ac6a0
merge with branch issue-627
2015-02-10 20:50:06 +01:00
Sebastian Sdorra
8ccaaf3695
remove auto login modules because they are not longer needed, since we can determine the order of the filter chain
2015-02-06 22:41:34 +01:00
Sebastian Sdorra
28aa1137f0
added legacy plugin to support scm-manager 1.x password hashes
2014-12-20 11:33:03 +01:00
