René Pfeuffer
7e9d60fa8d
Fetch authorization exceptions
2019-01-23 11:20:43 +01:00
René Pfeuffer
667accdf93
Undo unnecessary change
2018-12-20 10:30:20 +01:00
René Pfeuffer
3774b5abb3
Do not send basic auth for /repo requests from web browser
...
This fixes the basic auth popups in browsers after session timeout and
reload in browsers "inside" of repositories.
2018-12-20 10:05:17 +01:00
René Pfeuffer
c328a94147
Handle invalid tokens
...
Eg. after deletion of user signing keys for JWT tokens, resolving
tokens throws an Authentication Exception. This must be caught.
2018-12-06 08:13:55 +01:00
René Pfeuffer
e30d32f1cd
Test things
2018-12-01 20:46:05 +01:00
René Pfeuffer
80ce5af12a
Log token refresh
2018-11-30 17:25:53 +01:00
René Pfeuffer
aec5520e57
Implement simple JWT refresh filter
2018-11-30 16:57:04 +01:00
René Pfeuffer
043be9f47b
Add filter for token refresh
2018-11-30 12:55:48 +01:00
René Pfeuffer
6eb3c38655
Create error response for already existing entities
2018-10-25 15:31:42 +02:00
René Pfeuffer
f041b4ecb6
Merge with 2.0.0-m3
2018-10-25 10:15:32 +02:00
Mohamed Karray
36a55bffae
Move the json merge in the I18nServlet class
2018-10-24 10:18:09 +02:00
Mohamed Karray
a7d14636dc
use JsonNode in the I18nServlet
2018-10-22 17:37:10 +02:00
Mohamed Karray
9cb661b460
plugin translation servlet
2018-10-20 14:40:03 +02:00
Mohamed Karray
9dc32fe128
add i18n Servlet
2018-10-19 11:15:37 +02:00
René Pfeuffer
bf1effb9c0
Remove special RepositoryNotFoundException
2018-10-18 16:08:49 +02:00
René Pfeuffer
e28f30fbea
Change correct filter for security
2018-09-28 15:55:42 +02:00
René Pfeuffer
ed9b10b86f
Permit unathenticated index access
2018-09-28 14:40:26 +02:00
René Pfeuffer
babea160c3
Incorporate peer review
2018-09-17 17:49:08 +02:00
René Pfeuffer
c21612bd8e
Fix permission git lfs integration test
2018-09-11 13:15:08 +02:00
René Pfeuffer
8c675f5dd8
Compute base url in webapp
2018-09-10 11:59:21 +02:00
René Pfeuffer
6bc41cee0a
Handle git urls with trailing .git suffix correctly
2018-09-10 11:03:10 +02:00
René Pfeuffer
6d659b8ac1
Correct extraction of namespace and name from path
2018-09-10 08:37:31 +02:00
René Pfeuffer
5b5bfd342a
Add POC protocol servlet with delegate to svn and hg
2018-09-06 17:39:47 +02:00
René Pfeuffer
4eb75bc621
Initialize servlet and fix paths
2018-09-06 15:33:24 +02:00
René Pfeuffer
be5c430bd2
Add POC protocol servlet with delegate to git
2018-09-06 10:58:09 +02:00
Maren Süwer
3cc87ede73
add restentpoint for login/logout, restructuring of modules and components, add flow usage
2018-07-04 16:43:46 +02:00
Sebastian Sdorra
3637a8de20
switch from jersey 1.x to resteasy
2017-06-27 20:16:05 +02:00
Sebastian Sdorra
5738fa2d66
redesign bearer tokens
2017-01-17 15:54:32 +01:00
Sebastian Sdorra
2388cfd35d
create a more flexible interface for the creation of access tokens
...
Provide a AccessTokenBuilderFactory to simplify the creation of access tokens and a default implementation which is based on JWT. Added also an AccessTokenCookieIssuer to unify the creation of access token cookies. Removed old BearerTokenGenerator.
2017-01-17 14:40:50 +01:00
Sebastian Sdorra
bad99919f4
merge with branch 1.x
2017-01-12 19:50:39 +01:00
Sebastian Sdorra
d0032b09d8
use cached thread pool to process mercurial process error streams
2015-06-11 22:11:51 +02:00
Sebastian Sdorra
ef50b4f238
javadoc
2015-04-01 10:27:38 +02:00
Sebastian Sdorra
ab1b91e1c5
fix authentication on api requests
2015-03-26 21:07:28 +01:00
Sebastian Sdorra
be385e4f2e
implement a new authentication filter, which uses a set of WebTokenGenerator to handle authentication requests
2015-02-21 21:06:35 +01:00
Sebastian Sdorra
e5184ac6a0
merge with branch issue-627
2015-02-10 20:50:06 +01:00
Sebastian Sdorra
8ccaaf3695
remove auto login modules because they are not longer needed, since we can determine the order of the filter chain
2015-02-06 22:41:34 +01:00
Sebastian Sdorra
30b49490a7
make use of new WebElement and Priority annotation
2015-02-01 19:52:53 +01:00
Sebastian Sdorra
264cbbc9ad
do not catch throwable
2015-01-18 21:34:45 +01:00
Sebastian Sdorra
4fa8e6e88a
replace scm-manager 1.x security api with apache shiro and use PasswordService for stronger password hashes
2014-12-14 12:26:03 +01:00
Sebastian Sdorra
8e608d2439
created small user-agent detection framework to choose the right encoding for basic authentication
2014-10-17 15:43:28 +02:00
Sebastian Sdorra
3997c70926
merge with branch 1.x
2014-04-28 13:48:11 +02:00
Sebastian Sdorra
ded786209d
do not use subject run as for administration context, because it could affect other threads
2014-04-24 08:58:59 +02:00
Sebastian Sdorra
07363cbe82
move extension annotation from sonia.scm.plugin.ext to sonia.scm.plugin
2014-03-29 09:51:17 +01:00
Sebastian Sdorra
43b92f0aca
stop scanning classpath, bind extensions from plugin and module descriptor
2014-03-28 22:49:55 +01:00
Sebastian Sdorra
ffc12f2fa1
merge changes from branch 1.x
2014-02-18 21:25:29 +01:00
Sebastian Sdorra
7d198a2d95
added option to skip failed authenticators
2014-02-16 15:41:48 +01:00
Sebastian Sdorra
908f2fe6c8
simplify cache api
2014-01-09 20:06:07 +01:00
Sebastian Sdorra
796858868a
remove unused imports
2014-01-03 14:20:28 +01:00
Sebastian Sdorra
5e6259f3b7
remove old style listeners in favor of event bus
2014-01-03 11:32:40 +01:00
Sebastian Sdorra
aec7773239
remove deprecated stuff
2014-01-03 10:34:34 +01:00
