Philipp Czora
efc72b21ec
Minor changes due to review
2018-08-09 11:21:29 +02:00
René Pfeuffer
67278582e3
Update to Mockito v2
2018-08-08 09:20:08 +02:00
Maren Süwer
3cc87ede73
add restentpoint for login/logout, restructuring of modules and components, add flow usage
2018-07-04 16:43:46 +02:00
Sebastian Sdorra
aec3d5d65d
merge with branch 1.x
2017-06-25 19:01:33 +02:00
Sebastian Sdorra
a6120f0b16
rename SessionStore to CredentialsStore
2017-02-26 14:54:01 +01:00
Sebastian Sdorra
402d2cfdb7
#781 added missing unit tests for authentication related classes
2017-02-26 14:28:00 +01:00
Sebastian Sdorra
acc3ff791b
#781 process all kinds authorization relevant event and produce AuthorizationChangedEvent
2017-02-26 13:19:35 +01:00
Sebastian Sdorra
b6a49570cf
refactor AuthenticationInfoCollector
2017-02-17 23:06:05 +01:00
Sebastian Sdorra
e0e765eaa3
start refactoring of ScmRealm to simplify shiro cache integration
2017-02-17 21:36:52 +01:00
Sebastian Sdorra
dcf62ae991
added resolver to simplify parsing and validating of access tokens
2017-01-17 17:22:55 +01:00
Sebastian Sdorra
5738fa2d66
redesign bearer tokens
2017-01-17 15:54:32 +01:00
Sebastian Sdorra
70d5942250
token enricher should use new access token api
2017-01-17 15:33:19 +01:00
Sebastian Sdorra
2388cfd35d
create a more flexible interface for the creation of access tokens
...
Provide a AccessTokenBuilderFactory to simplify the creation of access tokens and a default implementation which is based on JWT. Added also an AccessTokenCookieIssuer to unify the creation of access token cookies. Removed old BearerTokenGenerator.
2017-01-17 14:40:50 +01:00
Sebastian Sdorra
e7d6f50fd9
implement token scopes, scopes can be used to issue a token which is only suitable for a single or set explicit actions
2017-01-16 15:04:44 +01:00
Sebastian Sdorra
df6d9dacf8
implement LoginAttemptHandler for scm-manager 2
2017-01-15 20:27:06 +01:00
Sebastian Sdorra
3536c29908
added DAORealmHelperFactory to simplify the creation of dao based realms
2017-01-15 12:50:29 +01:00
Sebastian Sdorra
86e0cba156
fix compiler warning
2017-01-13 20:22:49 +01:00
Sebastian Sdorra
ba11ed1a0f
added missing unit tests for xsrf related classes
2017-01-13 06:59:44 +01:00
Sebastian Sdorra
4e62f9552a
re implement xsrf protection for scm-manager 2.0.0
2017-01-12 22:16:14 +01:00
Sebastian Sdorra
46d8b58810
introduce TokenClaimsEnricher and TokenClaimsValidator api
2017-01-12 22:04:19 +01:00
Sebastian Sdorra
fc6287fd40
remove deprecations and fixed some compiler warnings
2017-01-12 20:02:06 +01:00
Sebastian Sdorra
bad99919f4
merge with branch 1.x
2017-01-12 19:50:39 +01:00
Sebastian Sdorra
f8133f4c6b
improve logging
2016-06-28 11:32:30 +02:00
Sebastian Sdorra
9dc1c6fd8e
improve cache invalidation on group events
2016-06-26 15:03:28 +02:00
Sebastian Sdorra
89660e8ac3
improve cache invalidation on permission change events
2016-06-26 12:53:41 +02:00
Sebastian Sdorra
a592484f0f
improve cache invalidation on repository events
2016-06-26 12:41:00 +02:00
Sebastian Sdorra
6428245506
improve cache invalidation on user events
2016-06-26 12:20:32 +02:00
Sebastian Sdorra
1eb5a6c9ad
unit tests for AuthorizationCollector
2016-06-25 14:02:18 +02:00
Sebastian Sdorra
c86ec11f09
start implementation of unit tests for AuthorizationCollector
2016-06-24 19:46:16 +02:00
Sebastian Sdorra
652b98f53c
#793 added configuration parameter to enable/disable xsrf protection. The protection is disabled by default until it is battle tested.
2016-05-24 21:12:09 +02:00
Sebastian Sdorra
488d4e3323
implemented xsrf protection, see issue #793
2016-01-23 22:02:25 +01:00
Sebastian Sdorra
6dd765e3be
start implementation of repository permissions
2015-07-09 20:29:07 +02:00
Sebastian Sdorra
325ca0c795
added restful endpoint for jwt authentication
2015-03-15 11:40:29 +01:00
Sebastian Sdorra
2029166b03
start implementation of jwt based authentication
2015-02-21 15:58:13 +01:00
Sebastian Sdorra
4fa8e6e88a
replace scm-manager 1.x security api with apache shiro and use PasswordService for stronger password hashes
2014-12-14 12:26:03 +01:00
Sebastian Sdorra
4745dd5575
suppress unchecked warnings
2014-01-11 15:17:44 +01:00
Sebastian Sdorra
b2c1336b08
added configuration options for login attempt limits
2013-09-16 17:36:16 +02:00
Sebastian Sdorra
bfa4372626
implement login attempt handler to handle failed authentications
2013-09-16 13:58:19 +02:00
Sebastian Sdorra
345392d309
fix license headers
2013-05-30 09:29:28 +02:00
Sebastian Sdorra
c8d98fadb1
improve caching of roles and permissions
2013-05-29 20:52:48 +02:00
Sebastian Sdorra
235b3322fe
update svnkit to version 1.7.9-scm1
2013-05-29 20:22:34 +02:00
Sebastian Sdorra
d2097bda05
implement permission collector
2013-05-26 12:26:25 +02:00
Sebastian Sdorra
e440feb5f5
merge with branch issue-340
2013-05-11 19:08:07 +02:00
Sebastian Sdorra
62bfcbc78f
add unit test for DefaultSecuritySystem
2013-05-02 18:29:00 +02:00
Sebastian Sdorra
1d1a92708a
read permission descriptor from classpath
2013-04-30 16:55:48 +02:00
Sebastian Sdorra
0fc5cfa57a
fix unit test for ScmRealm
2013-04-21 09:28:14 +02:00
Sebastian Sdorra
24ee483562
start implementation of a new security system to allow global permissions for repositories
2013-04-14 15:13:27 +02:00
Sebastian Sdorra
961c6f7f02
fix license headers
2013-02-10 14:55:35 +01:00
Sebastian Sdorra
29fdc2fc69
fix circular proxy error on binding
2013-02-05 17:32:29 +01:00
Sebastian Sdorra
92e2431078
implement user and group authorization tests for ScmRealm
2013-01-31 17:01:56 +01:00
