103 Commits

Author	SHA1	Message	Date
Sebastian Sdorra	aec7773239	remove deprecated stuff	2014-01-03 10:34:34 +01:00
Sebastian Sdorra	de94e93fef	merge with branch issue-481	2013-11-07 09:14:00 +01:00
Sebastian Sdorra	477a425b5a	remove setContentLength with -1 to fix CGI on jetty 9, see #481	2013-11-05 08:56:12 +01:00
Clemens Rabe	c06d3e7bee	Reverted ChainAuthenticatonManager.java	2013-10-16 19:51:16 +02:00
Clemens Rabe	814b940998	Reverted mess of eclipse formatting.	2013-10-15 20:57:38 +02:00
Clemens Rabe	2875794519	Added auto-login filter system.	2013-10-02 19:45:21 +02:00
Sebastian Sdorra	c09b92bc04	fix possible npe with unpacked war files	2013-09-10 21:11:30 +02:00
Sebastian Sdorra	2e7e4c457a	improve remember me	2013-04-24 08:33:32 +02:00
Sebastian Sdorra	6b910d2c40	default authentication handler should always be the first in the chain	2013-04-04 13:38:33 +02:00
Sebastian Sdorra	6ef8c2ce66	merge with branch issue-331	2013-02-16 17:12:10 +01:00
Sebastian Sdorra	a90cd565f3	use version 1.2.1-scm1 of apache shiro to fix issue #331	2013-02-08 17:23:17 +01:00
Sebastian Sdorra	9adc65d9e5	util classes should be final with a private constructor	2013-01-31 10:26:16 +01:00
Sebastian Sdorra	2d5fa22ca4	use index of char instead of index of string, if possible	2013-01-30 10:10:20 +01:00
Sebastian Sdorra	29a3f682a2	remove unnecessary provider	2013-01-23 13:38:26 +01:00
Sebastian Sdorra	b66ae705c2	fix privileged action is not executed, if the user is already an admin	2013-01-12 13:14:11 +01:00
Sebastian Sdorra	a299183ba1	fix IllegalArgumentException with nested privileged actions	2012-12-17 15:54:16 +01:00
Sebastian Sdorra	6728758637	do not store request and respone in authentication token	2012-10-11 16:12:06 +02:00
Sebastian Sdorra	50ce50ca1b	allow execution of administration tasks without an active http session	2012-10-06 18:56:30 +02:00
Sebastian Sdorra	e89195f6db	improve security of administration context	2012-10-06 18:35:09 +02:00
Sebastian Sdorra	ac683ad8a9	improve logging	2012-10-03 12:49:12 +02:00
Sebastian Sdorra	492fb08558	fix anonymous access	2012-09-13 15:28:46 +02:00
Sebastian Sdorra	65826e749e	implement administration context with apache shiro	2012-08-30 16:49:46 +02:00
Sebastian Sdorra	4a9d14b708	mark security context as deprecated and use shiro apis instead	2012-08-30 13:20:26 +02:00
Sebastian Sdorra	81060af003	replace groups class with groupnames	2012-08-30 10:38:56 +02:00
Sebastian Sdorra	2ddfe06a54	BasicSecurityContext should not throw AuthenticationException, to not break existing behavior	2012-08-29 09:27:55 +02:00
Sebastian Sdorra	761c0b215e	BasicSecurityContext should wrap apache shiro api for compatibility reasons	2012-08-27 08:05:46 +02:00
Sebastian Sdorra	8e5f312809	merge changes from version 1.17	2012-07-23 09:11:41 +02:00
Sebastian Sdorra	3108776974	merge with branch issue-195	2012-06-28 15:35:57 +02:00
Sebastian Sdorra	da7e9c67d8	improve trace logging for authentication	2012-06-28 10:55:55 +02:00
Sebastian Sdorra	cb16d451ed	fix license headers	2012-06-24 17:59:04 +02:00
Sebastian Sdorra	4707da2a69	write header before getOutputStream is called	2012-06-22 15:16:36 +02:00
Sebastian Sdorra	546b83beb1	merge with branch issue-153	2012-05-29 11:10:21 +02:00
Sebastian Sdorra	32257dc6d9	added missing logging parameter	2012-05-24 22:33:00 +02:00
Sebastian Sdorra	564b603d9a	improve logging	2012-05-24 22:30:00 +02:00
Sebastian Sdorra	f3412f5aee	deactivated users should be handled by security context	2012-05-24 22:28:29 +02:00
Sebastian Sdorra	1ef15fd281	only active users should be able to login	2012-05-24 22:02:25 +02:00
Sebastian Sdorra	94c7f96eeb	cleanup authenticate method	2012-05-24 21:48:05 +02:00
Sebastian Sdorra	d44a17a409	merge with branch issue-155	2012-05-24 19:28:39 +02:00
Sebastian Sdorra	e8bbcd91b5	pass shell environment to mercurial cgi process	2012-05-24 08:11:42 +02:00
Sebastian Sdorra	306f937b19	fix wrong basic authentication on ui login	2012-05-19 11:35:33 +02:00
Sebastian Sdorra	d16985d31c	allow basic authentication for rest endpoint /api/rest/authentication	2012-05-19 10:39:42 +02:00
Sebastian Sdorra	bd0f968b4c	fix broken build	2012-05-09 21:21:09 +02:00
Sebastian Sdorra	f6ff83dd88	fix missing errorstream output in some situations	2012-05-08 22:12:51 +02:00
Sebastian Sdorra	e85ff1317c	pass outputstream to status code handler to improve mercurial error handling	2012-05-08 22:10:34 +02:00
Sebastian Sdorra	5ededccd10	use execption handler to handle process interrupt exception	2012-05-08 21:29:48 +02:00
Sebastian Sdorra	09c60730ce	improve handling of process return codes	2012-05-08 21:28:41 +02:00
Sebastian Sdorra	21fb402565	fix wrong log message	2012-03-25 13:17:34 +02:00
Sebastian Sdorra	00b5c795cd	fix wrong log message parameter	2012-03-18 18:25:55 +01:00
Sebastian Sdorra	b979c2d438	use default type of user manager for default authentication	2012-03-18 17:17:39 +01:00
Sebastian Sdorra	8009fff1c3	make AuthenticationCacheValue serializable	2012-03-02 17:25:47 +01:00