Commit Graph

118 Commits

Author SHA1 Message Date
Sebastian Sdorra
ef50b4f238 javadoc 2015-04-01 10:27:38 +02:00
Sebastian Sdorra
ab1b91e1c5 fix authentication on api requests 2015-03-26 21:07:28 +01:00
Sebastian Sdorra
be385e4f2e implement a new authentication filter, which uses a set of WebTokenGenerator to handle authentication requests 2015-02-21 21:06:35 +01:00
Sebastian Sdorra
8ccaaf3695 remove auto login modules because they are not longer needed, since we can determine the order of the filter chain 2015-02-06 22:41:34 +01:00
Sebastian Sdorra
30b49490a7 make use of new WebElement and Priority annotation 2015-02-01 19:52:53 +01:00
Sebastian Sdorra
4fa8e6e88a replace scm-manager 1.x security api with apache shiro and use PasswordService for stronger password hashes 2014-12-14 12:26:03 +01:00
Sebastian Sdorra
3997c70926 merge with branch 1.x 2014-04-28 13:48:11 +02:00
Sebastian Sdorra
ded786209d do not use subject run as for administration context, because it could affect other threads 2014-04-24 08:58:59 +02:00
Sebastian Sdorra
07363cbe82 move extension annotation from sonia.scm.plugin.ext to sonia.scm.plugin 2014-03-29 09:51:17 +01:00
Sebastian Sdorra
43b92f0aca stop scanning classpath, bind extensions from plugin and module descriptor 2014-03-28 22:49:55 +01:00
Sebastian Sdorra
ffc12f2fa1 merge changes from branch 1.x 2014-02-18 21:25:29 +01:00
Sebastian Sdorra
7d198a2d95 added option to skip failed authenticators 2014-02-16 15:41:48 +01:00
Sebastian Sdorra
908f2fe6c8 simplify cache api 2014-01-09 20:06:07 +01:00
Sebastian Sdorra
796858868a remove unused imports 2014-01-03 14:20:28 +01:00
Sebastian Sdorra
5e6259f3b7 remove old style listeners in favor of event bus 2014-01-03 11:32:40 +01:00
Sebastian Sdorra
aec7773239 remove deprecated stuff 2014-01-03 10:34:34 +01:00
Sebastian Sdorra
de94e93fef merge with branch issue-481 2013-11-07 09:14:00 +01:00
Sebastian Sdorra
477a425b5a remove setContentLength with -1 to fix CGI on jetty 9, see #481 2013-11-05 08:56:12 +01:00
Clemens Rabe
c06d3e7bee Reverted ChainAuthenticatonManager.java 2013-10-16 19:51:16 +02:00
Clemens Rabe
814b940998 Reverted mess of eclipse formatting. 2013-10-15 20:57:38 +02:00
Clemens Rabe
2875794519 Added auto-login filter system. 2013-10-02 19:45:21 +02:00
Sebastian Sdorra
c09b92bc04 fix possible npe with unpacked war files 2013-09-10 21:11:30 +02:00
Sebastian Sdorra
2e7e4c457a improve remember me 2013-04-24 08:33:32 +02:00
Sebastian Sdorra
6b910d2c40 default authentication handler should always be the first in the chain 2013-04-04 13:38:33 +02:00
Sebastian Sdorra
6ef8c2ce66 merge with branch issue-331 2013-02-16 17:12:10 +01:00
Sebastian Sdorra
a90cd565f3 use version 1.2.1-scm1 of apache shiro to fix issue #331 2013-02-08 17:23:17 +01:00
Sebastian Sdorra
9adc65d9e5 util classes should be final with a private constructor 2013-01-31 10:26:16 +01:00
Sebastian Sdorra
2d5fa22ca4 use index of char instead of index of string, if possible 2013-01-30 10:10:20 +01:00
Sebastian Sdorra
29a3f682a2 remove unnecessary provider 2013-01-23 13:38:26 +01:00
Sebastian Sdorra
b66ae705c2 fix privileged action is not executed, if the user is already an admin 2013-01-12 13:14:11 +01:00
Sebastian Sdorra
a299183ba1 fix IllegalArgumentException with nested privileged actions 2012-12-17 15:54:16 +01:00
Sebastian Sdorra
6728758637 do not store request and respone in authentication token 2012-10-11 16:12:06 +02:00
Sebastian Sdorra
50ce50ca1b allow execution of administration tasks without an active http session 2012-10-06 18:56:30 +02:00
Sebastian Sdorra
e89195f6db improve security of administration context 2012-10-06 18:35:09 +02:00
Sebastian Sdorra
ac683ad8a9 improve logging 2012-10-03 12:49:12 +02:00
Sebastian Sdorra
492fb08558 fix anonymous access 2012-09-13 15:28:46 +02:00
Sebastian Sdorra
65826e749e implement administration context with apache shiro 2012-08-30 16:49:46 +02:00
Sebastian Sdorra
4a9d14b708 mark security context as deprecated and use shiro apis instead 2012-08-30 13:20:26 +02:00
Sebastian Sdorra
81060af003 replace groups class with groupnames 2012-08-30 10:38:56 +02:00
Sebastian Sdorra
2ddfe06a54 BasicSecurityContext should not throw AuthenticationException, to not break existing behavior 2012-08-29 09:27:55 +02:00
Sebastian Sdorra
761c0b215e BasicSecurityContext should wrap apache shiro api for compatibility reasons 2012-08-27 08:05:46 +02:00
Sebastian Sdorra
8e5f312809 merge changes from version 1.17 2012-07-23 09:11:41 +02:00
Sebastian Sdorra
3108776974 merge with branch issue-195 2012-06-28 15:35:57 +02:00
Sebastian Sdorra
da7e9c67d8 improve trace logging for authentication 2012-06-28 10:55:55 +02:00
Sebastian Sdorra
cb16d451ed fix license headers 2012-06-24 17:59:04 +02:00
Sebastian Sdorra
4707da2a69 write header before getOutputStream is called 2012-06-22 15:16:36 +02:00
Sebastian Sdorra
546b83beb1 merge with branch issue-153 2012-05-29 11:10:21 +02:00
Sebastian Sdorra
32257dc6d9 added missing logging parameter 2012-05-24 22:33:00 +02:00
Sebastian Sdorra
564b603d9a improve logging 2012-05-24 22:30:00 +02:00
Sebastian Sdorra
f3412f5aee deactivated users should be handled by security context 2012-05-24 22:28:29 +02:00