Sebastian Sdorra
|
ef50b4f238
|
javadoc
|
2015-04-01 10:27:38 +02:00 |
|
Sebastian Sdorra
|
ab1b91e1c5
|
fix authentication on api requests
|
2015-03-26 21:07:28 +01:00 |
|
Sebastian Sdorra
|
be385e4f2e
|
implement a new authentication filter, which uses a set of WebTokenGenerator to handle authentication requests
|
2015-02-21 21:06:35 +01:00 |
|
Sebastian Sdorra
|
8ccaaf3695
|
remove auto login modules because they are not longer needed, since we can determine the order of the filter chain
|
2015-02-06 22:41:34 +01:00 |
|
Sebastian Sdorra
|
30b49490a7
|
make use of new WebElement and Priority annotation
|
2015-02-01 19:52:53 +01:00 |
|
Sebastian Sdorra
|
4fa8e6e88a
|
replace scm-manager 1.x security api with apache shiro and use PasswordService for stronger password hashes
|
2014-12-14 12:26:03 +01:00 |
|
Sebastian Sdorra
|
3997c70926
|
merge with branch 1.x
|
2014-04-28 13:48:11 +02:00 |
|
Sebastian Sdorra
|
ded786209d
|
do not use subject run as for administration context, because it could affect other threads
|
2014-04-24 08:58:59 +02:00 |
|
Sebastian Sdorra
|
07363cbe82
|
move extension annotation from sonia.scm.plugin.ext to sonia.scm.plugin
|
2014-03-29 09:51:17 +01:00 |
|
Sebastian Sdorra
|
43b92f0aca
|
stop scanning classpath, bind extensions from plugin and module descriptor
|
2014-03-28 22:49:55 +01:00 |
|
Sebastian Sdorra
|
ffc12f2fa1
|
merge changes from branch 1.x
|
2014-02-18 21:25:29 +01:00 |
|
Sebastian Sdorra
|
7d198a2d95
|
added option to skip failed authenticators
|
2014-02-16 15:41:48 +01:00 |
|
Sebastian Sdorra
|
908f2fe6c8
|
simplify cache api
|
2014-01-09 20:06:07 +01:00 |
|
Sebastian Sdorra
|
796858868a
|
remove unused imports
|
2014-01-03 14:20:28 +01:00 |
|
Sebastian Sdorra
|
5e6259f3b7
|
remove old style listeners in favor of event bus
|
2014-01-03 11:32:40 +01:00 |
|
Sebastian Sdorra
|
aec7773239
|
remove deprecated stuff
|
2014-01-03 10:34:34 +01:00 |
|
Sebastian Sdorra
|
de94e93fef
|
merge with branch issue-481
|
2013-11-07 09:14:00 +01:00 |
|
Sebastian Sdorra
|
477a425b5a
|
remove setContentLength with -1 to fix CGI on jetty 9, see #481
|
2013-11-05 08:56:12 +01:00 |
|
Clemens Rabe
|
c06d3e7bee
|
Reverted ChainAuthenticatonManager.java
|
2013-10-16 19:51:16 +02:00 |
|
Clemens Rabe
|
814b940998
|
Reverted mess of eclipse formatting.
|
2013-10-15 20:57:38 +02:00 |
|
Clemens Rabe
|
2875794519
|
Added auto-login filter system.
|
2013-10-02 19:45:21 +02:00 |
|
Sebastian Sdorra
|
c09b92bc04
|
fix possible npe with unpacked war files
|
2013-09-10 21:11:30 +02:00 |
|
Sebastian Sdorra
|
2e7e4c457a
|
improve remember me
|
2013-04-24 08:33:32 +02:00 |
|
Sebastian Sdorra
|
6b910d2c40
|
default authentication handler should always be the first in the chain
|
2013-04-04 13:38:33 +02:00 |
|
Sebastian Sdorra
|
6ef8c2ce66
|
merge with branch issue-331
|
2013-02-16 17:12:10 +01:00 |
|
Sebastian Sdorra
|
a90cd565f3
|
use version 1.2.1-scm1 of apache shiro to fix issue #331
|
2013-02-08 17:23:17 +01:00 |
|
Sebastian Sdorra
|
9adc65d9e5
|
util classes should be final with a private constructor
|
2013-01-31 10:26:16 +01:00 |
|
Sebastian Sdorra
|
2d5fa22ca4
|
use index of char instead of index of string, if possible
|
2013-01-30 10:10:20 +01:00 |
|
Sebastian Sdorra
|
29a3f682a2
|
remove unnecessary provider
|
2013-01-23 13:38:26 +01:00 |
|
Sebastian Sdorra
|
b66ae705c2
|
fix privileged action is not executed, if the user is already an admin
|
2013-01-12 13:14:11 +01:00 |
|
Sebastian Sdorra
|
a299183ba1
|
fix IllegalArgumentException with nested privileged actions
|
2012-12-17 15:54:16 +01:00 |
|
Sebastian Sdorra
|
6728758637
|
do not store request and respone in authentication token
|
2012-10-11 16:12:06 +02:00 |
|
Sebastian Sdorra
|
50ce50ca1b
|
allow execution of administration tasks without an active http session
|
2012-10-06 18:56:30 +02:00 |
|
Sebastian Sdorra
|
e89195f6db
|
improve security of administration context
|
2012-10-06 18:35:09 +02:00 |
|
Sebastian Sdorra
|
ac683ad8a9
|
improve logging
|
2012-10-03 12:49:12 +02:00 |
|
Sebastian Sdorra
|
492fb08558
|
fix anonymous access
|
2012-09-13 15:28:46 +02:00 |
|
Sebastian Sdorra
|
65826e749e
|
implement administration context with apache shiro
|
2012-08-30 16:49:46 +02:00 |
|
Sebastian Sdorra
|
4a9d14b708
|
mark security context as deprecated and use shiro apis instead
|
2012-08-30 13:20:26 +02:00 |
|
Sebastian Sdorra
|
81060af003
|
replace groups class with groupnames
|
2012-08-30 10:38:56 +02:00 |
|
Sebastian Sdorra
|
2ddfe06a54
|
BasicSecurityContext should not throw AuthenticationException, to not break existing behavior
|
2012-08-29 09:27:55 +02:00 |
|
Sebastian Sdorra
|
761c0b215e
|
BasicSecurityContext should wrap apache shiro api for compatibility reasons
|
2012-08-27 08:05:46 +02:00 |
|
Sebastian Sdorra
|
8e5f312809
|
merge changes from version 1.17
|
2012-07-23 09:11:41 +02:00 |
|
Sebastian Sdorra
|
3108776974
|
merge with branch issue-195
|
2012-06-28 15:35:57 +02:00 |
|
Sebastian Sdorra
|
da7e9c67d8
|
improve trace logging for authentication
|
2012-06-28 10:55:55 +02:00 |
|
Sebastian Sdorra
|
cb16d451ed
|
fix license headers
|
2012-06-24 17:59:04 +02:00 |
|
Sebastian Sdorra
|
4707da2a69
|
write header before getOutputStream is called
|
2012-06-22 15:16:36 +02:00 |
|
Sebastian Sdorra
|
546b83beb1
|
merge with branch issue-153
|
2012-05-29 11:10:21 +02:00 |
|
Sebastian Sdorra
|
32257dc6d9
|
added missing logging parameter
|
2012-05-24 22:33:00 +02:00 |
|
Sebastian Sdorra
|
564b603d9a
|
improve logging
|
2012-05-24 22:30:00 +02:00 |
|
Sebastian Sdorra
|
f3412f5aee
|
deactivated users should be handled by security context
|
2012-05-24 22:28:29 +02:00 |
|