Sebastian Sdorra
cd302a3768
fix handling of post authentication filters for protocol request
...
do not call PushStateDispatcher in the HttpProtocolServletAuthenticationFilter,
because the HttpProtocolServlet already does this.
2019-03-12 13:58:46 +01:00
Sebastian Sdorra
d91f918e91
fixed caching of locales/x/plugins.json
2019-02-11 11:51:12 +01:00
Sebastian Sdorra
ad4277ba41
merge with 2.0.0-m3
2019-02-05 16:50:14 +01:00
Sebastian Sdorra
0a29f41835
verify encoding and content type
2019-02-01 09:42:19 +01:00
Mohamed Karray
34542e5cf1
fix i18n encoding
2019-02-01 08:51:07 +01:00
Sebastian Sdorra
8bf82213b8
remove unused imports
2019-01-30 14:48:37 +01:00
Sebastian Sdorra
eba07dc006
merge repository heads
2019-01-29 16:01:36 +01:00
Sebastian Sdorra
b231499cd0
merge with branch 1.x
2019-01-29 09:42:03 +01:00
René Pfeuffer
7e9d60fa8d
Fetch authorization exceptions
2019-01-23 11:20:43 +01:00
René Pfeuffer
667accdf93
Undo unnecessary change
2018-12-20 10:30:20 +01:00
René Pfeuffer
3774b5abb3
Do not send basic auth for /repo requests from web browser
...
This fixes the basic auth popups in browsers after session timeout and
reload in browsers "inside" of repositories.
2018-12-20 10:05:17 +01:00
René Pfeuffer
c328a94147
Handle invalid tokens
...
Eg. after deletion of user signing keys for JWT tokens, resolving
tokens throws an Authentication Exception. This must be caught.
2018-12-06 08:13:55 +01:00
René Pfeuffer
e30d32f1cd
Test things
2018-12-01 20:46:05 +01:00
René Pfeuffer
80ce5af12a
Log token refresh
2018-11-30 17:25:53 +01:00
René Pfeuffer
aec5520e57
Implement simple JWT refresh filter
2018-11-30 16:57:04 +01:00
René Pfeuffer
043be9f47b
Add filter for token refresh
2018-11-30 12:55:48 +01:00
René Pfeuffer
6eb3c38655
Create error response for already existing entities
2018-10-25 15:31:42 +02:00
René Pfeuffer
f041b4ecb6
Merge with 2.0.0-m3
2018-10-25 10:15:32 +02:00
Mohamed Karray
36a55bffae
Move the json merge in the I18nServlet class
2018-10-24 10:18:09 +02:00
Mohamed Karray
a7d14636dc
use JsonNode in the I18nServlet
2018-10-22 17:37:10 +02:00
Mohamed Karray
9cb661b460
plugin translation servlet
2018-10-20 14:40:03 +02:00
Mohamed Karray
9dc32fe128
add i18n Servlet
2018-10-19 11:15:37 +02:00
René Pfeuffer
bf1effb9c0
Remove special RepositoryNotFoundException
2018-10-18 16:08:49 +02:00
René Pfeuffer
e28f30fbea
Change correct filter for security
2018-09-28 15:55:42 +02:00
René Pfeuffer
ed9b10b86f
Permit unathenticated index access
2018-09-28 14:40:26 +02:00
René Pfeuffer
babea160c3
Incorporate peer review
2018-09-17 17:49:08 +02:00
René Pfeuffer
c21612bd8e
Fix permission git lfs integration test
2018-09-11 13:15:08 +02:00
René Pfeuffer
8c675f5dd8
Compute base url in webapp
2018-09-10 11:59:21 +02:00
René Pfeuffer
6bc41cee0a
Handle git urls with trailing .git suffix correctly
2018-09-10 11:03:10 +02:00
René Pfeuffer
6d659b8ac1
Correct extraction of namespace and name from path
2018-09-10 08:37:31 +02:00
René Pfeuffer
5b5bfd342a
Add POC protocol servlet with delegate to svn and hg
2018-09-06 17:39:47 +02:00
René Pfeuffer
4eb75bc621
Initialize servlet and fix paths
2018-09-06 15:33:24 +02:00
René Pfeuffer
be5c430bd2
Add POC protocol servlet with delegate to git
2018-09-06 10:58:09 +02:00
Maren Süwer
3cc87ede73
add restentpoint for login/logout, restructuring of modules and components, add flow usage
2018-07-04 16:43:46 +02:00
Sebastian Sdorra
5e6685260e
fix integer overflow of request with body larger than 4gb, see issue #953
2017-11-19 21:07:28 +01:00
Sebastian Sdorra
3637a8de20
switch from jersey 1.x to resteasy
2017-06-27 20:16:05 +02:00
Sebastian Sdorra
5738fa2d66
redesign bearer tokens
2017-01-17 15:54:32 +01:00
Sebastian Sdorra
2388cfd35d
create a more flexible interface for the creation of access tokens
...
Provide a AccessTokenBuilderFactory to simplify the creation of access tokens and a default implementation which is based on JWT. Added also an AccessTokenCookieIssuer to unify the creation of access token cookies. Removed old BearerTokenGenerator.
2017-01-17 14:40:50 +01:00
Sebastian Sdorra
bad99919f4
merge with branch 1.x
2017-01-12 19:50:39 +01:00
Sebastian Sdorra
d0032b09d8
use cached thread pool to process mercurial process error streams
2015-06-11 22:11:51 +02:00
Sebastian Sdorra
ef50b4f238
javadoc
2015-04-01 10:27:38 +02:00
Sebastian Sdorra
ab1b91e1c5
fix authentication on api requests
2015-03-26 21:07:28 +01:00
Sebastian Sdorra
be385e4f2e
implement a new authentication filter, which uses a set of WebTokenGenerator to handle authentication requests
2015-02-21 21:06:35 +01:00
Sebastian Sdorra
e5184ac6a0
merge with branch issue-627
2015-02-10 20:50:06 +01:00
Sebastian Sdorra
8ccaaf3695
remove auto login modules because they are not longer needed, since we can determine the order of the filter chain
2015-02-06 22:41:34 +01:00
Sebastian Sdorra
30b49490a7
make use of new WebElement and Priority annotation
2015-02-01 19:52:53 +01:00
Sebastian Sdorra
264cbbc9ad
do not catch throwable
2015-01-18 21:34:45 +01:00
Sebastian Sdorra
4fa8e6e88a
replace scm-manager 1.x security api with apache shiro and use PasswordService for stronger password hashes
2014-12-14 12:26:03 +01:00
Sebastian Sdorra
8e608d2439
created small user-agent detection framework to choose the right encoding for basic authentication
2014-10-17 15:43:28 +02:00
Sebastian Sdorra
3997c70926
merge with branch 1.x
2014-04-28 13:48:11 +02:00
