Sebastian Sdorra
42ab81cf50
implement ui client session id
...
This changeset introduces a client side session id, which is generated
once by the client (ui: apiClient) and is send with each request to server.
The server makes the session id available by the PrincipalCollection of the
subject.
2019-11-13 14:03:48 +01:00
Eduard Heimbuch
86af7b23eb
remove groups from BearerRealm / SyncRealmHelper / DAORealmHelper
2019-08-01 15:43:12 +02:00
Sebastian Sdorra
3bd1cbf53d
added option to define extra groups for AccessToken
2019-01-21 14:27:14 +01:00
Sebastian Sdorra
ac4a57f2f3
replace TokenClaimsValidator with not so generic AccessTokenValidator interface and fixed duplicated code of BearerRealm and JwtAccessTokenResolve
2018-12-21 08:35:18 +01:00
Sebastian Sdorra
5738fa2d66
redesign bearer tokens
2017-01-17 15:54:32 +01:00
Sebastian Sdorra
e7d6f50fd9
implement token scopes, scopes can be used to issue a token which is only suitable for a single or set explicit actions
2017-01-16 15:04:44 +01:00
Sebastian Sdorra
df6d9dacf8
implement LoginAttemptHandler for scm-manager 2
2017-01-15 20:27:06 +01:00
Sebastian Sdorra
46d8b58810
introduce TokenClaimsEnricher and TokenClaimsValidator api
2017-01-12 22:04:19 +01:00
Sebastian Sdorra
2029166b03
start implementation of jwt based authentication
2015-02-21 15:58:13 +01:00