Commit Graph

244 Commits

Author SHA1 Message Date
Rene Pfeuffer
97cc0e7b9c Use access key directly, not the jwt token 2020-02-17 11:08:08 +01:00
Sebastian Sdorra
1cade825af enable xrfs protection only on write request
This change is required in order to fix the image viewer and download of editor plugin
2020-01-14 13:28:17 +01:00
Sebastian Sdorra
33833994d3 merge with default branch 2019-12-05 16:14:44 +01:00
Sebastian Sdorra
42ab81cf50 implement ui client session id
This changeset introduces a client side session id, which is generated
once by the client (ui: apiClient) and is send with each request to server.
The server makes the session id available by the PrincipalCollection of the
subject.
2019-11-13 14:03:48 +01:00
Rene Pfeuffer
b47cc56a86 Remove redundant logging 2019-11-06 08:32:00 +01:00
Sebastian Sdorra
8a6f862d3d Merged in feature/lfs_over_ssh (pull request #336)
Feature LFS over ssh
2019-10-22 12:01:38 +00:00
Sebastian Sdorra
10fbf50263 fix wrong OutOfScopeException detection 2019-10-22 11:23:34 +02:00
Sebastian Sdorra
52f471b5dd fix lfs authentication via ssh command and enabled xsrf protection 2019-10-22 10:50:49 +02:00
Eduard Heimbuch
74a89a7130 fix missing anon exception 2019-10-18 11:31:15 +02:00
Eduard Heimbuch
1af4acabbe add missing check if anonymous access is enabled but anonymous user doesn't exists 2019-10-18 09:43:03 +02:00
Eduard Heimbuch
1fd6337f64 anonymous user should not have permission to change password or autocomplete 2019-10-17 11:08:55 +02:00
Eduard Heimbuch
4ce1d2ed89 add unit tests for anonymous realm 2019-10-17 09:26:36 +02:00
Eduard Heimbuch
b26f9068f4 move Anonymous Realm to webapp 2019-10-14 16:18:14 +02:00
Rene Pfeuffer
3e2c8b7c4b Remove archive flag 2019-08-20 14:23:52 +02:00
Eduard Heimbuch
63c874917f added singleton annotation to AuthorizationChangedEventProducer to be sure that it is not destroyed by the gc 2019-08-02 15:02:13 +02:00
Eduard Heimbuch
47e323e468 disable shiro cache for the DefaultRealm 2019-08-02 12:01:53 +02:00
Eduard Heimbuch
442aacbcdb remove GroupNames and ExternalGroupNames in favor of GroupCollector 2019-08-02 09:32:44 +02:00
Eduard Heimbuch
86af7b23eb remove groups from BearerRealm / SyncRealmHelper / DAORealmHelper 2019-08-01 15:43:12 +02:00
René Pfeuffer
93025629e6 Migrate verbs to roles if possible 2019-05-15 15:57:18 +02:00
René Pfeuffer
de59f5657f Remove duplicate verbs 2019-05-07 15:20:54 +02:00
René Pfeuffer
c5b20566c1 Fix bugs with integration test 2019-05-07 09:20:19 +02:00
René Pfeuffer
8645890758 Cleanup 2019-05-06 16:45:35 +02:00
René Pfeuffer
45ca558101 Get verbs from repository roles 2019-05-06 16:01:01 +02:00
René Pfeuffer
c0760688e9 Join repository roles from the system and from the database 2019-05-03 14:47:49 +02:00
René Pfeuffer
232102716c Create DAO for repository roles 2019-05-03 14:19:33 +02:00
Sebastian Sdorra
50cb7e9370 merge with 2.0.0-m3 2019-03-21 10:47:33 +01:00
Sebastian Sdorra
dbdbe2fcf7 fixes SyncingRealmHelper not providing internal groups (from xml) 2019-03-14 17:42:27 +01:00
Sebastian Sdorra
1627518954 removes admin user and group configuration in favor of permissions 2019-03-13 12:54:50 +01:00
Sebastian Sdorra
a2f83e2429 removes admin flag from user object 2019-03-13 12:07:18 +01:00
René Pfeuffer
6ebbfa97a3 Start entity types with a capital char 2019-03-12 15:10:43 +01:00
René Pfeuffer
e335bcd5c7 Prevent repetition of verbs in roles 2019-02-21 08:39:50 +01:00
Philipp Czora
17c496222d Merged in feature/consolidate_permissions (pull request #196)
Feature consolidate permissions
2019-02-20 14:20:03 +00:00
René Pfeuffer
31b71c9892 Merged feature/changes_for_ssh_plugin into 2.0.0-m3 2019-02-20 13:51:47 +01:00
Sebastian Sdorra
aec66c023a define AuthorizationCollector as extension point with multiple implmentations 2019-02-18 18:01:11 +01:00
René Pfeuffer
8161d4cb1c Merge roles from multiple repository permissions 2019-02-18 10:31:12 +01:00
René Pfeuffer
5d601293bf Create external group names claim in token builder directly 2019-02-15 10:23:46 +01:00
Sebastian Sdorra
145ac7a8d8 remove direct dependencies to apache beanutils and commons collections 2019-01-31 15:53:19 +01:00
Sebastian Sdorra
8bf82213b8 remove unused imports 2019-01-30 14:48:37 +01:00
Philipp Czora
5eb4d321a9 Fixed equals() and hashCode() of RepositoryRole 2019-01-29 10:25:12 +01:00
René Pfeuffer
42dcaec71a Keep order of permissions 2019-01-23 15:40:08 +01:00
René Pfeuffer
9898cd3721 Fix authorization events 2019-01-23 15:00:48 +01:00
René Pfeuffer
69b64948a0 Remove duplicates 2019-01-23 12:33:34 +01:00
René Pfeuffer
fdf4421a55 Fix verbs for repository and rename class 2019-01-23 12:22:06 +01:00
René Pfeuffer
48e1e16fe6 Do not create empty permissions 2019-01-23 11:20:27 +01:00
René Pfeuffer
8a0d2ba819 Rename 2019-01-23 10:06:48 +01:00
René Pfeuffer
02b19e51ef Fix repository permission rest interface 2019-01-23 09:47:38 +01:00
René Pfeuffer
101b21e914 Read available repository permissions 2019-01-22 14:30:56 +01:00
René Pfeuffer
707d63426b Remove enum PermissionType 2019-01-22 13:28:52 +01:00
René Pfeuffer
4dcbcb80e7 Remove permissions from repository 2019-01-22 13:00:02 +01:00
René Pfeuffer
8f1b67fe58 Merge with 2.0.0-m3 2019-01-21 15:09:23 +01:00