Rene Pfeuffer
97cc0e7b9c
Use access key directly, not the jwt token
2020-02-17 11:08:08 +01:00
Sebastian Sdorra
1cade825af
enable xrfs protection only on write request
...
This change is required in order to fix the image viewer and download of editor plugin
2020-01-14 13:28:17 +01:00
Sebastian Sdorra
33833994d3
merge with default branch
2019-12-05 16:14:44 +01:00
Sebastian Sdorra
42ab81cf50
implement ui client session id
...
This changeset introduces a client side session id, which is generated
once by the client (ui: apiClient) and is send with each request to server.
The server makes the session id available by the PrincipalCollection of the
subject.
2019-11-13 14:03:48 +01:00
Rene Pfeuffer
b47cc56a86
Remove redundant logging
2019-11-06 08:32:00 +01:00
Sebastian Sdorra
8a6f862d3d
Merged in feature/lfs_over_ssh (pull request #336 )
...
Feature LFS over ssh
2019-10-22 12:01:38 +00:00
Sebastian Sdorra
10fbf50263
fix wrong OutOfScopeException detection
2019-10-22 11:23:34 +02:00
Sebastian Sdorra
52f471b5dd
fix lfs authentication via ssh command and enabled xsrf protection
2019-10-22 10:50:49 +02:00
Eduard Heimbuch
74a89a7130
fix missing anon exception
2019-10-18 11:31:15 +02:00
Eduard Heimbuch
1af4acabbe
add missing check if anonymous access is enabled but anonymous user doesn't exists
2019-10-18 09:43:03 +02:00
Eduard Heimbuch
1fd6337f64
anonymous user should not have permission to change password or autocomplete
2019-10-17 11:08:55 +02:00
Eduard Heimbuch
4ce1d2ed89
add unit tests for anonymous realm
2019-10-17 09:26:36 +02:00
Eduard Heimbuch
b26f9068f4
move Anonymous Realm to webapp
2019-10-14 16:18:14 +02:00
Rene Pfeuffer
3e2c8b7c4b
Remove archive flag
2019-08-20 14:23:52 +02:00
Eduard Heimbuch
63c874917f
added singleton annotation to AuthorizationChangedEventProducer to be sure that it is not destroyed by the gc
2019-08-02 15:02:13 +02:00
Eduard Heimbuch
47e323e468
disable shiro cache for the DefaultRealm
2019-08-02 12:01:53 +02:00
Eduard Heimbuch
442aacbcdb
remove GroupNames and ExternalGroupNames in favor of GroupCollector
2019-08-02 09:32:44 +02:00
Eduard Heimbuch
86af7b23eb
remove groups from BearerRealm / SyncRealmHelper / DAORealmHelper
2019-08-01 15:43:12 +02:00
René Pfeuffer
93025629e6
Migrate verbs to roles if possible
2019-05-15 15:57:18 +02:00
René Pfeuffer
de59f5657f
Remove duplicate verbs
2019-05-07 15:20:54 +02:00
René Pfeuffer
c5b20566c1
Fix bugs with integration test
2019-05-07 09:20:19 +02:00
René Pfeuffer
8645890758
Cleanup
2019-05-06 16:45:35 +02:00
René Pfeuffer
45ca558101
Get verbs from repository roles
2019-05-06 16:01:01 +02:00
René Pfeuffer
c0760688e9
Join repository roles from the system and from the database
2019-05-03 14:47:49 +02:00
René Pfeuffer
232102716c
Create DAO for repository roles
2019-05-03 14:19:33 +02:00
Sebastian Sdorra
50cb7e9370
merge with 2.0.0-m3
2019-03-21 10:47:33 +01:00
Sebastian Sdorra
dbdbe2fcf7
fixes SyncingRealmHelper not providing internal groups (from xml)
2019-03-14 17:42:27 +01:00
Sebastian Sdorra
1627518954
removes admin user and group configuration in favor of permissions
2019-03-13 12:54:50 +01:00
Sebastian Sdorra
a2f83e2429
removes admin flag from user object
2019-03-13 12:07:18 +01:00
René Pfeuffer
6ebbfa97a3
Start entity types with a capital char
2019-03-12 15:10:43 +01:00
René Pfeuffer
e335bcd5c7
Prevent repetition of verbs in roles
2019-02-21 08:39:50 +01:00
Philipp Czora
17c496222d
Merged in feature/consolidate_permissions (pull request #196 )
...
Feature consolidate permissions
2019-02-20 14:20:03 +00:00
René Pfeuffer
31b71c9892
Merged feature/changes_for_ssh_plugin into 2.0.0-m3
2019-02-20 13:51:47 +01:00
Sebastian Sdorra
aec66c023a
define AuthorizationCollector as extension point with multiple implmentations
2019-02-18 18:01:11 +01:00
René Pfeuffer
8161d4cb1c
Merge roles from multiple repository permissions
2019-02-18 10:31:12 +01:00
René Pfeuffer
5d601293bf
Create external group names claim in token builder directly
2019-02-15 10:23:46 +01:00
Sebastian Sdorra
145ac7a8d8
remove direct dependencies to apache beanutils and commons collections
2019-01-31 15:53:19 +01:00
Sebastian Sdorra
8bf82213b8
remove unused imports
2019-01-30 14:48:37 +01:00
Philipp Czora
5eb4d321a9
Fixed equals() and hashCode() of RepositoryRole
2019-01-29 10:25:12 +01:00
René Pfeuffer
42dcaec71a
Keep order of permissions
2019-01-23 15:40:08 +01:00
René Pfeuffer
9898cd3721
Fix authorization events
2019-01-23 15:00:48 +01:00
René Pfeuffer
69b64948a0
Remove duplicates
2019-01-23 12:33:34 +01:00
René Pfeuffer
fdf4421a55
Fix verbs for repository and rename class
2019-01-23 12:22:06 +01:00
René Pfeuffer
48e1e16fe6
Do not create empty permissions
2019-01-23 11:20:27 +01:00
René Pfeuffer
8a0d2ba819
Rename
2019-01-23 10:06:48 +01:00
René Pfeuffer
02b19e51ef
Fix repository permission rest interface
2019-01-23 09:47:38 +01:00
René Pfeuffer
101b21e914
Read available repository permissions
2019-01-22 14:30:56 +01:00
René Pfeuffer
707d63426b
Remove enum PermissionType
2019-01-22 13:28:52 +01:00
René Pfeuffer
4dcbcb80e7
Remove permissions from repository
2019-01-22 13:00:02 +01:00
René Pfeuffer
8f1b67fe58
Merge with 2.0.0-m3
2019-01-21 15:09:23 +01:00