Sebastian Sdorra
f8f5aa2ebd
X-SCM-Session-ID and X-SCM-Client could now be send via query parameter
...
The use of query parameters is required for SSE, because the standard does not support header.
This works currently only for GET request to avoid parsing of request body.
2020-03-20 11:10:05 +01:00
Sebastian Sdorra
42ab81cf50
implement ui client session id
...
This changeset introduces a client side session id, which is generated
once by the client (ui: apiClient) and is send with each request to server.
The server makes the session id available by the PrincipalCollection of the
subject.
2019-11-13 14:03:48 +01:00
Eduard Heimbuch
86af7b23eb
remove groups from BearerRealm / SyncRealmHelper / DAORealmHelper
2019-08-01 15:43:12 +02:00
Sebastian Sdorra
8bf82213b8
remove unused imports
2019-01-30 14:48:37 +01:00
Sebastian Sdorra
3bd1cbf53d
added option to define extra groups for AccessToken
2019-01-21 14:27:14 +01:00
Sebastian Sdorra
ac4a57f2f3
replace TokenClaimsValidator with not so generic AccessTokenValidator interface and fixed duplicated code of BearerRealm and JwtAccessTokenResolve
2018-12-21 08:35:18 +01:00
René Pfeuffer
f7fc81b626
Remove redundant key generation in tests
2018-11-30 11:26:23 +01:00
René Pfeuffer
176d121aa0
Adapt tests to new version of jjwt
2018-11-30 10:29:08 +01:00
Philipp Czora
efc72b21ec
Minor changes due to review
2018-08-09 11:21:29 +02:00
René Pfeuffer
67278582e3
Update to Mockito v2
2018-08-08 09:20:08 +02:00
Sebastian Sdorra
5738fa2d66
redesign bearer tokens
2017-01-17 15:54:32 +01:00
Sebastian Sdorra
e7d6f50fd9
implement token scopes, scopes can be used to issue a token which is only suitable for a single or set explicit actions
2017-01-16 15:04:44 +01:00
Sebastian Sdorra
df6d9dacf8
implement LoginAttemptHandler for scm-manager 2
2017-01-15 20:27:06 +01:00
Sebastian Sdorra
86e0cba156
fix compiler warning
2017-01-13 20:22:49 +01:00
Sebastian Sdorra
46d8b58810
introduce TokenClaimsEnricher and TokenClaimsValidator api
2017-01-12 22:04:19 +01:00
Sebastian Sdorra
2029166b03
start implementation of jwt based authentication
2015-02-21 15:58:13 +01:00
