Sebastian Sdorra
a6120f0b16
rename SessionStore to CredentialsStore
2017-02-26 14:54:01 +01:00
Sebastian Sdorra
402d2cfdb7
#781 added missing unit tests for authentication related classes
2017-02-26 14:28:00 +01:00
Sebastian Sdorra
acc3ff791b
#781 process all kinds authorization relevant event and produce AuthorizationChangedEvent
2017-02-26 13:19:35 +01:00
Sebastian Sdorra
b6a49570cf
refactor AuthenticationInfoCollector
2017-02-17 23:06:05 +01:00
Sebastian Sdorra
e0e765eaa3
start refactoring of ScmRealm to simplify shiro cache integration
2017-02-17 21:36:52 +01:00
Sebastian Sdorra
731337f2ab
created adapter between scm and shiro caches, see issue #781
2017-02-16 22:15:36 +01:00
Sebastian Sdorra
e0d42d7c92
change authentication parameters to match oauth spec
2017-02-09 20:52:53 +01:00
Sebastian Sdorra
dcf62ae991
added resolver to simplify parsing and validating of access tokens
2017-01-17 17:22:55 +01:00
Sebastian Sdorra
5738fa2d66
redesign bearer tokens
2017-01-17 15:54:32 +01:00
Sebastian Sdorra
70d5942250
token enricher should use new access token api
2017-01-17 15:33:19 +01:00
Sebastian Sdorra
2388cfd35d
create a more flexible interface for the creation of access tokens
...
Provide a AccessTokenBuilderFactory to simplify the creation of access tokens and a default implementation which is based on JWT. Added also an AccessTokenCookieIssuer to unify the creation of access token cookies. Removed old BearerTokenGenerator.
2017-01-17 14:40:50 +01:00
Sebastian Sdorra
e7d6f50fd9
implement token scopes, scopes can be used to issue a token which is only suitable for a single or set explicit actions
2017-01-16 15:04:44 +01:00
Sebastian Sdorra
df6d9dacf8
implement LoginAttemptHandler for scm-manager 2
2017-01-15 20:27:06 +01:00
Sebastian Sdorra
cbc6dad0fe
fixed duplicate filter bindings
2017-01-15 19:33:22 +01:00
Sebastian Sdorra
3536c29908
added DAORealmHelperFactory to simplify the creation of dao based realms
2017-01-15 12:50:29 +01:00
Sebastian Sdorra
76384de26f
enabled xsrf be default and remove claim prefix to reduce size
2017-01-14 18:26:11 +01:00
Sebastian Sdorra
ba11ed1a0f
added missing unit tests for xsrf related classes
2017-01-13 06:59:44 +01:00
Sebastian Sdorra
7429a90424
fix broken build
2017-01-13 06:43:59 +01:00
Sebastian Sdorra
4e62f9552a
re implement xsrf protection for scm-manager 2.0.0
2017-01-12 22:16:14 +01:00
Sebastian Sdorra
46d8b58810
introduce TokenClaimsEnricher and TokenClaimsValidator api
2017-01-12 22:04:19 +01:00
Sebastian Sdorra
0a22bc9919
remove merge comments
2017-01-12 20:51:55 +01:00
Sebastian Sdorra
fc6287fd40
remove deprecations and fixed some compiler warnings
2017-01-12 20:02:06 +01:00
Sebastian Sdorra
bad99919f4
merge with branch 1.x
2017-01-12 19:50:39 +01:00
Sebastian Sdorra
5332ac2466
refactor store api
2016-12-11 21:31:05 +01:00
Sebastian Sdorra
837df4b87c
fix injection with java 8
2016-12-11 21:30:33 +01:00
Sebastian Sdorra
c673b0fb10
replace admin role check from SecurityUtil with permission checks
2016-12-08 07:56:40 +01:00
Sebastian Sdorra
64581e1f75
use already exists exceptions always with an appropriate message
2016-12-07 22:40:24 +01:00
Sebastian Sdorra
3709ce7602
fix typo
2016-12-07 22:28:06 +01:00
Sebastian Sdorra
2a6f51fa6d
added message to GroupAlreadyExistsException
2016-12-07 22:24:59 +01:00
Sebastian Sdorra
d3adf8a893
use GroupPermissions for DefaultGroupManager
2016-12-07 22:22:53 +01:00
Sebastian Sdorra
26ece65363
use ssp for user and repository permission checks
2016-12-06 22:04:13 +01:00
Sebastian Sdorra
807eccf459
added unit tests for security filters
2016-11-05 19:46:32 +01:00
Sebastian Sdorra
da8c997f59
added primary principal as request attribute, see issue #877
2016-10-31 22:16:21 +01:00
Sebastian Sdorra
2b97f285ac
reduce event bus logging
2016-07-25 18:59:59 +02:00
Sebastian Sdorra
a729f0f207
fix debug service hook for non admin users
2016-07-25 18:59:33 +02:00
Sebastian Sdorra
37228c329c
improve javadoc
2016-07-25 18:28:58 +02:00
Sebastian Sdorra
8a19193799
added RepositoryHookITCase to test repository post receive hooks
2016-07-25 18:27:47 +02:00
Sebastian Sdorra
7d8613b6bb
added request method to mdc filter
2016-06-28 12:06:28 +02:00
Sebastian Sdorra
7ef8e1ebd5
removed unnecessary log level check
2016-06-28 12:06:02 +02:00
Sebastian Sdorra
f8133f4c6b
improve logging
2016-06-28 11:32:30 +02:00
Sebastian Sdorra
1529ef99d7
log authorization summary to trace level
2016-06-28 10:54:14 +02:00
Sebastian Sdorra
5433317692
improve logging of AuthorizationCollector
2016-06-28 10:26:01 +02:00
Sebastian Sdorra
353e4c4f7b
removed duplicate clear cache log message
2016-06-28 10:15:59 +02:00
Sebastian Sdorra
8e38d95dcf
added name of the repository to access denied exceptions
2016-06-28 09:32:25 +02:00
Sebastian Sdorra
9dc1c6fd8e
improve cache invalidation on group events
2016-06-26 15:03:28 +02:00
Sebastian Sdorra
89660e8ac3
improve cache invalidation on permission change events
2016-06-26 12:53:41 +02:00
Sebastian Sdorra
7bc793ecd5
improve javadoc
2016-06-26 12:44:13 +02:00
Sebastian Sdorra
a592484f0f
improve cache invalidation on repository events
2016-06-26 12:41:00 +02:00
Sebastian Sdorra
6428245506
improve cache invalidation on user events
2016-06-26 12:20:32 +02:00
Sebastian Sdorra
8e3c3e4b63
improve modification events to pass the item before it was modified to the subscriber
2016-06-25 21:48:53 +02:00
