René Pfeuffer
07a85ef9c1
Check token content before handling them
...
This adds plausibility checks before handling tokens as for example jwt
or api keys. Doing so we generate less error logs and therefore we cause
less confusion.
2020-10-14 11:11:23 +02:00
Sebastian Sdorra
dcfd0d0d16
refactor I18nServletTest
...
Use JUnit5 and only api methods
2020-09-01 08:34:01 +02:00
Sebastian Sdorra
8d65bf75f3
refactor I18nServlet to avoid stacktrace logging on unknown language
2020-09-01 07:53:21 +02:00
Sebastian Sdorra
967c802588
merge with develop
2020-03-24 10:17:57 +01:00
Florian Scholdei
f1b34eb502
Changeover to MIT license ( #1066 )
...
* prepare license-maven-plugin for license migration
* added license mapping for tsx files and added some more excludes
* Changeover to MIT license
* Fix build problems
* Delete old remaining licenses
* Add more exclude path for license checker
* Rename included netbeans license, add exclude .m2/repository/
* Specify .m2 exclude because not only repository/, also wrapper/ must match
* Add .cache/ exclude for license check
* Modify formatting of license in java classes to comply with convention and IDE
* Add IntelliJ documentation for license configuration
* Update CHANGELOG.md
* Exclude tmp/workspace/ dir for license check
* Edit README.md
Co-authored-by: Sebastian Sdorra <sebastian.sdorra@cloudogu.com >
2020-03-23 15:35:58 +01:00
Sebastian Sdorra
f8f5aa2ebd
X-SCM-Session-ID and X-SCM-Client could now be send via query parameter
...
The use of query parameters is required for SSE, because the standard does not support header.
This works currently only for GET request to avoid parsing of request body.
2020-03-20 11:10:05 +01:00
Sebastian Sdorra
de3db6252e
implemented restarter to move control over the restart process to the core
2020-02-12 14:45:13 +01:00
Sebastian Sdorra
42ab81cf50
implement ui client session id
...
This changeset introduces a client side session id, which is generated
once by the client (ui: apiClient) and is send with each request to server.
The server makes the session id available by the PrincipalCollection of the
subject.
2019-11-13 14:03:48 +01:00
Eduard Heimbuch
b99199e349
merge 2.0.0-m3
2019-08-15 10:51:36 +02:00
Rene Pfeuffer
bc37ccef57
Make protocol auth filter available for legacy paths
2019-07-26 15:07:40 +02:00
Sebastian Sdorra
4ba9437410
fixed broken tests
2019-07-22 14:41:12 +02:00
Sebastian Sdorra
405ffcf164
migrate tests to junit 5
2019-07-22 14:26:15 +02:00
Sebastian Sdorra
56a683c7c5
fix checkout of repositories with dots in the names
2019-07-22 13:00:49 +02:00
Sebastian Sdorra
4a275c445e
removed unnecessary request provider
2019-07-22 09:44:03 +02:00
Sebastian Sdorra
99f1c8c55e
rename package sonia.scm.boot to sonia.scm.lifecycle
2019-06-25 08:36:57 +02:00
Sebastian Sdorra
4ffdde6417
fixes AdministrationContext with user admin flag
2019-03-13 12:12:06 +01:00
Sebastian Sdorra
cd302a3768
fix handling of post authentication filters for protocol request
...
do not call PushStateDispatcher in the HttpProtocolServletAuthenticationFilter,
because the HttpProtocolServlet already does this.
2019-03-12 13:58:46 +01:00
Sebastian Sdorra
d91f918e91
fixed caching of locales/x/plugins.json
2019-02-11 11:51:12 +01:00
Sebastian Sdorra
ad4277ba41
merge with 2.0.0-m3
2019-02-05 16:50:14 +01:00
Sebastian Sdorra
c249d603d7
remove unused shiro rule and fixed some deprecated method calls
2019-02-01 09:44:25 +01:00
Sebastian Sdorra
0a29f41835
verify encoding and content type
2019-02-01 09:42:19 +01:00
Sebastian Sdorra
8bf82213b8
remove unused imports
2019-01-30 14:48:37 +01:00
Sebastian Sdorra
f8f5237ad0
fix usage of deprecated mockito classes
2019-01-30 14:44:38 +01:00
Sebastian Sdorra
b231499cd0
merge with branch 1.x
2019-01-29 09:42:03 +01:00
René Pfeuffer
e30d32f1cd
Test things
2018-12-01 20:46:05 +01:00
René Pfeuffer
f041b4ecb6
Merge with 2.0.0-m3
2018-10-25 10:15:32 +02:00
Sebastian Sdorra
96faa3cad7
simplify declaration of test data
2018-10-24 11:15:55 +02:00
Mohamed Karray
36a55bffae
Move the json merge in the I18nServlet class
2018-10-24 10:18:09 +02:00
Mohamed Karray
a7d14636dc
use JsonNode in the I18nServlet
2018-10-22 17:37:10 +02:00
Mohamed Karray
9cb661b460
plugin translation servlet
2018-10-20 14:40:03 +02:00
René Pfeuffer
bf1effb9c0
Remove special RepositoryNotFoundException
2018-10-18 16:08:49 +02:00
René Pfeuffer
b74fb814b8
Introduce default error object with context for not found exceptions
2018-10-18 13:12:16 +02:00
René Pfeuffer
babea160c3
Incorporate peer review
2018-09-17 17:49:08 +02:00
René Pfeuffer
6bc41cee0a
Handle git urls with trailing .git suffix correctly
2018-09-10 11:03:10 +02:00
René Pfeuffer
6d659b8ac1
Correct extraction of namespace and name from path
2018-09-10 08:37:31 +02:00
René Pfeuffer
67278582e3
Update to Mockito v2
2018-08-08 09:20:08 +02:00
Sebastian Sdorra
5e6685260e
fix integer overflow of request with body larger than 4gb, see issue #953
2017-11-19 21:07:28 +01:00
Sebastian Sdorra
5738fa2d66
redesign bearer tokens
2017-01-17 15:54:32 +01:00
Sebastian Sdorra
2388cfd35d
create a more flexible interface for the creation of access tokens
...
Provide a AccessTokenBuilderFactory to simplify the creation of access tokens and a default implementation which is based on JWT. Added also an AccessTokenCookieIssuer to unify the creation of access token cookies. Removed old BearerTokenGenerator.
2017-01-17 14:40:50 +01:00
Sebastian Sdorra
bad99919f4
merge with branch 1.x
2017-01-12 19:50:39 +01:00
Sebastian Sdorra
be385e4f2e
implement a new authentication filter, which uses a set of WebTokenGenerator to handle authentication requests
2015-02-21 21:06:35 +01:00
Sebastian Sdorra
4fa8e6e88a
replace scm-manager 1.x security api with apache shiro and use PasswordService for stronger password hashes
2014-12-14 12:26:03 +01:00
Sebastian Sdorra
8e608d2439
created small user-agent detection framework to choose the right encoding for basic authentication
2014-10-17 15:43:28 +02:00
Sebastian Sdorra
ffc12f2fa1
merge changes from branch 1.x
2014-02-18 21:25:29 +01:00
Sebastian Sdorra
7d198a2d95
added option to skip failed authenticators
2014-02-16 15:41:48 +01:00
Sebastian Sdorra
796858868a
remove unused imports
2014-01-03 14:20:28 +01:00
Sebastian Sdorra
5e6259f3b7
remove old style listeners in favor of event bus
2014-01-03 11:32:40 +01:00
Sebastian Sdorra
6b910d2c40
default authentication handler should always be the first in the chain
2013-04-04 13:38:33 +02:00
Sebastian Sdorra
340cfbef11
remove unused imports
2013-02-01 11:43:26 +01:00
Sebastian Sdorra
29a3f682a2
remove unnecessary provider
2013-01-23 13:38:26 +01:00
