Sebastian Sdorra
e0d42d7c92
change authentication parameters to match oauth spec
2017-02-09 20:52:53 +01:00
Sebastian Sdorra
dcf62ae991
added resolver to simplify parsing and validating of access tokens
2017-01-17 17:22:55 +01:00
Sebastian Sdorra
5738fa2d66
redesign bearer tokens
2017-01-17 15:54:32 +01:00
Sebastian Sdorra
70d5942250
token enricher should use new access token api
2017-01-17 15:33:19 +01:00
Sebastian Sdorra
2388cfd35d
create a more flexible interface for the creation of access tokens
...
Provide a AccessTokenBuilderFactory to simplify the creation of access tokens and a default implementation which is based on JWT. Added also an AccessTokenCookieIssuer to unify the creation of access token cookies. Removed old BearerTokenGenerator.
2017-01-17 14:40:50 +01:00
Sebastian Sdorra
e7d6f50fd9
implement token scopes, scopes can be used to issue a token which is only suitable for a single or set explicit actions
2017-01-16 15:04:44 +01:00
Sebastian Sdorra
df6d9dacf8
implement LoginAttemptHandler for scm-manager 2
2017-01-15 20:27:06 +01:00
Sebastian Sdorra
cbc6dad0fe
fixed duplicate filter bindings
2017-01-15 19:33:22 +01:00
Sebastian Sdorra
3536c29908
added DAORealmHelperFactory to simplify the creation of dao based realms
2017-01-15 12:50:29 +01:00
Sebastian Sdorra
76384de26f
enabled xsrf be default and remove claim prefix to reduce size
2017-01-14 18:26:11 +01:00
Sebastian Sdorra
7d6d23b04d
remove unnecessary use of local storage, extract the xsrf token on every request
2017-01-14 14:03:01 +01:00
Sebastian Sdorra
f142e1a83f
merge with branch 1.x
2017-01-14 13:25:25 +01:00
Sebastian Sdorra
c149b180a1
use newer repository client api
2017-01-14 11:48:42 +01:00
Sebastian Sdorra
6e83a9a717
merge with branch 1.x
2017-01-13 22:47:54 +01:00
Sebastian Sdorra
b5d59fabd4
implement svn client provider
2017-01-13 22:38:54 +01:00
Sebastian Sdorra
86e0cba156
fix compiler warning
2017-01-13 20:22:49 +01:00
Sebastian Sdorra
ba11ed1a0f
added missing unit tests for xsrf related classes
2017-01-13 06:59:44 +01:00
Sebastian Sdorra
7429a90424
fix broken build
2017-01-13 06:43:59 +01:00
Sebastian Sdorra
4e62f9552a
re implement xsrf protection for scm-manager 2.0.0
2017-01-12 22:16:14 +01:00
Sebastian Sdorra
46d8b58810
introduce TokenClaimsEnricher and TokenClaimsValidator api
2017-01-12 22:04:19 +01:00
Sebastian Sdorra
0a22bc9919
remove merge comments
2017-01-12 20:51:55 +01:00
Sebastian Sdorra
fc6287fd40
remove deprecations and fixed some compiler warnings
2017-01-12 20:02:06 +01:00
Sebastian Sdorra
bad99919f4
merge with branch 1.x
2017-01-12 19:50:39 +01:00
Sebastian Sdorra
5332ac2466
refactor store api
2016-12-11 21:31:05 +01:00
Sebastian Sdorra
837df4b87c
fix injection with java 8
2016-12-11 21:30:33 +01:00
Sebastian Sdorra
e76862fc47
improve unit tests of DefaultRepositoryManager
2016-12-11 13:02:59 +01:00
Sebastian Sdorra
4f124691d0
use shiro-unit for manager permission tests
2016-12-08 22:08:11 +01:00
Sebastian Sdorra
c673b0fb10
replace admin role check from SecurityUtil with permission checks
2016-12-08 07:56:40 +01:00
Sebastian Sdorra
64581e1f75
use already exists exceptions always with an appropriate message
2016-12-07 22:40:24 +01:00
Sebastian Sdorra
3709ce7602
fix typo
2016-12-07 22:28:06 +01:00
Sebastian Sdorra
2a6f51fa6d
added message to GroupAlreadyExistsException
2016-12-07 22:24:59 +01:00
Sebastian Sdorra
d3adf8a893
use GroupPermissions for DefaultGroupManager
2016-12-07 22:22:53 +01:00
Sebastian Sdorra
26ece65363
use ssp for user and repository permission checks
2016-12-06 22:04:13 +01:00
Sebastian Sdorra
5678520b59
fix hidden help text on default branch configuration
2016-11-24 14:03:14 +01:00
Sebastian Sdorra
d940c2e9b9
fix release build
2016-11-10 22:14:29 +01:00
Sebastian Sdorra
0c0bdfa376
#873 added default branch chooser to git settings
2016-11-10 20:54:20 +01:00
Sebastian Sdorra
f2137bd761
#873 added reusable components for branch and tag combo boxes
2016-11-10 19:48:13 +01:00
Sebastian Sdorra
807eccf459
added unit tests for security filters
2016-11-05 19:46:32 +01:00
Sebastian Sdorra
da8c997f59
added primary principal as request attribute, see issue #877
2016-10-31 22:16:21 +01:00
Sebastian Sdorra
5da8f5f052
fix selenium integration tests and introduce page object pattern
2016-07-31 20:21:11 +02:00
Sebastian Sdorra
1cf399ab2d
implement mercurial repository test client
2016-07-26 00:16:14 +02:00
Sebastian Sdorra
2b97f285ac
reduce event bus logging
2016-07-25 18:59:59 +02:00
Sebastian Sdorra
a729f0f207
fix debug service hook for non admin users
2016-07-25 18:59:33 +02:00
Sebastian Sdorra
5340bea7f1
re enable repository it cases
2016-07-25 18:49:57 +02:00
Sebastian Sdorra
37228c329c
improve javadoc
2016-07-25 18:28:58 +02:00
Sebastian Sdorra
8a19193799
added RepositoryHookITCase to test repository post receive hooks
2016-07-25 18:27:47 +02:00
Sebastian Sdorra
c08abf8f93
merge with branch issue-844 to fix issue #844
2016-07-08 14:52:28 +02:00
Sebastian Sdorra
8d5c3e709f
remove debug output, which seems to break ui on ie #844
2016-06-29 20:28:33 +02:00
Sebastian Sdorra
7d8613b6bb
added request method to mdc filter
2016-06-28 12:06:28 +02:00
Sebastian Sdorra
7ef8e1ebd5
removed unnecessary log level check
2016-06-28 12:06:02 +02:00