Sebastian Sdorra
5738fa2d66
redesign bearer tokens
2017-01-17 15:54:32 +01:00
Sebastian Sdorra
2388cfd35d
create a more flexible interface for the creation of access tokens
...
Provide a AccessTokenBuilderFactory to simplify the creation of access tokens and a default implementation which is based on JWT. Added also an AccessTokenCookieIssuer to unify the creation of access token cookies. Removed old BearerTokenGenerator.
2017-01-17 14:40:50 +01:00
Sebastian Sdorra
bad99919f4
merge with branch 1.x
2017-01-12 19:50:39 +01:00
Sebastian Sdorra
d0032b09d8
use cached thread pool to process mercurial process error streams
2015-06-11 22:11:51 +02:00
Sebastian Sdorra
ef50b4f238
javadoc
2015-04-01 10:27:38 +02:00
Sebastian Sdorra
ab1b91e1c5
fix authentication on api requests
2015-03-26 21:07:28 +01:00
Sebastian Sdorra
be385e4f2e
implement a new authentication filter, which uses a set of WebTokenGenerator to handle authentication requests
2015-02-21 21:06:35 +01:00
Sebastian Sdorra
e5184ac6a0
merge with branch issue-627
2015-02-10 20:50:06 +01:00
Sebastian Sdorra
8ccaaf3695
remove auto login modules because they are not longer needed, since we can determine the order of the filter chain
2015-02-06 22:41:34 +01:00
Sebastian Sdorra
30b49490a7
make use of new WebElement and Priority annotation
2015-02-01 19:52:53 +01:00
Sebastian Sdorra
264cbbc9ad
do not catch throwable
2015-01-18 21:34:45 +01:00
Sebastian Sdorra
4fa8e6e88a
replace scm-manager 1.x security api with apache shiro and use PasswordService for stronger password hashes
2014-12-14 12:26:03 +01:00
Sebastian Sdorra
8e608d2439
created small user-agent detection framework to choose the right encoding for basic authentication
2014-10-17 15:43:28 +02:00
Sebastian Sdorra
3997c70926
merge with branch 1.x
2014-04-28 13:48:11 +02:00
Sebastian Sdorra
ded786209d
do not use subject run as for administration context, because it could affect other threads
2014-04-24 08:58:59 +02:00
Sebastian Sdorra
07363cbe82
move extension annotation from sonia.scm.plugin.ext to sonia.scm.plugin
2014-03-29 09:51:17 +01:00
Sebastian Sdorra
43b92f0aca
stop scanning classpath, bind extensions from plugin and module descriptor
2014-03-28 22:49:55 +01:00
Sebastian Sdorra
ffc12f2fa1
merge changes from branch 1.x
2014-02-18 21:25:29 +01:00
Sebastian Sdorra
7d198a2d95
added option to skip failed authenticators
2014-02-16 15:41:48 +01:00
Sebastian Sdorra
908f2fe6c8
simplify cache api
2014-01-09 20:06:07 +01:00
Sebastian Sdorra
796858868a
remove unused imports
2014-01-03 14:20:28 +01:00
Sebastian Sdorra
5e6259f3b7
remove old style listeners in favor of event bus
2014-01-03 11:32:40 +01:00
Sebastian Sdorra
aec7773239
remove deprecated stuff
2014-01-03 10:34:34 +01:00
Sebastian Sdorra
de94e93fef
merge with branch issue-481
2013-11-07 09:14:00 +01:00
Sebastian Sdorra
477a425b5a
remove setContentLength with -1 to fix CGI on jetty 9, see #481
2013-11-05 08:56:12 +01:00
Clemens Rabe
c06d3e7bee
Reverted ChainAuthenticatonManager.java
2013-10-16 19:51:16 +02:00
Clemens Rabe
814b940998
Reverted mess of eclipse formatting.
2013-10-15 20:57:38 +02:00
Clemens Rabe
2875794519
Added auto-login filter system.
2013-10-02 19:45:21 +02:00
Sebastian Sdorra
c09b92bc04
fix possible npe with unpacked war files
2013-09-10 21:11:30 +02:00
Sebastian Sdorra
2e7e4c457a
improve remember me
2013-04-24 08:33:32 +02:00
Sebastian Sdorra
6b910d2c40
default authentication handler should always be the first in the chain
2013-04-04 13:38:33 +02:00
Sebastian Sdorra
6ef8c2ce66
merge with branch issue-331
2013-02-16 17:12:10 +01:00
Sebastian Sdorra
a90cd565f3
use version 1.2.1-scm1 of apache shiro to fix issue #331
2013-02-08 17:23:17 +01:00
Sebastian Sdorra
9adc65d9e5
util classes should be final with a private constructor
2013-01-31 10:26:16 +01:00
Sebastian Sdorra
2d5fa22ca4
use index of char instead of index of string, if possible
2013-01-30 10:10:20 +01:00
Sebastian Sdorra
29a3f682a2
remove unnecessary provider
2013-01-23 13:38:26 +01:00
Sebastian Sdorra
b66ae705c2
fix privileged action is not executed, if the user is already an admin
2013-01-12 13:14:11 +01:00
Sebastian Sdorra
a299183ba1
fix IllegalArgumentException with nested privileged actions
2012-12-17 15:54:16 +01:00
Sebastian Sdorra
6728758637
do not store request and respone in authentication token
2012-10-11 16:12:06 +02:00
Sebastian Sdorra
50ce50ca1b
allow execution of administration tasks without an active http session
2012-10-06 18:56:30 +02:00
Sebastian Sdorra
e89195f6db
improve security of administration context
2012-10-06 18:35:09 +02:00
Sebastian Sdorra
ac683ad8a9
improve logging
2012-10-03 12:49:12 +02:00
Sebastian Sdorra
492fb08558
fix anonymous access
2012-09-13 15:28:46 +02:00
Sebastian Sdorra
65826e749e
implement administration context with apache shiro
2012-08-30 16:49:46 +02:00
Sebastian Sdorra
4a9d14b708
mark security context as deprecated and use shiro apis instead
2012-08-30 13:20:26 +02:00
Sebastian Sdorra
81060af003
replace groups class with groupnames
2012-08-30 10:38:56 +02:00
Sebastian Sdorra
2ddfe06a54
BasicSecurityContext should not throw AuthenticationException, to not break existing behavior
2012-08-29 09:27:55 +02:00
Sebastian Sdorra
761c0b215e
BasicSecurityContext should wrap apache shiro api for compatibility reasons
2012-08-27 08:05:46 +02:00
Sebastian Sdorra
8e5f312809
merge changes from version 1.17
2012-07-23 09:11:41 +02:00
Sebastian Sdorra
3108776974
merge with branch issue-195
2012-06-28 15:35:57 +02:00
