Bug 5085: Moved some security related classes to prevent dependency

cycles and adjusted shiro.ini files
This commit is contained in:
Steffen Schaefer
2019-12-09 09:21:35 +01:00
parent dfcabd483f
commit b9f53284b9
10 changed files with 18 additions and 14 deletions
@@ -60,7 +60,8 @@ Require-Bundle: com.sap.sailing.domain,
org.mp4parser.isoparser;bundle-version="1.9.37",
com.sap.sse.datamining.ui,
org.mongodb.mongo-java-driver;bundle-version="3.6.4",
com.sap.sailing.server.gateway.serialization.shared.android
com.sap.sailing.server.gateway.serialization.shared.android,
com.sap.sailing.shared.server
Bundle-Activator: com.sap.sailing.gwt.ui.server.Activator
Bundle-ActivationPolicy: lazy
Import-Package: javax.servlet;version="3.1.0",
@@ -52,11 +52,11 @@ customGwt = com.sap.sse.security.CustomFilter
# If no such bearer token is provided, the filter falls back to basic HTTP
# authentication ("Authentication: Basic ...") and then regular form-based
# authentication with POST parameters "username" and "password".
bearerToken = com.sap.sailing.server.security.BearerTokenOrBasicOrFormAuthenticationFilterSAPSailing
bearerToken = com.sap.sailing.shared.server.security.BearerTokenOrBasicOrFormAuthenticationFilterSAPSailing
# The same as bearerToken, but with additional fallback to anonymous authentication.
# In this case sufficient permission checks have to be done on the application side.
bearerTokenOrAnonymous = com.sap.sailing.server.security.BearerTokenOrBasicOrFormOrAnonymousAuthenticationFilterSAPSailing
bearerTokenOrAnonymous = com.sap.sailing.shared.server.security.BearerTokenOrBasicOrFormOrAnonymousAuthenticationFilterSAPSailing
# Specifying filter chains for URL patterns
@@ -62,7 +62,8 @@ Require-Bundle: com.sap.sailing.domain,
com.googlecode.java-diff-utils,
com.sun.xml.bind.jaxb-impl;bundle-version="2.3.0",
com.sap.sailing.server.interface;bundle-version="1.0.0",
org.mongodb.mongo-java-driver;bundle-version="3.6.4"
org.mongodb.mongo-java-driver;bundle-version="3.6.4",
com.sap.sailing.shared.server
Bundle-ClassPath: .
Web-ContextPath: /sailingserver
Export-Package: com.sap.sailing.server.gateway,
@@ -59,11 +59,11 @@ authc.successUrl = /api/restsecurity/hello
# If no such bearer token is provided, the filter falls back to basic HTTP
# authentication ("Authentication: Basic ...") and then regular form-based
# authentication with POST parameters "username" and "password".
bearerToken = com.sap.sailing.server.security.BearerTokenOrBasicOrFormAuthenticationFilterSAPSailing
bearerToken = com.sap.sailing.shared.server.security.BearerTokenOrBasicOrFormAuthenticationFilterSAPSailing
# The same as bearerToken, but with additional fallback to anonymous authentication.
# In this case sufficient permission checks have to be done on the application side.
bearerTokenOrAnonymous = com.sap.sailing.server.security.BearerTokenOrBasicOrFormOrAnonymousAuthenticationFilterSAPSailing
bearerTokenOrAnonymous = com.sap.sailing.shared.server.security.BearerTokenOrBasicOrFormOrAnonymousAuthenticationFilterSAPSailing
# Specifying filter chains for URL patterns
@@ -59,11 +59,11 @@ authc.successUrl = /api/restsecurity/hello
# If no such bearer token is provided, the filter falls back to basic HTTP
# authentication ("Authentication: Basic ...") and then regular form-based
# authentication with POST parameters "username" and "password".
bearerToken = com.sap.sailing.server.security.BearerTokenOrBasicOrFormAuthenticationFilterSAPSailing
bearerToken = com.sap.sailing.shared.server.security.BearerTokenOrBasicOrFormAuthenticationFilterSAPSailing
# The same as bearerToken, but with additional fallback to anonymous authentication.
# In this case sufficient permission checks have to be done on the application side.
bearerTokenOrAnonymous = com.sap.sailing.server.security.BearerTokenOrBasicOrFormOrAnonymousAuthenticationFilterSAPSailing
bearerTokenOrAnonymous = com.sap.sailing.shared.server.security.BearerTokenOrBasicOrFormOrAnonymousAuthenticationFilterSAPSailing
# Specifying filter chains for URL patterns
@@ -47,5 +47,6 @@ Export-Package: com.sap.sailing.shared.server.impl;
com.sap.sailing.server.replication.test,
com.sap.sailing.domain.racelogtrackingadapter.test,
com.sap.sailing.server.testsupport,
com.sap.sailing.domain.test"
com.sap.sailing.domain.test",
com.sap.sailing.shared.server.security
@@ -1,4 +1,4 @@
package com.sap.sailing.server.security;
package com.sap.sailing.shared.server.security;
import com.sap.sse.ServerInfo;
import com.sap.sse.security.BearerTokenOrBasicOrFormAuthenticationFilter;
@@ -1,4 +1,4 @@
package com.sap.sailing.server.security;
package com.sap.sailing.shared.server.security;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
@@ -34,7 +34,8 @@ Require-Bundle: org.eclipse.osgi;bundle-version="3.10.1",
com.sun.xml.bind.jaxb-impl;bundle-version="2.3.0",
com.sap.sse.security,
com.sap.sse.security.common,
com.sap.sailing.server
com.sap.sailing.server,
com.sap.sailing.shared.server
Import-Package: javax.ws.rs;version="1.1.1",
javax.ws.rs.core;version="1.1.1",
javax.xml.bind,
@@ -59,11 +59,11 @@ authc.successUrl = /api/restsecurity/hello
# If no such bearer token is provided, the filter falls back to basic HTTP
# authentication ("Authentication: Basic ...") and then regular form-based
# authentication with POST parameters "username" and "password".
bearerToken = com.sap.sailing.server.security.BearerTokenOrBasicOrFormAuthenticationFilterSAPSailing
bearerToken = com.sap.sailing.shared.server.security.BearerTokenOrBasicOrFormAuthenticationFilterSAPSailing
# The same as bearerToken, but with additional fallback to anonymous authentication.
# In this case sufficient permission checks have to be done on the application side.
bearerTokenOrAnonymous = com.sap.sailing.server.security.BearerTokenOrBasicOrFormOrAnonymousAuthenticationFilterSAPSailing
bearerTokenOrAnonymous = com.sap.sailing.shared.server.security.BearerTokenOrBasicOrFormOrAnonymousAuthenticationFilterSAPSailing
# Specifying filter chains for URL patterns