Axel Uhl
ef9097dd5e
bug5513 aftermath: fixing class of invalidRequest filter in all shiro.ini files
2021-04-16 12:01:50 +02:00
Axel Uhl
37fb3dc0a5
bug5513: added configuration of Shiro invalidRequest filter for backward compatibility to all shiro.ini files;
...
re-enabling backslash, semicolon and non-ASCII characters (important, e.g., for Umlaut characters)
in URL paths again
2021-04-16 11:37:44 +02:00
Axel Uhl
ae75a94737
bug5513: added the now necessary authc = com.sap.sse.security.CustomFilter to all shiro.ini files, as already documented in Wiki
2021-04-13 09:39:49 +02:00
Axel Uhl
d6781a9169
secured ThreadManager actions with new SERVER:THREADS permission
2021-04-07 12:16:23 +02:00
Steffen Schaefer
b9a2e73899
Merge branch 'master' into permission-vertical
...
Conflicts:
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/SailingServiceImpl.java
java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/MongoObjectFactoryImpl.java
2019-02-07 07:52:55 +01:00
Axel Uhl
b7e3d0f472
introduced NoSessionStorageSessionDAO for all REST bundles' shiro.ini;
...
this solves the problem of a new session being created and stored each
time a Bearer token-authenticated request is fired. REST requests are
expected not to produce nor maintain session state.
Change-Id: Ie662718610ed6bc229c07709491e0b2cc3ee051c
2019-02-06 15:31:44 +01:00
Steffen Schaefer
0a03e2718a
Merge branch 'master' into permission-vertical
...
Conflicts:
java/com.sap.sse.security/META-INF/MANIFEST.MF
java/com.sap.sse.security/src/com/sap/sse/security/impl/ReplicableSecurityService.java
java/com.sap.sse.security/src/com/sap/sse/security/impl/SecurityServiceImpl.java
java/com.sap.sse/src/com/sap/sse/util/HttpUrlConnectionHelper.java
2019-01-17 14:13:21 +01:00
Axel Uhl
6ce072ee3f
raised session timeout from 24h to 1y consistently in all shiro.ini files
...
Change-Id: Ic6fe7773c8796ad5606c528937cde1b61c4f8fe8
2019-01-15 18:31:57 +01:00
Axel Uhl
5bebb7af48
Added missing web subject factory configuration to the other shiro.ini configs
...
Change-Id: I874a50d4e175729d652f2a237ea249045685977f
2019-01-07 18:10:08 +01:00
Jonas Dann
4894ba6a55
Fixed shiro configs
2017-11-24 13:24:23 +01:00
Axel Uhl
913fbe5d76
increased Shiro session manager timeout from 30min to 24h
...
Change-Id: I8bdcbc5b3c2658858643b3a4f04dfa83a571659a
2016-04-20 18:00:19 +02:00
Axel Uhl
a0500581f6
added a bundle com.sap.sse.threadmanager which provides a servlet for listing, suspending and resuming threads
2015-03-19 08:40:04 +01:00
Axel Uhl
Steffen Schaefer
Jonas Dann