Steffen Schaefer
b9a2e73899
Merge branch 'master' into permission-vertical
...
Conflicts:
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/SailingServiceImpl.java
java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/MongoObjectFactoryImpl.java
2019-02-07 07:52:55 +01:00
Axel Uhl
b7e3d0f472
introduced NoSessionStorageSessionDAO for all REST bundles' shiro.ini;
...
this solves the problem of a new session being created and stored each
time a Bearer token-authenticated request is fired. REST requests are
expected not to produce nor maintain session state.
Change-Id: Ie662718610ed6bc229c07709491e0b2cc3ee051c
2019-02-06 15:31:44 +01:00
Steffen Schaefer
0a03e2718a
Merge branch 'master' into permission-vertical
...
Conflicts:
java/com.sap.sse.security/META-INF/MANIFEST.MF
java/com.sap.sse.security/src/com/sap/sse/security/impl/ReplicableSecurityService.java
java/com.sap.sse.security/src/com/sap/sse/security/impl/SecurityServiceImpl.java
java/com.sap.sse/src/com/sap/sse/util/HttpUrlConnectionHelper.java
2019-01-17 14:13:21 +01:00
Axel Uhl
6ce072ee3f
raised session timeout from 24h to 1y consistently in all shiro.ini files
...
Change-Id: Ic6fe7773c8796ad5606c528937cde1b61c4f8fe8
2019-01-15 18:31:57 +01:00
Steffen Schäfer
9b98004503
Allowing anonymous permissions
2018-10-12 14:09:39 +02:00
Jonas Dann
4894ba6a55
Fixed shiro configs
2017-11-24 13:24:23 +01:00
Axel Uhl
6959b0db07
added comment for /login URL configuration
...
Change-Id: I2d7fb5eb717dd30b04ea546d2f54ab5adf5e8916
2017-08-02 15:36:28 +02:00
Axel Uhl
e2c9bcd9cf
re-added the phony /api/restsecurity/login URL into shiro.ini
...
Change-Id: Ic2f10e2cedb374b3f918571b157aa4bbdeceb17f
2017-08-02 15:35:41 +02:00
Axel Uhl
f8666a806d
bug 4254: provide user creation, deletion, edit and password recovery REST support
...
Change-Id: I6e71971b21d01de642afae2632a2eb415b24d85f
2017-07-31 18:24:49 +02:00
Axel Uhl
913fbe5d76
increased Shiro session manager timeout from 30min to 24h
...
Change-Id: I8bdcbc5b3c2658858643b3a4f04dfa83a571659a
2016-04-20 18:00:19 +02:00
Axel Uhl
524abc1124
secure the RaceLog POST servlet, requiring LEADERBOARD.UPDATE; fixed auth token loading in UserStore;
...
added removeAccessToken with remove_access_token end point on SecurityResource, available for ADMIN role
and owner
2016-03-02 00:09:54 +01:00
Axel Uhl
6bd56de7f1
cleaned up shiro.ini stuff further, added more comments
2015-02-26 13:48:51 +01:00
Axel Uhl
1cc22d3858
added anyofroles filter declaration to default shiro.ini
2015-02-26 12:42:47 +01:00
Axel Uhl
bd327fe876
added comments and cleaned up structure in com.sap.sse.security/resources/shiro.ini to make it a good copy template, too
2015-02-26 12:35:59 +01:00
Axel Uhl
c196f48ad1
prepared the com.sap.sailing.server.gateway bundle for REST security, showing a commented example in shiro.ini for the /events service end point
2015-02-25 18:26:27 +01:00
Axel Uhl
6c5b4e9027
added documentation for the security REST API
2015-02-25 17:22:23 +01:00
Axel Uhl
6076f03c60
enhanced logon procedures and fixed test cases
2015-02-25 00:53:43 +01:00
Axel Uhl
cf010e8c02
provide and use a BearerTokenAuthenticationFilter which defaults to HTTP basic authentication; renamed AccessTokenRealm to BearerTokenRealm
2015-02-24 21:58:02 +01:00
Axel Uhl
d041cece0c
implemented AccessTokenRealm and added a first simple test case
2015-02-13 14:22:33 +01:00
Axel Uhl
772d5477bc
added com.sap.sse.security.common which bundles security-related stuff that is shared by Java7 GWT projects as well as Java8 backend projects
2014-11-21 17:59:00 +01:00
Axel Uhl
16cfc34404
package refactoring in com.sap.sse.security to put only GWT-compilable stuff into the GWT module exported by the bundle
2014-10-17 09:16:55 +02:00
Axel Uhl
10d4a3a343
added "hello" test reestlet that requires authentication; added logout restlet
2014-10-16 11:02:46 +02:00
Axel Uhl
afb57bd7b3
fixed SecurityServiceImpl constructor, not expecting the [urls] section to be present
2014-10-14 15:16:01 +02:00
Axel Uhl
bd7c8cb1db
moved shiro.ini to resources/ source folder so that JUnit tests can find and load it
2014-10-04 11:22:53 +02:00
Steffen Schaefer
Axel Uhl
Jonas Dann