Commit Graph
15 Commits
Author SHA1 Message Date
Axel Uhl 913fbe5d76 increased Shiro session manager timeout from 30min to 24h
Change-Id: I8bdcbc5b3c2658858643b3a4f04dfa83a571659a
2016-04-20 18:00:19 +02:00
Axel Uhl 524abc1124 secure the RaceLog POST servlet, requiring LEADERBOARD.UPDATE; fixed auth token loading in UserStore;
added removeAccessToken with remove_access_token end point on SecurityResource, available for ADMIN role
and owner
2016-03-02 00:09:54 +01:00
Axel Uhl 6bd56de7f1 cleaned up shiro.ini stuff further, added more comments 2015-02-26 13:48:51 +01:00
Axel Uhl 1cc22d3858 added anyofroles filter declaration to default shiro.ini 2015-02-26 12:42:47 +01:00
Axel Uhl bd327fe876 added comments and cleaned up structure in com.sap.sse.security/resources/shiro.ini to make it a good copy template, too 2015-02-26 12:35:59 +01:00
Axel Uhl c196f48ad1 prepared the com.sap.sailing.server.gateway bundle for REST security, showing a commented example in shiro.ini for the /events service end point 2015-02-25 18:26:27 +01:00
Axel Uhl 6c5b4e9027 added documentation for the security REST API 2015-02-25 17:22:23 +01:00
Axel Uhl 6076f03c60 enhanced logon procedures and fixed test cases 2015-02-25 00:53:43 +01:00
Axel Uhl cf010e8c02 provide and use a BearerTokenAuthenticationFilter which defaults to HTTP basic authentication; renamed AccessTokenRealm to BearerTokenRealm 2015-02-24 21:58:02 +01:00
Axel Uhl d041cece0c implemented AccessTokenRealm and added a first simple test case 2015-02-13 14:22:33 +01:00
Axel Uhl 772d5477bc added com.sap.sse.security.common which bundles security-related stuff that is shared by Java7 GWT projects as well as Java8 backend projects 2014-11-21 17:59:00 +01:00
Axel Uhl 16cfc34404 package refactoring in com.sap.sse.security to put only GWT-compilable stuff into the GWT module exported by the bundle 2014-10-17 09:16:55 +02:00
Axel Uhl 10d4a3a343 added "hello" test reestlet that requires authentication; added logout restlet 2014-10-16 11:02:46 +02:00
Axel Uhl afb57bd7b3 fixed SecurityServiceImpl constructor, not expecting the [urls] section to be present 2014-10-14 15:16:01 +02:00
Axel Uhl bd7c8cb1db moved shiro.ini to resources/ source folder so that JUnit tests can find and load it 2014-10-04 11:22:53 +02:00