Axel Uhl
a3c9a66ad2
changed authentication filter for sailing domain;
...
by default, it uses "SAP Sailing Analytics" as the application name; if the system property
com.sap.sailing.server.name is set, its value will be used instead
Change-Id: Iae57b193cfca613dd1aab8df20466ff42472c97e
2016-03-08 22:15:49 +01:00
Axel Uhl
711db6ba9e
re-enable permission-less read access to events
...
Change-Id: Id8c3b2a78c148edb4f7a9e205fe6ade1f3d09dfe
2016-03-02 18:37:43 +01:00
Axel Uhl
4206961087
added PingResource to allow monitoring bundle to access a service that does not require authorization
...
Change-Id: I8dcbba9d3d3169914826caf0a184fe9a864393b7
2016-03-02 16:09:58 +01:00
Axel Uhl
57330bbf16
added event and rc/rclog to shiro.ini
...
Change-Id: If3df396316da7086541029af75423f1ccca68b89
2016-03-02 15:45:04 +01:00
Axel Uhl
524abc1124
secure the RaceLog POST servlet, requiring LEADERBOARD.UPDATE; fixed auth token loading in UserStore;
...
added removeAccessToken with remove_access_token end point on SecurityResource, available for ADMIN role
and owner
2016-03-02 00:09:54 +01:00
Axel Uhl
c356c2f97c
Merge branch 'master' into bug2589
...
Conflicts:
java/com.sap.sailing.domain.common/src/com/sap/sailing/domain/common/security/Permission.java
java/com.sap.sailing.domain.common/src/com/sap/sailing/domain/common/security/SailingPermissionsForRoleProvider.java
Change-Id: I3aaf2651c01460dd2fb0caf95735b9919586a2c9
2016-03-01 16:47:00 +01:00
Axel Uhl
132bde4686
use DeviceMappingConstants for postCheckout endpoint
...
Change-Id: Ia8f1a77877304d32d6336fe9fbf6eb9ee66e62b6
2016-01-15 16:59:40 +01:00
Axel Uhl
57c6e5ac89
LeaderboardsResource.pingMark no longer returns a lastKnownPosition in its response, only an OK
...
Change-Id: Id57cbcbb876bf04707a8cb14046b962d44221485
2016-01-15 16:33:02 +01:00
Axel Uhl
4d0fb5f865
don't create artificial "anti-creep" mark fixes anymore; see bug 3421 and bug 3422 about abandoning interpolation on mark tracks
...
Change-Id: I38cba61bbc004ca028c6d87adc7507ac9c1db4fc
2016-01-15 12:18:48 +01:00
Axel Uhl
4014d8af2a
removing unused RaceLog parameter from RacingEventService.getMarkPosition and updating Javadoc accordingly
...
Change-Id: Idd8355039a22b0e52078db8935fa92d2fb911ed0
2016-01-15 09:35:40 +01:00
Axel Uhl
b45b2ffab0
whtitespace and formatting changes only
...
Change-Id: I8075e648af46f86d826ab5e35d6ff21d914dc74e
2016-01-14 16:54:12 +01:00
Axel Uhl
011bb4ddfc
introduced getAllCompetitors() on HasRegattaLike; all implementations already provide it; using it in LeaderboardsResource instead of only looking at RegattaLog
...
Change-Id: Ibdea059c56a5a528583fd5494afa96d6b1e85a86
2016-01-14 12:07:34 +01:00
Axel Uhl
11da982397
renamed getAllMarks(Fleet) to getMarks(Fleet) because it doesn't deliver *all* marks defined on the column's regatta but only those used in races
...
Change-Id: Ieb2f9697f0a5349797b8c3419a00ea73ec91200e
2016-01-13 14:43:41 +01:00
Axel Uhl
5650c97a51
consolidated imports to remove warnings
...
Change-Id: Ibba9a42165dc0baaf6fb76986ad0c0de6c4a6587
2016-01-13 09:47:09 +01:00
Axel Uhl
e6fef6c04f
Merge branch 'master' into bug2851
...
Conflicts:
java/com.sap.sailing.domain/src/com/sap/sailing/domain/leaderboard/impl/FlexibleLeaderboardImpl.java
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/SailingService.java
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/SailingServiceAsync.java
Change-Id: Ifd8c60c6f7d2d2274a68681607a1b5df7b4040b7
2016-01-13 09:39:02 +01:00
Axel Uhl
432c979135
Merge branch 'master' into bug2589
...
Conflicts:
java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/EventsResource.java
Change-Id: I63f05a28bdf63a0c6b7731e03c36b28b61e4638e
2016-01-12 14:28:13 +01:00
Axel Uhl
f12f3d5f82
also using StringEscapeUtils.escapeHtml to escape competitor ID in exception/error message to avoid XSS attack
...
Change-Id: I9c70c02682dcac23238251faa13e0e4a2cc83ea5
2016-01-11 21:38:25 +01:00
Axel Uhl
bfd33b20cd
use parseStrict instead of parseLenient in URLFieldWithFileUpload; fixed <pre> wrapping by setting content type to text/html instead of application/json
...
Change-Id: I37852c582333b787e3a9ff8dfeef59e5703c1442
2016-01-08 11:23:32 +01:00
Axel Uhl
44362206c9
audited and fixed reflective XSS vulnerabilities, mostly using StringEscapeUtils
...
Change-Id: If01b16aed1496818524b7b57528337f9c2bcbaa0
2016-01-08 09:48:37 +01:00
Axel Uhl
45c8576d02
Using Apache StringEscapeUtils.escapeHtml to make the reflection of URL parameter HTML safe
...
Change-Id: Ib77b0f83c4f935b9d90181434031fa74f2699248
2016-01-07 17:32:26 +01:00
Axel Uhl
cb233be2eb
using StringEscapeUtils.escapeHtml to escape XSS vulnerabilities
...
Change-Id: I2a10fb6d3c2bf5d0788ac2d69530caec17809f05
2016-01-07 17:27:11 +01:00
Axel Uhl
6169f54e25
Merge branch 'master' into bug2589
...
Conflicts:
java/com.sap.sailing.domain.igtimiadapter/META-INF/MANIFEST.MF
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/SailingServiceImpl.java
java/com.sap.sailing.server.gateway/META-INF/MANIFEST.MF
java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/RestServletContainer.java
java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/RestApiApplication.java
Change-Id: I8cbb797ba64d221ea401b90b22d21a813204a6f2
2016-01-04 11:34:01 +01:00
fmittag
b0e65b1167
- removed documentation of old Webservice API
2015-12-21 17:47:05 +01:00
fmittag
2b68f307cd
removed unused get servlet
2015-12-21 17:38:40 +01:00
fmittag
2e66393f97
removed old 'moderator' api
2015-12-21 17:36:16 +01:00
fmittag
c249d9dc25
removed old AdminApp
2015-12-21 17:28:53 +01:00
fmittag
360e546e34
removed WindJsonGetServlet class, a test using it and the corresponding entry in the web.xml
2015-12-21 17:25:20 +01:00
fmittag
9d4b4bc717
- removed JsonGetServlet classes of old Webservice API
...
- removed Servlets from web.xml
- adapted test classes
2015-12-21 15:44:26 +01:00
Jan Broß
a4f51cb883
Add logic to servlet to access GPSFixStore
2015-12-11 18:00:15 +01:00
Axel Uhl
e50e8480cf
fix for bug 3409: don't do a blocking wait for TrackedRace while responding to a REST request but return null instead
...
Change-Id: I470e68a557300ab14e82a7e7749fb9e9430fa381
2015-12-11 08:08:34 +01:00
Jan Broß
2a9c674172
Refactorings as Mapping Events are from now on only present on RegattaLog
2015-12-10 19:00:36 +01:00
Jan Broß
b8dcab588b
User getAllMarks on RaceColumn instead of analyzers
2015-12-07 14:31:44 +01:00
Jan Broß
0378664357
Removes RaceLogDefineMarkEvent
2015-12-07 14:18:31 +01:00
Jan Broß
dfd6ed63b0
Make mark accessible to RaceLogDefineMarkEvent for recently introduced getShortInfo method
2015-11-29 09:22:17 +01:00
Jan Broß
8b9e31d2a5
Don't register competitor when creating mapping and competitor is not registered
2015-11-29 09:15:42 +01:00
Jan Broß
233b2b909f
Refrain from using CompetitorsInLogAnalyer and RaceLogUsesOwnCompetitorsAnalyzer
2015-11-28 13:45:19 +01:00
Jan Broß
70609813f0
Service for getting marks now returns marks defined on Regatta
2015-11-27 14:38:40 +01:00
Jan Broß
45ebf28856
Refactor RaceLogDefinedMarkFinder
2015-11-23 14:01:36 +01:00
Jan Broß
07d999cc9e
Merge master into bug2851
2015-11-18 18:20:10 +01:00
Lennart Hensler
5e1ba04424
Fixed the result units of the Datamining REST API
2015-11-15 15:52:47 +01:00
Lennart Hensler
553a44f8da
Improved the metadata and format of the Datamining REST API
2015-11-15 14:29:15 +01:00
Lennart Hensler
bd2d67f346
Merge remote-tracking branch 'origin/master' into dataMining
2015-11-15 11:43:12 +01:00
Axel Uhl
0bfe653d7a
formatting, coding conventions
2015-11-12 10:58:47 +01:00
Axel Uhl
3618e57763
fixing bug 3350 by using now-liveDelay as the new time point for {regattaname}/races/{racename}/competitors/live
2015-11-09 18:09:16 +01:00
Lennart Hensler
490f2443e1
Merge remote-tracking branch 'origin/master' into dataMining
2015-11-07 13:14:41 +01:00
Jan Broß
f36c072247
Merge branch master in bug2851
2015-11-04 13:36:29 +01:00
Fredrik Teschke
817bb285c7
more housekeeping on RaceLog*Events
2015-11-02 23:09:42 +01:00
Fredrik Teschke
f8fbbb35dc
remove RaceLogEvent[Restore]Factory and RaceLogEvent* housekeeping
...
- the factories were not used for any factory purposes, and only resulted in maintenance effort
- unified order of constructor parameters for LogEvent-classes
- standard values for an event-id and createdAt-timestamp are now set once in base classes, instead
of all over the place
2015-11-02 22:06:42 +01:00
Jan Broß
d32839fcab
Implements competitor regsitration behavior described in bug2851
2015-10-31 15:32:12 +01:00
Lennart Hensler
1b57037e50
Merge remote-tracking branch 'origin/master' into dataMining
2015-10-31 00:49:59 +01:00