Commit Graph
1032 Commits
Author SHA1 Message Date
Axel Uhl a3c9a66ad2 changed authentication filter for sailing domain;
by default, it uses "SAP Sailing Analytics" as the application name; if the system property
com.sap.sailing.server.name is set, its value will be used instead

Change-Id: Iae57b193cfca613dd1aab8df20466ff42472c97e
2016-03-08 22:15:49 +01:00
Axel Uhl 711db6ba9e re-enable permission-less read access to events
Change-Id: Id8c3b2a78c148edb4f7a9e205fe6ade1f3d09dfe
2016-03-02 18:37:43 +01:00
Axel Uhl 4206961087 added PingResource to allow monitoring bundle to access a service that does not require authorization
Change-Id: I8dcbba9d3d3169914826caf0a184fe9a864393b7
2016-03-02 16:09:58 +01:00
Axel Uhl 57330bbf16 added event and rc/rclog to shiro.ini
Change-Id: If3df396316da7086541029af75423f1ccca68b89
2016-03-02 15:45:04 +01:00
Axel Uhl 524abc1124 secure the RaceLog POST servlet, requiring LEADERBOARD.UPDATE; fixed auth token loading in UserStore;
added removeAccessToken with remove_access_token end point on SecurityResource, available for ADMIN role
and owner
2016-03-02 00:09:54 +01:00
Axel Uhl c356c2f97c Merge branch 'master' into bug2589
Conflicts:
	java/com.sap.sailing.domain.common/src/com/sap/sailing/domain/common/security/Permission.java
	java/com.sap.sailing.domain.common/src/com/sap/sailing/domain/common/security/SailingPermissionsForRoleProvider.java

Change-Id: I3aaf2651c01460dd2fb0caf95735b9919586a2c9
2016-03-01 16:47:00 +01:00
Axel Uhl 132bde4686 use DeviceMappingConstants for postCheckout endpoint
Change-Id: Ia8f1a77877304d32d6336fe9fbf6eb9ee66e62b6
2016-01-15 16:59:40 +01:00
Axel Uhl 57c6e5ac89 LeaderboardsResource.pingMark no longer returns a lastKnownPosition in its response, only an OK
Change-Id: Id57cbcbb876bf04707a8cb14046b962d44221485
2016-01-15 16:33:02 +01:00
Axel Uhl 4d0fb5f865 don't create artificial "anti-creep" mark fixes anymore; see bug 3421 and bug 3422 about abandoning interpolation on mark tracks
Change-Id: I38cba61bbc004ca028c6d87adc7507ac9c1db4fc
2016-01-15 12:18:48 +01:00
Axel Uhl 4014d8af2a removing unused RaceLog parameter from RacingEventService.getMarkPosition and updating Javadoc accordingly
Change-Id: Idd8355039a22b0e52078db8935fa92d2fb911ed0
2016-01-15 09:35:40 +01:00
Axel Uhl b45b2ffab0 whtitespace and formatting changes only
Change-Id: I8075e648af46f86d826ab5e35d6ff21d914dc74e
2016-01-14 16:54:12 +01:00
Axel Uhl 011bb4ddfc introduced getAllCompetitors() on HasRegattaLike; all implementations already provide it; using it in LeaderboardsResource instead of only looking at RegattaLog
Change-Id: Ibdea059c56a5a528583fd5494afa96d6b1e85a86
2016-01-14 12:07:34 +01:00
Axel Uhl 11da982397 renamed getAllMarks(Fleet) to getMarks(Fleet) because it doesn't deliver *all* marks defined on the column's regatta but only those used in races
Change-Id: Ieb2f9697f0a5349797b8c3419a00ea73ec91200e
2016-01-13 14:43:41 +01:00
Axel Uhl 5650c97a51 consolidated imports to remove warnings
Change-Id: Ibba9a42165dc0baaf6fb76986ad0c0de6c4a6587
2016-01-13 09:47:09 +01:00
Axel Uhl e6fef6c04f Merge branch 'master' into bug2851
Conflicts:
	java/com.sap.sailing.domain/src/com/sap/sailing/domain/leaderboard/impl/FlexibleLeaderboardImpl.java
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/SailingService.java
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/SailingServiceAsync.java

Change-Id: Ifd8c60c6f7d2d2274a68681607a1b5df7b4040b7
2016-01-13 09:39:02 +01:00
Axel Uhl 432c979135 Merge branch 'master' into bug2589
Conflicts:
	java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/EventsResource.java

Change-Id: I63f05a28bdf63a0c6b7731e03c36b28b61e4638e
2016-01-12 14:28:13 +01:00
Axel Uhl f12f3d5f82 also using StringEscapeUtils.escapeHtml to escape competitor ID in exception/error message to avoid XSS attack
Change-Id: I9c70c02682dcac23238251faa13e0e4a2cc83ea5
2016-01-11 21:38:25 +01:00
Axel Uhl bfd33b20cd use parseStrict instead of parseLenient in URLFieldWithFileUpload; fixed <pre> wrapping by setting content type to text/html instead of application/json
Change-Id: I37852c582333b787e3a9ff8dfeef59e5703c1442
2016-01-08 11:23:32 +01:00
Axel Uhl 44362206c9 audited and fixed reflective XSS vulnerabilities, mostly using StringEscapeUtils
Change-Id: If01b16aed1496818524b7b57528337f9c2bcbaa0
2016-01-08 09:48:37 +01:00
Axel Uhl 45c8576d02 Using Apache StringEscapeUtils.escapeHtml to make the reflection of URL parameter HTML safe
Change-Id: Ib77b0f83c4f935b9d90181434031fa74f2699248
2016-01-07 17:32:26 +01:00
Axel Uhl cb233be2eb using StringEscapeUtils.escapeHtml to escape XSS vulnerabilities
Change-Id: I2a10fb6d3c2bf5d0788ac2d69530caec17809f05
2016-01-07 17:27:11 +01:00
Axel Uhl 6169f54e25 Merge branch 'master' into bug2589
Conflicts:
	java/com.sap.sailing.domain.igtimiadapter/META-INF/MANIFEST.MF
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/SailingServiceImpl.java
	java/com.sap.sailing.server.gateway/META-INF/MANIFEST.MF
	java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/RestServletContainer.java
	java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/RestApiApplication.java

Change-Id: I8cbb797ba64d221ea401b90b22d21a813204a6f2
2016-01-04 11:34:01 +01:00
fmittag b0e65b1167 - removed documentation of old Webservice API 2015-12-21 17:47:05 +01:00
fmittag 2b68f307cd removed unused get servlet 2015-12-21 17:38:40 +01:00
fmittag 2e66393f97 removed old 'moderator' api 2015-12-21 17:36:16 +01:00
fmittag c249d9dc25 removed old AdminApp 2015-12-21 17:28:53 +01:00
fmittag 360e546e34 removed WindJsonGetServlet class, a test using it and the corresponding entry in the web.xml 2015-12-21 17:25:20 +01:00
fmittag 9d4b4bc717 - removed JsonGetServlet classes of old Webservice API
- removed Servlets from web.xml
- adapted test classes
2015-12-21 15:44:26 +01:00
Jan Broß a4f51cb883 Add logic to servlet to access GPSFixStore 2015-12-11 18:00:15 +01:00
Axel Uhl e50e8480cf fix for bug 3409: don't do a blocking wait for TrackedRace while responding to a REST request but return null instead
Change-Id: I470e68a557300ab14e82a7e7749fb9e9430fa381
2015-12-11 08:08:34 +01:00
Jan Broß 2a9c674172 Refactorings as Mapping Events are from now on only present on RegattaLog 2015-12-10 19:00:36 +01:00
Jan Broß b8dcab588b User getAllMarks on RaceColumn instead of analyzers 2015-12-07 14:31:44 +01:00
Jan Broß 0378664357 Removes RaceLogDefineMarkEvent 2015-12-07 14:18:31 +01:00
Jan Broß dfd6ed63b0 Make mark accessible to RaceLogDefineMarkEvent for recently introduced getShortInfo method 2015-11-29 09:22:17 +01:00
Jan Broß 8b9e31d2a5 Don't register competitor when creating mapping and competitor is not registered 2015-11-29 09:15:42 +01:00
Jan Broß 233b2b909f Refrain from using CompetitorsInLogAnalyer and RaceLogUsesOwnCompetitorsAnalyzer 2015-11-28 13:45:19 +01:00
Jan Broß 70609813f0 Service for getting marks now returns marks defined on Regatta 2015-11-27 14:38:40 +01:00
Jan Broß 45ebf28856 Refactor RaceLogDefinedMarkFinder 2015-11-23 14:01:36 +01:00
Jan Broß 07d999cc9e Merge master into bug2851 2015-11-18 18:20:10 +01:00
Lennart Hensler 5e1ba04424 Fixed the result units of the Datamining REST API 2015-11-15 15:52:47 +01:00
Lennart Hensler 553a44f8da Improved the metadata and format of the Datamining REST API 2015-11-15 14:29:15 +01:00
Lennart Hensler bd2d67f346 Merge remote-tracking branch 'origin/master' into dataMining 2015-11-15 11:43:12 +01:00
Axel Uhl 0bfe653d7a formatting, coding conventions 2015-11-12 10:58:47 +01:00
Axel Uhl 3618e57763 fixing bug 3350 by using now-liveDelay as the new time point for {regattaname}/races/{racename}/competitors/live 2015-11-09 18:09:16 +01:00
Lennart Hensler 490f2443e1 Merge remote-tracking branch 'origin/master' into dataMining 2015-11-07 13:14:41 +01:00
Jan Broß f36c072247 Merge branch master in bug2851 2015-11-04 13:36:29 +01:00
Fredrik Teschke 817bb285c7 more housekeeping on RaceLog*Events 2015-11-02 23:09:42 +01:00
Fredrik Teschke f8fbbb35dc remove RaceLogEvent[Restore]Factory and RaceLogEvent* housekeeping
- the factories were not used for any factory purposes, and only resulted in maintenance effort
- unified order of constructor parameters for LogEvent-classes
- standard values for an event-id and createdAt-timestamp are now set once in base classes, instead
  of all over the place
2015-11-02 22:06:42 +01:00
Jan Broß d32839fcab Implements competitor regsitration behavior described in bug2851 2015-10-31 15:32:12 +01:00
Lennart Hensler 1b57037e50 Merge remote-tracking branch 'origin/master' into dataMining 2015-10-31 00:49:59 +01:00