Axel Uhl
c22f5179fa
bug6154: record failed access token authentication only if replication isn't currently starting
2025-07-30 17:45:58 +02:00
Axel Uhl
6d3e7564cf
formatting/comment changes only
2025-07-30 16:11:14 +02:00
Axel Uhl
21d7784836
improved logging for password reset/change
2025-07-17 15:33:45 +02:00
Axel Uhl
e752ad1fde
bug6151: show fewer details about locking/banning to user banned from signing up
2025-07-11 15:25:17 +02:00
service-tip-git
25593e103e
[INTERNAL] Translation delivery: commit by LX Lab
...
Change-Id: I367a86f32d357508f6d34a68edd8652b03dea17f
2025-07-03 15:07:53 +00:00
Axel Uhl
64b8117941
Merge branch 'main' into bug6105
2025-06-18 01:15:49 +02:00
Axel Uhl
d3f117ed8d
don't use localhost URLs in API docs
2025-06-17 17:38:12 +02:00
Axel Uhl
1a7364ac70
Merge branch 'main' into bug6105
2025-05-18 22:31:36 +02:00
Axel Uhl
5c639cdfcb
bug6123: implemented e-mail notification for RabbitMQ ShutdownSignalException to users with SERVER:UPDATE permission
2025-05-16 11:42:36 +02:00
Axel Uhl
1c3aa25e4e
removed obsolete TODO
2025-05-15 10:08:22 +02:00
Axel Uhl
39709eb56f
keep LockingAndBanning objects for failed bearer token authentications around for at least an hour
2025-05-15 10:06:00 +02:00
Axel Uhl
2920ba7563
Merge branch 'main' into bug6105
2025-05-14 21:03:32 +02:00
Axel Uhl
e4e3cbe7e7
log getUsersWithPermission(...) timining only as fine, not info
2025-05-14 20:39:25 +02:00
Axel Uhl
2cd0bb2fec
improved logging for locking/banning of user accounts and client IPs
2025-05-14 11:06:57 +02:00
Axel Uhl
84e8802561
bug6105: implemented takedown button for competitors in auto-play;
...
not tested yet...
2025-05-09 11:40:31 +02:00
Axel Uhl
3bb6d6c8b7
bug6105: showing take-down request button also for in-race YouTube video
2025-05-07 18:40:52 +02:00
Axel Uhl
fd5c9a45f1
bug6105: media menu icon added also for mobile/phone views
2025-05-07 16:13:35 +02:00
Axel Uhl
20d22d6f7f
bug6105: added MediaMenuIcon to event teaser images
2025-05-07 15:25:03 +02:00
Axel Uhl
c83eb3cbce
bug6105: added three-dots menu for take-down notice for media gallery images
2025-05-06 01:46:36 +02:00
Axel Uhl
3dc6b0afa0
bug6105: added takedown button to media gallery video list
2025-05-06 01:15:00 +02:00
Axel Uhl
edbcffaa57
bug6105: added MediaMenuIcon to event/series logos for phone/desktop
2025-05-05 17:10:21 +02:00
Axel Uhl
3f62b48345
bug6105: define MediaMenuIcon as a widget using UIBinder
2025-05-05 15:31:44 +02:00
Axel Uhl
5926962e5d
bug6105: implemented take-down request button for Event stage image
2025-05-05 14:28:32 +02:00
Axel Uhl
96061d31f0
Merge branch 'main' into bug6105
2025-05-05 11:08:25 +02:00
Axel Uhl
69752461a6
bug6119: replicate only true changes
2025-05-01 02:02:20 +02:00
Axel Uhl
34914f9d2d
bug6105: added the URL location to the context message
2025-04-29 18:25:09 +02:00
Axel Uhl
139fdd05e5
bug6105: showing takedown notice dialog, sending e-mail
2025-04-29 18:18:09 +02:00
Axel Uhl
178b6bf241
bug6104: made passwords for Selenium tests more complex; added quertz-keyboard.txt to bundle's build.properties
2025-03-25 13:45:22 +01:00
Axel Uhl
611372e0de
bug6104: fixed qwertz-keyboard.txt
2025-03-25 10:08:42 +01:00
Axel Uhl
acc3425c65
bug6104: added German keyboard definition for password complexity analysis
2025-03-24 23:06:27 +01:00
Axel Uhl
5910783be3
bug6104: tests can be exempted from strong password requirements
2025-03-24 21:57:45 +01:00
Axel Uhl
a65539d2e5
bug6104: added password complexity check based on zxcvbn, requiring 10^8 guesses
2025-03-24 18:33:56 +01:00
Axel Uhl
18fadf8d10
bug6104: added zxcvbn to launch configs and Selenium pom
2025-03-24 18:25:05 +01:00
Axel Uhl
5ac6cba18a
bug6104: adding zxcvbn-1.9.0 to target platform
2025-03-24 17:19:28 +01:00
Axel Uhl
f6a3bd16b0
bug6097: in SecurityApi wait sufficiently between user creations
2025-03-19 21:15:30 +01:00
Axel Uhl
fd974a09dd
bu6097: added the clearing of the clientIP...Locking maps in SecurityService in clearState()
2025-03-19 20:22:40 +01:00
Axel Uhl
d0987a3976
bug6097: make use of backward compatibility for client IP based locking tables
2025-03-19 14:37:58 +01:00
Axel Uhl
b97ace3db0
bug6097: apply same mechanism for user creation per IP locking as for failed bearer token-based authentication
2025-03-19 14:17:35 +01:00
Axel Uhl
bdc70a7161
bug6099: return LockingAndBanning from faiure methods to improve logging
2025-03-19 10:32:30 +01:00
Axel Uhl
dea4adff6b
bug6099: made SecurityService robust against null values for clientIP
2025-03-18 22:28:45 +01:00
Axel Uhl
c754223f02
bug6099: use only client IP for bearer token-based authentication blocking;
...
client IP is determined from *last* element of X-Forwarded-For which the
AWS ALB will append by default, defaulting to the HttpServletRequest's
getRemoteAddr().
2025-03-18 18:23:52 +01:00
Axel Uhl
c1211cb3d8
bug6099: only update user record in DB if locking record changed
2025-03-18 15:58:08 +01:00
Axel Uhl
fc87c080a1
bug6099: completed an implementation for bearer token authentication request throttling
2025-03-18 15:36:46 +01:00
Axel Uhl
122747b803
bug6099: added TODO regarding bearer token failure throttling
2025-03-17 21:47:55 +01:00
Axel Uhl
eb1b88f4f5
bug6099: added writing persistence and replication for LockingAndBanning
2025-03-17 17:45:11 +01:00
Axel Uhl
2416b49f89
bug6099: interims commit with a first implementation of a user account locking/banning mechanism;
...
yet missing is writing to persistence and replication
2025-03-17 16:30:57 +01:00
Axel Uhl
2ffbde8c57
bug6101: introduced SecuritySerciveInitialLoadExtensionsDTO
2025-03-17 14:00:43 +01:00
Axel Uhl
93b5af3e57
bug6101: use CORS filter origins also for Content-Security-Policy (CSP) frame-ancestors
2025-03-13 16:32:25 +01:00
Axel Uhl
62139edbce
bug6101: consolidate CORS filters and factor out common CORS header handling;
...
use CORSHeader instead of response filter in com.sap.sailing.server.gateway
consistently across Jersey and non-Jersey servlets provided by the bundle;
as drive-by improvement, fix the sap.ico/sap-whitelabeled.ico paths in the page
header of /index.html and provide an empty sap-whitelabeled.ico file.
2025-03-13 01:20:50 +01:00
Axel Uhl
bb16dc2368
bug6101: added CORS filter config UI in "Local Server" admin console panel
2025-03-12 17:42:02 +01:00
Axel Uhl
service-tip-git