Axel Uhl
81e28d7a70
copied Eclipse plugin installation file for new 2025-03 version
2025-04-14 14:51:51 +02:00
Axel Uhl
e6bdc19ed9
Merge remote-tracking branch 'github/main' into main
2025-04-14 14:47:55 +02:00
Axel Uhl
5f18f7d925
help Eclipse 2025-03 to still compile our code with Java 8;
...
there seem to be some issues with inferring generic type arguments in
Eclipse 2025-03, as compared to 2024-09. Minor changes regarding
explicit mention of type parameters seem to help avoid these errors.
2025-04-14 14:46:27 +02:00
Axel Uhl
5c00104223
use per-process logrotation for mongod on central instance
2025-04-13 22:56:25 +02:00
Axel Uhl
acc1e59219
use only the mongo .log files for rotation and let logrotate do the compression properly
2025-04-13 22:49:16 +02:00
Axel Uhl
f43b8efb6d
updated mongod logging options (reopen, logappend)
2025-04-13 22:44:55 +02:00
Axel Uhl
f36893753f
fixed central MongoDB server's logrotation
2025-04-13 22:20:56 +02:00
Axel Uhl
735a54d511
fixed Wendtdorf[er Strand] test issue by allowing for both variants
2025-04-08 15:45:37 +02:00
Axel Uhl
9be776a5dc
Wendtdorfer Strand agan became Wendtdorf...
2025-04-04 10:34:51 +02:00
Axel Uhl
7a75f1d14c
Geonames changed from Wendtdorf to Wendtdorfer Strand; adjusted test
2025-04-04 00:31:58 +02:00
Axel Uhl
188e5481c0
migrating to TracAPI-4.0.3: param files can now be UTF-8 encoded
2025-04-03 11:13:51 +02:00
Axel Uhl
e6693df7b9
added Wiki documentation about the malware scanning configuration with GuardDuty
2025-04-02 17:06:43 +02:00
Axel Uhl
71b0528a14
reduced maximum file upload size from 8GB to 5GB to allow for GuardDuty malware scans
2025-04-02 16:00:49 +02:00
Axel Uhl
1cff1f3c53
bug6107: introducing geonames.org.usernames system property for user name secret
2025-03-31 15:03:02 +02:00
Axel Uhl
f166ba9dfe
re-added "Jobs" to footer section because we have two working student jobs now online through jobs.sapsailing.com
2025-03-28 11:45:12 +01:00
Axel Uhl
967099d78b
Merge remote-tracking branch 'github/main' into main
2025-03-28 10:41:19 +01:00
Axel Uhl
60ee89ae8e
bug6106: added missing startTack property to .../startanalysis REST API method
2025-03-28 10:39:14 +01:00
Axel Uhl
e0da7d340c
recording last user creation time stamp *after* having made the request
2025-03-27 16:49:48 +01:00
Axel Uhl
e7eafb653c
include launch time point in reverse proxies table in landscape management panel
2025-03-27 10:04:49 +01:00
Axel Uhl
1271ea17f0
another update to the legal text for media upload
2025-03-26 16:53:05 +01:00
Axel Uhl
d54c0bf9ed
improved disclaimer text in media upload form
2025-03-26 13:39:42 +01:00
Axel Uhl
5e814f5a19
bug6104: trying with file.encoding=UTF-8
2025-03-25 21:13:55 +01:00
Axel Uhl
ceee19a84b
bug6104: added logging for GermanKeyboardTest to understand what's going wrong
2025-03-25 19:37:01 +01:00
Axel Uhl
9b9f7c72d6
bug6104: fixed feature definition for zxcvbn bundle
2025-03-25 17:45:35 +01:00
Axel Uhl
8b83eca521
bug6104: explicitly set encoring for GermanKeyboardTest to UTF-8
2025-03-25 17:21:59 +01:00
Axel Uhl
c8e6e4a245
bug6104: complexified more test user account passwords
2025-03-25 17:16:59 +01:00
Axel Uhl
178b6bf241
bug6104: made passwords for Selenium tests more complex; added quertz-keyboard.txt to bundle's build.properties
2025-03-25 13:45:22 +01:00
Axel Uhl
611372e0de
bug6104: fixed qwertz-keyboard.txt
2025-03-25 10:08:42 +01:00
Axel Uhl
d81006f082
Merge branch 'main' into bug6104
2025-03-24 23:11:31 +01:00
Axel Uhl
acc3425c65
bug6104: added German keyboard definition for password complexity analysis
2025-03-24 23:06:27 +01:00
Axel Uhl
5910783be3
bug6104: tests can be exempted from strong password requirements
2025-03-24 21:57:45 +01:00
Axel Uhl
01780399fa
bug6104: adjusted error message for password complexity
2025-03-24 18:37:53 +01:00
Axel Uhl
8c0dc8f67e
bug6104: release notes
2025-03-24 18:37:02 +01:00
Axel Uhl
a65539d2e5
bug6104: added password complexity check based on zxcvbn, requiring 10^8 guesses
2025-03-24 18:33:56 +01:00
Axel Uhl
18fadf8d10
bug6104: added zxcvbn to launch configs and Selenium pom
2025-03-24 18:25:05 +01:00
Axel Uhl
ec35c01369
bug6104: fixed name of nulab-inc bundles
2025-03-24 18:00:51 +01:00
Axel Uhl
d7f3d56e49
bug6104: also added com.nulabinc.zxcvbn to the .target definition
2025-03-24 17:50:17 +01:00
Axel Uhl
5ac6cba18a
bug6104: adding zxcvbn-1.9.0 to target platform
2025-03-24 17:19:28 +01:00
Axel Uhl
d65971ca35
don't accept file uploads without authenticated user with validated e-mail address
2025-03-24 13:34:20 +01:00
Axel Uhl
ee657c6820
fixed UI error message handling upon faile user creation attept
2025-03-20 10:51:33 +01:00
Axel Uhl
9bc3705bda
bug6097: fixed timings for test UI-based user creation
2025-03-20 00:33:03 +01:00
Axel Uhl
999e60e309
use existing URL for result import URL test to keep test from failing with slow DNS
2025-03-19 23:08:50 +01:00
Axel Uhl
e96a3c07c1
made AbstractTestWithIgtimiConnection abstract to avoid test execution
2025-03-19 22:45:38 +01:00
Axel Uhl
13047b74a7
bug6097: delay user creation in UserManagementPanelPO if necessary
2025-03-19 22:41:02 +01:00
Axel Uhl
f6a3bd16b0
bug6097: in SecurityApi wait sufficiently between user creations
2025-03-19 21:15:30 +01:00
Axel Uhl
fd974a09dd
bu6097: added the clearing of the clientIP...Locking maps in SecurityService in clearState()
2025-03-19 20:22:40 +01:00
Axel Uhl
f798a622d3
bug6097: release notes
2025-03-19 15:06:53 +01:00
Axel Uhl
d0987a3976
bug6097: make use of backward compatibility for client IP based locking tables
2025-03-19 14:37:58 +01:00
Axel Uhl
b97ace3db0
bug6097: apply same mechanism for user creation per IP locking as for failed bearer token-based authentication
2025-03-19 14:17:35 +01:00
Axel Uhl
f61055f62e
Merge remote-tracking branch 'github/main' into main
2025-03-19 10:38:34 +01:00
Axel Uhl
715a4905f1
bug6099: the space in X-Forwarded-For isn't even necessary
2025-03-19 10:35:40 +01:00
Axel Uhl
bdc70a7161
bug6099: return LockingAndBanning from faiure methods to improve logging
2025-03-19 10:32:30 +01:00
Axel Uhl
b3378031b4
bug6099: fixed parsing of X-Forwarded-For header (,-separated)
2025-03-19 10:32:15 +01:00
Axel Uhl
dea4adff6b
bug6099: made SecurityService robust against null values for clientIP
2025-03-18 22:28:45 +01:00
Axel Uhl
c754223f02
bug6099: use only client IP for bearer token-based authentication blocking;
...
client IP is determined from *last* element of X-Forwarded-For which the
AWS ALB will append by default, defaulting to the HttpServletRequest's
getRemoteAddr().
2025-03-18 18:23:52 +01:00
Axel Uhl
c1211cb3d8
bug6099: only update user record in DB if locking record changed
2025-03-18 15:58:08 +01:00
Axel Uhl
fc87c080a1
bug6099: completed an implementation for bearer token authentication request throttling
2025-03-18 15:36:46 +01:00
Axel Uhl
c62560a4f5
bug6099: wait for user to get unlocked after testing incorrect password
2025-03-17 22:03:21 +01:00
Axel Uhl
152e98b310
Merge branch 'main' into bug6099
2025-03-17 21:50:34 +01:00
Axel Uhl
0341773fd8
added missing bytebuddy dependency for security tests
2025-03-17 21:50:18 +01:00
Axel Uhl
122747b803
bug6099: added TODO regarding bearer token failure throttling
2025-03-17 21:47:55 +01:00
Axel Uhl
48665d9889
bug6099: wiki update regarding shiro.ini configuration
2025-03-17 18:23:54 +01:00
Axel Uhl
6c049f93f0
bug6099: display "locked until" in User Management panel of AdminConsole
2025-03-17 18:20:50 +01:00
Axel Uhl
eb1b88f4f5
bug6099: added writing persistence and replication for LockingAndBanning
2025-03-17 17:45:11 +01:00
Axel Uhl
2416b49f89
bug6099: interims commit with a first implementation of a user account locking/banning mechanism;
...
yet missing is writing to persistence and replication
2025-03-17 16:30:57 +01:00
Axel Uhl
c542e0d85d
bug6101: release notes addition regarding incompatible change for SecurityService initial load
2025-03-17 14:15:23 +01:00
Axel Uhl
2ffbde8c57
bug6101: introduced SecuritySerciveInitialLoadExtensionsDTO
2025-03-17 14:00:43 +01:00
Axel Uhl
9b6f02022c
continue loading other course templates if one fails
2025-03-16 22:30:02 +01:00
Axel Uhl
e8811866d0
Merge branch 'bug6102' into bug6101
2025-03-14 22:48:28 +01:00
Axel Uhl
52d9b8ec0a
Revert "bug6102: dropping test DB in ClearStateServlet"
...
This reverts commit 279da4a8d9
2025-03-14 22:48:20 +01:00
Axel Uhl
3bda9126d0
bug6101: improved syntax of local-test-environment.xml;
...
makes Selenium drivers easier to switch
2025-03-14 20:49:34 +01:00
Axel Uhl
5623c7161a
bug6101: always allow frame-ancestors 'self' to avoid issues with form submission and file upload
2025-03-14 17:48:54 +01:00
Axel Uhl
41eb8eebf5
Merge branch 'bug6102' into bug6101
2025-03-14 17:06:23 +01:00
Axel Uhl
9791a8a6c4
bug6102: enforce UTF-8 to have venue characters represented properly in test
2025-03-14 17:05:05 +01:00
Axel Uhl
279da4a8d9
bug6102: dropping test DB in ClearStateServlet
2025-03-14 16:56:06 +01:00
Axel Uhl
e0b1f6c3aa
bug6102: added locking for mark[Id]Cache
2025-03-14 14:43:06 +01:00
Axel Uhl
f5795358c1
bug6101: release notes
2025-03-13 17:01:56 +01:00
Axel Uhl
93b5af3e57
bug6101: use CORS filter origins also for Content-Security-Policy (CSP) frame-ancestors
2025-03-13 16:32:25 +01:00
Axel Uhl
0c6498939c
bug6101: don't show CORS config panel in AdminConsole if user doesn't have the permission
2025-03-13 09:45:22 +01:00
Axel Uhl
0b04c0a10d
bug6101: remove now redundant setting of CORS header in LeaderboardGroupsResource
2025-03-13 01:38:07 +01:00
Axel Uhl
62139edbce
bug6101: consolidate CORS filters and factor out common CORS header handling;
...
use CORSHeader instead of response filter in com.sap.sailing.server.gateway
consistently across Jersey and non-Jersey servlets provided by the bundle;
as drive-by improvement, fix the sap.ico/sap-whitelabeled.ico paths in the page
header of /index.html and provide an empty sap-whitelabeled.ico file.
2025-03-13 01:20:50 +01:00
Axel Uhl
1936d8b962
bug6101: clear explicit allowed origin list in UI when wildcard is selected;
...
this makes things more consistent with the case where a wildcard setting
is loaded initially
2025-03-12 17:47:17 +01:00
Axel Uhl
bb16dc2368
bug6101: added CORS filter config UI in "Local Server" admin console panel
2025-03-12 17:42:02 +01:00
Axel Uhl
3870e9a802
bug6101: initialize own CORS filter config after loading it from DB
2025-03-12 11:29:24 +01:00
Axel Uhl
c1922e8068
bug6101: added persistence to CORS filter configuration
2025-03-12 11:25:46 +01:00
Axel Uhl
9e69f505dc
bug6101: more tests for configurable CORSFilter
2025-03-12 09:48:12 +01:00
Axel Uhl
5788d5f199
Merge remote-tracking branch 'github/bug6101' into bug6101
2025-03-12 09:45:35 +01:00
Axel Uhl
4a9239d298
bug6101: more tests
2025-03-12 09:45:25 +01:00
Axel Uhl
e4df56ae17
bug6101: added missing null check for origin
2025-03-11 20:10:08 +01:00
Axel Uhl
beee1721ea
bug6101: first steps towards a configurable CORSFilter
2025-03-11 18:34:26 +01:00
Axel Uhl
1373e1ab40
bug6100: improved logging of user/role/permission-related actions in SecurityService
2025-03-11 17:10:15 +01:00
Axel Uhl
58e2fee47a
bug6095: fixed serialization issues of AIAgent listeners
2025-03-11 16:41:42 +01:00
Axel Uhl
6548b821d2
bug6100: added more logging to SecurityService actions
2025-03-11 14:10:09 +01:00
Axel Uhl
e23387a920
upgraded TracAPI from 4.0.1 to 4.0.2
2025-03-11 11:19:04 +01:00
Axel Uhl
f925788843
Merge remote-tracking branch 'github/main' into main
2025-03-11 11:01:35 +01:00
Axel Uhl
f222197975
bug6095: removed obsolete folder
2025-03-10 18:08:12 +01:00
Axel Uhl
e2e6410bc6
bug6095: handle persistence aspect of "nulling" AICore credentials
2025-03-07 16:07:50 +01:00
Axel Uhl
a2bacc9b7d
bug6095: properly handle missing model name system property
2025-03-07 09:44:41 +01:00
Axel Uhl
94602a46a4
bug6095: don't make any calls to AICore without credentials
2025-03-06 17:55:20 +01:00
Axel Uhl
50e3604ad9
bug6095: extended the set of parameter name substrings for redaction during logging;
...
added "credentials"
2025-03-06 17:11:58 +01:00
Axel Uhl