Axel Uhl
e752ad1fde
bug6151: show fewer details about locking/banning to user banned from signing up
2025-07-11 15:25:17 +02:00
Axel Uhl
1a7364ac70
Merge branch 'main' into bug6105
2025-05-18 22:31:36 +02:00
Axel Uhl
5c639cdfcb
bug6123: implemented e-mail notification for RabbitMQ ShutdownSignalException to users with SERVER:UPDATE permission
2025-05-16 11:42:36 +02:00
Axel Uhl
1c3aa25e4e
removed obsolete TODO
2025-05-15 10:08:22 +02:00
Axel Uhl
39709eb56f
keep LockingAndBanning objects for failed bearer token authentications around for at least an hour
2025-05-15 10:06:00 +02:00
Axel Uhl
2920ba7563
Merge branch 'main' into bug6105
2025-05-14 21:03:32 +02:00
Axel Uhl
2cd0bb2fec
improved logging for locking/banning of user accounts and client IPs
2025-05-14 11:06:57 +02:00
Axel Uhl
3dc6b0afa0
bug6105: added takedown button to media gallery video list
2025-05-06 01:15:00 +02:00
Axel Uhl
3f62b48345
bug6105: define MediaMenuIcon as a widget using UIBinder
2025-05-05 15:31:44 +02:00
Axel Uhl
96061d31f0
Merge branch 'main' into bug6105
2025-05-05 11:08:25 +02:00
Axel Uhl
69752461a6
bug6119: replicate only true changes
2025-05-01 02:02:20 +02:00
Axel Uhl
139fdd05e5
bug6105: showing takedown notice dialog, sending e-mail
2025-04-29 18:18:09 +02:00
Axel Uhl
acc3425c65
bug6104: added German keyboard definition for password complexity analysis
2025-03-24 23:06:27 +01:00
Axel Uhl
5910783be3
bug6104: tests can be exempted from strong password requirements
2025-03-24 21:57:45 +01:00
Axel Uhl
a65539d2e5
bug6104: added password complexity check based on zxcvbn, requiring 10^8 guesses
2025-03-24 18:33:56 +01:00
Axel Uhl
18fadf8d10
bug6104: added zxcvbn to launch configs and Selenium pom
2025-03-24 18:25:05 +01:00
Axel Uhl
5ac6cba18a
bug6104: adding zxcvbn-1.9.0 to target platform
2025-03-24 17:19:28 +01:00
Axel Uhl
f6a3bd16b0
bug6097: in SecurityApi wait sufficiently between user creations
2025-03-19 21:15:30 +01:00
Axel Uhl
fd974a09dd
bu6097: added the clearing of the clientIP...Locking maps in SecurityService in clearState()
2025-03-19 20:22:40 +01:00
Axel Uhl
d0987a3976
bug6097: make use of backward compatibility for client IP based locking tables
2025-03-19 14:37:58 +01:00
Axel Uhl
b97ace3db0
bug6097: apply same mechanism for user creation per IP locking as for failed bearer token-based authentication
2025-03-19 14:17:35 +01:00
Axel Uhl
bdc70a7161
bug6099: return LockingAndBanning from faiure methods to improve logging
2025-03-19 10:32:30 +01:00
Axel Uhl
dea4adff6b
bug6099: made SecurityService robust against null values for clientIP
2025-03-18 22:28:45 +01:00
Axel Uhl
c754223f02
bug6099: use only client IP for bearer token-based authentication blocking;
...
client IP is determined from *last* element of X-Forwarded-For which the
AWS ALB will append by default, defaulting to the HttpServletRequest's
getRemoteAddr().
2025-03-18 18:23:52 +01:00
Axel Uhl
c1211cb3d8
bug6099: only update user record in DB if locking record changed
2025-03-18 15:58:08 +01:00
Axel Uhl
fc87c080a1
bug6099: completed an implementation for bearer token authentication request throttling
2025-03-18 15:36:46 +01:00
Axel Uhl
eb1b88f4f5
bug6099: added writing persistence and replication for LockingAndBanning
2025-03-17 17:45:11 +01:00
Axel Uhl
2416b49f89
bug6099: interims commit with a first implementation of a user account locking/banning mechanism;
...
yet missing is writing to persistence and replication
2025-03-17 16:30:57 +01:00
Axel Uhl
2ffbde8c57
bug6101: introduced SecuritySerciveInitialLoadExtensionsDTO
2025-03-17 14:00:43 +01:00
Axel Uhl
93b5af3e57
bug6101: use CORS filter origins also for Content-Security-Policy (CSP) frame-ancestors
2025-03-13 16:32:25 +01:00
Axel Uhl
bb16dc2368
bug6101: added CORS filter config UI in "Local Server" admin console panel
2025-03-12 17:42:02 +01:00
Axel Uhl
3870e9a802
bug6101: initialize own CORS filter config after loading it from DB
2025-03-12 11:29:24 +01:00
Axel Uhl
c1922e8068
bug6101: added persistence to CORS filter configuration
2025-03-12 11:25:46 +01:00
Axel Uhl
1373e1ab40
bug6100: improved logging of user/role/permission-related actions in SecurityService
2025-03-11 17:10:15 +01:00
Axel Uhl
58e2fee47a
bug6095: fixed serialization issues of AIAgent listeners
2025-03-11 16:41:42 +01:00
Axel Uhl
6548b821d2
bug6100: added more logging to SecurityService actions
2025-03-11 14:10:09 +01:00
Axel Uhl
eb55e77c03
formatting and "final" changes only
2025-01-09 11:33:02 +01:00
Axel Uhl
43091c5063
store User changes after password/e-mail update
2024-11-25 15:26:05 +01:00
Axel Uhl
82dc504cd4
bug6037: when planId null is received, remove only those subscription plans not implied by any other active subscriptions
2024-07-28 18:19:59 +02:00
Axel Uhl
cb2ce027a9
improved logging for role adding/removing upon subscription changes
2024-07-03 15:09:10 +02:00
Axel Uhl
53ba61d131
bug6017: added locking also for replicated subscription operations and in all handlers
2024-06-14 16:21:20 +02:00
Axel Uhl
9ab6e6d6ea
catch case of role definition not found based on chargebee role ID
2024-06-07 15:53:55 +02:00
Udo Wessels
1fa15ca3bf
bug5773: fixed now the update of the user model and user details view if email validation status was set back.
...
- Introduced a new (optional) system parameter to disable email sending. This is good for local execution. No error occurs any more and email content is visible in the log.
2023-08-07 12:44:15 +02:00
Udo Wessels
354a302ced
Merge branch 'master' into bug5773
...
# Conflicts:
# java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/StringMessages.properties
2023-07-24 16:45:49 +02:00
Udo Wessels
976f37462f
bug5773: Added automatic and immediate cancelation of old subscription by api, if new one is covering the old one.
...
- old cancel service was renamed to nonRenewing to explain the difference to the new immediate cancelation logic
2023-07-17 17:49:13 +02:00
Axel Uhl
bf7dc83fd4
added test case for fuzzy boat class matcher for new iQFOil alias names
2023-07-16 09:34:23 +02:00
Axel Uhl
fd78711894
bug5828: add the server_admin role to a user who just created the -server group for a new replica set
2023-05-10 15:19:41 +02:00
Axel Uhl
8991742298
bug5828: added methods for role management to SecurityResource / SecuredServer facade
2023-05-10 14:28:29 +02:00
Axel Uhl
2f38ad7d1f
Merge branch 'master' into bug5828
2023-05-08 10:41:31 +02:00
Axel Uhl
bc582d3931
added logging for unauthorized user creation request
2023-05-05 18:19:06 +02:00
Axel Uhl
Udo Wessels