Axel Uhl
2416b49f89
bug6099: interims commit with a first implementation of a user account locking/banning mechanism;
...
yet missing is writing to persistence and replication
2025-03-17 16:30:57 +01:00
Axel Uhl
62139edbce
bug6101: consolidate CORS filters and factor out common CORS header handling;
...
use CORSHeader instead of response filter in com.sap.sailing.server.gateway
consistently across Jersey and non-Jersey servlets provided by the bundle;
as drive-by improvement, fix the sap.ico/sap-whitelabeled.ico paths in the page
header of /index.html and provide an empty sap-whitelabeled.ico file.
2025-03-13 01:20:50 +01:00
Axel Uhl
6b451641ed
bug5503: added ShiroFilter subclass to skip authentication for OPTIONS requests
2024-07-02 15:12:11 +02:00
Wessels, Udo (PPN)
2b66121265
bug5910: remove not supported line in .project files so that current Eclipse version (2023-09) can import the projects.
2023-10-09 18:00:50 +02:00
Finn Huelsbusch
d888c1fad9
added configuration for eclipse 2022-06 and updated the onboarding
2022-07-07 16:51:33 +02:00
Axel Uhl
cf799d6986
disable WADL generation for all Jersey RESTlets; it is extremely time-consuming
2021-07-25 20:36:50 +09:00
Axel Uhl
2c622e5b45
patched <!DOCTYPE projectDescription> into all project files to avoid info/warning in problems view about no grammar constraint
2021-06-19 12:45:03 +02:00
Axel Uhl
ef9097dd5e
bug5513 aftermath: fixing class of invalidRequest filter in all shiro.ini files
2021-04-16 12:01:50 +02:00
Axel Uhl
37fb3dc0a5
bug5513: added configuration of Shiro invalidRequest filter for backward compatibility to all shiro.ini files;
...
re-enabling backslash, semicolon and non-ASCII characters (important, e.g., for Umlaut characters)
in URL paths again
2021-04-16 11:37:44 +02:00
Axel Uhl
ae75a94737
bug5513: added the now necessary authc = com.sap.sse.security.CustomFilter to all shiro.ini files, as already documented in Wiki
2021-04-13 09:39:49 +02:00
Axel Uhl
1b02410159
fixed /suspend method for /threadmanager/api (used to call stop() instead of suspend() on the thread)
2021-04-07 23:42:02 +02:00
Axel Uhl
d6781a9169
secured ThreadManager actions with new SERVER:THREADS permission
2021-04-07 12:16:23 +02:00
Georg Herdt
07525d4ae1
Merge branch 'master' into bug5480
...
# Conflicts:
# java/com.sap.sailing.feature.p2build/raceanalysis.product
# java/com.sap.sailing.server/SailingServer (No Proxy).launch
# java/com.sap.sse.security.ui/WEB-INF/web.xml
2021-01-29 09:34:47 +01:00
Axel Uhl
0ca193fa8f
bug5482: consolidated AccessControlAndEncodingResponseFilter copies into com.sap.sse bundle
2021-01-21 15:05:24 +01:00
Georg Herdt
e6ae9da861
upgrade to recent servlet/web.xml standard of jetty 9.4.
...
bug 5153
2021-01-17 22:16:10 +01:00
Georg Herdt
fbadad0ef7
switch from java.servlet bundle to osgi-servlet bundle to be able to resolve DTDs and XSD for validation (e.g. web.xml)
...
bug 5153
2021-01-17 22:10:27 +01:00
Axel Uhl
a915bf793a
use streamingOutput in more places, avoiding memory-intense JSON serialization
2020-07-07 15:43:13 +02:00
Axel Uhl
8c8ef001b7
moved StreamingOutputUtil from shared.android to com.sap.sse where it belongs
2020-04-28 15:48:38 +02:00
Axel Uhl
927be27747
moved StreamingOutput helpers to com.sap.sse.shared.android and use in security REST API and ThreadManager
2020-04-28 13:33:08 +02:00
Axel Uhl
89e8bef9c8
Revert "removed PluginNature from our OSGi bundles; they are not Eclipse plugins";
...
according to https://bugs.eclipse.org/bugs/show_bug.cgi?id=544977#c21 the
scenario of using the ManifestBuilder without setting the PluginNature is
not a supported scenario. Besides, it doesn't help to get rid of the new
Eclipse warning regarding non-exported packages.
This reverts commit 063484e29f
2019-05-28 21:54:20 +02:00
Axel Uhl
063484e29f
removed PluginNature from our OSGi bundles; they are not Eclipse plugins
2019-05-27 22:53:30 +02:00
Steffen Schaefer
b9a2e73899
Merge branch 'master' into permission-vertical
...
Conflicts:
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/SailingServiceImpl.java
java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/MongoObjectFactoryImpl.java
2019-02-07 07:52:55 +01:00
Axel Uhl
b7e3d0f472
introduced NoSessionStorageSessionDAO for all REST bundles' shiro.ini;
...
this solves the problem of a new session being created and stored each
time a Bearer token-authenticated request is fired. REST requests are
expected not to produce nor maintain session state.
Change-Id: Ie662718610ed6bc229c07709491e0b2cc3ee051c
2019-02-06 15:31:44 +01:00
Steffen Schaefer
0a03e2718a
Merge branch 'master' into permission-vertical
...
Conflicts:
java/com.sap.sse.security/META-INF/MANIFEST.MF
java/com.sap.sse.security/src/com/sap/sse/security/impl/ReplicableSecurityService.java
java/com.sap.sse.security/src/com/sap/sse/security/impl/SecurityServiceImpl.java
java/com.sap.sse/src/com/sap/sse/util/HttpUrlConnectionHelper.java
2019-01-17 14:13:21 +01:00
Axel Uhl
6ce072ee3f
raised session timeout from 24h to 1y consistently in all shiro.ini files
...
Change-Id: Ic6fe7773c8796ad5606c528937cde1b61c4f8fe8
2019-01-15 18:31:57 +01:00
Axel Uhl
5bebb7af48
Added missing web subject factory configuration to the other shiro.ini configs
...
Change-Id: I874a50d4e175729d652f2a237ea249045685977f
2019-01-07 18:10:08 +01:00
Axel Uhl
6127967114
Merge branch 'master' into permission-vertical
...
Change-Id: I056fa53fd62de0aefbcbcb0e52c824f4764e2a27
2018-06-12 22:04:26 +02:00
Axel Uhl
124f8e7cf5
added stop and interrupt methods to ThreadManager
...
Change-Id: I74d7992e17ebdbee9061129b4b0932c2f0517994
2018-06-10 22:01:19 +02:00
Axel Uhl
806a4d5c28
Merge branch 'master' into permission-vertical
2018-03-30 23:03:03 +02:00
Axel Uhl
bd90f921dd
added Automatic-Module-Name headers to satisfy Oxygen.3 Java9 warnings rule
2018-03-24 01:45:37 +01:00
Jonas Dann
4894ba6a55
Fixed shiro configs
2017-11-24 13:24:23 +01:00
Axel Uhl
540becdb35
only CR/LF changes
...
Change-Id: I77ca9b927b7bb875e831d0b3203791650f0edb8c
2017-05-12 16:57:29 +02:00
Axel Uhl
913fbe5d76
increased Shiro session manager timeout from 30min to 24h
...
Change-Id: I8bdcbc5b3c2658858643b3a4f04dfa83a571659a
2016-04-20 18:00:19 +02:00
Axel Uhl
a0500581f6
added a bundle com.sap.sse.threadmanager which provides a servlet for listing, suspending and resuming threads
2015-03-19 08:40:04 +01:00
Axel Uhl
Wessels, Udo (PPN)
Finn Huelsbusch
Georg Herdt
Steffen Schaefer
Jonas Dann