Commit Graph
189 Commits
Author SHA1 Message Date
Steffen Schaefer b44afb3d35 Removed duplicate code and improved the cleanup implementation 2016-07-11 13:55:25 +02:00
Steffen Schaefer 0f441038fc PreferenceObjectBasedNotificationSet can now work with a ServiceTracker
instead of a fixed UserStore instance
2016-07-11 13:51:30 +02:00
Steffen Schaefer 033ec41a60 Added a common interface Stoppable with a declared stop method to make
it possible to cleanup several objects in an Activator
2016-07-11 13:49:56 +02:00
Steffen Schaefer e89c05bf01 PreferenceConverters can now be registered through OSGi service registry 2016-07-11 12:38:14 +02:00
Steffen Schaefer 516a889c02 Added the possibility to remove PreferenceConverters from the UserStore 2016-07-11 12:35:28 +02:00
Steffen Schaefer 7b0f3c9cbd Added more JavaDocs to PreferenceObjectBasedNotificationSet 2016-07-11 11:38:53 +02:00
Steffen Schaefer b5524aefde JavaDoc / Code quality improvements 2016-07-11 09:38:17 +02:00
Steffen Schaefer da43003a2c Updated JavaDocs 2016-07-07 09:09:03 +02:00
Steffen Schaefer 38733e7502 Renamed methods to make more clear what they are used for 2016-07-06 09:45:09 +02:00
Steffen Schaefer e5d38e7455 Added JavaDocs to PreferenceConverter 2016-07-06 09:16:08 +02:00
Steffen Schaefer 0f93d35bcf Added initial tests for PreferenceObjectBasedNotificationSet 2016-07-05 18:28:31 +02:00
Steffen Schaefer 52a750d3bd Added utility class that makes it possible to hold optimized asociations
for which users should be notified about a specific object
2016-07-05 13:35:11 +02:00
Steffen Schaefer 4edc91f10b Added JavaDoc to PreferenceObjectListener 2016-07-05 13:34:02 +02:00
Steffen Schaefer 69d697843f Forgot to commit one file
It's now possible to get notified on preference object changes in
UserStore
2016-07-05 10:57:53 +02:00
Steffen Schaefer cd5ca3741e It's now possible to get notified on preference object changes in
UserStore
2016-07-05 10:40:20 +02:00
Steffen Schaefer d77f6adb43 Initial implementation to register PreferenceConverters on the UserStore
and set/get preference objects that are being held in memory for fast
access
2016-07-04 17:07:01 +02:00
Steffen Schaefer 37e47d5fdc First stubs to register PreferenceConverters on the UserStore 2016-07-04 14:44:57 +02:00
Axel Uhl fc6be86f7f implemented mark device mapping check-out in LeaderboardsResource
Change-Id: I6c83db19d3939936f0a572f1eb16e1d82e323693
2016-06-24 18:26:49 +02:00
Axel Uhl 32daae4ad3 where concurrency support plays a role, changed field declarations from ConcurrentHashMap to ConcurrentMap which is sufficiently specific
Change-Id: I71254d96d495a1a8d79e009d70fd8928b720b31e
2016-06-07 17:08:07 +02:00
Axel Uhl 913fbe5d76 increased Shiro session manager timeout from 30min to 24h
Change-Id: I8bdcbc5b3c2658858643b3a4f04dfa83a571659a
2016-04-20 18:00:19 +02:00
Axel Uhl 3d25d4537d use a dedicated authentication filter that provides an application name so the HTTP response's WWW-Authentication header shows it
Change-Id: I81f43969acb0aeada3bdb5b6f066c62aa00d0de6
2016-03-08 21:47:53 +01:00
Axel Uhl 2bae2dc265 fixed token generation for QR code; required getOrCreateAccessToken instead of only getAccessToken
Change-Id: Id7817e8f2c7939b088689acb3ac9b9ae42638643
2016-03-03 15:15:04 +01:00
Axel Uhl 44c37b4c32 fixed SecurityResourceTest, now removing existing token when requiring creation of new one
Change-Id: I1e8a5be5f7659ba0bff2841bed02033139de1b8a
2016-03-02 10:59:54 +01:00
Axel Uhl 524abc1124 secure the RaceLog POST servlet, requiring LEADERBOARD.UPDATE; fixed auth token loading in UserStore;
added removeAccessToken with remove_access_token end point on SecurityResource, available for ADMIN role
and owner
2016-03-02 00:09:54 +01:00
Axel Uhl c356c2f97c Merge branch 'master' into bug2589
Conflicts:
	java/com.sap.sailing.domain.common/src/com/sap/sailing/domain/common/security/Permission.java
	java/com.sap.sailing.domain.common/src/com/sap/sailing/domain/common/security/SailingPermissionsForRoleProvider.java

Change-Id: I3aaf2651c01460dd2fb0caf95735b9919586a2c9
2016-03-01 16:47:00 +01:00
Benjamin Barth 842d64d5e5 Added parameters full name and company to
UserManagementService.createSimpleUser method
2016-01-21 16:28:04 +01:00
Axel Uhl 432c979135 Merge branch 'master' into bug2589
Conflicts:
	java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/EventsResource.java

Change-Id: I63f05a28bdf63a0c6b7731e03c36b28b61e4638e
2016-01-12 14:28:13 +01:00
Axel Uhl f91153d93c cleaned up the ClientUtils implementation and removed unused OAuth cruft; removed GWT dependency from com.sap.sse.security;
removed RemoteServiceServlet superclass from SecurityServiceImpl; why was it there? The GWT RPC is implemented by
UserManagementServiceImpl

Change-Id: Ifc2e1f848b9fb5d7f24398a0497d301b037a822e
2016-01-12 09:43:07 +01:00
Axel Uhl 4e0c3f7073 providing update feature for additional User properties in SecurityService and UserManagementService
Change-Id: I46a4c2c58e35595dc20b85575a27c1cfbd639592
2016-01-12 09:28:23 +01:00
Axel Uhl fb3f74d297 added fields fullName and company to User
Change-Id: I831b2a229c29081aab8f79174caa8d1900303b67
2016-01-12 09:13:01 +01:00
Axel Uhl 8246a64a3f using UriUtils.fromString to avoid XSS security vulnerability
Change-Id: Ia6aada15502dd1e4e6a53cf9e6067fbea6a07fef
2016-01-08 11:01:54 +01:00
Axel Uhl 6169f54e25 Merge branch 'master' into bug2589
Conflicts:
	java/com.sap.sailing.domain.igtimiadapter/META-INF/MANIFEST.MF
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/SailingServiceImpl.java
	java/com.sap.sailing.server.gateway/META-INF/MANIFEST.MF
	java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/RestServletContainer.java
	java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/RestApiApplication.java

Change-Id: I8cbb797ba64d221ea401b90b22d21a813204a6f2
2016-01-04 11:34:01 +01:00
Axel Uhl 374bad01d8 use SecureRandom for user e-mail validation token generation 2015-12-08 12:46:56 +01:00
Frederik Petersen 883ef38d90 Now logging when tracked race is connected with race column
also loggin which user linked the race.
2015-07-21 15:47:20 +02:00
Axel Uhl a9f43bf2f3 fixing bug 2849 by fixing the mismatch of username vs. e-mail address parameter semantics for MailService.sendMail 2015-05-12 22:19:31 +02:00
Axel Uhl 041b50cc3d introduced Jersey ExceptionMapper for Shiro's AuthorizationException 2015-02-26 17:26:45 +01:00
Axel Uhl 6bd56de7f1 cleaned up shiro.ini stuff further, added more comments 2015-02-26 13:48:51 +01:00
Axel Uhl 1cc22d3858 added anyofroles filter declaration to default shiro.ini 2015-02-26 12:42:47 +01:00
Axel Uhl bd327fe876 added comments and cleaned up structure in com.sap.sse.security/resources/shiro.ini to make it a good copy template, too 2015-02-26 12:35:59 +01:00
Axel Uhl c196f48ad1 prepared the com.sap.sailing.server.gateway bundle for REST security, showing a commented example in shiro.ini for the /events service end point 2015-02-25 18:26:27 +01:00
Axel Uhl 6c5b4e9027 added documentation for the security REST API 2015-02-25 17:22:23 +01:00
Axel Uhl 21f76c6dc4 obsolete old bearer access token when a new one is obtained for the subject 2015-02-25 14:36:01 +01:00
Axel Uhl 837fce4a6c re-use subject instead of acquiring it freshly where possible 2015-02-25 12:32:01 +01:00
Axel Uhl 6ad8d92981 don't save the username in the SOCIAL_USER field; it can always be obtained by Subject.getPrincipal() 2015-02-25 12:28:23 +01:00
Axel Uhl ae9ca81f45 fixed launch configs regarding zxing bundle; added Javadoc 2015-02-25 09:37:41 +01:00
Axel Uhl 8d76c78c48 added missing class FormAuthenticationFilterWithPublicCreateToken which is a delegate for the bearer token authentication filter 2015-02-25 08:38:53 +01:00
Axel Uhl 6076f03c60 enhanced logon procedures and fixed test cases 2015-02-25 00:53:43 +01:00
Axel Uhl cf010e8c02 provide and use a BearerTokenAuthenticationFilter which defaults to HTTP basic authentication; renamed AccessTokenRealm to BearerTokenRealm 2015-02-24 21:58:02 +01:00
Axel Uhl 695ebe0be9 fixed media types for SecurityResource 2015-02-24 15:34:58 +01:00
Axel Uhl e70e605f79 Merge branch 'master' into bug2589 2015-02-23 18:25:45 +01:00