Axel Uhl
d0987a3976
bug6097: make use of backward compatibility for client IP based locking tables
2025-03-19 14:37:58 +01:00
Axel Uhl
b97ace3db0
bug6097: apply same mechanism for user creation per IP locking as for failed bearer token-based authentication
2025-03-19 14:17:35 +01:00
Axel Uhl
f61055f62e
Merge remote-tracking branch 'github/main' into main
2025-03-19 10:38:34 +01:00
Axel Uhl
715a4905f1
bug6099: the space in X-Forwarded-For isn't even necessary
2025-03-19 10:35:40 +01:00
Axel Uhl
bdc70a7161
bug6099: return LockingAndBanning from faiure methods to improve logging
2025-03-19 10:32:30 +01:00
Axel Uhl
b3378031b4
bug6099: fixed parsing of X-Forwarded-For header (,-separated)
2025-03-19 10:32:15 +01:00
Axel Uhl
dea4adff6b
bug6099: made SecurityService robust against null values for clientIP
2025-03-18 22:28:45 +01:00
Axel Uhl
c754223f02
bug6099: use only client IP for bearer token-based authentication blocking;
...
client IP is determined from *last* element of X-Forwarded-For which the
AWS ALB will append by default, defaulting to the HttpServletRequest's
getRemoteAddr().
2025-03-18 18:23:52 +01:00
Axel Uhl
24b862f831
Merge sapsailing_main into main
2025-03-18 17:56:55 +01:00
Axel Uhl
a39f04d060
Added link to management-console to Home.md
2025-03-18 16:39:49 +00:00
Axel Uhl
c1211cb3d8
bug6099: only update user record in DB if locking record changed
2025-03-18 15:58:08 +01:00
Axel Uhl
fc87c080a1
bug6099: completed an implementation for bearer token authentication request throttling
2025-03-18 15:36:46 +01:00
Axel Uhl
c62560a4f5
bug6099: wait for user to get unlocked after testing incorrect password
2025-03-17 22:03:21 +01:00
Axel Uhl
152e98b310
Merge branch 'main' into bug6099
2025-03-17 21:50:34 +01:00
Axel Uhl
0341773fd8
added missing bytebuddy dependency for security tests
2025-03-17 21:50:18 +01:00
Axel Uhl
122747b803
bug6099: added TODO regarding bearer token failure throttling
2025-03-17 21:47:55 +01:00
Axel Uhl
48665d9889
bug6099: wiki update regarding shiro.ini configuration
2025-03-17 18:23:54 +01:00
Axel Uhl
6c049f93f0
bug6099: display "locked until" in User Management panel of AdminConsole
2025-03-17 18:20:50 +01:00
Axel Uhl
eb1b88f4f5
bug6099: added writing persistence and replication for LockingAndBanning
2025-03-17 17:45:11 +01:00
Axel Uhl
2416b49f89
bug6099: interims commit with a first implementation of a user account locking/banning mechanism;
...
yet missing is writing to persistence and replication
2025-03-17 16:30:57 +01:00
Axel Uhl
c542e0d85d
bug6101: release notes addition regarding incompatible change for SecurityService initial load
2025-03-17 14:15:23 +01:00
Axel Uhl
2ffbde8c57
bug6101: introduced SecuritySerciveInitialLoadExtensionsDTO
2025-03-17 14:00:43 +01:00
Axel Uhl
9b6f02022c
continue loading other course templates if one fails
2025-03-16 22:30:02 +01:00
Axel Uhl
e8811866d0
Merge branch 'bug6102' into bug6101
2025-03-14 22:48:28 +01:00
Axel Uhl
52d9b8ec0a
Revert "bug6102: dropping test DB in ClearStateServlet"
...
This reverts commit 279da4a8d9
2025-03-14 22:48:20 +01:00
Axel Uhl
3bda9126d0
bug6101: improved syntax of local-test-environment.xml;
...
makes Selenium drivers easier to switch
2025-03-14 20:49:34 +01:00
Axel Uhl
5623c7161a
bug6101: always allow frame-ancestors 'self' to avoid issues with form submission and file upload
2025-03-14 17:48:54 +01:00
Axel Uhl
41eb8eebf5
Merge branch 'bug6102' into bug6101
2025-03-14 17:06:23 +01:00
Axel Uhl
9791a8a6c4
bug6102: enforce UTF-8 to have venue characters represented properly in test
2025-03-14 17:05:05 +01:00
Axel Uhl
279da4a8d9
bug6102: dropping test DB in ClearStateServlet
2025-03-14 16:56:06 +01:00
Axel Uhl
e0b1f6c3aa
bug6102: added locking for mark[Id]Cache
2025-03-14 14:43:06 +01:00
Axel Uhl
f5795358c1
bug6101: release notes
2025-03-13 17:01:56 +01:00
Axel Uhl
93b5af3e57
bug6101: use CORS filter origins also for Content-Security-Policy (CSP) frame-ancestors
2025-03-13 16:32:25 +01:00
Axel Uhl
0c6498939c
bug6101: don't show CORS config panel in AdminConsole if user doesn't have the permission
2025-03-13 09:45:22 +01:00
Axel Uhl
0b04c0a10d
bug6101: remove now redundant setting of CORS header in LeaderboardGroupsResource
2025-03-13 01:38:07 +01:00
Axel Uhl
62139edbce
bug6101: consolidate CORS filters and factor out common CORS header handling;
...
use CORSHeader instead of response filter in com.sap.sailing.server.gateway
consistently across Jersey and non-Jersey servlets provided by the bundle;
as drive-by improvement, fix the sap.ico/sap-whitelabeled.ico paths in the page
header of /index.html and provide an empty sap-whitelabeled.ico file.
2025-03-13 01:20:50 +01:00
Axel Uhl
1936d8b962
bug6101: clear explicit allowed origin list in UI when wildcard is selected;
...
this makes things more consistent with the case where a wildcard setting
is loaded initially
2025-03-12 17:47:17 +01:00
Axel Uhl
bb16dc2368
bug6101: added CORS filter config UI in "Local Server" admin console panel
2025-03-12 17:42:02 +01:00
Axel Uhl
3870e9a802
bug6101: initialize own CORS filter config after loading it from DB
2025-03-12 11:29:24 +01:00
Axel Uhl
c1922e8068
bug6101: added persistence to CORS filter configuration
2025-03-12 11:25:46 +01:00
Axel Uhl
9e69f505dc
bug6101: more tests for configurable CORSFilter
2025-03-12 09:48:12 +01:00
Axel Uhl
5788d5f199
Merge remote-tracking branch 'github/bug6101' into bug6101
2025-03-12 09:45:35 +01:00
Axel Uhl
4a9239d298
bug6101: more tests
2025-03-12 09:45:25 +01:00
Axel Uhl
e4df56ae17
bug6101: added missing null check for origin
2025-03-11 20:10:08 +01:00
Axel Uhl
beee1721ea
bug6101: first steps towards a configurable CORSFilter
2025-03-11 18:34:26 +01:00
Axel Uhl
1373e1ab40
bug6100: improved logging of user/role/permission-related actions in SecurityService
2025-03-11 17:10:15 +01:00
Axel Uhl
58e2fee47a
bug6095: fixed serialization issues of AIAgent listeners
2025-03-11 16:41:42 +01:00
Axel Uhl
6548b821d2
bug6100: added more logging to SecurityService actions
2025-03-11 14:10:09 +01:00
Axel Uhl
e23387a920
upgraded TracAPI from 4.0.1 to 4.0.2
2025-03-11 11:19:04 +01:00
Axel Uhl
f925788843
Merge remote-tracking branch 'github/main' into main
2025-03-11 11:01:35 +01:00
Axel Uhl
Axel Uhl
Axel Uhl