Axel Uhl
2416b49f89
bug6099: interims commit with a first implementation of a user account locking/banning mechanism;
...
yet missing is writing to persistence and replication
2025-03-17 16:30:57 +01:00
Axel Uhl
7de36861ce
formatting changes and use of final only
2025-01-23 16:14:21 +01:00
Udo Wessels
62cc6d42c3
bug5900: added an additional meta attribute description to give google Crawler the right information for Google search.
2023-08-28 11:46:10 +02:00
service.tip.git
abdd851acb
[INTERNAL] Translation delivery: commit by LX Lab
...
Change-Id: Ic4d3dc8ced2e5b3b827eadbad0e890813495817c
2022-12-15 16:19:24 +00:00
service.tip.git
da4ad6f41c
[INTERNAL] Translation delivery: commit by LX Lab
...
Change-Id: I5c86e8c03941da1e0b3c941ed2b811598698ccb9
2021-07-15 15:17:17 +00:00
Axel Uhl
9e289b0d64
bug5566: use Shiro security (bearerTokenOrAnonymous) for /sailingserver/windStatus servlet
2021-06-03 10:00:06 +02:00
Axel Uhl
7860bf23bb
Merge branch 'master' into translation
2021-04-23 22:59:28 +02:00
Axel Uhl
019fd6be24
translation: moved _en.properties changes to .properties files; removed extra res/values-en* folders accidentally committed by LXLabs
2021-04-23 22:57:37 +02:00
service.tip.git
ac95acb627
[INTERNAL] Translation delivery: commit by LX Lab
...
Change-Id: Ie75de15a55aeb6801c8e52b82daf9e53112748f5
2021-04-22 15:22:43 +00:00
Axel Uhl
ef9097dd5e
bug5513 aftermath: fixing class of invalidRequest filter in all shiro.ini files
2021-04-16 12:01:50 +02:00
Axel Uhl
37fb3dc0a5
bug5513: added configuration of Shiro invalidRequest filter for backward compatibility to all shiro.ini files;
...
re-enabling backslash, semicolon and non-ASCII characters (important, e.g., for Umlaut characters)
in URL paths again
2021-04-16 11:37:44 +02:00
Axel Uhl
ae75a94737
bug5513: added the now necessary authc = com.sap.sse.security.CustomFilter to all shiro.ini files, as already documented in Wiki
2021-04-13 09:39:49 +02:00
Tu Tran
a75deb3b65
Payment: Refactor and Improve subscription abstraction layers
2020-10-07 10:55:26 +07:00
Tu Tran
95cd14a711
Payment: Refactor and improve abstract layer for backend implementation
2020-09-30 17:28:26 +07:00
Tu Tran
034bd34147
Payment: Merge changes from master
2020-09-22 14:27:01 +07:00
Dennis Aulenbacher
96644b54ad
bug5312: Exluding og:url tag for facebook crawler
2020-09-10 13:20:04 +02:00
Dennis Aulenbacher
66a5e6cba4
bug5312: Manually blocking the facebookCrawler from interpreting the
...
refresh tag as 301 redirect.
2020-09-09 19:22:02 +02:00
Dennis Aulenbacher
0cc221e57d
bug5312: Adjusting fallback text in SharedProxy.html
2020-08-26 14:21:06 +02:00
Dennis Aulenbacher
241e69bb18
bug5312: Temporarily Duplicated SharedProxy.html
2020-08-20 13:15:04 +02:00
Tu Tran
2340d51bbe
Payment: Refactor webhook authentication, and add permission verifying filter
2020-07-14 18:23:23 +07:00
Tu Tran
670dbe0e93
Payment: refactoring code as feedbacks
2020-07-09 16:55:33 +07:00
Tu Tran
7e8f71d58d
Payment: Fix code formatting
2020-05-22 16:36:27 +07:00
Tu Tran
5006fa1b88
Payment: Refactor code
2020-05-22 11:46:13 +07:00
Tu Tran
655756e3b9
Payment: Update code comments, refactor webhook event class, refactor webhook basic auth handler
2020-05-21 11:52:43 +07:00
Steffen Schaefer
b9f53284b9
Bug 5085: Moved some security related classes to prevent dependency
...
cycles and adjusted shiro.ini files
2019-12-09 09:21:35 +01:00
Axel Uhl
dc86ecf0ea
improved ORC certificate import servlet's error messages; registered servlet, also with shiro.ini
...
Change-Id: I844f375c34e69523d31b19767cf636740d6d6323
2019-09-23 16:19:41 +02:00
service.tip.git
c5881fa7d4
[INTERNAL] Translation delivery: commit by SLS
...
Change-Id: I415313ffc355722d7e473faacdc3c0004666c943
2019-05-30 16:02:55 +00:00
Steffen Schaefer
b9a2e73899
Merge branch 'master' into permission-vertical
...
Conflicts:
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/SailingServiceImpl.java
java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/MongoObjectFactoryImpl.java
2019-02-07 07:52:55 +01:00
Axel Uhl
b7e3d0f472
introduced NoSessionStorageSessionDAO for all REST bundles' shiro.ini;
...
this solves the problem of a new session being created and stored each
time a Bearer token-authenticated request is fired. REST requests are
expected not to produce nor maintain session state.
Change-Id: Ie662718610ed6bc229c07709491e0b2cc3ee051c
2019-02-06 15:31:44 +01:00
Steffen Schaefer
0a03e2718a
Merge branch 'master' into permission-vertical
...
Conflicts:
java/com.sap.sse.security/META-INF/MANIFEST.MF
java/com.sap.sse.security/src/com/sap/sse/security/impl/ReplicableSecurityService.java
java/com.sap.sse.security/src/com/sap/sse/security/impl/SecurityServiceImpl.java
java/com.sap.sse/src/com/sap/sse/util/HttpUrlConnectionHelper.java
2019-01-17 14:13:21 +01:00
Axel Uhl
6ce072ee3f
raised session timeout from 24h to 1y consistently in all shiro.ini files
...
Change-Id: Ic6fe7773c8796ad5606c528937cde1b61c4f8fe8
2019-01-15 18:31:57 +01:00
Axel Uhl
5bebb7af48
Added missing web subject factory configuration to the other shiro.ini configs
...
Change-Id: I874a50d4e175729d652f2a237ea249045685977f
2019-01-07 18:10:08 +01:00
Steffen Schaefer
b244c94538
Fixed typos
2018-12-12 16:35:27 +01:00
Kai Börnert
47ec463a07
fix for rest api's under v2 not accepting bearertoken
2018-12-03 13:17:48 +01:00
Thomas Wiese
1a6441693f
Merge branch 'permission-vertical' into bug4709_pv
...
Conflicts:
java/com.sap.sailing.server.gateway/resources/shiro.ini
java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/RegattasResource.java
2018-11-23 16:05:09 +01:00
Steffen Schäfer
0465bc48e0
Added path to shiro.ini that does not match the existing patterns
2018-11-22 08:48:47 +01:00
Kai Börnert
1fdc0845a1
greatly simplified the complexity of the shiro config for sailing
...
gateway
2018-11-21 10:39:20 +01:00
Thomas Wiese
fd1498e0b3
add security to several rest api enspoints
2018-11-19 15:04:28 +01:00
Thomas Wiese
740515eb12
Merge branch 'permission-vertical' into bug4709_pv
...
Conflicts:
java/com.sap.sailing.gwt.ui.test/src/com/sap/sailing/gwt/ui/test/SlicingTest.java
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/SailingService.java
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/SailingServiceAsync.java
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/SailingServiceImpl.java
java/com.sap.sailing.server.gateway.test/src/com/sap/sailing/server/gateway/test/jaxrs/AbstractJaxRsApiTest.java
2018-11-12 10:30:54 +01:00
Kai Börnert
2c7c737930
also setup spi for bearerTokenUsage
2018-11-09 11:51:50 +01:00
Thomas Wiese
2985b6fca4
Merge branch 'permission-vertical' into bug4709_pv
...
Conflicts:
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/SailingServiceImpl.java
java/com.sap.sailing.server.gateway/resources/shiro.ini
2018-11-08 09:18:39 +01:00
Kai Börnert
ca0b656a50
added anonymous and bearer filter from 4709
2018-11-06 08:54:34 +01:00
Thomas Wiese
34f861f74e
allow anonymous access to Regatta Rest-API endpoint createAndAddCompetitor for registering on open regattas
2018-10-25 10:58:46 +02:00
Axel Uhl
14cb9e2510
Merge remote-tracking branch 'server_ext/bug4757_2' into permission-vertical
...
Change-Id: I3d18b73a1192d0753c24c4e3ae98873c917f9e94
2018-10-09 16:47:50 +02:00
Kai Börnert
990b8aac51
bug4757 added PreferencesRessource to REST api and adjusted the
...
documentation accordingly
2018-10-04 20:01:19 +02:00
Axel Uhl
b18edfa0d5
Merge branch 'master' into permission-vertical
...
Change-Id: I4de6e8809ac08839b40c3a1fffbc64e50e96c13d
2018-09-24 22:46:57 +02:00
Kai Börnert
f01f2830e3
bug4508 added ability to remove tracked races
2018-09-17 17:31:46 +02:00
Axel Uhl
19627ee2fe
Merge branch 'master' into permission-vertical;
...
converted uses of Mode.* to DefaultModes.*
Change-Id: I2790463b1df68a1616971996d20aa4bd5dbbe1d7
2018-09-13 17:55:24 +02:00
Kai Börnert
96c48a74bf
bug4508 fix for shiro bearertoken paths
2018-08-24 09:19:49 +02:00
Kai Börnert
27f33a34af
bug4508 reenabled security and set shiro ini to correctly work with it
2018-08-09 12:18:48 +02:00