Commit Graph
74 Commits
Author SHA1 Message Date
Axel Uhl 2416b49f89 bug6099: interims commit with a first implementation of a user account locking/banning mechanism;
yet missing is writing to persistence and replication
2025-03-17 16:30:57 +01:00
Axel Uhl 7de36861ce formatting changes and use of final only 2025-01-23 16:14:21 +01:00
Udo Wessels 62cc6d42c3 bug5900: added an additional meta attribute description to give google Crawler the right information for Google search. 2023-08-28 11:46:10 +02:00
service.tip.git abdd851acb [INTERNAL] Translation delivery: commit by LX Lab
Change-Id: Ic4d3dc8ced2e5b3b827eadbad0e890813495817c
2022-12-15 16:19:24 +00:00
service.tip.git da4ad6f41c [INTERNAL] Translation delivery: commit by LX Lab
Change-Id: I5c86e8c03941da1e0b3c941ed2b811598698ccb9
2021-07-15 15:17:17 +00:00
Axel Uhl 9e289b0d64 bug5566: use Shiro security (bearerTokenOrAnonymous) for /sailingserver/windStatus servlet 2021-06-03 10:00:06 +02:00
Axel Uhl 7860bf23bb Merge branch 'master' into translation 2021-04-23 22:59:28 +02:00
Axel Uhl 019fd6be24 translation: moved _en.properties changes to .properties files; removed extra res/values-en* folders accidentally committed by LXLabs 2021-04-23 22:57:37 +02:00
service.tip.git ac95acb627 [INTERNAL] Translation delivery: commit by LX Lab
Change-Id: Ie75de15a55aeb6801c8e52b82daf9e53112748f5
2021-04-22 15:22:43 +00:00
Axel Uhl ef9097dd5e bug5513 aftermath: fixing class of invalidRequest filter in all shiro.ini files 2021-04-16 12:01:50 +02:00
Axel Uhl 37fb3dc0a5 bug5513: added configuration of Shiro invalidRequest filter for backward compatibility to all shiro.ini files;
re-enabling backslash, semicolon and non-ASCII characters (important, e.g., for Umlaut characters)
in URL paths again
2021-04-16 11:37:44 +02:00
Axel Uhl ae75a94737 bug5513: added the now necessary authc = com.sap.sse.security.CustomFilter to all shiro.ini files, as already documented in Wiki 2021-04-13 09:39:49 +02:00
Tu Tran a75deb3b65 Payment: Refactor and Improve subscription abstraction layers 2020-10-07 10:55:26 +07:00
Tu Tran 95cd14a711 Payment: Refactor and improve abstract layer for backend implementation 2020-09-30 17:28:26 +07:00
Tu Tran 034bd34147 Payment: Merge changes from master 2020-09-22 14:27:01 +07:00
Dennis Aulenbacher 96644b54ad bug5312: Exluding og:url tag for facebook crawler 2020-09-10 13:20:04 +02:00
Dennis Aulenbacher 66a5e6cba4 bug5312: Manually blocking the facebookCrawler from interpreting the
refresh tag as 301 redirect.
2020-09-09 19:22:02 +02:00
Dennis Aulenbacher 0cc221e57d bug5312: Adjusting fallback text in SharedProxy.html 2020-08-26 14:21:06 +02:00
Dennis Aulenbacher 241e69bb18 bug5312: Temporarily Duplicated SharedProxy.html 2020-08-20 13:15:04 +02:00
Tu Tran 2340d51bbe Payment: Refactor webhook authentication, and add permission verifying filter 2020-07-14 18:23:23 +07:00
Tu Tran 670dbe0e93 Payment: refactoring code as feedbacks 2020-07-09 16:55:33 +07:00
Tu Tran 7e8f71d58d Payment: Fix code formatting 2020-05-22 16:36:27 +07:00
Tu Tran 5006fa1b88 Payment: Refactor code 2020-05-22 11:46:13 +07:00
Tu Tran 655756e3b9 Payment: Update code comments, refactor webhook event class, refactor webhook basic auth handler 2020-05-21 11:52:43 +07:00
Steffen Schaefer b9f53284b9 Bug 5085: Moved some security related classes to prevent dependency
cycles and adjusted shiro.ini files
2019-12-09 09:21:35 +01:00
Axel Uhl dc86ecf0ea improved ORC certificate import servlet's error messages; registered servlet, also with shiro.ini
Change-Id: I844f375c34e69523d31b19767cf636740d6d6323
2019-09-23 16:19:41 +02:00
service.tip.git c5881fa7d4 [INTERNAL] Translation delivery: commit by SLS
Change-Id: I415313ffc355722d7e473faacdc3c0004666c943
2019-05-30 16:02:55 +00:00
Steffen Schaefer b9a2e73899 Merge branch 'master' into permission-vertical
Conflicts:
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/SailingServiceImpl.java
	java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/MongoObjectFactoryImpl.java
2019-02-07 07:52:55 +01:00
Axel Uhl b7e3d0f472 introduced NoSessionStorageSessionDAO for all REST bundles' shiro.ini;
this solves the problem of a new session being created and stored each
time a Bearer token-authenticated request is fired. REST requests are
expected not to produce nor maintain session state.

Change-Id: Ie662718610ed6bc229c07709491e0b2cc3ee051c
2019-02-06 15:31:44 +01:00
Steffen Schaefer 0a03e2718a Merge branch 'master' into permission-vertical
Conflicts:
	java/com.sap.sse.security/META-INF/MANIFEST.MF
	java/com.sap.sse.security/src/com/sap/sse/security/impl/ReplicableSecurityService.java
	java/com.sap.sse.security/src/com/sap/sse/security/impl/SecurityServiceImpl.java
	java/com.sap.sse/src/com/sap/sse/util/HttpUrlConnectionHelper.java
2019-01-17 14:13:21 +01:00
Axel Uhl 6ce072ee3f raised session timeout from 24h to 1y consistently in all shiro.ini files
Change-Id: Ic6fe7773c8796ad5606c528937cde1b61c4f8fe8
2019-01-15 18:31:57 +01:00
Axel Uhl 5bebb7af48 Added missing web subject factory configuration to the other shiro.ini configs
Change-Id: I874a50d4e175729d652f2a237ea249045685977f
2019-01-07 18:10:08 +01:00
Steffen Schaefer b244c94538 Fixed typos 2018-12-12 16:35:27 +01:00
Kai Börnert 47ec463a07 fix for rest api's under v2 not accepting bearertoken 2018-12-03 13:17:48 +01:00
Thomas Wiese 1a6441693f Merge branch 'permission-vertical' into bug4709_pv
Conflicts:
	java/com.sap.sailing.server.gateway/resources/shiro.ini
	java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/RegattasResource.java
2018-11-23 16:05:09 +01:00
Steffen Schäfer 0465bc48e0 Added path to shiro.ini that does not match the existing patterns 2018-11-22 08:48:47 +01:00
Kai Börnert 1fdc0845a1 greatly simplified the complexity of the shiro config for sailing
gateway
2018-11-21 10:39:20 +01:00
Thomas Wiese fd1498e0b3 add security to several rest api enspoints 2018-11-19 15:04:28 +01:00
Thomas Wiese 740515eb12 Merge branch 'permission-vertical' into bug4709_pv
Conflicts:
	java/com.sap.sailing.gwt.ui.test/src/com/sap/sailing/gwt/ui/test/SlicingTest.java
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/SailingService.java
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/SailingServiceAsync.java
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/SailingServiceImpl.java
	java/com.sap.sailing.server.gateway.test/src/com/sap/sailing/server/gateway/test/jaxrs/AbstractJaxRsApiTest.java
2018-11-12 10:30:54 +01:00
Kai Börnert 2c7c737930 also setup spi for bearerTokenUsage 2018-11-09 11:51:50 +01:00
Thomas Wiese 2985b6fca4 Merge branch 'permission-vertical' into bug4709_pv
Conflicts:
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/SailingServiceImpl.java
	java/com.sap.sailing.server.gateway/resources/shiro.ini
2018-11-08 09:18:39 +01:00
Kai Börnert ca0b656a50 added anonymous and bearer filter from 4709 2018-11-06 08:54:34 +01:00
Thomas Wiese 34f861f74e allow anonymous access to Regatta Rest-API endpoint createAndAddCompetitor for registering on open regattas 2018-10-25 10:58:46 +02:00
Axel Uhl 14cb9e2510 Merge remote-tracking branch 'server_ext/bug4757_2' into permission-vertical
Change-Id: I3d18b73a1192d0753c24c4e3ae98873c917f9e94
2018-10-09 16:47:50 +02:00
Kai Börnert 990b8aac51 bug4757 added PreferencesRessource to REST api and adjusted the
documentation accordingly
2018-10-04 20:01:19 +02:00
Axel Uhl b18edfa0d5 Merge branch 'master' into permission-vertical
Change-Id: I4de6e8809ac08839b40c3a1fffbc64e50e96c13d
2018-09-24 22:46:57 +02:00
Kai Börnert f01f2830e3 bug4508 added ability to remove tracked races 2018-09-17 17:31:46 +02:00
Axel Uhl 19627ee2fe Merge branch 'master' into permission-vertical;
converted uses of Mode.* to DefaultModes.*

Change-Id: I2790463b1df68a1616971996d20aa4bd5dbbe1d7
2018-09-13 17:55:24 +02:00
Kai Börnert 96c48a74bf bug4508 fix for shiro bearertoken paths 2018-08-24 09:19:49 +02:00
Kai Börnert 27f33a34af bug4508 reenabled security and set shiro ini to correctly work with it 2018-08-09 12:18:48 +02:00