Commit Graph
243 Commits
Author SHA1 Message Date
Axel Uhl b7e3d0f472 introduced NoSessionStorageSessionDAO for all REST bundles' shiro.ini;
this solves the problem of a new session being created and stored each
time a Bearer token-authenticated request is fired. REST requests are
expected not to produce nor maintain session state.

Change-Id: Ie662718610ed6bc229c07709491e0b2cc3ee051c
2019-02-06 15:31:44 +01:00
Axel Uhl 755cb3a06d replicate Shiro cache entry updates only if they are to be stored, too;
this avoids replicating stuff during loading from DB initially

Change-Id: I83365881e71456b2b177334c77ea7af8ae98690c
2019-02-04 12:33:19 +01:00
Axel Uhl d2c3bdf2b5 ensure in-order delivery of messages from replica to master;
always pass operations to be sent to master into the queue so they
cannot be delivered to the master earlier than other queued operations
after connectivity has been restored

Change-Id: I7b1409dc4663659039058ce2c0511a26009114b4
2019-01-22 14:31:58 +01:00
Axel Uhl e633e66766 introduced queueing service for operations unsent to master
Change-Id: I0021082ec96b26b4302821a37acf2eb085baf2af
2019-01-21 23:10:45 +01:00
Axel Uhl 34b360cc3e replication status under /replication/replication?action=STATUS
Change-Id: I63cfd64609e458690a89da3ed5478ee5f239579b
2019-01-18 17:35:58 +01:00
Axel Uhl 546cac6548 added persistence support for clearing ReplicatingCacheManager and ReplicatingCache; added session garbage collection upon SecurityService construction
Change-Id: I78475411ef01916678e383922d9d0bd11dfd5aec
2019-01-18 13:45:12 +01:00
Axel Uhl d8464b230a working session persistence; don't store again while loading
Change-Id: Ibcf368d0a5000234db3a48da4ea70c01a6565235
2019-01-16 14:36:22 +01:00
Axel Uhl 065e427da5 handle PrincipalCollection in Session with persistence
Change-Id: I661366e1dcb9d3583da9bbe26b6e2646571320ca
2019-01-16 14:16:03 +01:00
Axel Uhl 6ce072ee3f raised session timeout from 24h to 1y consistently in all shiro.ini files
Change-Id: Ic6fe7773c8796ad5606c528937cde1b61c4f8fe8
2019-01-15 18:31:57 +01:00
Axel Uhl 7b1e360e51 added com.sap.sse.security.persistence also to java/pom.xml
Change-Id: Ied205bf7b23ca491548a2dcadf2a75b1edb89526
2019-01-15 18:20:03 +01:00
Axel Uhl bce05a434c use HttpUrlConnectionHelper in sendReplicaInitiatedOperationToMaster
Change-Id: I259341cf80dae6dbd7876a21327442aa6852cdea
2019-01-02 18:31:28 +01:00
Axel Uhl 77a243dbf3 ensure sessions are pinged/bumped even if timeouts are much longer than server life span
Change-Id: I3d3eade0c5cbd6001e9cfe40794ca7e3ea783c22
2019-01-02 15:44:28 +01:00
Axel Uhl 4c4752a748 extracted replication interfaces into separate bundle to avoid having to activate the replication service only for registering a replicable
Change-Id: I22e423efee06e653a9ed3b9bea13b3b0153f7156
2018-12-14 21:27:17 +01:00
Kai Börnert 61e0f6aa7c fixed multiple points interacting with the userstore directly, that
might cause issues with replication
2018-11-14 09:34:38 +01:00
Henri Kohlberg a77bf60ce6 Bug 4104: Refactored data aquisition and extracted every backend functionality of tags into new service called TaggingService. SailingService serves as interface between client (TaggingPanel) and service (TaggingService) but does not affect any of the data itself. 2018-09-13 14:40:52 +02:00
Axel Uhl 424f8c85bd use require-bundle in com.sap.sse.security for com.sap.sse because require-package is ambiguous for com.sap.sse.util;
both, com.sap.sse and com.sap.sse.shared.android have contributions for
that package, and there is a chance that the wrong one is selected;
com.sap.sse.security requires ClearStateTestSupport which is found
in com.sap.sse.

Change-Id: I838757c2bb0639c8d8de91e58f562dcb055de4fb
2018-08-05 17:10:14 +02:00
Axel Uhl bd90f921dd added Automatic-Module-Name headers to satisfy Oxygen.3 Java9 warnings rule 2018-03-24 01:45:37 +01:00
Axel Uhl 680f3a0441 added UserStore.hasUsers for efficient check whether there are none
Change-Id: Ifacc9c84bda961399b866e860757e8ebe0d78b71
2017-11-29 14:09:35 +01:00
Steffen Schaefer a53686e26c Bug 4248: Locale is now initially set on registration of a new user 2017-10-10 10:54:58 +02:00
Axel Uhl 3700e339db fixed issue with wrong username being returned by SecurityResource
Change-Id: I7eca1b41d5770875e4f9d78af2a46dac2757b821
2017-08-04 11:18:59 +02:00
Axel Uhl 6959b0db07 added comment for /login URL configuration
Change-Id: I2d7fb5eb717dd30b04ea546d2f54ab5adf5e8916
2017-08-02 15:36:28 +02:00
Axel Uhl e2c9bcd9cf re-added the phony /api/restsecurity/login URL into shiro.ini
Change-Id: Ic2f10e2cedb374b3f918571b157aa4bbdeceb17f
2017-08-02 15:35:41 +02:00
Axel Uhl f8666a806d bug 4254: provide user creation, deletion, edit and password recovery REST support
Change-Id: I6e71971b21d01de642afae2632a2eb415b24d85f
2017-07-31 18:24:49 +02:00
Axel Uhl 9e85f0508a adjusted exception message text
Change-Id: I70e885abc27769a307aad365ced34d066ac43f91
2017-07-10 13:12:43 +02:00
Steffen Schaefer 2ea0af2565 Bug 4208: Adjustments to ensure serializable exceptions to be thrown in
remote services
2017-07-06 11:19:42 +02:00
Steffen Schaefer b4f2439daa Bug 4208: Adjusted security checks to avoid NPEs and reduced duplicate
code
2017-07-05 16:15:57 +02:00
Steffen Schaefer b7cbefe965 Bug 4208: Changed return type Void to void 2017-07-05 14:40:59 +02:00
Steffen Schaefer 2f7a15d733 Bug 4148: first pieces to show a list of settings in the user profile 2017-06-21 13:21:26 +02:00
Steffen Schaefer 9123771f34 normalized line endings 2017-05-16 09:42:02 +02:00
Axel Uhl edcacbb815 made activator's stop method resilient against uninitialized elements
Change-Id: I90d93f5018f3ee5947d4591240f0dd2c99bfbd64
2017-03-17 23:43:41 +01:00
Steffen Schaefer ba374b30d6 Removed package import to org.apache.commons.logging from bundles that
seem to not need commons-logging at all
2017-01-10 10:32:17 +01:00
Steffen Schaefer b598a5c4a6 Merge branch 'master' into bug2447
# Conflicts:
#	java/com.google.gwt.user/META-INF/MANIFEST.MF
#	java/com.sap.sailing.feature/feature.xml
#	java/com.sap.sse.gwt.test/META-INF/MANIFEST.MF
#	java/com.sap.sse.security/META-INF/MANIFEST.MF
2016-12-05 17:10:22 +01:00
Steffen Schaefer 3ec659572f Importing commons logging by its package. We have both, commons logging
and jcl-over-slf4j in the product. In addition we have no
commons-logging implementation in the product. With this change we can
consistently use jcl-over-slf4j that delivers log messages to jul.
2016-12-01 10:21:26 +01:00
Steffen Schaefer 137bce36c1 Removed direct bundle references to slf4j because it seems that we do
not really need it in our code
2016-12-01 10:15:17 +01:00
Steffen Schaefer 0d89902f6f Consistently using servlet API 3.1. There was an export of javax.servlet
in the GWT bundles that had version 2.x but was 3.x. The GWT bundles do
not export servlet API anymore, so everything can consistently be on
servlet version 3.1 that is provided by our jetty server.
2016-11-21 13:48:23 +01:00
Axel Uhl e31f3aef0a bug 3776: removing unused User.setName(String) method
Change-Id: I7b5ee44f513d041d00bf05aa8e68f06a6df8807a
2016-09-21 17:00:21 +02:00
Axel Uhl 06b65ed248 whitespace change only
Change-Id: I271023a973b17ef77d89d084dee493c53fbeaaaf
2016-09-20 16:14:13 +02:00
Benjamin Barth 228c1b3cd2 bug3858 Fixed construction of mail verification link if locale parameter
is present
2016-08-10 11:30:26 +02:00
Axel Uhl 8805bfb7eb fix proposal for bug 3840: replicating string-based preference change to avoid serializing preference objects with operation
Change-Id: I69a04306be43263e07f0e87ef669328900c70623
2016-07-30 17:54:28 +02:00
Axel Uhl 5df840c0d4 made user store variable final in Activator
Change-Id: I0d5119b0e78809ecbfc1c22a7a942361355364e9
2016-07-19 16:27:47 +02:00
Axel Uhl 1d9dd796a0 added some Javadoc to User methods
Change-Id: I10a6a550dd61cad9b6aa72f71fdf31fcc5ca00cd
2016-07-19 16:09:27 +02:00
Steffen Schaefer 8e59b48216 Listeners aren't cleared anymore when clearing UserStore, but all
listeners are informed about removal of all preference objects.
2016-07-19 11:24:20 +02:00
Axel Uhl 4adb6ba386 open the OSGi service tracker, or else nothing happens...
Change-Id: I5b278f4ef72849f2910b2b58dfa9b622cc9631bd
2016-07-15 19:53:44 +02:00
Steffen Schaefer 0163cc5571 Changed UserManagementService.updateUserProperties to also update the
user's locale
2016-07-13 13:37:47 +02:00
Steffen Schaefer 1ae892f993 Extended User.toString to also include fields added recently 2016-07-13 13:28:39 +02:00
Steffen Schaefer 5847b016ce Extended User to have an optional locale field to store the user's
language preference
2016-07-13 13:26:34 +02:00
Steffen Schaefer 01ceea6367 Minor documentation changes 2016-07-12 11:17:24 +02:00
Steffen Schaefer 662e1e2002 Renamed method to make more clear what's happening 2016-07-12 11:07:28 +02:00
Steffen Schaefer e7bf7846d7 Skip users without verified email address when sending notifications 2016-07-12 11:05:24 +02:00
Steffen Schaefer d49ee0f0d2 Added more JavaDocs 2016-07-12 10:54:09 +02:00