mirror of
https://github.com/eclipse-sailing-analytics/sailing-analytics.git
synced 2026-11-14 22:43:57 +00:00
46 lines
1.8 KiB
INI
46 lines
1.8 KiB
INI
|
|
[main]
|
|
credentialsMatcher = org.apache.shiro.authc.credential.Sha256CredentialsMatcher
|
|
credentialsMatcher.storedCredentialsHexEncoded = false
|
|
credentialsMatcher.hashIterations = 1024
|
|
|
|
# Realm configuration:
|
|
# --------------------
|
|
|
|
upRealm = com.sap.sse.security.UsernamePasswordRealm
|
|
upRealm.credentialsMatcher = $credentialsMatcher
|
|
oauthRealm = com.sap.sse.security.OAuthRealm
|
|
bearerTokenRealm = com.sap.sse.security.BearerTokenRealm
|
|
|
|
# Putting it all together:
|
|
sessionManager = com.sap.sse.security.SecurityWebSessionManager
|
|
securityManager.sessionManager = $sessionManager
|
|
sessionDAO = org.apache.shiro.session.mgt.eis.EnterpriseCacheSessionDAO
|
|
securityManager.sessionManager.sessionDAO = $sessionDAO
|
|
subjectDAO = com.sap.sse.security.NoSessionStorageSessionDAO
|
|
securityManager.subjectDAO = $subjectDAO
|
|
# 1y timeout
|
|
securityManager.sessionManager.globalSessionTimeout = 31536000000
|
|
cacheManager = com.sap.sse.security.SessionCacheManager
|
|
securityManager.cacheManager = $cacheManager
|
|
|
|
# Support for anonymous user permissions
|
|
webSubjectFactoryWithAnonymousPrincipalSupport=com.sap.sse.security.WebSubjectFactoryWithAnonymousPrincipalSupport
|
|
securityManager.subjectFactory=$webSubjectFactoryWithAnonymousPrincipalSupport
|
|
|
|
# Authentication Filter Configurations
|
|
# ------------------------------------
|
|
|
|
# This authentication filter accepts a bearer access token in the HTTP
|
|
# Authorization header field, as in
|
|
# Authorization: Bearer 1029741026501365024376093245
|
|
# If no such bearer token is provided, the filter falls back to basic HTTP
|
|
# authentication ("Authentication: Basic ...") and then regular form-based
|
|
# authentication with POST parameters "username" and "password".
|
|
bearerToken = com.sap.sse.security.BearerTokenOrBasicOrFormAuthenticationFilter
|
|
|
|
# Specifying filter chains for URL patterns
|
|
|
|
[urls]
|
|
/replication = bearerToken
|