mirror of
https://github.com/eclipse-sailing-analytics/sailing-analytics.git
synced 2026-09-22 21:55:39 +00:00
55 lines
2.4 KiB
INI
55 lines
2.4 KiB
INI
[main]
|
|
invalidRequest = org.apache.shiro.web.filter.InvalidRequestFilter
|
|
invalidRequest.blockBackslash = false
|
|
invalidRequest.blockSemicolon = false
|
|
invalidRequest.blockNonAscii = false
|
|
credentialsMatcher = org.apache.shiro.authc.credential.Sha256CredentialsMatcher
|
|
credentialsMatcher.storedCredentialsHexEncoded = false
|
|
credentialsMatcher.hashIterations = 1024
|
|
|
|
# Realm configuration:
|
|
# --------------------
|
|
|
|
upRealm = com.sap.sse.security.UsernamePasswordRealm
|
|
upRealm.credentialsMatcher = $credentialsMatcher
|
|
oauthRealm = com.sap.sse.security.OAuthRealm
|
|
bearerTokenRealm = com.sap.sse.security.BearerTokenRealm
|
|
|
|
# Putting it all together:
|
|
sessionManager = com.sap.sse.security.SecurityWebSessionManager
|
|
securityManager.sessionManager = $sessionManager
|
|
sessionDAO = org.apache.shiro.session.mgt.eis.EnterpriseCacheSessionDAO
|
|
securityManager.sessionManager.sessionDAO = $sessionDAO
|
|
subjectDAO = com.sap.sse.security.NoSessionStorageSessionDAO
|
|
securityManager.subjectDAO = $subjectDAO
|
|
# 1y timeout
|
|
securityManager.sessionManager.globalSessionTimeout = 31536000000
|
|
cacheManager = com.sap.sse.security.SessionCacheManager
|
|
securityManager.cacheManager = $cacheManager
|
|
authenticationStrategy = com.sap.sse.security.AtLeastOneSuccessfulStrategyWithLockingAndBanning
|
|
securityManager.authenticator.authenticationStrategy = $authenticationStrategy
|
|
|
|
# Support for anonymous user permissions
|
|
webSubjectFactoryWithAnonymousPrincipalSupport=com.sap.sse.security.WebSubjectFactoryWithAnonymousPrincipalSupport
|
|
securityManager.subjectFactory=$webSubjectFactoryWithAnonymousPrincipalSupport
|
|
|
|
# Authentication Filter Configurations
|
|
# ------------------------------------
|
|
|
|
# This authentication filter accepts a bearer access token in the HTTP
|
|
# Authorization header field, as in
|
|
# Authorization: Bearer 1029741026501365024376093245
|
|
# If no such bearer token is provided, the filter falls back to basic HTTP
|
|
# authentication ("Authentication: Basic ...") and then regular form-based
|
|
# authentication with POST parameters "username" and "password".
|
|
bearerToken = com.sap.sse.security.BearerTokenOrBasicOrFormAuthenticationFilter
|
|
|
|
# The same as bearerToken, but with additional fallback to anonymous authentication.
|
|
# In this case sufficient permission checks have to be done on the application side.
|
|
bearerTokenOrAnonymous = com.sap.sse.security.BearerTokenOrBasicOrFormOrAnonymousAuthenticationFilter
|
|
|
|
# Specifying filter chains for URL patterns
|
|
|
|
[urls]
|
|
/replication = bearerTokenOrAnonymous
|