966bb86695
[maven-release-plugin] prepare release redback-2.5
2017-04-20 21:04:21 +02:00
f09d251960
Changing to new parent pom version 17
2017-04-20 20:58:12 +02:00
a3ee32699b
[MRM-1937] Prevent creation of wrong initial admin
...
Throws a error, if the admin user has the wrong name.
2017-04-14 21:01:39 +02:00
db185cb79d
Adding some information about redback configuration settings
2017-03-18 18:33:14 +01:00
a6ee0f8770
Fixing tests for rest services
2017-03-11 11:12:59 +01:00
d9146ce8ab
Fixing bad import
2017-03-09 20:07:03 +01:00
6a6b7bb939
Adding token validation to interceptor
2017-02-12 20:47:14 +01:00
98c98b3979
Adding log statements
2017-02-12 18:44:55 +01:00
461b7e98f8
Adding validationToken to toString method
2017-02-12 17:12:41 +01:00
a6ceb38469
Using random iv vector to generate unique tokens for each login
2017-02-12 17:09:15 +01:00
de5816adf0
Adding validation token generator got login
2017-02-12 14:02:01 +01:00
e9bc481884
Adding port check for Referer header
2017-01-30 22:42:33 +01:00
95f1b3e430
Implementing Header verification for REST API calls
...
Implementing header verification techniques mentioned in:
https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet#Verifying_Same_Origin_with_Standard_Headers
2017-01-30 20:37:15 +01:00
78d822d145
Fixing validation error in unit tests
2016-10-16 17:18:42 +02:00
2aa6cdf6c6
Adding flag for authenticator to avoid autowiring exceptions
...
Adds a isValid() method to the authenticator to avoid exceptions during
initialization.
2016-10-16 17:18:42 +02:00
c9ca73b94c
Use NamingManager instead of LdapCtxFactory
...
Fixes deprecation warnings on LdapCtxFactory
2016-10-03 18:32:52 +03:00
c49cb230eb
unused imports
...
Signed-off-by: olivier lamy <olamy@apache.org>
2016-09-28 12:44:40 +10:00
d17c6ffb9d
use last parent snapshot
...
Signed-off-by: olivier lamy <olamy@apache.org>
2016-09-14 22:00:41 +10:00
11b2cdbae0
Merge branch 'pr/10'
...
[MRM-1923] merge pr
2016-09-13 10:55:00 +10:00
8e98a8aa9e
Merge branch 'pr/9'
...
closed #9
[MRM-1908] Logged on users can write any repository
2016-09-13 10:49:27 +10:00
87e1950057
Merge branch 'pr/7'
...
close #7
2016-09-09 21:47:52 +10:00
780b1b7bb7
Merge branch 'pr/6' #6
...
close #6
2016-09-09 21:46:39 +10:00
5ce2714a37
Fixing bind issue with certain ldap servers, when user not found
...
Subsequent calls of NamingResult#hasMoreElements returns different values in some
environments and situations.
e.g. it occured on IBM JDK 7 with Windows Active Directory LDAP when the first value of 'hasMoreElements'
was false.
The first value is cached now.
2016-09-09 10:03:27 +02:00
796af57be2
Adding parameter references in authorization resource
...
In certain cases the resource must be dynamically set by parameter values.
This patch allows to add a reference into the resource field of the redback
annotation '{parameterName}' that fills the resource of the permission dynamically
with the parameter value, if found.
2016-09-09 09:40:29 +02:00
3ef0e5931e
Beautify case of default ldap group attribute
...
More of a style issue, since attribute descriptions are case insensitive
according to RFC4512.
2016-09-07 16:28:04 +03:00
0dc00492ed
Ignore Netbeans artifacts
2016-09-07 00:30:14 +03:00
c02519d5a6
change target back to 1.6
2016-07-20 23:54:43 +02:00
e2909f2956
[MRM-1827] Redback core fail with jdk 1.7 (compiler target 1.7) use new bcel 6.0
2016-07-20 23:37:47 +02:00
3d266df48d
[maven-release-plugin] prepare for next development iteration
2016-05-20 12:55:38 +10:00
530fa8a468
[maven-release-plugin] prepare release redback-2.4
2016-05-20 12:55:09 +10:00
f012c5608a
fix javadoc error
...
Signed-off-by: olivier lamy <olamy@apache.org>
2016-05-20 12:44:56 +10:00
68e3f318b7
use staged released parent pom
...
Signed-off-by: olivier lamy <olamy@apache.org>
2016-05-20 12:02:21 +10:00
4e378769a8
change style and template to have a kind of enunciate 1.x style that we can use
2015-11-13 18:25:40 +01:00
ae4d7f775e
Fixed issue with syntax for filter
2015-10-23 13:35:31 +01:00
e546fe3bc0
Allowing filtering of LDAP groups
2015-10-23 11:01:44 +01:00
7142138dcc
disable travis build with 1.8 as does not work
2015-09-25 16:03:56 +10:00
108e8b9476
last parent with bundle plugin last version
2015-09-25 15:51:27 +10:00
070bc64fb0
rat ignore travis file
2015-09-25 15:33:45 +10:00
8de53f5165
add travis file
2015-09-25 15:26:43 +10:00
fe76316f2d
slf4j upgrade
2015-09-08 21:02:11 +10:00
a3f2efb78d
upgrade spring version
2015-09-08 20:47:48 +10:00
d0bc52fff1
Fix for MRM-1873 which broke AD group assignments
...
Escaping only needed in the LDAP filter string
2015-05-28 12:00:34 +02:00
fc28ad1769
last spring 4.1.6
2015-05-24 22:15:24 +10:00
958cb169b3
log4j2 2.3
2015-05-24 22:04:53 +10:00
80931e6476
[maven-release-plugin] prepare for next development iteration
2015-02-22 22:20:24 +11:00
7cc90a66af
[maven-release-plugin] prepare release redback-2.3
2015-02-22 22:20:15 +11:00
f7242c0250
use staged release
2015-02-19 22:23:59 +11:00
3258c66af1
fix MRM-1873
2015-02-14 09:42:29 +11:00
43e0161583
plugin version inherited from parent(
2015-02-14 09:41:56 +11:00
221aa62c8f
Escape user DN used to build group filter. Fixes MRM-1873
2015-02-12 10:57:02 -06:00
Martin Stockhammer
Ciprian Ciubotariu
olivier lamy
Martin Stockhammer
Eric Barboni
Mat Jaggard
Sascha Vogt
Chris Heyne