Commit Graph

768 Commits

Author SHA1 Message Date
Martin Stockhammer e9a7c70b89 Switching to log4j2 2.17.0 and updating slf4j version 2021-12-18 13:47:45 +01:00
Martin Stockhammer cd3eeac72e Switching to log4j2 2.16.0 2021-12-15 07:48:08 +01:00
Martin Stockhammer fa8d654bba Switching to new log4j2 version 2021-12-11 20:15:32 +01:00
Martin Stockhammer 38b9554710 Fixing JDK and maven labels for build 2020-10-23 17:30:48 +02:00
Martin Stockhammer ee8f38dd0c [maven-release-plugin] prepare for next development iteration 2020-06-13 20:34:55 +02:00
Martin Stockhammer 7bb6d8eba2 [maven-release-plugin] prepare release redback-2.6.1 2020-06-13 20:34:44 +02:00
Martin Stockhammer 68a7bc4c2a Improving LDAP filters by escaping characters 2020-05-10 11:02:54 +02:00
Martin Stockhammer 1e7c84322b Adding parameter for threads to jenkins file 2020-02-10 09:48:07 +01:00
Martin Stockhammer a3bc5ee7ff Fix of Jenkinsfile 2020-01-25 20:53:51 +01:00
Martin Stockhammer 31c72fc424 Update of Jenkinsfile 2020-01-25 20:53:06 +01:00
Martin Stockhammer 3c212ed127 Updating jenkins build file 2020-01-25 20:14:55 +01:00
Martin Stockhammer 4a98784031 [MRM-2008] Fix for group names with slashes
Changing the group name retrieval to attribute read. Using CompositeName and
LdapName to retrieve the result. Slashes are treated special in JNDI.
2020-01-25 19:41:28 +01:00
Martin Stockhammer cd9334ce74 Switching to SNAPSHOT version 2.6.1-SNAPSHOT 2020-01-25 18:56:33 +01:00
Martin Stockhammer 419239b15b [maven-release-plugin] prepare release redback-2.6 2017-05-11 20:58:44 +02:00
Martin Stockhammer 5dfde1ee1e Preparing new release 2.6 2017-05-11 20:39:04 +02:00
Martin Stockhammer 4e4e3428c4 Fixing X-Forwarded-Host header handling 2017-05-10 22:59:51 +02:00
olivier lamy 396694765f formatting
Signed-off-by: olivier lamy <olamy@apache.org>
2017-05-08 21:18:13 +10:00
olivier lamy 69c41ad38b add some logs
Signed-off-by: olivier lamy <olamy@apache.org>
2017-05-08 21:17:54 +10:00
Martin Stockhammer 1b13cbd019 Changing to list based request validation configuration 2017-04-28 00:29:50 +02:00
olivier lamy 99a075f25f last parent snapshot
Signed-off-by: olivier lamy <olamy@apache.org>
2017-04-26 09:30:43 +10:00
olivier lamy c46c26948d a bit more details for debug
Signed-off-by: olivier lamy <olamy@apache.org>
2017-04-25 21:43:37 +10:00
olivier lamy 91cc4675a1 exclude Jenkinsfile from rat
Signed-off-by: olivier lamy <olamy@apache.org>
2017-04-25 09:53:33 +10:00
olivier lamy 28234b5ef8 display maven error
Signed-off-by: olivier lamy <olamy@apache.org>
2017-04-25 09:53:33 +10:00
olivier lamy 25056909d6 add simple Jenkinsfile
Signed-off-by: olivier lamy <olamy@apache.org>
2017-04-25 09:53:33 +10:00
Martin Stockhammer 53d0ccaaf3 [maven-release-plugin] prepare for next development iteration 2017-04-20 21:04:30 +02:00
Martin Stockhammer 966bb86695 [maven-release-plugin] prepare release redback-2.5 2017-04-20 21:04:21 +02:00
Martin Stockhammer f09d251960 Changing to new parent pom version 17 2017-04-20 20:58:12 +02:00
Martin Stockhammer a3ee32699b [MRM-1937] Prevent creation of wrong initial admin
Throws a error, if the admin user has the wrong name.
2017-04-14 21:01:39 +02:00
Martin Stockhammer db185cb79d Adding some information about redback configuration settings 2017-03-18 18:33:14 +01:00
Martin Stockhammer a6ee0f8770 Fixing tests for rest services 2017-03-11 11:12:59 +01:00
Martin Stockhammer d9146ce8ab Fixing bad import 2017-03-09 20:07:03 +01:00
Martin Stockhammer 6a6b7bb939 Adding token validation to interceptor 2017-02-12 20:47:14 +01:00
Martin Stockhammer 98c98b3979 Adding log statements 2017-02-12 18:44:55 +01:00
Martin Stockhammer 461b7e98f8 Adding validationToken to toString method 2017-02-12 17:12:41 +01:00
Martin Stockhammer a6ceb38469 Using random iv vector to generate unique tokens for each login 2017-02-12 17:09:15 +01:00
Martin Stockhammer de5816adf0 Adding validation token generator got login 2017-02-12 14:02:01 +01:00
Martin Stockhammer e9bc481884 Adding port check for Referer header 2017-01-30 22:42:33 +01:00
Martin Stockhammer 95f1b3e430 Implementing Header verification for REST API calls
Implementing header verification techniques mentioned in:
https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet#Verifying_Same_Origin_with_Standard_Headers
2017-01-30 20:37:15 +01:00
Martin Stockhammer 78d822d145 Fixing validation error in unit tests 2016-10-16 17:18:42 +02:00
Martin Stockhammer 2aa6cdf6c6 Adding flag for authenticator to avoid autowiring exceptions
Adds a isValid() method to the authenticator to avoid exceptions during
initialization.
2016-10-16 17:18:42 +02:00
Ciprian Ciubotariu c9ca73b94c Use NamingManager instead of LdapCtxFactory
Fixes deprecation warnings on LdapCtxFactory
2016-10-03 18:32:52 +03:00
olivier lamy c49cb230eb unused imports
Signed-off-by: olivier lamy <olamy@apache.org>
2016-09-28 12:44:40 +10:00
olivier lamy d17c6ffb9d use last parent snapshot
Signed-off-by: olivier lamy <olamy@apache.org>
2016-09-14 22:00:41 +10:00
olivier lamy 11b2cdbae0 Merge branch 'pr/10'
[MRM-1923] merge pr
2016-09-13 10:55:00 +10:00
olivier lamy 8e98a8aa9e Merge branch 'pr/9'
closed #9
[MRM-1908] Logged on users can write any repository
2016-09-13 10:49:27 +10:00
olivier lamy 87e1950057 Merge branch 'pr/7'
close #7
2016-09-09 21:47:52 +10:00
olivier lamy 780b1b7bb7 Merge branch 'pr/6' #6
close #6
2016-09-09 21:46:39 +10:00
Martin Stockhammer 5ce2714a37 Fixing bind issue with certain ldap servers, when user not found
Subsequent calls of NamingResult#hasMoreElements returns different values in some
environments and situations.
e.g. it occured on IBM JDK 7 with Windows Active Directory LDAP when the first value of 'hasMoreElements'
was false.
The first value is cached now.
2016-09-09 10:03:27 +02:00
Martin Stockhammer 796af57be2 Adding parameter references in authorization resource
In certain cases the resource must be dynamically set by parameter values.
This patch allows to add a reference into the resource field of the redback
annotation '{parameterName}' that fills the resource of the permission dynamically
with the parameter value, if found.
2016-09-09 09:40:29 +02:00
Ciprian Ciubotariu 3ef0e5931e Beautify case of default ldap group attribute
More of a style issue, since attribute descriptions are case insensitive
according to RFC4512.
2016-09-07 16:28:04 +03:00