Martin Stockhammer
e9a7c70b89
Switching to log4j2 2.17.0 and updating slf4j version
2021-12-18 13:47:45 +01:00
Martin Stockhammer
cd3eeac72e
Switching to log4j2 2.16.0
2021-12-15 07:48:08 +01:00
Martin Stockhammer
fa8d654bba
Switching to new log4j2 version
2021-12-11 20:15:32 +01:00
Martin Stockhammer
38b9554710
Fixing JDK and maven labels for build
2020-10-23 17:30:48 +02:00
Martin Stockhammer
ee8f38dd0c
[maven-release-plugin] prepare for next development iteration
2020-06-13 20:34:55 +02:00
Martin Stockhammer
7bb6d8eba2
[maven-release-plugin] prepare release redback-2.6.1
2020-06-13 20:34:44 +02:00
Martin Stockhammer
68a7bc4c2a
Improving LDAP filters by escaping characters
2020-05-10 11:02:54 +02:00
Martin Stockhammer
1e7c84322b
Adding parameter for threads to jenkins file
2020-02-10 09:48:07 +01:00
Martin Stockhammer
a3bc5ee7ff
Fix of Jenkinsfile
2020-01-25 20:53:51 +01:00
Martin Stockhammer
31c72fc424
Update of Jenkinsfile
2020-01-25 20:53:06 +01:00
Martin Stockhammer
3c212ed127
Updating jenkins build file
2020-01-25 20:14:55 +01:00
Martin Stockhammer
4a98784031
[MRM-2008] Fix for group names with slashes
...
Changing the group name retrieval to attribute read. Using CompositeName and
LdapName to retrieve the result. Slashes are treated special in JNDI.
2020-01-25 19:41:28 +01:00
Martin Stockhammer
cd9334ce74
Switching to SNAPSHOT version 2.6.1-SNAPSHOT
2020-01-25 18:56:33 +01:00
Martin Stockhammer
419239b15b
[maven-release-plugin] prepare release redback-2.6
2017-05-11 20:58:44 +02:00
Martin Stockhammer
5dfde1ee1e
Preparing new release 2.6
2017-05-11 20:39:04 +02:00
Martin Stockhammer
4e4e3428c4
Fixing X-Forwarded-Host header handling
2017-05-10 22:59:51 +02:00
olivier lamy
396694765f
formatting
...
Signed-off-by: olivier lamy <olamy@apache.org>
2017-05-08 21:18:13 +10:00
olivier lamy
69c41ad38b
add some logs
...
Signed-off-by: olivier lamy <olamy@apache.org>
2017-05-08 21:17:54 +10:00
Martin Stockhammer
1b13cbd019
Changing to list based request validation configuration
2017-04-28 00:29:50 +02:00
olivier lamy
99a075f25f
last parent snapshot
...
Signed-off-by: olivier lamy <olamy@apache.org>
2017-04-26 09:30:43 +10:00
olivier lamy
c46c26948d
a bit more details for debug
...
Signed-off-by: olivier lamy <olamy@apache.org>
2017-04-25 21:43:37 +10:00
olivier lamy
91cc4675a1
exclude Jenkinsfile from rat
...
Signed-off-by: olivier lamy <olamy@apache.org>
2017-04-25 09:53:33 +10:00
olivier lamy
28234b5ef8
display maven error
...
Signed-off-by: olivier lamy <olamy@apache.org>
2017-04-25 09:53:33 +10:00
olivier lamy
25056909d6
add simple Jenkinsfile
...
Signed-off-by: olivier lamy <olamy@apache.org>
2017-04-25 09:53:33 +10:00
Martin Stockhammer
53d0ccaaf3
[maven-release-plugin] prepare for next development iteration
2017-04-20 21:04:30 +02:00
Martin Stockhammer
966bb86695
[maven-release-plugin] prepare release redback-2.5
2017-04-20 21:04:21 +02:00
Martin Stockhammer
f09d251960
Changing to new parent pom version 17
2017-04-20 20:58:12 +02:00
Martin Stockhammer
a3ee32699b
[MRM-1937] Prevent creation of wrong initial admin
...
Throws a error, if the admin user has the wrong name.
2017-04-14 21:01:39 +02:00
Martin Stockhammer
db185cb79d
Adding some information about redback configuration settings
2017-03-18 18:33:14 +01:00
Martin Stockhammer
a6ee0f8770
Fixing tests for rest services
2017-03-11 11:12:59 +01:00
Martin Stockhammer
d9146ce8ab
Fixing bad import
2017-03-09 20:07:03 +01:00
Martin Stockhammer
6a6b7bb939
Adding token validation to interceptor
2017-02-12 20:47:14 +01:00
Martin Stockhammer
98c98b3979
Adding log statements
2017-02-12 18:44:55 +01:00
Martin Stockhammer
461b7e98f8
Adding validationToken to toString method
2017-02-12 17:12:41 +01:00
Martin Stockhammer
a6ceb38469
Using random iv vector to generate unique tokens for each login
2017-02-12 17:09:15 +01:00
Martin Stockhammer
de5816adf0
Adding validation token generator got login
2017-02-12 14:02:01 +01:00
Martin Stockhammer
e9bc481884
Adding port check for Referer header
2017-01-30 22:42:33 +01:00
Martin Stockhammer
95f1b3e430
Implementing Header verification for REST API calls
...
Implementing header verification techniques mentioned in:
https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet#Verifying_Same_Origin_with_Standard_Headers
2017-01-30 20:37:15 +01:00
Martin Stockhammer
78d822d145
Fixing validation error in unit tests
2016-10-16 17:18:42 +02:00
Martin Stockhammer
2aa6cdf6c6
Adding flag for authenticator to avoid autowiring exceptions
...
Adds a isValid() method to the authenticator to avoid exceptions during
initialization.
2016-10-16 17:18:42 +02:00
Ciprian Ciubotariu
c9ca73b94c
Use NamingManager instead of LdapCtxFactory
...
Fixes deprecation warnings on LdapCtxFactory
2016-10-03 18:32:52 +03:00
olivier lamy
c49cb230eb
unused imports
...
Signed-off-by: olivier lamy <olamy@apache.org>
2016-09-28 12:44:40 +10:00
olivier lamy
d17c6ffb9d
use last parent snapshot
...
Signed-off-by: olivier lamy <olamy@apache.org>
2016-09-14 22:00:41 +10:00
olivier lamy
11b2cdbae0
Merge branch 'pr/10'
...
[MRM-1923] merge pr
2016-09-13 10:55:00 +10:00
olivier lamy
8e98a8aa9e
Merge branch 'pr/9'
...
closed #9
[MRM-1908] Logged on users can write any repository
2016-09-13 10:49:27 +10:00
olivier lamy
87e1950057
Merge branch 'pr/7'
...
close #7
2016-09-09 21:47:52 +10:00
olivier lamy
780b1b7bb7
Merge branch 'pr/6' #6
...
close #6
2016-09-09 21:46:39 +10:00
Martin Stockhammer
5ce2714a37
Fixing bind issue with certain ldap servers, when user not found
...
Subsequent calls of NamingResult#hasMoreElements returns different values in some
environments and situations.
e.g. it occured on IBM JDK 7 with Windows Active Directory LDAP when the first value of 'hasMoreElements'
was false.
The first value is cached now.
2016-09-09 10:03:27 +02:00
Martin Stockhammer
796af57be2
Adding parameter references in authorization resource
...
In certain cases the resource must be dynamically set by parameter values.
This patch allows to add a reference into the resource field of the redback
annotation '{parameterName}' that fills the resource of the permission dynamically
with the parameter value, if found.
2016-09-09 09:40:29 +02:00
Ciprian Ciubotariu
3ef0e5931e
Beautify case of default ldap group attribute
...
More of a style issue, since attribute descriptions are case insensitive
according to RFC4512.
2016-09-07 16:28:04 +03:00