Commit Graph

220 Commits

Author SHA1 Message Date
Martin Stockhammer a3ee32699b [MRM-1937] Prevent creation of wrong initial admin
Throws a error, if the admin user has the wrong name.
2017-04-14 21:01:39 +02:00
Martin Stockhammer a6ee0f8770 Fixing tests for rest services 2017-03-11 11:12:59 +01:00
Martin Stockhammer 6a6b7bb939 Adding token validation to interceptor 2017-02-12 20:47:14 +01:00
Martin Stockhammer 98c98b3979 Adding log statements 2017-02-12 18:44:55 +01:00
Martin Stockhammer 461b7e98f8 Adding validationToken to toString method 2017-02-12 17:12:41 +01:00
Martin Stockhammer de5816adf0 Adding validation token generator got login 2017-02-12 14:02:01 +01:00
Martin Stockhammer e9bc481884 Adding port check for Referer header 2017-01-30 22:42:33 +01:00
Martin Stockhammer 95f1b3e430 Implementing Header verification for REST API calls
Implementing header verification techniques mentioned in:
https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet#Verifying_Same_Origin_with_Standard_Headers
2017-01-30 20:37:15 +01:00
Martin Stockhammer 796af57be2 Adding parameter references in authorization resource
In certain cases the resource must be dynamically set by parameter values.
This patch allows to add a reference into the resource field of the redback
annotation '{parameterName}' that fills the resource of the permission dynamically
with the parameter value, if found.
2016-09-09 09:40:29 +02:00
olivier lamy 3d266df48d [maven-release-plugin] prepare for next development iteration 2016-05-20 12:55:38 +10:00
olivier lamy 530fa8a468 [maven-release-plugin] prepare release redback-2.4 2016-05-20 12:55:09 +10:00
olivier lamy f012c5608a fix javadoc error
Signed-off-by: olivier lamy <olamy@apache.org>
2016-05-20 12:44:56 +10:00
Eric Barboni 4e378769a8 change style and template to have a kind of enunciate 1.x style that we can use 2015-11-13 18:25:40 +01:00
Olivier Lamy 80931e6476 [maven-release-plugin] prepare for next development iteration 2015-02-22 22:20:24 +11:00
Olivier Lamy 7cc90a66af [maven-release-plugin] prepare release redback-2.3 2015-02-22 22:20:15 +11:00
Olivier Lamy 458bcde3c7 upgrade javax ws rs dependency 2015-02-07 22:57:11 +11:00
Olivier Lamy 47cd662af7 add @since 2015-02-06 23:10:16 +11:00
Olivier Lamy f77d21b589 fix unit test 2015-02-06 23:09:37 +11:00
Olivier Lamy 8edcb36b95 formatting 2015-02-05 21:35:04 +11:00
Olivier Lamy 88a2ef7a1c fix unit test 2015-02-05 21:35:04 +11:00
Olivier Lamy 0e1a45a716 make test logging working 2015-02-05 21:35:04 +11:00
Olivier Lamy 8bdcfbb8a0 fix unit test 2015-02-05 21:35:04 +11:00
Olivier Lamy 5bf9065c2f cxf upgrade to 3.0.3 2015-02-05 21:35:03 +11:00
Olivier Lamy 6ed720b192 this class is abstract 2015-01-05 22:50:37 +11:00
Olivier Lamy 2d60bfe26b remove taglib declaration file which can cause issue 2014-09-11 09:59:29 +10:00
Olivier Lamy 4a87102292 tomcat 7.0.54 2014-07-16 09:50:05 +10:00
Olivier Lamy 2205dfe91d tomcat 7.0.53
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1583820 13f79535-47bb-0310-9956-ffa450edef68
2014-04-01 23:08:12 +00:00
Olivier Lamy 4cb59feb27 use assertj as fest-assert is not maintained anymore
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1581245 13f79535-47bb-0310-9956-ffa450edef68
2014-03-25 05:59:39 +00:00
Olivier Lamy b524b55203 [maven-release-plugin] prepare for next development iteration
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1558685 13f79535-47bb-0310-9956-ffa450edef68
2014-01-16 03:25:47 +00:00
Olivier Lamy 6cdf2e135b [maven-release-plugin] prepare release redback-2.2
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1558683 13f79535-47bb-0310-9956-ffa450edef68
2014-01-16 03:25:16 +00:00
Olivier Lamy c83903b6ce tomcat 7.0.50 tests will run faster
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1556650 13f79535-47bb-0310-9956-ffa450edef68
2014-01-08 21:59:55 +00:00
Olivier Lamy 22bb1a093e do not use cache when updating user
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1551101 13f79535-47bb-0310-9956-ffa450edef68
2013-12-16 01:26:35 +00:00
Olivier Lamy eadb1849d7 add a method to find user without using caching: jdo update need the object detach from database not a cached one
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1551098 13f79535-47bb-0310-9956-ffa450edef68
2013-12-16 01:26:26 +00:00
Olivier Lamy 061a87c1c5 cleanup
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1551084 13f79535-47bb-0310-9956-ffa450edef68
2013-12-15 23:45:46 +00:00
Olivier Lamy 7c8d917eca use last fest-assert version
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1547789 13f79535-47bb-0310-9956-ffa450edef68
2013-12-04 12:37:19 +00:00
Olivier Lamy 771b752199 fix logging error level
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1546884 13f79535-47bb-0310-9956-ffa450edef68
2013-12-02 02:56:22 +00:00
Olivier Lamy cfcc2b4d8b fix logging warn level
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1546883 13f79535-47bb-0310-9956-ffa450edef68
2013-12-02 02:56:08 +00:00
Olivier Lamy 4c65d80ad5 fix logging info level
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1546882 13f79535-47bb-0310-9956-ffa450edef68
2013-12-02 02:55:43 +00:00
Olivier Lamy 2a538f9d58 [MRM-1764] #users > edit roles -- please sort repository list for ease of use
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1546261 13f79535-47bb-0310-9956-ffa450edef68
2013-11-28 03:03:52 +00:00
Olivier Lamy ddc1d53a74 [MRM-1765] #users > edit -- please sort effective roles
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1545917 13f79535-47bb-0310-9956-ffa450edef68
2013-11-27 03:42:00 +00:00
Olivier Lamy f67b16ab15 use last tomcat version
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1537759 13f79535-47bb-0310-9956-ffa450edef68
2013-10-31 23:20:56 +00:00
Olivier Lamy ecdceb980d fix osgi metadata
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1537755 13f79535-47bb-0310-9956-ffa450edef68
2013-10-31 23:01:37 +00:00
Olivier Lamy 250d903b72 use last jackson version
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1537753 13f79535-47bb-0310-9956-ffa450edef68
2013-10-31 23:01:23 +00:00
Olivier Lamy dde101ade9 use tomcat 7.0.40
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1480879 13f79535-47bb-0310-9956-ffa450edef68
2013-05-10 05:50:06 +00:00
Olivier Lamy 48c2af9ccd [maven-release-plugin] prepare for next development iteration
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1479458 13f79535-47bb-0310-9956-ffa450edef68
2013-05-06 02:31:43 +00:00
Olivier Lamy 2ed2373b1e [maven-release-plugin] prepare release redback-2.1
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1479456 13f79535-47bb-0310-9956-ffa450edef68
2013-05-06 02:30:46 +00:00
Olivier Lamy 4a57b05074 move LdapConnection to an interface
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1477971 13f79535-47bb-0310-9956-ffa450edef68
2013-05-01 12:19:20 +00:00
Olivier Lamy 4ecba94f20 rename to default to have an interface
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1477968 13f79535-47bb-0310-9956-ffa450edef68
2013-05-01 12:17:23 +00:00
Olivier Lamy 99c3321358 add the bulk update bean
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1476987 13f79535-47bb-0310-9956-ffa450edef68
2013-04-29 12:21:28 +00:00
Olivier Lamy 3d0d471254 use a bulk update mode with passing a list of update
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1476986 13f79535-47bb-0310-9956-ffa450edef68
2013-04-29 12:21:03 +00:00