92 Commits

Author SHA1 Message Date
AFaust
31936cdcea Fix error on failed Bearer authentication 2025-03-12 11:42:39 +01:00
AFaust
3846f34583 Forced route URL is optional 2025-02-28 11:09:18 +01:00
AFaust
96d01b34fe Handle user and group name synchronisation consistently, and fix resource role exposure
- user names can now also be custom mapped from attributes
- introduced priority in user/group processors
- introduced operation dedicated to mapping authority name for use in user/group name collection operations
2025-02-26 16:24:00 +01:00
AFaust
ab95cdc2f9 Handle alfRedirectUrl parameter on login page
- some features (like QuickShare) may use it to trigger login with a pre-defined post authentication location
2025-02-23 22:29:11 +01:00
AFaust
4b1b0cbd08 Improved group synchronisation
- add exact path match condition to allow selection of specific groups
- add negative match conditions to exclude specific groups/users
- support group names derived from attibutes
2025-02-23 18:28:57 +01:00
AFaust
725f768535 Fix sources attachment + MANIFSET overlaps 2025-02-21 14:38:03 +01:00
AFaust
fc83b6c7a5 Update README + switch to GitHub actions 2025-02-21 14:38:03 +01:00
AFaust
78042e0212 Update file headers 2025-02-21 14:38:03 +01:00
AFaust
d6a6b3c2bd Rework project's Docker test setup
- use Docker Compose instead of fabric8io
- don't use local paths to support running with remote Docker contexts
- use latest Keycloak Docker image and make sure test realm works out-of-the-box
- add flag to avoid failing on missing properties during JSON deserialisation
  (newer Keycloak versions offer more properties in IDM API response payloads)
2025-02-21 14:38:03 +01:00
6f7910aa93 Upgrade to ACS v23.x, Jakarta, jdk17 2025-02-21 14:38:03 +01:00
AFaust
0044ce3f6b Add missing subject token 2024-09-10 13:08:02 +02:00
Mark Tielemans
9c7838e217 Update Simple-Configuration.md
Added required option for newer Keycloak versions.
2024-08-29 12:30:05 +02:00
AFaust
5727c21f5c Prepare release 2022-01-27 11:36:52 +01:00
AFaust
e44afc7d47 Update Keycloak libs and enable SOLR for Docker 2022-01-23 15:11:00 +01:00
AFaust
b02eaaa896 Re-introduce force route option 2021-12-14 18:46:25 +01:00
AFaust
a521dd87de Correct logging 2021-12-06 01:04:04 +01:00
AFaust
b1f97ada95 Add couple of toString / simplify 2021-12-05 12:48:02 +01:00
AFaust
1170f343c9 () Spelling fix and remarks 2021-10-20 02:19:45 +02:00
AFaust
b4ca07d0c2 Use default fields for timeout + proxy 2021-10-20 02:12:17 +02:00
AFaust
a9bb9c32a8 Fix missed caller adaption 2021-10-19 15:39:04 +02:00
AFaust
1cb1e571ac Update WIP docs with latest config changes 2021-10-19 12:00:27 +02:00
AFaust
cdf9520bd0 WIP documentation 2021-10-19 11:43:45 +02:00
AFaust
4a2f4a5f67 Improve case specific scope use + test realm 2021-10-19 11:43:24 +02:00
AFaust
cff32d017b Test and deal with granular client scopes 2021-10-18 01:36:12 +02:00
AFaust
5933acbb04 Update parent POM / ACS 7 test setup 2021-10-18 01:35:22 +02:00
AFaust
28c7ddb87f Map middle name from default OIDC profile 2021-10-17 11:58:40 +02:00
AFaust
ae9b742dd7 Update dependencies 2021-10-15 01:18:38 +02:00
AFaust
c2b17cbf93 () Use KC group name for ALF group display name 2021-10-15 01:18:38 +02:00
Michał
7e117fb2e1 Update Reference-Repository-Subsystem.md
"<" and ">" characters fix
2021-05-27 13:02:41 +02:00
AFaust
3497bbe257 Switch parent POM due to error in 1.3.4 Maven POM 2021-04-19 14:52:15 +02:00
AFaust
363d09140b Update Keycloak; two Share AMPs for compat with <7.0 + >=7.0 2021-04-15 10:48:38 +02:00
AFaust
abf49db783 Prepare release r010100-rc6 2021-03-10 20:00:02 +01:00
AFaust
9477071729 Update actual user object, not just session attribute 2021-02-01 19:09:26 +01:00
AFaust
35d07b1616 Extend utility flexible authenticator with access token awareness 2021-01-17 23:20:29 +01:00
AFaust
f9e16e0ef4 Service to obtain tokens for integrations 2021-01-09 16:29:28 +01:00
AFaust
89d8ecc5dc Add inverse mapping / check 2021-01-08 14:36:25 +01:00
AFaust
ea2a2ee43a Add reasonable default timeouts
- KeycloakDeployment.resolveUrls() blocks otherwise e.g. if realm is
  misconfigured
2021-01-02 19:21:04 +01:00
AFaust
6f9578ca63 Deal with spurious Share errors in last RC 2020-11-30 19:33:34 +01:00
AFaust
a3e3d9cac9 Release preparation r010100-rc5 2020-11-26 17:51:34 +01:00
AFaust
0dfdc28c50 Further refinement of request context handling 2020-11-04 09:59:17 +01:00
AFaust
f7d78a7a02 Consolidate request context handling 2020-10-30 20:38:29 +01:00
AFaust
45721fcb53 Consolidate projects / shaded dependencies 2020-10-30 13:31:06 +01:00
AFaust
4ad55b7a77 Subsystem documentation / consistency fixes 2020-10-21 19:04:26 +02:00
AFaust
a31309296a Adapter documentation / fix confidential port 2020-10-20 23:34:54 +02:00
AFaust
f34b6eed2d Start proper documentation 2020-10-19 22:28:21 +02:00
AFaust
74f79afa8a Add suport for user name correction in Share
- effectively support login by alternative identity attributes, e.g.
  Keycloak login by email
2020-09-04 21:39:34 +02:00
AFaust
96746690b3 Update version for next dev iteration + update Keycloak / deps 2020-09-04 21:39:15 +02:00
AFaust
608ca62af6 Prepare RC release r010100-rc4 2020-09-01 17:21:27 +02:00
AFaust
c157daf3dd Further improvements of context handling
- RequestAttributes init conflicted with some Surf / Alfresco code which
  partially re-initialises request context, skipping user details if
  request attributes contains request (ServletUtil.getRequest())
- consolidate request context handling in doFilter to remove lower-level
  handling in various contexts
2020-07-30 01:02:04 +02:00
AFaust
5ce816e3ee Further fixes for inconsistent ACS / Share auth integration 2020-07-28 02:53:39 +02:00