AFaust
1cb1e571ac
Update WIP docs with latest config changes
2021-10-19 12:00:27 +02:00
AFaust
cdf9520bd0
WIP documentation
2021-10-19 11:43:45 +02:00
AFaust
4a2f4a5f67
Improve case specific scope use + test realm
2021-10-19 11:43:24 +02:00
AFaust
cff32d017b
Test and deal with granular client scopes
2021-10-18 01:36:12 +02:00
AFaust
5933acbb04
Update parent POM / ACS 7 test setup
2021-10-18 01:35:22 +02:00
AFaust
28c7ddb87f
Map middle name from default OIDC profile
2021-10-17 11:58:40 +02:00
AFaust
ae9b742dd7
Update dependencies
2021-10-15 01:18:38 +02:00
AFaust
c2b17cbf93
( #18 ) Use KC group name for ALF group display name
2021-10-15 01:18:38 +02:00
Michał
7e117fb2e1
Update Reference-Repository-Subsystem.md
...
"<" and ">" characters fix
2021-05-27 13:02:41 +02:00
AFaust
3497bbe257
Switch parent POM due to error in 1.3.4 Maven POM
2021-04-19 14:52:15 +02:00
AFaust
363d09140b
Update Keycloak; two Share AMPs for compat with <7.0 + >=7.0
2021-04-15 10:48:38 +02:00
AFaust
abf49db783
Prepare release
r010100-rc6
2021-03-10 20:00:02 +01:00
AFaust
9477071729
Update actual user object, not just session attribute
2021-02-01 19:09:26 +01:00
AFaust
35d07b1616
Extend utility flexible authenticator with access token awareness
2021-01-17 23:20:29 +01:00
AFaust
f9e16e0ef4
Service to obtain tokens for integrations
2021-01-09 16:29:28 +01:00
AFaust
89d8ecc5dc
Add inverse mapping / check
2021-01-08 14:36:25 +01:00
AFaust
ea2a2ee43a
Add reasonable default timeouts
...
- KeycloakDeployment.resolveUrls() blocks otherwise e.g. if realm is
misconfigured
2021-01-02 19:21:04 +01:00
AFaust
6f9578ca63
Deal with spurious Share errors in last RC
2020-11-30 19:33:34 +01:00
AFaust
a3e3d9cac9
Release preparation
r010100-rc5
2020-11-26 17:51:34 +01:00
AFaust
0dfdc28c50
Further refinement of request context handling
2020-11-04 09:59:17 +01:00
AFaust
f7d78a7a02
Consolidate request context handling
2020-10-30 20:38:29 +01:00
AFaust
45721fcb53
Consolidate projects / shaded dependencies
2020-10-30 13:31:06 +01:00
AFaust
4ad55b7a77
Subsystem documentation / consistency fixes
2020-10-21 19:04:26 +02:00
AFaust
a31309296a
Adapter documentation / fix confidential port
2020-10-20 23:34:54 +02:00
AFaust
f34b6eed2d
Start proper documentation
2020-10-19 22:28:21 +02:00
AFaust
74f79afa8a
Add suport for user name correction in Share
...
- effectively support login by alternative identity attributes, e.g.
Keycloak login by email
2020-09-04 21:39:34 +02:00
AFaust
96746690b3
Update version for next dev iteration + update Keycloak / deps
2020-09-04 21:39:15 +02:00
AFaust
608ca62af6
Prepare RC release
r010100-rc4
2020-09-01 17:21:27 +02:00
AFaust
c157daf3dd
Further improvements of context handling
...
- RequestAttributes init conflicted with some Surf / Alfresco code which
partially re-initialises request context, skipping user details if
request attributes contains request (ServletUtil.getRequest())
- consolidate request context handling in doFilter to remove lower-level
handling in various contexts
2020-07-30 01:02:04 +02:00
AFaust
5ce816e3ee
Further fixes for inconsistent ACS / Share auth integration
2020-07-28 02:53:39 +02:00
AFaust
f894d79c2e
Share backend token handling + NPE fix
2020-07-25 00:29:57 +02:00
AFaust
65f2804734
Update for next RC release
r010100-rc3
2020-07-08 12:29:14 +02:00
AFaust
169b1ddb15
Automatic Share Keycloak reauth on session expiration; correct logout handling
2020-07-06 01:57:03 +02:00
AFaust
8c53046cb1
Handle corner cases (e.g. XHR after session timeout)
2020-06-22 12:49:39 +02:00
AFaust
4ca4c66998
RC release for pilot customer deployment
r010100-rc2
2020-06-09 20:00:51 +02:00
AFaust
6e6e21dbf8
Don't override old user groups if refresh fails
2020-06-09 19:49:49 +02:00
AFaust
6298c898e2
Ensure parameter value is not directly written to response
2020-06-05 16:48:17 +02:00
AFaust
7ee498154c
Minor Keycloak dependency update
2020-06-05 16:42:10 +02:00
AFaust
1287137cad
Login redirect on authentication failure if possible
2020-06-05 16:41:36 +02:00
AFaust
4096f741a5
Revise Share token exchange handling
...
- retry if refresh of exchanged token yields invalid token (wrong
audience - known case of apparently incorrect Keycloak behaviour)
- use custom header instead of redirect patch to have Repository tier not
redirect to Keycloak login page on unauthenticated access from Share
- activate audience verification which is inactive with Keycloak class
defaults
2020-06-05 14:52:18 +02:00
AFaust
399419068f
Update Acosix dependencies; fix use of deprecated API
2020-06-05 14:52:07 +02:00
AFaust
30a87ac620
Generate source JARs for shaded dependencies
2020-06-05 14:34:30 +02:00
AFaust
ad82e9dbe0
Update Keycloak version; fix minor issues / ensure minimal plugins enabled
...
- despite not yet having any integration tests, Repository-tier Docker
startup needed fixing due to missing Acosix Utility dependency
2020-05-10 15:48:07 +02:00
AFaust
3c71bf6df1
Remove aggressive default for direct auth server access
2020-05-10 15:06:35 +02:00
AFaust
3f2b3511da
Fix typo in web-fragment
2020-05-10 15:05:54 +02:00
AFaust
53e05606b9
Re-add snapshot for development until next rc
2020-05-10 15:05:35 +02:00
AFaust
390ca566a3
Translate input to preferred user name
2020-05-10 15:04:57 +02:00
AFaust
d10ff3ddd5
Release candidate
r010100-rc
2020-03-08 20:59:47 +01:00
AFaust
be6e807f66
Fix imports
2020-03-08 20:59:02 +01:00
AFaust
9e8d709399
Support role exclusion patterns; default excl. on tech. roles
2020-03-08 20:13:57 +01:00