7 Commits

Author SHA1 Message Date
AFaust
4b1b0cbd08 Improved group synchronisation
- add exact path match condition to allow selection of specific groups
- add negative match conditions to exclude specific groups/users
- support group names derived from attibutes
2025-02-23 18:28:57 +01:00
AFaust
35d07b1616 Extend utility flexible authenticator with access token awareness 2021-01-17 23:20:29 +01:00
AFaust
f894d79c2e Share backend token handling + NPE fix 2020-07-25 00:29:57 +02:00
AFaust
b926431d68 Fix token handling due web script remote re-auth
- RemoteUserAuthenticator may re-run KeycloakRemoteUserMapper for Bearer
  authentication
- RemoteUserAuthenticator simply re-sets current user without running
  through regular ticket validation hoops (which we already covered)
- need authentication listener to hook into triggered event for
  re-processing access token
- this adds hard-dependency to full acosix-utility module, which is
  extremely unfortunate - TODO: Move authenticator listener patch
  (enabling multiple listeners) into utility core, since it can be
  reasonably considered a non-invasive, baseline patch (does not alter
  core behaviours) relevant for potentially multiple extensions, which
  should not necessitate dependency on full utility module with its
  accompanying set of (more or less) invasive patches
2020-02-17 10:43:45 +01:00
AFaust
961eb8b3d9 Update dependencies 2020-02-14 02:10:28 +01:00
AFaust
ad7f404846 General working Keycloak filter state 2019-11-15 17:05:34 +01:00
AFaust
2db4aaddbe Initial version 2019-08-21 00:01:40 +02:00