org.forgerock / org.forgerock.openam

25 Jun, 2014

1 commit

022fac96 Fix for OPENAM-1773 and OPENAM-3462 - review: CR-3803 ... Browse Dir »

DAS now supports goto URL validation.
Changes:
* The valid goto URL domain setting has been moved to a new service called
validationService, the new property name is
"openam-auth-valid-goto-resources"
* A new delegation policy has been created that allows agent accounts to
read the validationService settings
* The necessary upgrade step has been implemented that should migrate
existing valid goto domains to the new service (also removes the old ones),
which also ensures that the new delegation policy is added to the system.
* The Goto URL validation logic has been extracted out to a separate class
called GotoUrlValidator, which is now can be used from both openam-core
and openam-federation-library (for Relaystate evaluations).

git-svn-id: https://svn.forgerock.org/openam/trunk@9424 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2014-06-25 22:59:18 +0000

04 Jun, 2014

1 commit

7d72d812 Fix for OPENAM-3519, review CR-3176 - remove dependency of openam-core from open… ... Browse Dir »
```
…am-federation-library

git-svn-id: https://svn.forgerock.org/openam/trunk@9122 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
markdr
2014-06-04 00:32:25 +0000

13 May, 2014

3 commits

acdb4757 Fix for OPENAM-500 - review: CR-3440 ... Browse Dir »

TransformerFactory objects are now also cached using the PerThreadCache
solution.

git-svn-id: https://svn.forgerock.org/openam/trunk@8945 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2014-05-13 11:54:23 +0000

4bd1ce56 Fix for OPENAM-474 - review: CR-3385 ... Browse Dir »

Populating user attributes for dynamic account generation when OpenAM acts
as a hosted SP.

git-svn-id: https://svn.forgerock.org/openam/trunk@8944 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2014-05-13 11:52:40 +0000

77c88b02 Fix for OPENAM-467 - review: CR-3384 ... Browse Dir »

Using HttpURLConnectionManager wherever possible to ensure timeouts are
always properly configured.

git-svn-id: https://svn.forgerock.org/openam/trunk@8943 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2014-05-13 11:49:07 +0000

29 Apr, 2014

1 commit

170f1a4b Fix for OPENAM-3920, review CR-3441. ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openam/trunk@8802 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
markdr
2014-04-29 03:59:54 +0000

15 Apr, 2014

1 commit

214592bf Fix for OPENAM-2673, review CR-3256. Make use of Apache Santuario for XML Signature API. ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openam/trunk@8672 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
markdr
2014-04-15 04:07:56 +0000

14 Apr, 2014

2 commits

ad1b7dec Fix for OPENAM-3651 - review: CR-3346 ... Browse Dir »

Enhanced the default IDP Finder implementation to handle the case when the
remote SP does not request a specific AuthnContextClassRef.

git-svn-id: https://svn.forgerock.org/openam/trunk@8642 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2014-04-14 11:10:12 +0000

f3e9f32d Fix for OPENAM-3809 - review: CR-3345 ... Browse Dir »

The hosted IdP should always use a supported SLO binding when sending the
final logout response to the initiator SP.

git-svn-id: https://svn.forgerock.org/openam/trunk@8641 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2014-04-14 11:10:09 +0000

02 Apr, 2014

1 commit

c4ea4628 Fix for OPENAM-1655 - review: CR-3125 ... Browse Dir »

AttributeQueryUtil now utilizes the configured SP attribute mapper to map
received attributes the same way as they would come as part of an
assertion.

git-svn-id: https://svn.forgerock.org/openam/trunk@8561 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2014-04-02 13:17:22 +0000

27 Mar, 2014

1 commit

53557823 Fix for OPENAM-3768, review CR-3239. ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openam/trunk@8508 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
markdr
2014-03-27 04:27:06 +0000

23 Mar, 2014

1 commit

0b483400 OPENAM-3633: SystemConfigurationUtil returning wrong information while config is… ... Browse Dir »
```
… reloaded in rare condition(CR-3216)

git-svn-id: https://svn.forgerock.org/openam/trunk@8468 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
sachiko
2014-03-23 21:14:24 +0000

02 Mar, 2014

1 commit

8a3fbb60 Fix for OPENAM-3707 ... Browse Dir »

Adding extra emptiness check to ensure we don't try to retrieve
affiliationDescriptor for "".

git-svn-id: https://svn.forgerock.org/openam/trunk@8269 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2014-03-02 23:19:53 +0000

26 Feb, 2014

1 commit

e2ca8ede Fix for OPENAM-3648 - review: CR-3081 ... Browse Dir »

Simple encoding of the character in the authentication method URI.

git-svn-id: https://svn.forgerock.org/openam/trunk@8231 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2014-02-26 10:50:44 +0000

23 Feb, 2014

1 commit

ecc07b44 Fix for OPENAM-957, review CR-3067. ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openam/trunk@8188 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
markdr
2014-02-23 21:40:40 +0000

20 Feb, 2014

2 commits

a245f7a4 Fix for OPENAM-3573 - review: CR-3035 ... Browse Dir »

Better handling for null/empty SPNameQualifier

git-svn-id: https://svn.forgerock.org/openam/trunk@8157 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2014-02-20 14:11:16 +0000

065301d0 CR-3054 - AME-3008 - Update OpenAM to use forgerock-guice in commons ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openam/trunk@8152 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
phillcunnington
2014-02-20 09:28:40 +0000

04 Feb, 2014

2 commits

69b22d9d Fix for OPENAM-3542 - review: CR-2904 ... Browse Dir »

Resolving NPE which can occur if the incoming AuthnRequest does not
include isPassive attribute.

git-svn-id: https://svn.forgerock.org/openam/trunk@7972 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2014-02-04 22:10:40 +0000

d1ee9a01 Fix for OPENAM-3437 - review: CR-2902 ... Browse Dir »

Modified relaystate validation logic for SLO cases to handle the scenario
when the metaAlias is not available in the URL.

git-svn-id: https://svn.forgerock.org/openam/trunk@7971 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2014-02-04 22:10:35 +0000

07 Jan, 2014

2 commits

39410e06 OPENAM-3478 - review: CR-2788 ... Browse Dir »

Escaping the Recipient attribute's value in a SAML 1.x response.

git-svn-id: https://svn.forgerock.org/openam/trunk@7709 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2014-01-07 14:39:24 +0000

f8075f81 AME-2227 (See AME-2706 for CR list) Resolved servlet and JSP violations. ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openam/trunk@7698 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
apforrest
2014-01-07 09:54:58 +0000

14 Dec, 2013

1 commit

a86c3fd6 Fix for OPENAM-3444 - review: CR-2704 ... Browse Dir »

Modified the NameIdentifierMapper interface so it now receives the
NameIDFormat value directly instead of using a session property as
transport.

git-svn-id: https://svn.forgerock.org/openam/trunk@7573 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2013-12-14 14:26:53 +0000

06 Dec, 2013

1 commit

dae5c224 Fix for OPENAM-2767, review CR-2649 ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openam/trunk@7478 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
markdr
2013-12-06 10:31:03 +0000

04 Dec, 2013

4 commits

59b311df Fix for OPENAM-3125, review CR-2461: IDPSSOUtil.getAssertion() is not thread-saf… ... Browse Dir »
```
…e (additional fix against build error, ...my mistake)

git-svn-id: https://svn.forgerock.org/openam/trunk@7433 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
kohei
2013-12-04 11:20:31 +0000
6e0659cd Fix for OPENAM-3125, review CR-2461: IDPSSOUtil.getAssertion() is not thread-saf… ... Browse Dir »
```
…e (additional fix against build error, ...my mistake)

git-svn-id: https://svn.forgerock.org/openam/trunk@7432 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
kohei
2013-12-04 10:36:28 +0000
1a95fcc2 Fix for OPENAM-3125, review CR-2461: IDPSSOUtil.getAssertion() is not thread-safe ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openam/trunk@7431 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
kohei
2013-12-04 07:05:53 +0000
bf210af6 Fix for OPENAM-1749 ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openam/trunk@7428 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
markdr
2013-12-04 02:31:58 +0000

21 Nov, 2013

1 commit

c8860f9f [OPENAM-2410]Update isForceAuthn and isPassive JavaDoc in AuthnRequest. ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openam/trunk@7371 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
Mike2
2013-11-21 16:12:36 +0000

20 Nov, 2013

1 commit

f3c50bff Fix for OPENAM-3252 - review: CR-2597 ... Browse Dir »

For SAML logins the LoginServlet should detect the authentication session
from the query string rather than using any existing cookies, that way we
can make sure that the SAML authentication flow will stay on the server
that stores the necessary request data to finish the SAML.

git-svn-id: https://svn.forgerock.org/openam/trunk@7351 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2013-11-20 11:40:41 +0000

19 Nov, 2013

1 commit

30440041 Fix for OPENAM-3225, review CR-2320. ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openam/trunk@7345 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
markdr
2013-11-19 20:41:28 +0000

13 Nov, 2013

4 commits

3df70500 Fix for OPENAM-3189 - review: FR-4 ... Browse Dir »

SP Adapter is now invoked when the IdP Proxy sends the proxied SAML
request.

git-svn-id: https://svn.forgerock.org/openam/trunk@7280 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2013-11-13 14:14:26 +0000

7c359dd0 Fix for OPENAM-3190 - review: FR-4 ... Browse Dir »

New extension point for IdPAdapter that makes it possible to modify the
SAML response before it's sent out.

git-svn-id: https://svn.forgerock.org/openam/trunk@7278 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2013-11-13 14:12:05 +0000

080c758b Fix for OPENAM-1012 - review: CR-2255 ... Browse Dir »

The SLO code has been adjusted to cope with situations of having different
sets of supported SLO bindings, and also handle the case when there is no
"appropriate" binding for the current SLO process.

git-svn-id: https://svn.forgerock.org/openam/trunk@7274 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2013-11-13 13:16:06 +0000

f3c3492d Fix for OPENAM-2922 - review: CR-2244 ... Browse Dir »

The SP initiated SLO process has been modified to only try to send SLO
request with the SP the session is currently associated with.
Also made a small adjustment to the code so failing to invalidate the local
session no longer results in a logout error.

git-svn-id: https://svn.forgerock.org/openam/trunk@7271 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2013-11-13 11:19:14 +0000

11 Oct, 2013

1 commit

bffbdbfa OPENAM-3127 CR-2474 HTTP 500 error when spNameQualifier attribute is omitted ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openam/trunk@6919 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
jonathan
2013-10-11 17:55:10 +0000

02 Oct, 2013

1 commit

f1db7289 Fix for OPENAM-3087 - review: CR-2406 ... Browse Dir »

This one turned out to be issue with the input data. The SAMLAdapter
expected the expiration date in _seconds_, but instead milliseconds were
provided, and this resulted in quite a time difference.

git-svn-id: https://svn.forgerock.org/openam/trunk@6751 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2013-10-02 14:50:08 +0000

25 Sep, 2013

2 commits

0027f7f1 CR-2349. OPENAM-2966. Now merging global attributes with organizational attribut… ... Browse Dir »

…es. Better logging in SAML2ConfigService. Bug fix in ServiceConfigManagerImpl to no longer return stale cache entries for global attributes (mimic semantics for organizational attributes).

git-svn-id: https://svn.forgerock.org/openam/trunk@6660 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2013-09-25 16:26:53 +0000

4c3dadb5 AME-2166 CR-2348 The CTS now supports storing Tokens under a separate Root Suffi… ... Browse Dir »

…x or in an external Directory store. AME-2291 CR-2319 The CTS expired tokens deletion feature was too slow, this has now been improved.

git-svn-id: https://svn.forgerock.org/openam/trunk@6647 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d

2013-09-25 12:28:39 +0000

15 Sep, 2013

1 commit

0331abbe Fix for OPENAM-2758, internal review. ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openam/trunk@6551 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
markdr
2013-09-15 05:46:45 +0000

19 Aug, 2013

1 commit

42a5abaa AME-2160 CR-2161 A story focussed on reducing the Session size when persisted in the CTS. ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openam/trunk@6320 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
```
rwapshott
2013-08-19 08:06:56 +0000