30 May, 2014

1 commit

  • Support reauth for any auth module configured in authentication.json.
     * AuthenticationService now handles requests on /authentication, replaciing
       AuthFilter which was not a filter, and did not fully handle reauth.
     * Authenticators are used from both JASPI auth modules and AuthenticationService
       to provide the authentication--either with Http headers in the case of the 
       auth modules, or from the authcid in the HttpContext and the reauth header 
       in the case of reauthentication.
     * AuthenticationService now satisfies the AuthenticationConfig service for 
       the purposes of OSGiAuthFilterBuilder's access to the config to build the 
       JASPI CAF.
     * The duplicative managed/user config at the top of the sample authentication.json 
       files are now removed, thus satisfying OPENIDM-1781.
    
    
    
    git-svn-id: https://svn.forgerock.org/openidm/trunk@3282 d98387aa-ee2c-4292-a9e6-504d2a719fd3
    brmiller
     

27 May, 2014

1 commit

  • Additional decoupling of auth module role calculation and security context 
    population from auth module validation code.  Notably:
    
     * factor out basic auth code to allow PassthroughModule to support both basic auth and X-OpenIDM- header auth.
     * remove IWAPassthroughModule in favor of using auth module configuration to control order of execution
     * separate client cert auth into its own module, supporting an list of "allowedAuthenticationIdPatterns" 
       to compare against the subject DN
     * remove static dependency on OSGIAuthnFilterBuilder for injection of OSGi artifacts - improves testability
    
    
    
    git-svn-id: https://svn.forgerock.org/openidm/trunk@3261 d98387aa-ee2c-4292-a9e6-504d2a719fd3
    brmiller
     

14 May, 2014

1 commit


13 May, 2014

1 commit


12 May, 2014

2 commits


30 Apr, 2014

1 commit


28 Apr, 2014

1 commit


23 Apr, 2014

1 commit


21 Apr, 2014

1 commit


03 Apr, 2014

1 commit


01 Apr, 2014

2 commits


26 Mar, 2014

2 commits

  • Still more userId/authenticationId mixups
    
    
    
    git-svn-id: https://svn.forgerock.org/openidm/trunk@3026 d98387aa-ee2c-4292-a9e6-504d2a719fd3
    brmiller
     
  • Missed a userId -> authenticationId in config
    
    
    
    git-svn-id: https://svn.forgerock.org/openidm/trunk@3025 d98387aa-ee2c-4292-a9e6-504d2a719fd3
    brmiller
     

19 Mar, 2014

3 commits


18 Mar, 2014

1 commit


17 Mar, 2014

2 commits


30 Jan, 2014

1 commit


29 Jan, 2014

1 commit


17 Jan, 2014

1 commit


10 Jan, 2014

1 commit


17 Dec, 2013

1 commit


12 Dec, 2013

1 commit


05 Nov, 2013

1 commit


08 Oct, 2013

1 commit


26 Sep, 2013

1 commit


25 Sep, 2013

1 commit


20 Sep, 2013

1 commit

  • Move cluster node id to boot.properties
    (reviewed by team in skype)
    
    
    git-svn-id: https://svn.forgerock.org/openidm/trunk@2485 d98387aa-ee2c-4292-a9e6-504d2a719fd3
    brmiller
     

21 Aug, 2013

1 commit


31 Jul, 2013

1 commit


27 Jul, 2013

1 commit


22 Jul, 2013

1 commit


10 Jul, 2013

1 commit


03 Jul, 2013

1 commit


28 Jun, 2013

1 commit


27 Jun, 2013

1 commit

  • Move current "openidmui" UI bundle from openidm-ui-ria module to openidm-enduser module.
    Package servlet code separately from enduser (and future) UI bundles.
    Support multiple servlet instances / URL contexts per bundles, including 
      file system UI context creation.
    Support multiple UI bundles.
    Support disabling UI bundles in ui.context-<contextname>.json config.
    Support relocating UI bundles' URL Context in .json config.
    
    
    
    git-svn-id: https://svn.forgerock.org/openidm/trunk@2238 d98387aa-ee2c-4292-a9e6-504d2a719fd3
    brmiller