org.forgerock / org.forgerock.openig

08 Sep, 2014

1 commit

8ed103c2 OPENIG-228 CR-4486 Align OAuth2 client and resource server configuration ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@562 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
matthew
2014-09-08 16:38:51 +0000

05 Sep, 2014

1 commit

7a460545 Introduce HeapletFactory service support ... Browse Dir »

When a new heap object instance has to be created, we first have to
find a Heaplet instance that will create the required object from the
given JSON configuration.
Heaplet instances are linked to the single object they created: they
manage the heap object lifecycle with the start() and destroy() methods.
The old behaviour was using Heaplet instances directly loaded and
instantiated, meaning that a single Heaplet instance could be used to
create multiple heap objects, somehow mixing states, which was very
wrong.

Now, HeapletFactory (instead of direct Heaplet) are found using the
ServiceLoader discovery mechanism. They are responsible to create new
Heaplet instances, meaning that we cannot anymore share a Heaplet
instance for 2 or more heap objects.

Heaplet class does not extends Indexed<Class> anymore (was only used
because of the way Heaplets was looking for Heaplet instances).
NestedHeaplet is now deprecated since its only duty was to implement the
Indexed interface. All references to NestedHeaplet were replaced to
GenericHeaplet (its parent class) in our code base to avoid ugly
compiler warnings.

As per OPENIG-302 comments, the HeapletFactory will be a short-lived
concept since this additional layer introduction was the straw that broke
the camel's back :)

Issues: OPENIG-302
Reviews: CR-4457

git-svn-id: https://svn.forgerock.org/openig/trunk@555 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-09-05 10:27:00 +0000

02 Sep, 2014

1 commit

8bcadd83 CR-4412 OPENIG-263 OAuth2ResourceServerFilter should place the AccessToken in a configurable place ... Browse Dir »

- Renamed ACCESS_TOKEN_KEY to DEFAULT_ACCESS_TOKEN_KEY.
- Target is now optional/customizable for user. Default to ${exchange.oauth2AccessToken}.




git-svn-id: https://svn.forgerock.org/openig/trunk@548 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-09-02 13:28:42 +0000

29 Aug, 2014

1 commit

1a1f0c4f CR-4398 OPENIG-268 Raw JSON of the shared AccessToken is not easily accessible f… ... Browse Dir »

…rom scripts or expression
- renamed rawInfo as info.
- Instead of 'exchange.oauth2AccessToken.rawInfo.get('mail').asString()' we can now write 'exchange.oauth2AccessToken.info.mail'
- modified unit tests.
See review for further details.




git-svn-id: https://svn.forgerock.org/openig/trunk@545 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-08-29 14:23:55 +0000

26 Aug, 2014

1 commit

37ce7e3d Removed trailing spaces. ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@537 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
violette
2014-08-26 14:29:16 +0000

21 Aug, 2014

1 commit

b8da9033 Fixed javadoc warning : "tag @link: reference not found: org.forgerock" ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@515 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
violette
2014-08-21 09:45:12 +0000

05 Aug, 2014

1 commit

75f309fc CR-4192 Fix for OPENIG-219: Document support for OpenIG as OAuth 2.0 resource server ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@468 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
mark
2014-08-05 10:36:02 +0000

03 Aug, 2014

4 commits

fd6ca7b4 Fix minor compiler warnings. ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@446 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
matthew
2014-08-03 01:01:59 +0000

c924f8d4 Fix OPENIG-195: Implement OAuth 2.0 Client support ... Browse Dir »

Minor enhancement: provide the ability to configure per-provider scopes. Scopes are also no longer required since defaults can be configured at the IdP. See Javadoc for more detail.

git-svn-id: https://svn.forgerock.org/openig/trunk@445 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-08-03 01:01:30 +0000

c9d5329e OPENIG-243 (CR-4178) Introduce a MutableUri construct to ease URI modifications ... Browse Dir »

* Request.uri is now a MutableUri
* Removed UriResolver since it was useless with both this new feature and the BeanResolver

git-svn-id: https://svn.forgerock.org/openig/trunk@444 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-08-03 00:31:45 +0000

2e89d62e Partial fix for OPENIG-235: Add better encapsulation of exchange object model in… ... Browse Dir »

… order to add addition "enhanced" getters and setters for fields

Provide better APIs for interacting with Message entities. Previously we were stuck with the esoteric BranchingInputStream which makes entities very hard (impossible?) to use in expressions and Groovy.

* methods for getting the entity's content as JSON or as a plain String
* methods for setting the entity's content to JSON or String data
* simplification (I hope) of the branch life-cycle management
* make Message closeable, delegating close to the entity and onto the branching input stream, allowing us to avoid alot of null-checking boilerplace.


git-svn-id: https://svn.forgerock.org/openig/trunk@443 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-08-03 00:14:40 +0000

31 Jul, 2014

3 commits

63e91d3f Partial fix for OPENIG-235: Add better encapsulation of exchange object model in… ... Browse Dir »

… order to add addition "enhanced" getters and setters for fields

* remove FormAttributes since the underlying form can now be lazily created from the getter.

git-svn-id: https://svn.forgerock.org/openig/trunk@432 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-31 19:33:02 +0000

b44ad43f Partial fix for OPENIG-235: Add better encapsulation of exchange object model in… ... Browse Dir »

… order to add addition "enhanced" getters and setters for fields

* perform mechanical changes to encapsulate fields for Message, Request, and Response
* added Javadoc for getters and setters
* Message no longer extends FieldMap since the expression library leverages the BeanResolver.

Remaining non-mechanical changes (e.g. adding enhanced getters/setters) will be performed as separate changes.


git-svn-id: https://svn.forgerock.org/openig/trunk@430 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-31 17:02:16 +0000

d969d0df OPENIG-223 (CR-4133) Support an extensible way to define class aliases for modules ... Browse Dir »

* Provided a SPI interface to be implemented by modules who want to enrich the supported aliases collection
* Provided implementations for all OpenIG's modules (core, saml and oauth2)

git-svn-id: https://svn.forgerock.org/openig/trunk@426 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-31 09:38:57 +0000

30 Jul, 2014

3 commits

5e953753 Fix OPENIG-195: Implement OAuth 2.0 Client support ... Browse Dir »

Main entry point is OAuth2ClientFilter

Supports:

* OAuth 2.0 "authorization code" grant type
* automatic token refresh
* proactive and reactive authorization for SSO
* user initiated login / logout
* OpenID Connect Relying Party
* OpenID Connect discovery via "well-known configuration"
* multiple providers and optional "Nascar" page
* session based persistence
* CSRF prevention via 160 bit state nonces
* manually tested against OpenAM 11 and Google.

TODO:

* more unit testing
* cookie based session management via encrypted JWT tokens
* attribute mappings per provider? (TBD)
* consider replacing default login/logout URLs with handlers?


git-svn-id: https://svn.forgerock.org/openig/trunk@424 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-30 16:27:39 +0000

ea66dbdb Renamed OAuth2ValidationTokenFilter to OAuth2ResourceServerFilter to better show… ... Browse Dir »

… the role used by this filter
* Also aligned with filter names that will come for OpenIDConnect support

git-svn-id: https://svn.forgerock.org/openig/trunk@422 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-30 13:41:22 +0000

b7aac5ee Minor fix for checkstyle errors and IDE warnings. ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@421 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
matthew
2014-07-30 11:15:30 +0000

29 Jul, 2014

1 commit

f035c050 * Provides UNLIMITED Duration ... Browse Dir »

* Uses Duration.duration(String) instead of constructor

git-svn-id: https://svn.forgerock.org/openig/trunk@409 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-29 10:17:14 +0000

24 Jul, 2014

2 commits

d4da80dc Added some tests around BearerTokenExtractor ... Browse Dir »

* Some cases are not covered yet, needs to re-think the header parsing to be more strict

git-svn-id: https://svn.forgerock.org/openig/trunk@383 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-24 09:18:10 +0000

e1c5ec74 OPENIG-176 (CR-3939 && CR-4049) Implement OAuth 2.0 Resource Server support ... Browse Dir »

* Introduced openig-oauth2 maven module
* AccessTokenResolver is producing an AccessToken
** OpenAm resolver is provided
* Token extraction and validation against a token info endpoint
** Expiry is verified
** Scope compatibility is verified
** In case of errors, standard RFC 6750 compliant error responses are returned
* AccessToken are cached
** Expiration delay is configurable
* Provided an EnforcerFilter that enforce a condition before delegating the execution

git-svn-id: https://svn.forgerock.org/openig/trunk@382 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-24 09:18:00 +0000

18 Jul, 2014

1 commit

46035b35 Minor improvement for OPENIG-97 - Introduce RouterHandler that loads configurati… ... Browse Dir »

…on files (routes) from a directory

* rename configuration option scan-interval to scanInterval in order to align with camel-case naming convention used throughout OpenIG.


git-svn-id: https://svn.forgerock.org/openig/trunk@373 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-18 21:24:23 +0000

11 Jul, 2014

4 commits

b63eb4f7 Remove step that is unnecessary for getting started with the simple minimal HTTP… ... Browse Dir »

… server now provided.

Note that this does not remove the step entirely from the documentation, just from the simplified "getting started" procedure. This topic is still covered in the full installation instructions at http://openig.forgerock.org/doc/gateway-guide/#jetty-cookie-domains

git-svn-id: https://svn.forgerock.org/openig/trunk@359 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-11 12:05:46 +0000

3958a129 CR-4001 Fixes for ... Browse Dir »

OPENIG-185: Document how to configure containers for TLS
OPENIG-186: Merge chapters on configuring deployment containers & installing OpenIG


git-svn-id: https://svn.forgerock.org/openig/trunk@358 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-11 08:36:18 +0000

f3f3d8c1 Typo ... Browse Dir »

git-svn-id: https://svn.forgerock.org/openig/trunk@357 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-11 06:05:51 +0000

240a534f Editorial fix ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@356 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
mark
2014-07-11 06:05:14 +0000

10 Jul, 2014

1 commit

1c024b4e FR-266 Fix for OPENIG-187: Update release notes and install instructions to matc… ... Browse Dir »
```
…h Java versions & containers we want to support


git-svn-id: https://svn.forgerock.org/openig/trunk@355 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
mark
2014-07-10 15:55:49 +0000

09 Jul, 2014

3 commits

e79ba743 Typos ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@352 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
mark
2014-07-09 18:38:15 +0000
7f3baa19 CR-3986 Fix for OPENIG-193: Document Router/RouterHandler capability ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@351 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
mark
2014-07-09 16:40:03 +0000

a6d4e31f Typo ... Browse Dir »

git-svn-id: https://svn.forgerock.org/openig/trunk@350 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-09 09:02:45 +0000

08 Jul, 2014

1 commit

7b3d095f CR-3976 Fix for OPENIG-191: Documentation should not mention policy enforcement as SAML SP ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@349 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
mark
2014-07-08 13:04:29 +0000

07 Jul, 2014

1 commit

be9c6012 Updated all copyrights for correctness: ... Browse Dir »

Replaced Copyrighted with Copyright
removed the (c) character not required
removed All rights reserved from Apex Identity copyrights. The code is open source, thus rights are no longer reserved.

git-svn-id: https://svn.forgerock.org/openig/trunk@345 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-07 11:14:50 +0000

04 Jul, 2014

1 commit

0abdc1c4 CR-3948 Fix for OPENIG-183: Document changes due to integration of the federation component ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@334 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
mark
2014-07-04 12:29:59 +0000

02 Jul, 2014

1 commit

2371ad6c Editorial fix (in HTML, open directory listing in new tab or window) ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@332 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
mark
2014-07-02 06:15:44 +0000

01 Jul, 2014

2 commits

d7bef6d9 CR-3933 Fix for OPENIG-182: Federation configuration doc not aligned with code ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@331 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
mark
2014-07-01 15:48:46 +0000
a500dc7f CR-3923 Fix for OPENIG-179: Add automated check to ensure that literal project n… ... Browse Dir »
```
…ame is not used in the core docs

git-svn-id: https://svn.forgerock.org/openig/trunk@330 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
mark
2014-07-01 14:18:57 +0000

30 Jun, 2014

2 commits

b15317fa Typo ... Browse Dir »

git-svn-id: https://svn.forgerock.org/openig/trunk@325 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-06-30 09:27:40 +0000

dea26f51 Fix OPENIG-181: Behavior of the expression function "matches" is very surprising ... Browse Dir »

* rename matches() function to matchingGroups()
* add new matches() function which provides expected behavior: returns true if string contains provided pattern
* update reference documentation.


git-svn-id: https://svn.forgerock.org/openig/trunk@324 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-06-30 09:05:36 +0000

27 Jun, 2014

2 commits

56bc3efb Fixed javadoc references to GatewayServlet ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@310 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
guillaume.sauthier
2014-06-27 08:46:46 +0000
831a6af8 Fix filter sample with the right interface/exceptions ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@309 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
guillaume.sauthier
2014-06-27 08:46:38 +0000

25 Jun, 2014

1 commit

4a762007 CR-3863 Fix for OPENIG-172: Use a variable for the project name in the documentation ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@298 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
mark
2014-06-25 15:10:42 +0000