SHRINE
  1. SHRINE

shrine

Public
  1. SHRINE
  2. shrine

All Branches Graph  

        
AuthorCommitMessageCommit dateBuilds
Carl WoolfCarl Woolf
69d619b40f2yeah, currently do not believe in guard, it seems not to help
dwalenddwalend
8c0de28e2c9My own review of SHRINE2020-1273
Carl WoolfCarl Woolf
74a8a309c82remove (doubled) filter declarations from web.xml -- they are declared via annotations
dwalenddwalend
404bb03740cLittle bits while testing AWS SQS without FIFO for SHRINE2020-1273
Carl WoolfCarl Woolf
c7a8d85ffc6more guards for 'committed' servletResponse
Carl WoolfCarl Woolf
a65a8b82e4bdo not need to be authorized in order to logout!
Carl WoolfCarl Woolf
353eb874c3cmore robust guard for 'committed' httpResponse
Carl WoolfCarl Woolf
49c7240f90fmove url val to block where it is used
Carl WoolfCarl Woolf
04199ec4d8abreak out 'guard condition' once more
Carl WoolfCarl Woolf
ad891d196cdoops, need == but had !=
Carl WoolfCarl Woolf
46cdeb3d0f0clean up filter a bit
Carl WoolfCarl Woolf
673298f9a91adjust logic so that it does require checkAndRedirect for the checkAndRedirect itself!
dwalenddwalend
380b0802651More switching FIFO off for SHRINE2020-1273
dwalenddwalend
889acf8391bMore switching FIFO off for SHRINE2020-1273
Carl WoolfCarl Woolf
0119fd1ace3add biz logic to new filter, checks every request for authzn, redirecting to request url if successful
dwalenddwalend
8fe51e45e94Try timing without FIFO for SHRINE2020-1273
David WalendDavid Walend
11c92665d49Pull request #1353: Work-around for AWS SQS's limit of 50 Principals in a policy Statement for SHRINE2020-1272 Merge...
Carl WoolfCarl Woolf
01690fff5f0nascent authzn filter, biz logic to follow
Carl WoolfCarl Woolf
09cc942254etweaks to code
dwalenddwalend
8cb20f1936aBetter comments from Marc-Danie's review of SHRINE2020-1272
dwalenddwalend
639fddc557bFIFO queues need a deduplication field. I'm trying messageDeduplicationId for SHRINE2020-1273
dwalenddwalend
4503773b937Changes to get the hub audit tool prototype working again to support SHRINE2020-1273
dwalenddwalend
9264e8de317Old cut-paste typo for SHRINE2020-1272
XavXav
1615bbe7494upon hitting our logout endpoint, redirect to Shibboleth logout URL
XavXav
85779d7d072allow for multiple databases; move the configuration of the B/W list's database config so it is with the rest of the ...
XavXav
710fd06e986Externalize end-point attribute providers' regex names and values; allow any number of such regexes
dwalenddwalend
4ae1c541012Missed the new property in the shrine-setup shrine.conf for SHRINE2020-1272
XavXav
fa6c081371eMerge branch 'sso-phase2' of https://open.catalyst.harvard.edu/stash/scm/shrine/shrine into sso-phase2  Conflicts: ...
Carl WoolfCarl Woolf
8714b3bc5f0add some integrity to Headers provider: parameter user must be equal to the REMOTE_USER
dwalenddwalend
2a06732ac29Work-around for AWS SQS's limit of 50 Principals in a policy Statement for SHRINE2020-1272
Carl WoolfCarl Woolf
9f685d2bc32reorganize smoke-test urls. move white-black-list db code near its attr provider
XavXav
6019e4e39aaremove unused variable
XavXav
8ff586c79c1externalize the logout URL
Carl WoolfCarl Woolf
b9af629184aauthz/logout should be no-op if conf says no authz
Carl WoolfCarl Woolf
3170dfcfe39need to at least force logout when authzn fails
dwalenddwalend
08f701628a2Need to restart the QueuedQueriesPoller when the CRC gives us an incomplete result for SHRINE2020-846 and SHRINE2020-621
Carl WoolfCarl Woolf
91d9c212673add b-w-list logic to hms-authorization. enable authzn in config. put cw183, xh54 and fp75 on white-list
dwalenddwalend
4195ae53373Made CrcClient typesafe and propogated the Either result through breakdowns for SHRINE2020-846
Carl WoolfCarl Woolf
a7eea282327rename Config to Util, and add a helper method for calling outside urls
dwalenddwalend
05edc2d312cMore dead code gone for SHRINE2020-846
dwalenddwalend
0ba37d910ddChanged CrcClient to return an Either[ErrorResponse,V] and threaded the changes all the way through for SHRINE2020-846
Carl WoolfCarl Woolf
1cbd6c725dcquiet failure is profiles url (or other endpiont url) is down
Carl WoolfCarl Woolf
78ee9dbeb74tweak the dump-output of user maps
dwalenddwalend
ef091b78c23Reworked CRC client to construct the class's V instead of the parseShrineResponse's R for SHRINE2020-846
dwalenddwalend
6cbfad78440Refactoring of the CRC client and almost got rid of BroadcastMessage for SHRINE2020-961 SHRINE-2384 and SHRINE2020-846
Carl WoolfCarl Woolf
24b74636e9badd outer map of all users' info
dwalenddwalend
1509df287d4Cleanup before factoring out some common bits for SHRINE2020-846
dwalenddwalend
5dd4dbf8568Some renaming before the bigger refactor for SHRINE2020-846
Carl WoolfCarl Woolf
4325b4a9f29adjust path to unauth page
Carl WoolfCarl Woolf
a113efe2e0cremove unused attr provider. Provide 'unauthorized' page
dwalenddwalend
fd6c4d1c338More little bits of cleanup for SHRINE2020-846
XavXav
3efdb7b331dremove stale configs to be served by the /config end point
dwalenddwalend
b5d5fc039f5Deleted a lot of methods that were only used in tests after updating the tests to use active code paths for SHRINE202...
dwalenddwalend
bc93193b139Checkpointing changes to look back one step for SHRINE2020-846
Carl WoolfCarl Woolf
b87358d8885begin wiring authorizer
Carl WoolfCarl Woolf
25f56cae334correct path for config for whether authzn is desired
Carl WoolfCarl Woolf
f4cfbe6b61cconfig checks whether authzn is desired
Carl WoolfCarl Woolf
1ba86770bc3polish / simplify AttrProvider pattern
XavXav
069aa0df0eamodify attribute providers to use a single flat list of config blocks;
XavXav
f8eeb6e9b8esimplify shibboleth config for sessionHook
XavXav
99c263447eaadd missing sessionHook attribute
XavXav
623d445103frename one attribute provider and make the rest of them objects
XavXav
ad71528362cloop through attribute provider names as configured and add an initial empty entry in globalUserInfo for each
Carl WoolfCarl Woolf
dc10d5b4bc8omit unused val assignment
Carl WoolfCarl Woolf
d086172bb92progress on dynamically using attrProvider classes
Carl WoolfCarl Woolf
7367110ea98explanatory comments about the Seq's , part 2
Carl WoolfCarl Woolf
46da310f9bbexplanatory comments about the Seq's
Carl WoolfCarl Woolf
8493897900dtweak / cleanup authInfo endpoints
Carl WoolfCarl Woolf
e645fc364e8Revert "Revert "remove local presence of shrineSP.conf"" This reverts commit b33cce59902321100e036507df25a2ba5b49c34e.
Carl WoolfCarl Woolf
b33cce59902Revert "remove local presence of shrineSP.conf" This reverts commit cbaf5aa58d4897f75902d8be2a72e1ff0dbf28e7.
Carl WoolfCarl Woolf
8dcd48bcb0eprogress wiring authz attributes
Carl WoolfCarl Woolf
cbaf5aa58d4remove local presence of shrineSP.conf
Carl WoolfCarl Woolf
7e5233df09eshrineSP.conf actually works better living here, not in sso-configs. Deploy works both ways, but war-copy needs it here
Carl WoolfCarl Woolf
99f0a283a75tweaking endpoint regex, add smoke-test endpoint
Carl WoolfCarl Woolf
86a978da972ho ho ho. progress toward endpoint config. refactored List to Seq, when possible, the latter is "the scala way"
Carl WoolfCarl Woolf
eff9954361fremove resources folder. conf is now in sso-configs
Carl WoolfCarl Woolf
664a791800eremove local shrineSP.conf, should come from sso-configs
Carl WoolfCarl Woolf
91b598578a4Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Carl WoolfCarl Woolf
ec07df85cb7try adding shrineSP to config ecosystem
XavXav
b0954e52072fix a bug and add explanatory content to debug statements
XavXav
58267a67af2port the AbstractAuthorizer and HmsAuthorizer classes to scala. move EndpointProviders to the providerService.attribu...
XavXav
45c43ee96afport the AbstractAttrProvider and RequestHeadersAttrProvider classes to scala. Need to be hooked up to the configurat...
dwalenddwalend
da737f72e0fCleaning up some old test code for SHRINE2020-621, SHRINE-3613, SHRINE-3578, SHRINE-3310
XavXav
5ed1ece31f0fix reading-in name of authorizer and names of header configuration providers; dump the result to the browser
XavXav
09bf0aab9efMerge branch 'sso-phase2' of https://open.catalyst.harvard.edu/stash/scm/shrine/shrine into sso-phase2
XavXav
665cc58e8a2setup code to be able to inspect 4 config settings
Carl WoolfCarl Woolf
c10cf005495initial work on endpointProviders. remove bad line from conf-addition
XavXav
f6f5f8dbb6dMerge remote-tracking branch 'origin/sso-phase2' into sso-phase2
XavXav
5f5f4b0a952fix AttributesConf. Other confs remain to be made to work.
Carl WoolfCarl Woolf
4ccaded2e31make allConfig eager
Carl WoolfCarl Woolf
b32d0771332allconfig helper
Carl WoolfCarl Woolf
daf6f52267flogout redirect works
Carl WoolfCarl Woolf
50baffbd8f2onShibLogin redirect works
XavXav
82edfcb1d46maintain a single map of all the logged in users. Add end-points for "logging in" and "out" of the map.
David WalendDavid Walend
1ae8e863f63Pull request #1352: Feature/SHRINE2020 1261 Merge in SHRINE/shrine from feature/SHRINE2020-1261 to develop * commit...
dwalenddwalend
63caaeb5bcbRemoved a stray println for SHRINE2020-1261
Carl WoolfCarl Woolf
7c03d2942f0remove 'print statement' info() calls. remove one bit of laziness. update readme
Carl WoolfCarl Woolf
f5001250a5bOMG, config'd endpoint isBlacklist works
Carl WoolfCarl Woolf
a0f211877dabit more progress towards db read-access for blacklist... WIP, no cigar yet
Carl WoolfCarl Woolf
64b8a91c174progress towards db read-access for blacklist... WIP, no cigar yet
dwalenddwalend
eca253f9cf7Added a command to switch MOM systems for SHRINE2020-1261
Carl WoolfCarl Woolf
65cb1ffd14ademo treating path-parameter, improved query parameter treatment
Carl WoolfCarl Woolf
026f9b2cf92on the way to colorList db. reorganize service / endpoints. add headers and query-params to cookies output
Carl WoolfCarl Woolf
6254db92bdesteps toward black-white table
dwalenddwalend
d87f9ef5de3Updated README.md for SHRINE2020-987
Carl WoolfCarl Woolf
def52223577add comment
Carl WoolfCarl Woolf
7f3979b3a1amore robust profiles logic. despite its discouraging name, unsafeRunSync() seems to be the go-to way to get a synchro...
dwalenddwalend
ba64285f972Updates for perftest SHRINE2020-988
Carl WoolfCarl Woolf
bc779eb2966tweak some names
Carl WoolfCarl Woolf
9f0c13a6edeprogress with profiles
Carl WoolfCarl Woolf
22ce75cf34eprogress (but no cigar) with profiles
Carl WoolfCarl Woolf
ae289b240a5incorporate populate() into infoUser object
Carl WoolfCarl Woolf
0c2dd99f8d7don't quote the Option[String]
Carl WoolfCarl Woolf
047d5542b24embryonic behaviors around userInfo map
dwalenddwalend
8ebc56c4ab0Updated the jmeter test for the newer networks for SHRINE2020-988
Carl WoolfCarl Woolf
5f14c481ac1extract remote-user from header
Carl WoolfCarl Woolf
d4234356f6ffirst step towards authorizer in the http4s eco-system on shrine
dwalenddwalend
3b5ce8f426bParking SHRINE2020-1261 to work on performance tests
David WalendDavid Walend
8c1ec44aa3aPull request #1351: Removed the forced dependency on apache commons-text now that opencsv is updated for SHRINE2020-1...
David WalendDavid Walend
cf032c2c7f5Pull request #1350: Feature/SHRINE2020 1259 Merge in SHRINE/shrine from feature/SHRINE2020-1259 to develop * commit...
dwalenddwalend
c224516a6d2Removed the forced dependency on apache commons-text now that opencsv is updated for SHRINE2020-1255
David WalendDavid Walend
2a97024806bPull request #1349: Turns out SHRINE2020-1258 shouldn't be done after all. Merge in SHRINE/shrine from feature/SHRIN...
dwalenddwalend
77ae60fd162Changed over the hub database code to all use cats IO - never blocks - for SHRINE2020-1259
dwalenddwalend
8cb982f62fcReplaced all uses of runTransactionBlocking in the hub db with IO for SHRINE2020-1259
dwalenddwalend
0ba156bd4d9Turns out SHRINE2020-1258 shouldn't be done after all. Added a comment.
David WalendDavid Walend
070d4800041Pull request #1348: Bugfix/SHRINE2020 1252 Merge in SHRINE/shrine from bugfix/SHRINE2020-1252 to develop * commit '...
dwalenddwalend
5b1054a9370Merge remote-tracking branch 'origin/develop' into bugfix/SHRINE2020-1252
David WalendDavid Walend
bd9a344ad2dPull request #1347: Feature/SHRINE2020 1246 Merge in SHRINE/shrine from feature/SHRINE2020-1246 to develop * commit...
David WalendDavid Walend
b441dfee3daPull request #1345: Feature/SHRINE2020 1132 Merge in SHRINE/shrine from feature/SHRINE2020-1132 to develop * commit...
dwalenddwalend
c5b6b4f522bEach receiver should have its own group for SHRINE2020-1132
dwalenddwalend
316e60ba3d3Merge branch 'feature/SHRINE2020-1132' into bugfix/SHRINE2020-1252
dwalenddwalend
d66760e4721Only let tomcat create queues when using the legacy MOM system for SHRINE2020-1252
dwalenddwalend
ba1a1cd13acMissed deleting a chunk I commented out for SHRINE2020-1246
dwalenddwalend
6b1c149d014Cut out some dead code and get the sql code right for SHRINE2020-1246
dwalenddwalend
1d088390d1cAdded a STATUS column to the hub's QUERIES table for SHRINE2020-1246
Carl WoolfCarl Woolf
885d1b2aa48"shrineAuthorize" in proxyPass
David WalendDavid Walend
fdace1357bbPull request #1346: Bumped the Scala version to 2.13.10 for SHRINE2020-1251 Merge in SHRINE/shrine from feature/SHRI...
dwalenddwalend
6cc97c63cb4Bumped the Scala version to 2.13.10 for SHRINE2020-1251
dwalenddwalend
1897da200a8Cleanup before review for SHRINE2020-1132
dwalenddwalend
de61f26d862Made group id a property of the Network for SHRINE2020-1132
dwalenddwalend
2111f2ead81Clearing todos for SHRINE2020-1132
dwalenddwalend
7697acfc3dbRemoved the properties level from the config for SHRINE2020-1132
dwalenddwalend
7e6be1d66beAdded the remove permission function for SHRINE2020-1132 and SHRINE2020-1171
dwalenddwalend
601b1a47542Got group access control lists working in the tool for SHRINE2020-1132 and SHRINE2020-1170
dwalenddwalend
c82bb0e6e87Tool successfully authorizes access to topics for SHRINE2020-1132
dwalenddwalend
42ce4d5cfb0Working but has no ACLs whatsoever for SHRINE2020-1132
dwalenddwalend
e61fd276b66These users don't need the Create permission anymore for SHRINE2020-1132
dwalenddwalend
07803245c22Some cleanup partway through SHRINE2020-1132
dwalenddwalend
cb48ba956d7No reason to poll when using the admin's bonafides for SHRINE2020-1132
dwalenddwalend
055e029af01src/main/docker/dev-environments/shrine-hub/network-setup/override.conf
Carl WoolfCarl Woolf
e72202c7406mention authz module in main pom
Carl WoolfCarl Woolf
293fa9432e0first cut at copying in an old bunch of authzn classes, plus servlet config
dwalenddwalend
b208519309cCreating queues in network setup - and lots and lots of confif changes for SHRINE2020-1132
Carl WoolfCarl Woolf
353f61295d9Revert "cherry addition of some authzn files" This reverts commit ebeb9b44bb0e0cced3d984d42d9cc45e224da74e.
XavXav
ebeb9b44bb0cherry addition of some authzn files
Carl WoolfCarl Woolf
db15bc82de6Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2 # Conflicts: # authz/pom.xml
Carl WoolfCarl Woolf
c49567c8755reset branch to shortly after 400 release, and merge from latest develop
Carl WoolfCarl Woolf
a29aa4c0b1fMerge remote-tracking branch 'origin/develop' into sso-phase2
dwalenddwalend
50f1284fab7Now letting the network setup tool create the queues for SHRINE2020-1132
dwalenddwalend
3425c179332Found it! SHRINE2020-1132
dwalenddwalend
df9e41c146cMore intermediate progress - checked in to share with Marc-Danie for SHRINE2020-1132
dwalenddwalend
3d997d02b0fCheckpoint to go see what works and why this does not - for SHRINE2020-1132
dwalenddwalend
650a0763b04Start of drawing data structures through the system for SHRINE2020-1132
David WalendDavid Walend
9f9bc4f1338Pull request #1344: Feature/SHRINE2020 1132 Merge in SHRINE/shrine from feature/SHRINE2020-1132 to develop * commit...
dwalenddwalend
2d90f05e0c7Changes to docker for SHRINE2020-1257
David WalendDavid Walend
127669ee4d2Pull request #1342: Feature/SHRINE2020 1249 Merge in SHRINE/shrine from feature/SHRINE2020-1249 to develop * commit...
dwalenddwalend
2449f6f6eceMarc-Danie's review comments for SHRINE2020-1249
dwalenddwalend
bf6af63619dMerge branch 'develop' into feature/SHRINE2020-1249
dwalenddwalend
fbce5cbd559Added a slot for a Kafka config in Network for SHRINE2020-1132
dwalenddwalend
e5a51835619Revert "Revert "Changes for JDK17 for SHRINE2020-824"" This reverts commit ec019299707c3aba131450cf1a8b5d6fa071b0c8.
dwalenddwalend
ec019299707Revert "Changes for JDK17 for SHRINE2020-824" This reverts commit 9257741b207be0c72385d4e54976666980154e66.
David WalendDavid Walend
e83160d122dPull request #1343: Changes for JDK17 for SHRINE2020-824 Merge in SHRINE/shrine from feature/SHRINE2020-824 to devel...
dwalenddwalend
9257741b207Changes for JDK17 for SHRINE2020-824
dwalenddwalend
ef303fe429bMy review pass for SHRINE2020-1249
dwalenddwalend
ab2672513e1Cleanup before the review for SHRINE2020-1249
dwalenddwalend
fbacb007259Figured out that the ReadResultRequestAdapter.process method actually does something SHRINE2020-1249
dwalenddwalend
351017b3381Made the CRCClient a part for other things for SHRINE2020-1249
dwalenddwalend
25d06862e87Another step toward making the CRCClient contained instead of a parent for SHRINE2020-1249
dwalenddwalend
cffa8bb33d8Factored out the ReadResultRequestAdapter into its own file for SHRINE2020-1249
David WalendDavid Walend
0df924e30b3Pull request #1341: Bugfix/SHRINE2020 1254 Merge in SHRINE/shrine from bugfix/SHRINE2020-1254 to develop * commit '...
dwalenddwalend
d7b71d4b87aTicket to unwind the hack in SHRINE2020-1254
dwalenddwalend
577a51c3559Overrode apache commons text dependency to fix a vulnerability for SHRINE2020-1254
David WalendDavid Walend
91e65f6a4f9Pull request #1340: Feature/SHRINE2020 1250 Merge in SHRINE/shrine from feature/SHRINE2020-1250 to develop * commit...
dwalenddwalend
1ab6260ea8eGot rid of the Adapter superclass for SHRINE2020-1249
dwalenddwalend
92b6121cccfRemoved need for Adapter class in this really complex unit test for SHRINE2020-1249
dwalenddwalend
dbaadc7bbc7Another step towards disolving Adapter for SHRINE2020-1249
dwalenddwalend
4739b4a491cAnother step toward disolving Adapter for SHRINE20201249
dwalenddwalend
5d95f00ec9bReview comments from Marc-Danie for SHRINE2020-1250
Next →