SHRINE
  1. SHRINE

shrine

Public
  1. SHRINE
  2. shrine

All Branches Graph  

        
AuthorCommitMessageCommit dateBuilds
Carl WoolfCarl Woolf
bba2c3efe0deliminate yet another magic string
Carl WoolfCarl Woolf
f9b052cf7c9Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Carl WoolfCarl Woolf
b97d29cc9e5eliminate another magic string
XavXav
070fb08d973simplify logic / remove redundancy in AuthorizationService
Carl WoolfCarl Woolf
e9a4a2d1f6eeliminate magic string
Carl WoolfCarl Woolf
ebc5e246e65prune the pom
XavXav
7ec57e3d6b6simplify logic / remove redundancy in AuthorizationService
XavXav
864092404f5add no-sp.conf-sample file, edit sp.conf-sample to reflect new way of handling isSsoMode cookie
XavXav
51248e4c862new sample shrineSP.conf file with content to choose from for 3 modes of authentication and authorization (PM, SSO, S...
XavXav
23784422b79Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
XavXav
53e8aa18b1astyle the unauthorized page text by copying the computed CSS of the paragraph "Define Inclusion and Exclusion Criteri...
dwalenddwalend
6361fa26b6fTry a pipe for SHRINE2020-1282
Carl WoolfCarl Woolf
e0d2f33dce3extra console log for idle-timer logout
dwalenddwalend
d67a36b0e89Try a lazy approach so that the deploy script can run for SHRINE2020-1282
dwalenddwalend
339bece95b3Now without locking up the network setup tool forever SHRINE2020-1282
Carl WoolfCarl Woolf
b5af5433979extra console log for idle-timer logout
dwalenddwalend
7fff58f52dcSome logging to see what's going on for SHRINE2020-1282
Carl WoolfCarl Woolf
2472a27bb80hardier handling of 'free-pass' urls in filter
dwalenddwalend
ca16f864af9Maybe reusing the producer in fs2-kafka for SHRINE2020-1282
dwalenddwalend
870fc44f4aeTry a drain for SHRINE2020-1282
Carl WoolfCarl Woolf
30ce7476c62React-based wiring for unauth page to use config'd message
dwalenddwalend
de7df867be9Rolling back the bounded thread pool for SHRINE2020-1282
dwalenddwalend
0406f4881b4Possible fix for SHRINE2020-1282 - found and maybe fixed a thread leak
Carl WoolfCarl Woolf
b8a2d7a22fbMerge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Carl WoolfCarl Woolf
20250ab1e65basis for styling unauth page
XavXav
3d49816c753Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
XavXav
1ae0d39fbd9make unauthorized message configurable and pass it to the front-end as part of the webClientConfig JSON content
Marc-Danie NazaireMarc-Danie Nazaire
6d5fa00de2bMerge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Marc-Danie NazaireMarc-Danie Nazaire
1eee541caebMoved UnAuthorized from pages to componentd
Carl WoolfCarl Woolf
c828a323f09remove toy properties from map
Carl WoolfCarl Woolf
cb2b4853981Merge remote-tracking branch 'origin/develop' into sso-phase2 # Conflicts: # commons/util/src/main/scala/net/shrine/...
Marc-Danie NazaireMarc-Danie Nazaire
025692bb91fMerge branch 'sso-phase2' of https://open.catalyst.harvard.edu/stash/scm/shrine/shrine into sso-phase2  Conflicts: ...
Marc-Danie NazaireMarc-Danie Nazaire
d6dc230e4b0Changes for loading unauthorized page
dwalenddwalend
04c18d7018dBounded thread pools and more logging for SHRINE2020-1282
Carl WoolfCarl Woolf
500bd5fbc18Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2 # Conflicts: # shrine-setup/src/main/resources/sso/...
Carl WoolfCarl Woolf
4be70eb4aeeupdate isSsoCookie creation
dwalenddwalend
e6e910d7a76Checkpointing SHRINE2020-1218, maybe a third of the way to compiling the big change
XavXav
77fe4b8d85ffix how the unauthorized URL gets handled
Marc-Danie NazaireMarc-Danie Nazaire
b98e05bc336Added new UnAuthorized page to pages/index.js
Marc-Danie NazaireMarc-Danie Nazaire
9aa4176e8beAdded new UnAuthorized page to pages/index.js
XavXav
3605a97cc18trying to make unauthorized page work
XavXav
ba9ad69cdcffix error in comment regarding use of HTTP vs AJP
XavXav
d9089c11c97pare down sample config files to only what is needed / remove redundancy
XavXav
f1e168b26caadd one though the previous documentation
XavXav
63ce81187e9Add TODO documenting discussion between developers
dwalenddwalend
af7fa7479c3Removed dependency on reactive streams for SHRINE2020-1218
David WalendDavid Walend
ba403ce16e7Pull request #1357: Fix for SHRINE2020-1281 - removed a dependency on SEnum and some very simple tests Merge in SHRI...
XavXav
2731d9d2a2bupdate sample config files to use AJP again
XavXav
33fe8342396update sample config files
Carl WoolfCarl Woolf
a0a4d862813make generalAuthorization property in userInfo available in session (though for now, not in the smoke output)
Carl WoolfCarl Woolf
00472205333wire userInfo into the login-session lifecycle
dwalenddwalend
2e1fb29a5e9Fix for SHRINE2020-1281 - removed a dependency on SEnum and some very simple tests
Carl WoolfCarl Woolf
dc81f71de7deliminate (we think an) unnecessary cookie config
Carl WoolfCarl Woolf
b55a8561081replace diagnostic cookies with stub use of session
David WalendDavid Walend
3228a27c162Pull request #1356: Feature/SHRINE2020 846 Merge in SHRINE/shrine from feature/SHRINE2020-846 to develop * commit '...
dwalenddwalend
e830a00a33fCode review fix from Marc-Danie for SHRINE2020-846
dwalenddwalend
3596b7f2d9fFixed a wildcard in an import for SHRINE2020-1280
XavXav
bd3f47e4b6cpass cookie to apache server and from there to the browser (by setting max-age to -1)
XavXav
5a77e7c26d7pass cookie to apache server by setting max-age to -1
dwalenddwalend
460a1d9b43eMerge remote-tracking branch 'origin/develop' into feature/SHRINE2020-846
dwalenddwalend
e9e5387ba1fComments mostly about punting work into the future for SHRINE2020-846
dwalenddwalend
33cb37b2125Some tidying up for SHIRNE2020-846 before taking on RunQueryResponse
Carl WoolfCarl Woolf
7de3c9d27e9simplify smoke/cookies endpoint. remove defunct dump-map code
Carl WoolfCarl Woolf
04eaf166586precise URI's for authz-free-pass
XavXav
479c52a8befCreate a test cookie
Carl WoolfCarl Woolf
c39689aa0b6new, improved filter, for more robust authorization, logouts seem to work better
Marc-Danie NazaireMarc-Danie Nazaire
fa6b9aa0a8cPull request #1355: Feature/SHRINE2020 1198 - Update docker container to use 1.7.13 Merge in SHRINE/shrine from feat...
dwalenddwalend
b0f4c4e4accCleaned out ReadQueryInstancesResponse for SHRINE2020-846
dwalenddwalend
e0ae31bba40Removed AbstractReadInstanceResultsResponse for SHRINE2020-846
Marc-Danie NazaireMarc-Danie Nazaire
44ef8a6a317SHRINE2020-1198 - Update docker container to use 1.7.13 - Fixed tomcat startup when network already exists
David WalendDavid Walend
2a91afbd7c0Pull request #1354: Feature/SHRINE2020 1273 Merge in SHRINE/shrine from feature/SHRINE2020-1273 to develop * commit...
Marc-Danie NazaireMarc-Danie Nazaire
62c457b676fSHRINE2020-1198 - Update docker container to use 1.7.13 - Fixed mysql jdc deprecated error in log and restarting network
XavXav
777c9339d93flesh out stub for calling authz from middleware; move authorization logic from AuthzHttp4sResource to AuthorizationS...
Marc-Danie NazaireMarc-Danie Nazaire
f12cbc2c4f3SHRINE2020-1198 - Update docker container to use 1.7.13 - updated myql connector library and the tomcat container ver...
dwalenddwalend
724fa2f6ba8Moved ReadInstanceResultsResponse into a CrcClient. Fix for SHRINE-2706 and more work toward SHRINE2020-846
Carl WoolfCarl Woolf
61fd9f76d6astub for calling authz from middleware
Carl WoolfCarl Woolf
22f4901bbc2change name of middleware object
Marc-Danie NazaireMarc-Danie Nazaire
1133df9b69bSHRINE2020-1198 - Update docker container to use 1.7.13
dwalenddwalend
b3910053063Added a query id to CrcClient's hofs for SHRINE2020-846
dwalenddwalend
c3a3c271e50Replaced ReadResultClient with a call to a generified CrcClient for SHRINE2020-846
dwalenddwalend
99a7d6b51eaDecided Client was a fine postfix for named-requesters for SHRINE2020-846
XavXav
49b6bd41925Merge branch 'sso-phase2' of https://open.catalyst.harvard.edu/stash/scm/shrine/shrine into sso-phase2
Carl WoolfCarl Woolf
15dc5debab8Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Carl WoolfCarl Woolf
536ed00d75badd trivial map to output of ..../qep/login . Coming Soon: authz info?
XavXav
947b2065d8fremove dead config
XavXav
266380e02b4see if HttpSession is persistent
XavXav
114ff9ea5f5Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
XavXav
c0d4a258761try using HttpSession again
Carl WoolfCarl Woolf
69d619b40f2yeah, currently do not believe in guard, it seems not to help
dwalenddwalend
8c0de28e2c9My own review of SHRINE2020-1273
Carl WoolfCarl Woolf
74a8a309c82remove (doubled) filter declarations from web.xml -- they are declared via annotations
dwalenddwalend
404bb03740cLittle bits while testing AWS SQS without FIFO for SHRINE2020-1273
Carl WoolfCarl Woolf
c7a8d85ffc6more guards for 'committed' servletResponse
Carl WoolfCarl Woolf
a65a8b82e4bdo not need to be authorized in order to logout!
Carl WoolfCarl Woolf
353eb874c3cmore robust guard for 'committed' httpResponse
Carl WoolfCarl Woolf
49c7240f90fmove url val to block where it is used
Carl WoolfCarl Woolf
04199ec4d8abreak out 'guard condition' once more
Carl WoolfCarl Woolf
ad891d196cdoops, need == but had !=
Carl WoolfCarl Woolf
46cdeb3d0f0clean up filter a bit
Carl WoolfCarl Woolf
673298f9a91adjust logic so that it does require checkAndRedirect for the checkAndRedirect itself!
dwalenddwalend
380b0802651More switching FIFO off for SHRINE2020-1273
dwalenddwalend
889acf8391bMore switching FIFO off for SHRINE2020-1273
Carl WoolfCarl Woolf
0119fd1ace3add biz logic to new filter, checks every request for authzn, redirecting to request url if successful
dwalenddwalend
8fe51e45e94Try timing without FIFO for SHRINE2020-1273
David WalendDavid Walend
11c92665d49Pull request #1353: Work-around for AWS SQS's limit of 50 Principals in a policy Statement for SHRINE2020-1272 Merge...
Carl WoolfCarl Woolf
01690fff5f0nascent authzn filter, biz logic to follow
Carl WoolfCarl Woolf
09cc942254etweaks to code
dwalenddwalend
8cb20f1936aBetter comments from Marc-Danie's review of SHRINE2020-1272
dwalenddwalend
639fddc557bFIFO queues need a deduplication field. I'm trying messageDeduplicationId for SHRINE2020-1273
dwalenddwalend
4503773b937Changes to get the hub audit tool prototype working again to support SHRINE2020-1273
dwalenddwalend
9264e8de317Old cut-paste typo for SHRINE2020-1272
XavXav
1615bbe7494upon hitting our logout endpoint, redirect to Shibboleth logout URL
XavXav
85779d7d072allow for multiple databases; move the configuration of the B/W list's database config so it is with the rest of the ...
XavXav
710fd06e986Externalize end-point attribute providers' regex names and values; allow any number of such regexes
dwalenddwalend
4ae1c541012Missed the new property in the shrine-setup shrine.conf for SHRINE2020-1272
XavXav
fa6c081371eMerge branch 'sso-phase2' of https://open.catalyst.harvard.edu/stash/scm/shrine/shrine into sso-phase2  Conflicts: ...
Carl WoolfCarl Woolf
8714b3bc5f0add some integrity to Headers provider: parameter user must be equal to the REMOTE_USER
dwalenddwalend
2a06732ac29Work-around for AWS SQS's limit of 50 Principals in a policy Statement for SHRINE2020-1272
Carl WoolfCarl Woolf
9f685d2bc32reorganize smoke-test urls. move white-black-list db code near its attr provider
XavXav
6019e4e39aaremove unused variable
XavXav
8ff586c79c1externalize the logout URL
Carl WoolfCarl Woolf
b9af629184aauthz/logout should be no-op if conf says no authz
Carl WoolfCarl Woolf
3170dfcfe39need to at least force logout when authzn fails
dwalenddwalend
08f701628a2Need to restart the QueuedQueriesPoller when the CRC gives us an incomplete result for SHRINE2020-846 and SHRINE2020-621
Carl WoolfCarl Woolf
91d9c212673add b-w-list logic to hms-authorization. enable authzn in config. put cw183, xh54 and fp75 on white-list
dwalenddwalend
4195ae53373Made CrcClient typesafe and propogated the Either result through breakdowns for SHRINE2020-846
Carl WoolfCarl Woolf
a7eea282327rename Config to Util, and add a helper method for calling outside urls
dwalenddwalend
05edc2d312cMore dead code gone for SHRINE2020-846
dwalenddwalend
0ba37d910ddChanged CrcClient to return an Either[ErrorResponse,V] and threaded the changes all the way through for SHRINE2020-846
Carl WoolfCarl Woolf
1cbd6c725dcquiet failure is profiles url (or other endpiont url) is down
Carl WoolfCarl Woolf
78ee9dbeb74tweak the dump-output of user maps
dwalenddwalend
ef091b78c23Reworked CRC client to construct the class's V instead of the parseShrineResponse's R for SHRINE2020-846
dwalenddwalend
6cbfad78440Refactoring of the CRC client and almost got rid of BroadcastMessage for SHRINE2020-961 SHRINE-2384 and SHRINE2020-846
Carl WoolfCarl Woolf
24b74636e9badd outer map of all users' info
dwalenddwalend
1509df287d4Cleanup before factoring out some common bits for SHRINE2020-846
dwalenddwalend
5dd4dbf8568Some renaming before the bigger refactor for SHRINE2020-846
Carl WoolfCarl Woolf
4325b4a9f29adjust path to unauth page
Carl WoolfCarl Woolf
a113efe2e0cremove unused attr provider. Provide 'unauthorized' page
dwalenddwalend
fd6c4d1c338More little bits of cleanup for SHRINE2020-846
XavXav
3efdb7b331dremove stale configs to be served by the /config end point
dwalenddwalend
b5d5fc039f5Deleted a lot of methods that were only used in tests after updating the tests to use active code paths for SHRINE202...
dwalenddwalend
bc93193b139Checkpointing changes to look back one step for SHRINE2020-846
Carl WoolfCarl Woolf
b87358d8885begin wiring authorizer
Carl WoolfCarl Woolf
25f56cae334correct path for config for whether authzn is desired
Carl WoolfCarl Woolf
f4cfbe6b61cconfig checks whether authzn is desired
Carl WoolfCarl Woolf
1ba86770bc3polish / simplify AttrProvider pattern
XavXav
069aa0df0eamodify attribute providers to use a single flat list of config blocks;
XavXav
f8eeb6e9b8esimplify shibboleth config for sessionHook
XavXav
99c263447eaadd missing sessionHook attribute
XavXav
623d445103frename one attribute provider and make the rest of them objects
XavXav
ad71528362cloop through attribute provider names as configured and add an initial empty entry in globalUserInfo for each
Carl WoolfCarl Woolf
dc10d5b4bc8omit unused val assignment
Carl WoolfCarl Woolf
d086172bb92progress on dynamically using attrProvider classes
Carl WoolfCarl Woolf
7367110ea98explanatory comments about the Seq's , part 2
Carl WoolfCarl Woolf
46da310f9bbexplanatory comments about the Seq's
Carl WoolfCarl Woolf
8493897900dtweak / cleanup authInfo endpoints
Carl WoolfCarl Woolf
e645fc364e8Revert "Revert "remove local presence of shrineSP.conf"" This reverts commit b33cce59902321100e036507df25a2ba5b49c34e.
Carl WoolfCarl Woolf
b33cce59902Revert "remove local presence of shrineSP.conf" This reverts commit cbaf5aa58d4897f75902d8be2a72e1ff0dbf28e7.
Carl WoolfCarl Woolf
8dcd48bcb0eprogress wiring authz attributes
Carl WoolfCarl Woolf
cbaf5aa58d4remove local presence of shrineSP.conf
Carl WoolfCarl Woolf
7e5233df09eshrineSP.conf actually works better living here, not in sso-configs. Deploy works both ways, but war-copy needs it here
Carl WoolfCarl Woolf
99f0a283a75tweaking endpoint regex, add smoke-test endpoint
Carl WoolfCarl Woolf
86a978da972ho ho ho. progress toward endpoint config. refactored List to Seq, when possible, the latter is "the scala way"
Carl WoolfCarl Woolf
eff9954361fremove resources folder. conf is now in sso-configs
Carl WoolfCarl Woolf
664a791800eremove local shrineSP.conf, should come from sso-configs
Carl WoolfCarl Woolf
91b598578a4Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Carl WoolfCarl Woolf
ec07df85cb7try adding shrineSP to config ecosystem
XavXav
b0954e52072fix a bug and add explanatory content to debug statements
XavXav
58267a67af2port the AbstractAuthorizer and HmsAuthorizer classes to scala. move EndpointProviders to the providerService.attribu...
XavXav
45c43ee96afport the AbstractAttrProvider and RequestHeadersAttrProvider classes to scala. Need to be hooked up to the configurat...
dwalenddwalend
da737f72e0fCleaning up some old test code for SHRINE2020-621, SHRINE-3613, SHRINE-3578, SHRINE-3310
XavXav
5ed1ece31f0fix reading-in name of authorizer and names of header configuration providers; dump the result to the browser
XavXav
09bf0aab9efMerge branch 'sso-phase2' of https://open.catalyst.harvard.edu/stash/scm/shrine/shrine into sso-phase2
XavXav
665cc58e8a2setup code to be able to inspect 4 config settings
Carl WoolfCarl Woolf
c10cf005495initial work on endpointProviders. remove bad line from conf-addition
XavXav
f6f5f8dbb6dMerge remote-tracking branch 'origin/sso-phase2' into sso-phase2
XavXav
5f5f4b0a952fix AttributesConf. Other confs remain to be made to work.
Carl WoolfCarl Woolf
4ccaded2e31make allConfig eager
Carl WoolfCarl Woolf
b32d0771332allconfig helper
Carl WoolfCarl Woolf
daf6f52267flogout redirect works
Carl WoolfCarl Woolf
50baffbd8f2onShibLogin redirect works
XavXav
82edfcb1d46maintain a single map of all the logged in users. Add end-points for "logging in" and "out" of the map.
David WalendDavid Walend
1ae8e863f63Pull request #1352: Feature/SHRINE2020 1261 Merge in SHRINE/shrine from feature/SHRINE2020-1261 to develop * commit...
dwalenddwalend
63caaeb5bcbRemoved a stray println for SHRINE2020-1261
Carl WoolfCarl Woolf
7c03d2942f0remove 'print statement' info() calls. remove one bit of laziness. update readme
Carl WoolfCarl Woolf
f5001250a5bOMG, config'd endpoint isBlacklist works
Carl WoolfCarl Woolf
a0f211877dabit more progress towards db read-access for blacklist... WIP, no cigar yet
Carl WoolfCarl Woolf
64b8a91c174progress towards db read-access for blacklist... WIP, no cigar yet
Next →