SHRINE
  1. SHRINE

shrine

Public
  1. SHRINE
  2. shrine

All Branches Graph  

        
AuthorCommitMessageCommit dateBuilds
Carl WoolfCarl Woolf
3e8b3e0279dMerge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Carl WoolfCarl Woolf
c0a5c40d6e0dump of user info may be good for regex authz
XavXav
18cf427a535Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
XavXav
2c75e76bbbfremove console.log() statements by Carl and Xav
dwalenddwalend
505d7f9f4f6Try some withTransactionIsolation(TransactionIsolation.RepeatableRead) for SHRINE2020-1306
David WalendDavid Walend
7adc34119e2Pull request #1359: Bugfix/SHRINE2020 1282 Merge in SHRINE/shrine from bugfix/SHRINE2020-1282 to develop * commit '...
dwalenddwalend
b1dbbef5ef6Added some .withTransactionIsolation(TransactionIsolation.Serializable) for SHRINE2020-1306
Carl WoolfCarl Woolf
d312e7b8a9eprofiles to use faculty-type
Carl WoolfCarl Woolf
d9d4d165d25adjust semantics of bw authorizer per demo meeting
dwalenddwalend
0e68507a2bcTrying a bounded thread pool and some fairness for SHRINE2020-1306. I think it'll actually also need a queue, but bab...
XavXav
44dbea3ccc9Merge branch 'sso-phase2' of https://open.catalyst.harvard.edu/stash/scm/shrine/shrine into sso-phase2
XavXav
93d6ef0e6d2Create a new authorizer class which looks only at the black- and white-list attributes
dwalenddwalend
667cada71caAn experiment - can I force ACID by bringing allTableVersions' query row into the transaction at the beginning - for ...
Carl WoolfCarl Woolf
e8bd289dd5cremove speculative additions to middleware user-object
Marc-Danie NazaireMarc-Danie Nazaire
e34c480b1b9Fixed tutorial not being displayed after manually logging out and logging back in
Marc-Danie NazaireMarc-Danie Nazaire
21f5e293c32Fixed tutorial not being displayed after automatic session timeout logout
Carl WoolfCarl Woolf
ad13f14579ecleanup IdleTimer -- no clearLogin, as also in Header
XavXav
c2cc75e818bremove tutorial dialog when clicking the log off button from the timeout dialog
dwalenddwalend
9781cc5205dReview cleanup for SHRINE2020-1282
XavXav
c20e46036b1remove tutorial dialog when clicking the log off button from the timeout dialog
XavXav
a134404b953reinstate lines commented out in error
dwalenddwalend
0daec1c4e24Try using the java api for SHRINE2020-1282
dwalenddwalend
7cb48047371One more try at using a resource outside of context for SHRINE2020-1282
XavXav
b79e96ed1d5added instrumentation around IdleTimer and Tutorial
Carl WoolfCarl Woolf
f747a4dea2aoops, sometimes it's ok to be in a negative mood
Carl WoolfCarl Woolf
10030dc8774proposed solution for network.config as well as clearLogin
Carl WoolfCarl Woolf
fff2e213396improve url persistence logic
Marc-Danie NazaireMarc-Danie Nazaire
471850605f0SHRINE2020-1282 - CRC invocations are not using the right thread pool- Modified to use a specified blocker in produce...
Carl WoolfCarl Woolf
2e37f30649finstrumentation for exploring timeout behavior
Marc-Danie NazaireMarc-Danie Nazaire
3605713c2a7SHRINE2020-1282 - CRC invocations are not using the right thread pool- Modified to create a KafkaProducer resource
XavXav
b73cb88e911back to buggy teimout/logout behavior with dispatch(clearLogin())
XavXav
542b27b0ed5code clean up
Carl WoolfCarl Woolf
9356f6be209have some embedded util code to show headers/cookies
Carl WoolfCarl Woolf
7eb61ea4269Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Carl WoolfCarl Woolf
730015f3c7asee if idleTimer less flaky without gratuitous dispatch to clearLogin()
XavXav
5206a355f77sync-up no-sp.conf file with what is in the shrine-sso-config repo right now
Carl WoolfCarl Woolf
7baf02c2730use filter only if 'sso' mode. tweak configs
Carl WoolfCarl Woolf
6b0a5f6f6e1refrain from loading authz-related 'services' if non-sso
XavXav
dcd4bc3b43dstop looking for "unauthorizedUrl" config property under all PM/SSO/Authz permutations, because it may legitimately n...
XavXav
f7b50a6ac5fadd missing unauthorized message to sample config file
Carl WoolfCarl Woolf
71ec141519ecleanup some cruft, hone comments and readme
Carl WoolfCarl Woolf
27ddc515caftweak sample config and some logic
Carl WoolfCarl Woolf
f6b35686570arrange methods in order of usage
Carl WoolfCarl Woolf
0b8899005c9tweak comment, adjust location of vals
Carl WoolfCarl Woolf
7529d7981dccleanup imports, and one comment
Carl WoolfCarl Woolf
bba2c3efe0deliminate yet another magic string
Carl WoolfCarl Woolf
f9b052cf7c9Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Carl WoolfCarl Woolf
b97d29cc9e5eliminate another magic string
XavXav
070fb08d973simplify logic / remove redundancy in AuthorizationService
Carl WoolfCarl Woolf
e9a4a2d1f6eeliminate magic string
Carl WoolfCarl Woolf
ebc5e246e65prune the pom
XavXav
7ec57e3d6b6simplify logic / remove redundancy in AuthorizationService
XavXav
864092404f5add no-sp.conf-sample file, edit sp.conf-sample to reflect new way of handling isSsoMode cookie
XavXav
51248e4c862new sample shrineSP.conf file with content to choose from for 3 modes of authentication and authorization (PM, SSO, S...
XavXav
23784422b79Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
XavXav
53e8aa18b1astyle the unauthorized page text by copying the computed CSS of the paragraph "Define Inclusion and Exclusion Criteri...
dwalenddwalend
6361fa26b6fTry a pipe for SHRINE2020-1282
Carl WoolfCarl Woolf
e0d2f33dce3extra console log for idle-timer logout
dwalenddwalend
d67a36b0e89Try a lazy approach so that the deploy script can run for SHRINE2020-1282
dwalenddwalend
339bece95b3Now without locking up the network setup tool forever SHRINE2020-1282
Carl WoolfCarl Woolf
b5af5433979extra console log for idle-timer logout
dwalenddwalend
7fff58f52dcSome logging to see what's going on for SHRINE2020-1282
Carl WoolfCarl Woolf
2472a27bb80hardier handling of 'free-pass' urls in filter
dwalenddwalend
ca16f864af9Maybe reusing the producer in fs2-kafka for SHRINE2020-1282
dwalenddwalend
870fc44f4aeTry a drain for SHRINE2020-1282
Carl WoolfCarl Woolf
30ce7476c62React-based wiring for unauth page to use config'd message
dwalenddwalend
de7df867be9Rolling back the bounded thread pool for SHRINE2020-1282
dwalenddwalend
0406f4881b4Possible fix for SHRINE2020-1282 - found and maybe fixed a thread leak
Carl WoolfCarl Woolf
b8a2d7a22fbMerge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Carl WoolfCarl Woolf
20250ab1e65basis for styling unauth page
XavXav
3d49816c753Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
XavXav
1ae0d39fbd9make unauthorized message configurable and pass it to the front-end as part of the webClientConfig JSON content
Marc-Danie NazaireMarc-Danie Nazaire
6d5fa00de2bMerge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Marc-Danie NazaireMarc-Danie Nazaire
1eee541caebMoved UnAuthorized from pages to componentd
Carl WoolfCarl Woolf
c828a323f09remove toy properties from map
Carl WoolfCarl Woolf
cb2b4853981Merge remote-tracking branch 'origin/develop' into sso-phase2 # Conflicts: # commons/util/src/main/scala/net/shrine/...
Marc-Danie NazaireMarc-Danie Nazaire
025692bb91fMerge branch 'sso-phase2' of https://open.catalyst.harvard.edu/stash/scm/shrine/shrine into sso-phase2  Conflicts: ...
Marc-Danie NazaireMarc-Danie Nazaire
d6dc230e4b0Changes for loading unauthorized page
dwalenddwalend
04c18d7018dBounded thread pools and more logging for SHRINE2020-1282
Carl WoolfCarl Woolf
500bd5fbc18Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2 # Conflicts: # shrine-setup/src/main/resources/sso/...
Carl WoolfCarl Woolf
4be70eb4aeeupdate isSsoCookie creation
dwalenddwalend
e6e910d7a76Checkpointing SHRINE2020-1218, maybe a third of the way to compiling the big change
XavXav
77fe4b8d85ffix how the unauthorized URL gets handled
Marc-Danie NazaireMarc-Danie Nazaire
b98e05bc336Added new UnAuthorized page to pages/index.js
Marc-Danie NazaireMarc-Danie Nazaire
9aa4176e8beAdded new UnAuthorized page to pages/index.js
XavXav
3605a97cc18trying to make unauthorized page work
XavXav
ba9ad69cdcffix error in comment regarding use of HTTP vs AJP
XavXav
d9089c11c97pare down sample config files to only what is needed / remove redundancy
XavXav
f1e168b26caadd one though the previous documentation
XavXav
63ce81187e9Add TODO documenting discussion between developers
dwalenddwalend
af7fa7479c3Removed dependency on reactive streams for SHRINE2020-1218
David WalendDavid Walend
ba403ce16e7Pull request #1357: Fix for SHRINE2020-1281 - removed a dependency on SEnum and some very simple tests Merge in SHRI...
XavXav
2731d9d2a2bupdate sample config files to use AJP again
XavXav
33fe8342396update sample config files
Carl WoolfCarl Woolf
a0a4d862813make generalAuthorization property in userInfo available in session (though for now, not in the smoke output)
Carl WoolfCarl Woolf
00472205333wire userInfo into the login-session lifecycle
dwalenddwalend
2e1fb29a5e9Fix for SHRINE2020-1281 - removed a dependency on SEnum and some very simple tests
Carl WoolfCarl Woolf
dc81f71de7deliminate (we think an) unnecessary cookie config
Carl WoolfCarl Woolf
b55a8561081replace diagnostic cookies with stub use of session
David WalendDavid Walend
3228a27c162Pull request #1356: Feature/SHRINE2020 846 Merge in SHRINE/shrine from feature/SHRINE2020-846 to develop * commit '...
dwalenddwalend
e830a00a33fCode review fix from Marc-Danie for SHRINE2020-846
dwalenddwalend
3596b7f2d9fFixed a wildcard in an import for SHRINE2020-1280
XavXav
bd3f47e4b6cpass cookie to apache server and from there to the browser (by setting max-age to -1)
XavXav
5a77e7c26d7pass cookie to apache server by setting max-age to -1
dwalenddwalend
460a1d9b43eMerge remote-tracking branch 'origin/develop' into feature/SHRINE2020-846
dwalenddwalend
e9e5387ba1fComments mostly about punting work into the future for SHRINE2020-846
dwalenddwalend
33cb37b2125Some tidying up for SHIRNE2020-846 before taking on RunQueryResponse
Carl WoolfCarl Woolf
7de3c9d27e9simplify smoke/cookies endpoint. remove defunct dump-map code
Carl WoolfCarl Woolf
04eaf166586precise URI's for authz-free-pass
XavXav
479c52a8befCreate a test cookie
Carl WoolfCarl Woolf
c39689aa0b6new, improved filter, for more robust authorization, logouts seem to work better
Marc-Danie NazaireMarc-Danie Nazaire
fa6b9aa0a8cPull request #1355: Feature/SHRINE2020 1198 - Update docker container to use 1.7.13 Merge in SHRINE/shrine from feat...
dwalenddwalend
b0f4c4e4accCleaned out ReadQueryInstancesResponse for SHRINE2020-846
dwalenddwalend
e0ae31bba40Removed AbstractReadInstanceResultsResponse for SHRINE2020-846
Marc-Danie NazaireMarc-Danie Nazaire
44ef8a6a317SHRINE2020-1198 - Update docker container to use 1.7.13 - Fixed tomcat startup when network already exists
David WalendDavid Walend
2a91afbd7c0Pull request #1354: Feature/SHRINE2020 1273 Merge in SHRINE/shrine from feature/SHRINE2020-1273 to develop * commit...
Marc-Danie NazaireMarc-Danie Nazaire
62c457b676fSHRINE2020-1198 - Update docker container to use 1.7.13 - Fixed mysql jdc deprecated error in log and restarting network
XavXav
777c9339d93flesh out stub for calling authz from middleware; move authorization logic from AuthzHttp4sResource to AuthorizationS...
Marc-Danie NazaireMarc-Danie Nazaire
f12cbc2c4f3SHRINE2020-1198 - Update docker container to use 1.7.13 - updated myql connector library and the tomcat container ver...
dwalenddwalend
724fa2f6ba8Moved ReadInstanceResultsResponse into a CrcClient. Fix for SHRINE-2706 and more work toward SHRINE2020-846
Carl WoolfCarl Woolf
61fd9f76d6astub for calling authz from middleware
Carl WoolfCarl Woolf
22f4901bbc2change name of middleware object
Marc-Danie NazaireMarc-Danie Nazaire
1133df9b69bSHRINE2020-1198 - Update docker container to use 1.7.13
dwalenddwalend
b3910053063Added a query id to CrcClient's hofs for SHRINE2020-846
dwalenddwalend
c3a3c271e50Replaced ReadResultClient with a call to a generified CrcClient for SHRINE2020-846
dwalenddwalend
99a7d6b51eaDecided Client was a fine postfix for named-requesters for SHRINE2020-846
XavXav
49b6bd41925Merge branch 'sso-phase2' of https://open.catalyst.harvard.edu/stash/scm/shrine/shrine into sso-phase2
Carl WoolfCarl Woolf
15dc5debab8Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Carl WoolfCarl Woolf
536ed00d75badd trivial map to output of ..../qep/login . Coming Soon: authz info?
XavXav
947b2065d8fremove dead config
XavXav
266380e02b4see if HttpSession is persistent
XavXav
114ff9ea5f5Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
XavXav
c0d4a258761try using HttpSession again
Carl WoolfCarl Woolf
69d619b40f2yeah, currently do not believe in guard, it seems not to help
dwalenddwalend
8c0de28e2c9My own review of SHRINE2020-1273
Carl WoolfCarl Woolf
74a8a309c82remove (doubled) filter declarations from web.xml -- they are declared via annotations
dwalenddwalend
404bb03740cLittle bits while testing AWS SQS without FIFO for SHRINE2020-1273
Carl WoolfCarl Woolf
c7a8d85ffc6more guards for 'committed' servletResponse
Carl WoolfCarl Woolf
a65a8b82e4bdo not need to be authorized in order to logout!
Carl WoolfCarl Woolf
353eb874c3cmore robust guard for 'committed' httpResponse
Carl WoolfCarl Woolf
49c7240f90fmove url val to block where it is used
Carl WoolfCarl Woolf
04199ec4d8abreak out 'guard condition' once more
Carl WoolfCarl Woolf
ad891d196cdoops, need == but had !=
Carl WoolfCarl Woolf
46cdeb3d0f0clean up filter a bit
Carl WoolfCarl Woolf
673298f9a91adjust logic so that it does require checkAndRedirect for the checkAndRedirect itself!
dwalenddwalend
380b0802651More switching FIFO off for SHRINE2020-1273
dwalenddwalend
889acf8391bMore switching FIFO off for SHRINE2020-1273
Carl WoolfCarl Woolf
0119fd1ace3add biz logic to new filter, checks every request for authzn, redirecting to request url if successful
dwalenddwalend
8fe51e45e94Try timing without FIFO for SHRINE2020-1273
David WalendDavid Walend
11c92665d49Pull request #1353: Work-around for AWS SQS's limit of 50 Principals in a policy Statement for SHRINE2020-1272 Merge...
Carl WoolfCarl Woolf
01690fff5f0nascent authzn filter, biz logic to follow
Carl WoolfCarl Woolf
09cc942254etweaks to code
dwalenddwalend
8cb20f1936aBetter comments from Marc-Danie's review of SHRINE2020-1272
dwalenddwalend
639fddc557bFIFO queues need a deduplication field. I'm trying messageDeduplicationId for SHRINE2020-1273
dwalenddwalend
4503773b937Changes to get the hub audit tool prototype working again to support SHRINE2020-1273
dwalenddwalend
9264e8de317Old cut-paste typo for SHRINE2020-1272
XavXav
1615bbe7494upon hitting our logout endpoint, redirect to Shibboleth logout URL
XavXav
85779d7d072allow for multiple databases; move the configuration of the B/W list's database config so it is with the rest of the ...
XavXav
710fd06e986Externalize end-point attribute providers' regex names and values; allow any number of such regexes
dwalenddwalend
4ae1c541012Missed the new property in the shrine-setup shrine.conf for SHRINE2020-1272
XavXav
fa6c081371eMerge branch 'sso-phase2' of https://open.catalyst.harvard.edu/stash/scm/shrine/shrine into sso-phase2  Conflicts: ...
Carl WoolfCarl Woolf
8714b3bc5f0add some integrity to Headers provider: parameter user must be equal to the REMOTE_USER
dwalenddwalend
2a06732ac29Work-around for AWS SQS's limit of 50 Principals in a policy Statement for SHRINE2020-1272
Carl WoolfCarl Woolf
9f685d2bc32reorganize smoke-test urls. move white-black-list db code near its attr provider
XavXav
6019e4e39aaremove unused variable
XavXav
8ff586c79c1externalize the logout URL
Carl WoolfCarl Woolf
b9af629184aauthz/logout should be no-op if conf says no authz
Carl WoolfCarl Woolf
3170dfcfe39need to at least force logout when authzn fails
dwalenddwalend
08f701628a2Need to restart the QueuedQueriesPoller when the CRC gives us an incomplete result for SHRINE2020-846 and SHRINE2020-621
Carl WoolfCarl Woolf
91d9c212673add b-w-list logic to hms-authorization. enable authzn in config. put cw183, xh54 and fp75 on white-list
dwalenddwalend
4195ae53373Made CrcClient typesafe and propogated the Either result through breakdowns for SHRINE2020-846
Carl WoolfCarl Woolf
a7eea282327rename Config to Util, and add a helper method for calling outside urls
dwalenddwalend
05edc2d312cMore dead code gone for SHRINE2020-846
dwalenddwalend
0ba37d910ddChanged CrcClient to return an Either[ErrorResponse,V] and threaded the changes all the way through for SHRINE2020-846
Carl WoolfCarl Woolf
1cbd6c725dcquiet failure is profiles url (or other endpiont url) is down
Carl WoolfCarl Woolf
78ee9dbeb74tweak the dump-output of user maps
dwalenddwalend
ef091b78c23Reworked CRC client to construct the class's V instead of the parseShrineResponse's R for SHRINE2020-846
dwalenddwalend
6cbfad78440Refactoring of the CRC client and almost got rid of BroadcastMessage for SHRINE2020-961 SHRINE-2384 and SHRINE2020-846
Carl WoolfCarl Woolf
24b74636e9badd outer map of all users' info
dwalenddwalend
1509df287d4Cleanup before factoring out some common bits for SHRINE2020-846
dwalenddwalend
5dd4dbf8568Some renaming before the bigger refactor for SHRINE2020-846
Carl WoolfCarl Woolf
4325b4a9f29adjust path to unauth page
Carl WoolfCarl Woolf
a113efe2e0cremove unused attr provider. Provide 'unauthorized' page
dwalenddwalend
fd6c4d1c338More little bits of cleanup for SHRINE2020-846
XavXav
3efdb7b331dremove stale configs to be served by the /config end point
dwalenddwalend
b5d5fc039f5Deleted a lot of methods that were only used in tests after updating the tests to use active code paths for SHRINE202...
dwalenddwalend
bc93193b139Checkpointing changes to look back one step for SHRINE2020-846
Carl WoolfCarl Woolf
b87358d8885begin wiring authorizer
Next →