SHRINE
  1. SHRINE

shrine

Public
  1. SHRINE
  2. shrine

All Branches Graph  

        
AuthorCommitMessageCommit dateBuilds
Carl WoolfCarl Woolf
b7c240f4b79remove confusing / provocative comment
Carl WoolfCarl Woolf
d3bc8ab1a34tweak val-names, and more-concise expressions
Carl WoolfCarl Woolf
76dadf9cbdbfor PR comment
Marc-Danie NazaireMarc-Danie Nazaire
acc5fc6aad7removed kafka trust store
Carl WoolfCarl Woolf
6845c8686f9regex authorizer can parse negative regex
Marc-Danie NazaireMarc-Danie Nazaire
b3485860477modifier sasl jaas config to use plainloginmodule
Carl WoolfCarl Woolf
2fa17fbbbd9adjust pretty-print of user-info. provide regex authorizer
Carl WoolfCarl Woolf
564a0b80623clean up comment
XavXav
5f0beabd51aMerge branch 'develop' into sso-phase2
dwalenddwalend
fa323698a92Unwind blocker for SHRINE2020-1305
dwalenddwalend
d86b87910baAdded a little logging, and try moving the kafka send to the http client thread pool for SHRINE2020-1305
dwalenddwalend
ca9618a9bedMerge remote-tracking branch 'origin/develop' into bugfix/SHRINE2020-1306
XavXav
f47d55cffaecleaning up my mess
XavXav
714cf7eda63Revert "fix class name; remove unused POM dependency" This reverts commit 5dda9d218ef986250954d3b355d49bdedd931ec8.
XavXav
d12da8f12e5Revert "code for a new attribute provider based on using Xpath to extract attributes from XML returned by end-points"...
XavXav
5dda9d218effix class name; remove unused POM dependency
XavXav
b599ea26fe1code for a new attribute provider based on using Xpath to extract attributes from XML returned by end-points
dwalenddwalend
18f41f10d04Try receiving messages using the db thread pool for SHRINE2020-1306
Carl WoolfCarl Woolf
c2fdd066a10Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Carl WoolfCarl Woolf
a7956bf8e18dump of user info may be good for regex authz
XavXav
d568ad5941cMerge remote-tracking branch 'origin/sso-phase2' into sso-phase2
XavXav
d0951716762remove console.log() statements by Carl and Xav
dwalenddwalend
a74c25d99efTry some withTransactionIsolation(TransactionIsolation.RepeatableRead) for SHRINE2020-1306
David WalendDavid Walend
ef4a8a17920Pull request #1359: Bugfix/SHRINE2020 1282 Merge in SHRINE/shrine from bugfix/SHRINE2020-1282 to develop * commit '...
dwalenddwalend
db240d29655Added some .withTransactionIsolation(TransactionIsolation.Serializable) for SHRINE2020-1306
Carl WoolfCarl Woolf
0de6f75986bprofiles to use faculty-type
Carl WoolfCarl Woolf
2f031806952adjust semantics of bw authorizer per demo meeting
dwalenddwalend
5a55a82f230Trying a bounded thread pool and some fairness for SHRINE2020-1306. I think it'll actually also need a queue, but bab...
XavXav
1eb7fddce23Merge branch 'sso-phase2' of https://open.catalyst.harvard.edu/stash/scm/shrine/shrine into sso-phase2
XavXav
10b23d513d6Create a new authorizer class which looks only at the black- and white-list attributes
dwalenddwalend
cd7685cacd8An experiment - can I force ACID by bringing allTableVersions' query row into the transaction at the beginning - for ...
Carl WoolfCarl Woolf
5bcc55213d9remove speculative additions to middleware user-object
Marc-Danie NazaireMarc-Danie Nazaire
b36c466d7c8Fixed tutorial not being displayed after manually logging out and logging back in
Marc-Danie NazaireMarc-Danie Nazaire
176cebd860dFixed tutorial not being displayed after automatic session timeout logout
Carl WoolfCarl Woolf
077a3d11991cleanup IdleTimer -- no clearLogin, as also in Header
XavXav
1d6cbcd9443remove tutorial dialog when clicking the log off button from the timeout dialog
dwalenddwalend
ee59cb4d0f3Review cleanup for SHRINE2020-1282
XavXav
9faff23bcf4remove tutorial dialog when clicking the log off button from the timeout dialog
XavXav
f5167f6b091reinstate lines commented out in error
dwalenddwalend
ff0ec444afbTry using the java api for SHRINE2020-1282
dwalenddwalend
cd577fb0b30One more try at using a resource outside of context for SHRINE2020-1282
XavXav
9c20c6ed742added instrumentation around IdleTimer and Tutorial
Carl WoolfCarl Woolf
acd16dd0511oops, sometimes it's ok to be in a negative mood
Carl WoolfCarl Woolf
8801fe41b97proposed solution for network.config as well as clearLogin
Carl WoolfCarl Woolf
0bf6704f872improve url persistence logic
Marc-Danie NazaireMarc-Danie Nazaire
1e8620e8e80SHRINE2020-1282 - CRC invocations are not using the right thread pool- Modified to use a specified blocker in produce...
Carl WoolfCarl Woolf
de064e62842instrumentation for exploring timeout behavior
Marc-Danie NazaireMarc-Danie Nazaire
6d141b6777fSHRINE2020-1282 - CRC invocations are not using the right thread pool- Modified to create a KafkaProducer resource
XavXav
baf669a56b5back to buggy teimout/logout behavior with dispatch(clearLogin())
XavXav
8c65f7d4eb3code clean up
Carl WoolfCarl Woolf
45b627a0f54have some embedded util code to show headers/cookies
Carl WoolfCarl Woolf
d167d8ae882Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Carl WoolfCarl Woolf
81cada34736see if idleTimer less flaky without gratuitous dispatch to clearLogin()
XavXav
7a2a8dfd47fsync-up no-sp.conf file with what is in the shrine-sso-config repo right now
Carl WoolfCarl Woolf
ded7458b1cause filter only if 'sso' mode. tweak configs
Carl WoolfCarl Woolf
542e002ee02refrain from loading authz-related 'services' if non-sso
XavXav
440925591a8stop looking for "unauthorizedUrl" config property under all PM/SSO/Authz permutations, because it may legitimately n...
XavXav
48bb922b115add missing unauthorized message to sample config file
Carl WoolfCarl Woolf
cf870af2269cleanup some cruft, hone comments and readme
Carl WoolfCarl Woolf
1e1ace4973ctweak sample config and some logic
Carl WoolfCarl Woolf
b98fa552a46arrange methods in order of usage
Carl WoolfCarl Woolf
57db8de3b45tweak comment, adjust location of vals
Carl WoolfCarl Woolf
8e70e5a0430cleanup imports, and one comment
Carl WoolfCarl Woolf
276d3a69e30eliminate yet another magic string
Carl WoolfCarl Woolf
3eebb1b2b71Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Carl WoolfCarl Woolf
962a4f8c202eliminate another magic string
XavXav
104a0b98791simplify logic / remove redundancy in AuthorizationService
Carl WoolfCarl Woolf
68fb3a5bb3eeliminate magic string
Carl WoolfCarl Woolf
4e51dcb9012prune the pom
XavXav
223e0b3cb5dsimplify logic / remove redundancy in AuthorizationService
XavXav
b4de317dcaaadd no-sp.conf-sample file, edit sp.conf-sample to reflect new way of handling isSsoMode cookie
XavXav
199b14c90banew sample shrineSP.conf file with content to choose from for 3 modes of authentication and authorization (PM, SSO, S...
XavXav
e2449d9c425Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
XavXav
6616d187276style the unauthorized page text by copying the computed CSS of the paragraph "Define Inclusion and Exclusion Criteri...
dwalenddwalend
fa4b513ecacTry a pipe for SHRINE2020-1282
Carl WoolfCarl Woolf
c860695160eextra console log for idle-timer logout
dwalenddwalend
a5b1fb72177Try a lazy approach so that the deploy script can run for SHRINE2020-1282
dwalenddwalend
65ef3105f61Now without locking up the network setup tool forever SHRINE2020-1282
Carl WoolfCarl Woolf
bd528694b5bextra console log for idle-timer logout
dwalenddwalend
d42b6e8ce6bSome logging to see what's going on for SHRINE2020-1282
Carl WoolfCarl Woolf
02c71de2572hardier handling of 'free-pass' urls in filter
dwalenddwalend
7448c4de68dMaybe reusing the producer in fs2-kafka for SHRINE2020-1282
dwalenddwalend
d241f9fba76Try a drain for SHRINE2020-1282
Carl WoolfCarl Woolf
dbeb562528aReact-based wiring for unauth page to use config'd message
dwalenddwalend
9bd7fc5ce4aRolling back the bounded thread pool for SHRINE2020-1282
dwalenddwalend
579effc62e3Possible fix for SHRINE2020-1282 - found and maybe fixed a thread leak
Carl WoolfCarl Woolf
5311655dde3Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Carl WoolfCarl Woolf
d22327cbe91basis for styling unauth page
XavXav
2f0288770c6Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
XavXav
28b84a2f4a8make unauthorized message configurable and pass it to the front-end as part of the webClientConfig JSON content
Marc-Danie NazaireMarc-Danie Nazaire
ff0983f0661Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Marc-Danie NazaireMarc-Danie Nazaire
c2fd34961a3Moved UnAuthorized from pages to componentd
Carl WoolfCarl Woolf
3379feef6d6remove toy properties from map
Carl WoolfCarl Woolf
cd2404288f7Merge remote-tracking branch 'origin/develop' into sso-phase2 # Conflicts: # commons/util/src/main/scala/net/shrine/...
Marc-Danie NazaireMarc-Danie Nazaire
e2111f3bb14Merge branch 'sso-phase2' of https://open.catalyst.harvard.edu/stash/scm/shrine/shrine into sso-phase2  Conflicts: ...
Marc-Danie NazaireMarc-Danie Nazaire
4ec1791dcabChanges for loading unauthorized page
dwalenddwalend
2d3fdfaab9dBounded thread pools and more logging for SHRINE2020-1282
Carl WoolfCarl Woolf
326f5142a50Merge remote-tracking branch 'origin/sso-phase2' into sso-phase2 # Conflicts: # shrine-setup/src/main/resources/sso/...
Carl WoolfCarl Woolf
32b3b3fa909update isSsoCookie creation
dwalenddwalend
ace0bed1db1Checkpointing SHRINE2020-1218, maybe a third of the way to compiling the big change
XavXav
98dac63e841fix how the unauthorized URL gets handled
Marc-Danie NazaireMarc-Danie Nazaire
b10f0c9c6a6Added new UnAuthorized page to pages/index.js
Marc-Danie NazaireMarc-Danie Nazaire
36dd3a5bf5dAdded new UnAuthorized page to pages/index.js
XavXav
172785a3d6etrying to make unauthorized page work
XavXav
b9b951968e2fix error in comment regarding use of HTTP vs AJP
XavXav
7633d2c40b6pare down sample config files to only what is needed / remove redundancy
XavXav
65392a6b2a5add one though the previous documentation
XavXav
33f41c521d0Add TODO documenting discussion between developers
dwalenddwalend
ca5aa95617dRemoved dependency on reactive streams for SHRINE2020-1218
David WalendDavid Walend
57722cc495aPull request #1357: Fix for SHRINE2020-1281 - removed a dependency on SEnum and some very simple tests Merge in SHRI...
XavXav
19218ccb7f0update sample config files to use AJP again
XavXav
9218d3f3e56update sample config files
Carl WoolfCarl Woolf
e4c08025411make generalAuthorization property in userInfo available in session (though for now, not in the smoke output)
Carl WoolfCarl Woolf
6f45f4ace27wire userInfo into the login-session lifecycle
dwalenddwalend
b6ede2bbd2dFix for SHRINE2020-1281 - removed a dependency on SEnum and some very simple tests
Carl WoolfCarl Woolf
9f9652f3dcaeliminate (we think an) unnecessary cookie config
Carl WoolfCarl Woolf
ab51c6abbd9replace diagnostic cookies with stub use of session
David WalendDavid Walend
8602501a676Pull request #1356: Feature/SHRINE2020 846 Merge in SHRINE/shrine from feature/SHRINE2020-846 to develop * commit '...
dwalenddwalend
a8cda1e210fCode review fix from Marc-Danie for SHRINE2020-846
dwalenddwalend
111943dd771Fixed a wildcard in an import for SHRINE2020-1280
XavXav
2f3c2159be3pass cookie to apache server and from there to the browser (by setting max-age to -1)
XavXav
d7affff2704pass cookie to apache server by setting max-age to -1
dwalenddwalend
3fa6562f1afMerge remote-tracking branch 'origin/develop' into feature/SHRINE2020-846
dwalenddwalend
1955b467150Comments mostly about punting work into the future for SHRINE2020-846
dwalenddwalend
712915dfd15Some tidying up for SHIRNE2020-846 before taking on RunQueryResponse
Carl WoolfCarl Woolf
d74f9883fcbsimplify smoke/cookies endpoint. remove defunct dump-map code
Carl WoolfCarl Woolf
cfc1d199310precise URI's for authz-free-pass
XavXav
9b055235a37Create a test cookie
Carl WoolfCarl Woolf
240e265f99anew, improved filter, for more robust authorization, logouts seem to work better
Marc-Danie NazaireMarc-Danie Nazaire
2787f94c598Pull request #1355: Feature/SHRINE2020 1198 - Update docker container to use 1.7.13 Merge in SHRINE/shrine from feat...
dwalenddwalend
00bce0f3575Cleaned out ReadQueryInstancesResponse for SHRINE2020-846
dwalenddwalend
bb9cd6f09bcRemoved AbstractReadInstanceResultsResponse for SHRINE2020-846
Marc-Danie NazaireMarc-Danie Nazaire
0a34a89360fSHRINE2020-1198 - Update docker container to use 1.7.13 - Fixed tomcat startup when network already exists
David WalendDavid Walend
0b16205852bPull request #1354: Feature/SHRINE2020 1273 Merge in SHRINE/shrine from feature/SHRINE2020-1273 to develop * commit...
Marc-Danie NazaireMarc-Danie Nazaire
c4488e83833SHRINE2020-1198 - Update docker container to use 1.7.13 - Fixed mysql jdc deprecated error in log and restarting network
XavXav
e17903304f3flesh out stub for calling authz from middleware; move authorization logic from AuthzHttp4sResource to AuthorizationS...
Marc-Danie NazaireMarc-Danie Nazaire
b224b39bf04SHRINE2020-1198 - Update docker container to use 1.7.13 - updated myql connector library and the tomcat container ver...
dwalenddwalend
8e5a37cb2f7Moved ReadInstanceResultsResponse into a CrcClient. Fix for SHRINE-2706 and more work toward SHRINE2020-846
Carl WoolfCarl Woolf
77ff0082f2estub for calling authz from middleware
Carl WoolfCarl Woolf
c2abd518be0change name of middleware object
Marc-Danie NazaireMarc-Danie Nazaire
3811bd08274SHRINE2020-1198 - Update docker container to use 1.7.13
dwalenddwalend
d0a4e5e82e1Added a query id to CrcClient's hofs for SHRINE2020-846
dwalenddwalend
74490e65f26Replaced ReadResultClient with a call to a generified CrcClient for SHRINE2020-846
dwalenddwalend
fc296911502Decided Client was a fine postfix for named-requesters for SHRINE2020-846
XavXav
605731c63c4Merge branch 'sso-phase2' of https://open.catalyst.harvard.edu/stash/scm/shrine/shrine into sso-phase2
Carl WoolfCarl Woolf
de5c971035eMerge remote-tracking branch 'origin/sso-phase2' into sso-phase2
Carl WoolfCarl Woolf
44a403bd16fadd trivial map to output of ..../qep/login . Coming Soon: authz info?
XavXav
d3177dde3f7remove dead config
XavXav
005478809absee if HttpSession is persistent
XavXav
972f379b5daMerge remote-tracking branch 'origin/sso-phase2' into sso-phase2
XavXav
fd2557327cdtry using HttpSession again
Carl WoolfCarl Woolf
0c69e626c6dyeah, currently do not believe in guard, it seems not to help
dwalenddwalend
04be610a5deMy own review of SHRINE2020-1273
Carl WoolfCarl Woolf
a09292cbfc2remove (doubled) filter declarations from web.xml -- they are declared via annotations
dwalenddwalend
0ee3d591c91Little bits while testing AWS SQS without FIFO for SHRINE2020-1273
Carl WoolfCarl Woolf
6e6331df13amore guards for 'committed' servletResponse
Carl WoolfCarl Woolf
219d80a4fa0do not need to be authorized in order to logout!
Carl WoolfCarl Woolf
6d831a7bee1more robust guard for 'committed' httpResponse
Carl WoolfCarl Woolf
e5ca0d907ecmove url val to block where it is used
Carl WoolfCarl Woolf
5d0a9ed5682break out 'guard condition' once more
Carl WoolfCarl Woolf
2dacfb9892foops, need == but had !=
Carl WoolfCarl Woolf
ae1c26b9dbeclean up filter a bit
Carl WoolfCarl Woolf
61039798b35adjust logic so that it does require checkAndRedirect for the checkAndRedirect itself!
dwalenddwalend
172763aab47More switching FIFO off for SHRINE2020-1273
dwalenddwalend
6cbd3067c74More switching FIFO off for SHRINE2020-1273
Carl WoolfCarl Woolf
9ecc48f304aadd biz logic to new filter, checks every request for authzn, redirecting to request url if successful
dwalenddwalend
cdef74835f9Try timing without FIFO for SHRINE2020-1273
David WalendDavid Walend
ead72df1465Pull request #1353: Work-around for AWS SQS's limit of 50 Principals in a policy Statement for SHRINE2020-1272 Merge...
Carl WoolfCarl Woolf
c2db8b2777cnascent authzn filter, biz logic to follow
Carl WoolfCarl Woolf
60d80547ae0tweaks to code
dwalenddwalend
7b69dd8e9b0Better comments from Marc-Danie's review of SHRINE2020-1272
dwalenddwalend
17ed3edf4dcFIFO queues need a deduplication field. I'm trying messageDeduplicationId for SHRINE2020-1273
dwalenddwalend
ba5ef4d8077Changes to get the hub audit tool prototype working again to support SHRINE2020-1273
dwalenddwalend
8004207acf4Old cut-paste typo for SHRINE2020-1272
XavXav
da9871bd235upon hitting our logout endpoint, redirect to Shibboleth logout URL
XavXav
a206107f8a3allow for multiple databases; move the configuration of the B/W list's database config so it is with the rest of the ...
XavXav
37098685967Externalize end-point attribute providers' regex names and values; allow any number of such regexes
dwalenddwalend
c78fa8fb900Missed the new property in the shrine-setup shrine.conf for SHRINE2020-1272
XavXav
5d052b1abb4Merge branch 'sso-phase2' of https://open.catalyst.harvard.edu/stash/scm/shrine/shrine into sso-phase2  Conflicts: ...
Carl WoolfCarl Woolf
5d9b90ab181add some integrity to Headers provider: parameter user must be equal to the REMOTE_USER
dwalenddwalend
ad26fd140c8Work-around for AWS SQS's limit of 50 Principals in a policy Statement for SHRINE2020-1272
Carl WoolfCarl Woolf
1bc8f1f8a13reorganize smoke-test urls. move white-black-list db code near its attr provider
XavXav
5d1d2d858cdremove unused variable
XavXav
e82a24081fbexternalize the logout URL
Carl WoolfCarl Woolf
9d05b06aa5cauthz/logout should be no-op if conf says no authz
Carl WoolfCarl Woolf
3056d6a5489need to at least force logout when authzn fails
dwalenddwalend
801687e555bNeed to restart the QueuedQueriesPoller when the CRC gives us an incomplete result for SHRINE2020-846 and SHRINE2020-621
Carl WoolfCarl Woolf
8ae4422582fadd b-w-list logic to hms-authorization. enable authzn in config. put cw183, xh54 and fp75 on white-list
Next →