Clone Tools
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
LDEV-3336: Remove code for unnecessary ContentRepository WAR.

  1. … 270 more files in changeset.
LDEV-3337: Update Quartz 1.5.2 -> 2.2.1

  1. … 287 more files in changeset.
LDEV-2265 Utilise URL Shortner to shorten lesson URL. Now shortened URL starts with "{LAMS_SERVER}/lams/r/*"

  1. … 11 more files in changeset.
LDEV-3382 Add datetime parameter check to LoginRequest.

  1. … 9 more files in changeset.
LDEV-3316: Update lams.jar so Ant can compile the code.

LDEV-2265 Utilise URL Shortner to shorten lesson URL

  1. … 6 more files in changeset.
LDEV-3383: Remove Web authentication method.

  1. … 5 more files in changeset.
LDEV-3383: Remove Web authentication method.

  1. … 5 more files in changeset.
LDEV-3382 Add datetime parameter check to LoginRequest.

  1. … 4 more files in changeset.
LDEV-3382 Add datetime parameter check to LoginRequest.

LDEV-3335, LDEV-3340: Remove a filter which sets inactive timeout in sessions. With new SSO it is just needed in Central and it is already taken care of by SessionListener.

  1. … 33 more files in changeset.
LDEV-3335, LDEV-3340: Remove or simplify SSO components. Fix sysadmin LoginAs functionality.

  1. … 17 more files in changeset.
LDEV-3335, LDEV-3334: Use SSO mechanism introduced in WildFly 9. Do not create web.xml files with XDoclet as it can not produce them based on 3.1 schema. Use static ones instead. Make SessionManager just a proxy to webserver's HTTP session. Remov custom shared sessions and JSESSIONIDSSO cookie as they are obsolete. Remove own session monitoring as the container should take care of invalidation. Move injecting UserDTO into session to SsoHandler intead of UniversalLoginModule as an authentication request may not reach the latter due to WildFly credentials caching.

  1. … 226 more files in changeset.
LDEV-3373: Set current and next activity for learners who finished a lesson, when the activity was added in Live Edit.

  1. … 4 more files in changeset.
LDEV-3373: Set current and next activity for learners who finished a lesson, when the activity was added in Live Edit.

  1. … 4 more files in changeset.
LDEV-3315, LDEV-3367: Refactor SecurityService methods. Improve security in several places.

  1. … 13 more files in changeset.
LDEV-3315, LDEV-3367: Refactor SecurityService methods. Improve security in several places.

  1. … 13 more files in changeset.
LDEV-3315: Refresh compiled LAMS library.

LDEV-3275: Refresh compiled LAMS libraries

LDEV-3315: No need for own SecurityException as JRE already has got one.

  1. … 4 more files in changeset.
LDEV-3315, LDEV-3367: Refactor SecurityService methods. Replace Monitoring and Gradebook own security code with SecurityService checks.

  1. … 18 more files in changeset.
LDEV-3315: Add utility methods for security. Use the new SecurityService in several places.

  1. … 8 more files in changeset.
LDEV-3315: Add security service and use it in vital entry points.

  1. … 12 more files in changeset.
LDEV-3315: Remove AUTHOR ADMIN role. Allow AUTHOR role to preview lessons. Allow MONITOR role to edit activities and run Live Edit.

  1. … 71 more files in changeset.
LDEV-2846: Remove obsolete filters.

  1. … 3 more files in changeset.
LDEV-3275: Introduce SSO using Undertow mechanisms.

Valves do not exist in Undertow. Another approach had to be used.

In each WAR there is a file in META-INF/service dir which adds a class in request processing chaing.

For Central it is SsoProducer which put the authenticated account into shared session.

All other modules use SsoConsumer which takes the account and puts it into its security context.

In standalone.xml caching of credentials was switched off as it would prevent UniversalLoginModule from putting UserDTO into shared session.

TODO: use a simple pass-all authentication mechanism for static files like images and JS files.

  1. … 11 more files in changeset.
LDEV-2463 Added new method "learnerStrictAuth" available to LoginRequest. It works the same way as "learner" but requires hash to also contain lesson id parameter.

  1. … 4 more files in changeset.
LDEV-3309 Add isUpdateUserDetails parameter for LoginRequest so user details get updated

  1. … 6 more files in changeset.
LDEV-3309 Add isUpdateUserDetails parameter for LoginRequest so user details get updated

  1. … 6 more files in changeset.
LDEV-3292: When looking for an unique LD title to create a lesson, search for LDs with given prefix instead taking all from given workspace folder.

  1. … 3 more files in changeset.