Clone Tools
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
LDEV-3383: Remove Web authentication method.

  1. … 3 more files in changeset.
LDEV-3383: Remove Web authentication method.

  1. … 3 more files in changeset.
LDEV-3382 *Add datetime parameter check to LoginRequest. *Introduced getServerTime method available for 3rd party servers

LDEV-3316: change DAO references from implementations to corresponding interfaces.

  1. … 2 more files in changeset.
LDEV-3382 *Add datetime parameter check to LoginRequest. *Introduced getServerTime method available for 3rd party servers

  1. … 1 more file in changeset.
LDEV-3335, LDEV-3340: Make SessionManager a storage for servlet context, so it can be accesses by other classes at any time. Remove obsolete SSO classes.

  1. … 9 more files in changeset.
LDEV-3335, LDEV-3340: Remove or simplify SSO components. Fix sysadmin LoginAs functionality.

  1. … 9 more files in changeset.
LDEV-3335, LDEV-3334: Use SSO mechanism introduced in WildFly 9. Do not create web.xml files with XDoclet as it can not produce them based on 3.1 schema. Use static ones instead. Make SessionManager just a proxy to webserver's HTTP session. Remov custom shared sessions and JSESSIONIDSSO cookie as they are obsolete. Remove own session monitoring as the container should take care of invalidation. Move injecting UserDTO into session to SsoHandler intead of UniversalLoginModule as an authentication request may not reach the latter due to WildFly credentials caching.

  1. … 224 more files in changeset.
LDEV-3275: Make XStream use enhanced mode in which it can instantinate classes without no-arg constructors. This requires Oracle's JVM to be used, but it is a requirement of LAMS anyway. Otherwise multiple LAMS classes (mainly DTOs) would have to be given no-arg constructors or implement Serializable.

  1. … 11 more files in changeset.
LDEV-3373: Set current and next activity for learners who finished a lesson, when the activity was added in Live Edit.

  1. … 3 more files in changeset.
LDEV-3373: Set current and next activity for learners who finished a lesson, when the activity was added in Live Edit.

  1. … 3 more files in changeset.
LDEV-3315, LDEV-3367: Refactor SecurityService methods. Improve security in several places.

  1. … 12 more files in changeset.
LDEV-3315, LDEV-3367: Refactor SecurityService methods. Improve security in several places.

  1. … 12 more files in changeset.
LDEV-3315, LDEV-3367: Refactor SecurityService methods. Replace Monitoring and Gradebook own security code with SecurityService checks.

  1. … 15 more files in changeset.
LDEV-3315, LDEV-3367: Refactor SecurityService methods. Replace Monitoring and Gradebook own security code with SecurityService checks.

  1. … 17 more files in changeset.
LDEV-3115: Copy tool content when copying an activity.

  1. … 2 more files in changeset.
LDEV-3115: Copy tool content when copying an activity.

  1. … 2 more files in changeset.
LDEV-3358: Fix attribute storing and loading for different grouping types.

  1. … 2 more files in changeset.
LDEV-3358: Fix attribute storing and loading for different grouping types.

  1. … 2 more files in changeset.
LDEV-3331: Allow logging in via integrations. Allow redirecting to a given URL after log in. Adjust sysadmin "login as" functionality.

  1. … 2 more files in changeset.
LDEV-3315: Add security service and use it in vital entry points.

  1. … 12 more files in changeset.
LDEV-3315: Add utility methods for security. Use the new SecurityService in several places.

  1. … 8 more files in changeset.
LDEV-3332: revert spring-beans schema declaration in application context xml files. export spring meta-inf in jboss-deployment-structure.xml

It is way more elegant approach to fix an issue with spring-beans.xsd loading from internet.

  1. … 75 more files in changeset.
LDEV-3332: fix spring contexts declaration to find spring-beans-4.0.xsd locally at classpath.

Having spring module defined as a set of spring jars (as we do have in Wildfly), it is impossible for spring to resolve xsd schema mapping file 'spring.schemas' correctly. With set of jars, we have 5 instances of this file (with different content) under the same path 'META-INF/spring.schemas'. This ended up in spring not beeing able to map spring-beans-4.0.xsd URL path to local resource location. Finally, this xsd was loaded from internet - and that significantly slowed Wildfly startup.

With this fix LAMS is way (depends on internet connection) faster to start.

  1. … 74 more files in changeset.
LDEV-3275: Remove duplicate error log.

LDEV-3275: Add SsoConsumer in LAMS Central as requests (index.jsp, index.do) immediate after j_security_check are also being authenticated. They also are considered an authentication attempt, but they bypass shared session creation in SsoProducer and it causes errors. This was addressed by a simple check - no shared session in UniversalLoginModule, no authentication attempt.

  1. … 2 more files in changeset.
LDEV-3321: Use the "progressUser" to produce progress output, not the one being authenticated.

LDEV-3321: Use the "progressUser" to produce progress output, not the one being authenticated.

LDEV-3315: Add security service and use it in vital entry points.

  1. … 11 more files in changeset.
LDEV-3315: Clean up roles and paths to secured resources in all modules. Remove AUTHOR ADMIN role.

  1. … 69 more files in changeset.