Fisheye on lams-github/lams_central/web/login.jsp

lams-github (v4.8): LDEV-5397 remove autofocus...

Ernie Ghiglione — Fri, 29 Dec 2023 13:39:24 +0100

Ernie Ghiglione committed 16a18ca on branch v4.8 in lams-github

LDEV-5397 remove autofocus

When someone using an screen readers access a page, by forcing the user to focus on a field form, then all the instructions and page structure is skipped which can be quite confusing

· /lams_central/web/login.jsp	(-1, +0)	\| History	\| Source	\| Diff
· /lams_central/web/loginTwoFactorAuth.jsp	(-3, +0)	\| History	\| Source	\| Diff
· /lams_tool_chat/web/pages/learning/learning.jsp	(-2, +2)	\| History	\| Source	\| Diff
· /lams_tool_daco/web/pages/learning/addRecord.jsp	(-3, +0)	\| History	\| Source	\| Diff
· /lams_tool_notebook/web/pages/learning/notebook.jsp	(-11, +1)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-4901 Try to fix stale session left after integrations login

Marcin Cieslak — Wed, 16 Nov 2022 11:47:48 +0100

Marcin Cieslak committed 4e5544e on branch v4.7, v4.8 in lams-github

LDEV-4901 Try to fix stale session left after integrations login

· /lams_central/web/login.jsp

(-1, +11)

| History

| Source

| Diff

lams-github (v4.7): LDEV-5178 Skip password expiration check on login via integrations

Marcin Cieslak — Fri, 07 Oct 2022 14:20:29 +0200

Marcin Cieslak committed 7fe28ed on branch v4.7, v4.8 in lams-github

LDEV-5178 Skip password expiration check on login via integrations

· /lams_central/src/java/org/lamsfoundation/lams/web/IndexController.java	(-11, +17)	\| History	\| Source	\| Diff
· /lams_central/web/login.jsp	(-1, +6)	\| History	\| Source	\| Diff
· /lams_common/src/java/org/lamsfoundation/lams/integration/security/SsoHandler.java	(-0, +2)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-5304 Make Signup page process CSRF token correctly...

Marcin Cieslak — Wed, 13 Apr 2022 22:04:56 +0200

Marcin Cieslak committed 01792e2 on branch v4.7, v4.8 in lams-github

LDEV-5304 Make Signup page process CSRF token correctly

Also better detect LoginAs and signup flow.

· /lams_central/src/java/org/lamsfoundation/lams/web/LoginAsController.java	(-0, +1)	\| History	\| Source	\| Diff
· /lams_central/src/java/org/lamsfoundation/lams/web/controller/SignupController.java	(-0, +1)	\| History	\| Source	\| Diff
· /lams_central/web/login.jsp	(-0, +6)	\| History	\| Source	\| Diff
· /lams_common/src/java/org/lamsfoundation/lams/integration/security/SsoHandler.java	(-13, +11)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-5304 Secure login page from CSRF attack...

Marcin Cieslak — Sun, 03 Apr 2022 08:59:11 +0200

Marcin Cieslak committed d0f91f1 on branch v4.7, v4.8 in lams-github

LDEV-5304 Secure login page from CSRF attack

Check for CSRF attack only for regular logins.

For LoginAs feature and integrations existing HTTP session gets

invalidated and so is the CSRF token.

· /lams_build/3rdParty.userlibraries	(-0, +1)	\| History	\| Source	\| Diff
· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-0, +2)	\| History	\| Source	\| Diff
· /lams_central/web/login.jsp	(-2, +4)	\| History	\| Source	\| Diff
· /lams_central/web/loginTwoFactorAuth.jsp	(-0, +1)	\| History	\| Source	\| Diff
· /lams_common/src/java/org/lamsfoundation/lams/integration/security/SsoHandler.java	(-2, +12)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-5200 add svg foreign object check

Ernie Ghiglione — Wed, 09 Jun 2021 06:33:43 +0200

Ernie Ghiglione committed 3a73867 on branch v4.7, v4.8 in lams-github

LDEV-5200 add svg foreign object check

· /lams_central/web/login.jsp

(-1, +1)

| History

| Source

| Diff

lams-github (v4.7): LDEV-4901 Invalidate session on login only if auth as another user...

Marcin Cieslak — Sun, 17 Jan 2021 16:55:08 +0100

Marcin Cieslak committed 930faff on branch v4.7, v4.8 in lams-github

LDEV-4901 Invalidate session on login only if auth as another user

If the user being reauthenticated is the same as current one, just let

him through as SsoHandler will redirect him instead of running

UniversalLoginModule.

· /lams_central/web/login.jsp

(-1, +1)

| History

| Source

| Diff

lams-github (): LDEV-5043 autocomplete stuff for 5.0 branch

Ernie Ghiglione — Fri, 19 Jun 2020 09:27:29 +0200

Ernie Ghiglione committed 3a700be on branch in lams-github

LDEV-5043 autocomplete stuff for 5.0 branch

· /lams_admin/web/user.jsp	(-34, +16)	\| History	\| Source	\| Diff
· /lams_central/web/login.jsp	(-3, +3)	\| History	\| Source	\| Diff
· /lams_central/web/signup/loginTab.jsp	(-10, +7)	\| History	\| Source	\| Diff
· /lams_central/web/signup/singupTab.jsp	(-22, +13)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-5043 update autocomplete login/change password form

Ernie Ghiglione — Fri, 19 Jun 2020 04:36:52 +0200

Ernie Ghiglione committed 77888fe on branch v4.7, v4.8 in lams-github

LDEV-5043 update autocomplete login/change password form

· /lams_central/web/login.jsp	(-3, +3)	\| History	\| Source	\| Diff
· /lams_central/web/passwordChangeContent.jsp	(-4, +4)	\| History	\| Source	\| Diff
· /lams_central/web/signup/loginTab.jsp	(-8, +5)	\| History	\| Source	\| Diff
· /lams_central/web/signup/singupTab.jsp	(-17, +9)	\| History	\| Source	\| Diff

lams-github (): LDEV-4995 Upgrade to bootstrap 4...

Andrey Balan — Sat, 21 Mar 2020 02:47:39 +0100

Andrey Balan committed e2956cb on branch in lams-github

LDEV-4995 Upgrade to bootstrap 4

* Update LAMS code to use bootstrap 4

* Update and redesign index page

· /lams_admin/web/logevent.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/orgPasswordChange.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/policies/policies.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/policies/userConsents.jsp

(-2, +2)

| History

| Source

| Diff

· /lams_admin/web/sysadmin.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/toolcontent/toolcontentlist.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/user.jsp

(-5, +5)

| History

| Source

| Diff

· /lams_admin/web/userChangePass.jsp

(-2, +2)

| History

| Source

| Diff

· /lams_admin/web/userrole.jsp

(-6, +6)

| History

| Source

| Diff

· /lams_admin/web/usersearchlist.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/conf/language/lams/ApplicationResources_en_AU.properties

(-2, +3)

| History

| Source

| Diff

· /lams_central/conf/scss/_lams_variables.scss

(-6, +3)

| History

| Source

| Diff

· /lams_central/conf/scss/_lams_variables_purple.scss

(-6, +4)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/web/DisplayGroupController.java

(-18, +123)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/web/IndexController.java

(-1, +21)

| History

| Source

| Diff

… 184 more files in changeset.

lams-github (v4.7): LDEV-4932 Start using /common/taglibs.jsp in lams_central

Andrey Balan — Tue, 07 Jan 2020 21:07:14 +0100

Andrey Balan committed 4c2d1f3 on branch v4.7, v4.8 in lams-github

LDEV-4932 Start using /common/taglibs.jsp in lams_central

· /lams_central/web/authoring/authoring.jsp

(-5, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/svgGenerator.jsp

(-6, +2)

| History

| Source

| Diff

· /lams_central/web/authoring/template/createresult.jsp

(-10, +4)

| History

| Source

| Diff

· /lams_central/web/authoring/template/genericintro.jsp

(-4, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/template/grouping.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/template/list.jsp

(-6, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/template/tbl/appex.jsp

(-3, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/template/tbl/tbl.jsp

(-5, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/template/tool/assessgradeselector.jsp

(-1, +2)

| History

| Source

| Diff

· /lams_central/web/authoring/template/tool/assessmcq.jsp

(-5, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/template/tool/assessment.jsp

(-3, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/template/tool/assessmentQTI.jsp

(-3, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/template/tool/assessoption.jsp

(-3, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/template/tool/assessredooption.jsp

(-3, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/template/tool/mcoption.jsp

(-3, +1)

| History

| Source

| Diff

… 54 more files in changeset.

lams-github (v4.7): LDEV-4902 Fix Login As feature when SAML is in use....

Marcin Cieslak — Mon, 18 Nov 2019 09:23:18 +0100

Marcin Cieslak committed 48bd74e on branch v4.7, v4.8 in lams-github

LDEV-4902 Fix Login As feature when SAML is in use.

Does not seem to work well on Chrome.

· /lams_central/web/login.jsp

(-2, +3)

| History

| Source

| Diff

lams-github (v4.7): LDEV-4901 Rewrite session invalidation mechanism...

Marcin Cieslak — Tue, 05 Nov 2019 11:52:39 +0100

Marcin Cieslak committed 7342460 on branch v4.7, v4.8 in lams-github

LDEV-4901 Rewrite session invalidation mechanism

On WildFly 8 session invalidation mechanism had some bugs. Marek

introduced a workaround in LDEV-3413. The mechanism was adjusted in

LDEV-4293, especially in this commit

https://code.lamsfoundation.org/fisheye/changelog/lams-github?cs=131ce42e64069f574a2a4a9bc1e5c4be4918e5bb

Newer WildFly versions do not seem to have this bug. A part of

workaround was removed in LDEV-4696, but invalidation mechanism stayed

as if the bugs were still present. The mechanism introduced the problem

with timeouts. Now that the bugs seems to be gone, the invalidation

mechanism was rewritten to a more straightforward version which should

have been used from the start.

It is worth keeping in mind that when one user session is present and

another is being created (another browser, integration call, sysadmin's

LoginAs feature), then user gets authenticated, then old session gets

invalidated and the user gets authenticated AGAIN by WildFly using

cached credentials. Caching is so useful that we can not turn it off. It

means that, though, we need to keep login token generated by

LoginRequestServlet for longer than just first authentication, as we get

authentication call twice. Now we keep it until it is timed out.

· /lams_central/src/java/org/lamsfoundation/lams/security/UniversalLoginModule.java	(-7, +12)	\| History	\| Source	\| Diff
· /lams_central/web/login.jsp	(-2, +1)	\| History	\| Source	\| Diff
· /lams_common/src/java/org/lamsfoundation/lams/integration/security/SsoHandler.java	(-9, +3)	\| History	\| Source	\| Diff
· /lams_common/src/java/org/lamsfoundation/lams/web/session/SessionManager.java	(-18, +14)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-4873 Revert LAMS copyright label removal

Andrey Balan — Mon, 14 Oct 2019 11:38:10 +0200

Andrey Balan committed 14414db on branch v4.7, v4.8 in lams-github

LDEV-4873 Revert LAMS copyright label removal

· /lams_central/web/login.jsp	(-1, +5)	\| History	\| Source	\| Diff
· /lams_central/web/main.jsp	(-0, +3)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-4873 Remove version numbering from login and main pages...

Andrey Balan — Fri, 11 Oct 2019 22:42:02 +0200

Andrey Balan committed eb0982f on branch v4.7, v4.8 in lams-github

LDEV-4873 Remove version numbering from login and main pages

And add it instead to sysadmin.jsp

· /lams_admin/web/sysadmin.jsp	(-16, +27)	\| History	\| Source	\| Diff
· /lams_central/web/login.jsp	(-11, +4)	\| History	\| Source	\| Diff
· /lams_central/web/main.jsp	(-6, +0)	\| History	\| Source	\| Diff

lams-github (): LDEV-4759 Panels are now cards.

Wed, 06 Feb 2019 04:04:33 +0100

Fiona Malikoff committed 70e6fe3 on branch in lams-github

LDEV-4759 Panels are now cards.

· /lams_admin/web/WEB-INF/tags/Alert.tag

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/WEB-INF/tags/DefineLater.tag

(-2, +2)

| History

| Source

| Diff

· /lams_admin/web/WEB-INF/tags/Page.tag

(-36, +18)

| History

| Source

| Diff

· /lams_admin/web/WEB-INF/tags/SimplePanel.tag

(-4, +4)

| History

| Source

| Diff

· /lams_admin/web/WEB-INF/tags/headItems.tag

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/config/editconfig.jsp

(-3, +3)

| History

| Source

| Diff

· /lams_admin/web/ldap.jsp

(-11, +11)

| History

| Source

| Diff

· /lams_admin/web/orgPasswordChange.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/organisation/cloneStart.jsp

(-16, +16)

| History

| Source

| Diff

· /lams_admin/web/organisation/list.jsp

(-9, +9)

| History

| Source

| Diff

· /lams_admin/web/remove.jsp

(-8, +8)

| History

| Source

| Diff

· /lams_admin/web/statistics.jsp

(-8, +8)

| History

| Source

| Diff

· /lams_admin/web/sysadmin.jsp

(-3, +3)

| History

| Source

| Diff

· /lams_admin/web/themeManagement.jsp

(-4, +4)

| History

| Source

| Diff

· /lams_admin/web/toolcontent/toolcontentlist.jsp

(-1, +1)

| History

| Source

| Diff

… 492 more files in changeset.

lams-github (): LDEV-4759 Authoring and monitoring tabs working

Fri, 01 Feb 2019 03:38:51 +0100

Fiona Malikoff committed d432ad1 on branch in lams-github

LDEV-4759 Authoring and monitoring tabs working

· /lams_admin/web/WEB-INF/tags/Tab.tag

(-2, +5)

| History

| Source

| Diff

· /lams_admin/web/WEB-INF/tags/TabBody.tag

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/WEB-INF/tags/TabBodyArea.tag

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/WEB-INF/tags/Tabs.tag

(-36, +27)

| History

| Source

| Diff

· /lams_admin/web/WEB-INF/tags/headItems.tag

(-0, +1)

| History

| Source

| Diff

· /lams_admin/web/css/admin.scss

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/logevent.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/orgPasswordChange.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/policies/policies.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/policies/userConsents.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/userChangePass.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_admin/web/usersearchlist.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/conf/scss/_lams_variables.scss

(-4, +17)

| History

| Source

| Diff

· /lams_central/conf/scss/material-kit/_responsive.scss

(-1, +6)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/web/tag/HelpTag.java

(-2, +2)

| History

| Source

| Diff

… 301 more files in changeset.

lams-github (): LDEV-4759 Upgraded bootstrap-tour, dialogs opening at appropriate size

Wed, 30 Jan 2019 13:44:54 +0100

Fiona Malikoff committed 4d710be on branch in lams-github

LDEV-4759 Upgraded bootstrap-tour, dialogs opening at appropriate size

· /lams_central/conf/scss/_lams_variables.scss

(-8, +12)

| History

| Source

| Diff

· /lams_central/web/authoring/authoring.jsp

(-2, +0)

| History

| Source

| Diff

· /lams_central/web/css/_dialogs.scss

(-0, +6)

| History

| Source

| Diff

· /lams_central/web/css/bootstrap-tour.min.css

(-2, +2)

| History

| Source

| Diff

· /lams_central/web/css/theme.bootstrap_4.css

(-0, +188)

| History

| Source

· /lams_central/web/includes/javascript/authoring/authoringGeneral.js

(-5, +3)

| History

| Source

| Diff

· /lams_central/web/includes/javascript/bootstrap-tour.min.js

(-2, +2)

| History

| Source

| Diff

· /lams_central/web/includes/javascript/bootstrap.min.js

(-7, +1)

| History

| Source

| Diff

· /lams_central/web/includes/javascript/dialog.js

(-5, +1)

| History

| Source

| Diff

· /lams_central/web/includes/javascript/main.js

(-1, +0)

| History

| Source

| Diff

· /lams_central/web/login.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/main.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_learning/web/css/kumalive.scss

(-1, +1)

| History

| Source

| Diff

· /lams_monitoring/web/css/_monitorLesson_base.scss

(-2, +2)

| History

| Source

| Diff

· /lams_monitoring/web/css/_tblmonitor_base.scss

(-18, +18)

| History

| Source

| Diff

… 3 more files in changeset.

lams-github (): LDEv-4759 Material Kit for Bootstrap 4 files installed into lams_central

Sun, 27 Jan 2019 03:24:45 +0100

Fiona Malikoff committed 3267093 on branch in lams-github

LDEv-4759 Material Kit for Bootstrap 4 files installed into lams_central

· /lams_admin/web/WEB-INF/tags/Head.tag

(-1, +4)

| History

| Source

| Diff

· /lams_admin/web/WEB-INF/tags/Page.tag

(-38, +30)

| History

| Source

| Diff

· /lams_build/common.properties

(-1, +1)

| History

| Source

| Diff

· /lams_central/conf/scss/_lams_variables.scss

(-45, +48)

| History

| Source

| Diff

· /lams_central/conf/scss/_lams_variables_purple.scss

(-118, +2)

| History

| Source

| Diff

· /lams_central/conf/scss/_mixins.scss

(-114, +119)

| History

| Source

| Diff

· /lams_central/conf/scss/material-kit.scss

(-0, +66)

| History

| Source

· /lams_central/conf/scss/material-kit/_alerts.scss

(-0, +53)

| History

| Source

· /lams_central/conf/scss/material-kit/_badges.scss

(-0, +43)

| History

| Source

· /lams_central/conf/scss/material-kit/_buttons.scss

(-0, +228)

| History

| Source

· /lams_central/conf/scss/material-kit/_cards.scss

(-0, +327)

| History

| Source

· /lams_central/conf/scss/material-kit/_carousel.scss

(-0, +95)

| History

| Source

· /lams_central/conf/scss/material-kit/_checkboxes.scss

(-0, +201)

| History

| Source

· /lams_central/conf/scss/material-kit/_core-bootstrap.scss

(-0, +66)

| History

| Source

· /lams_central/conf/scss/material-kit/_custom-forms.scss

(-0, +10)

| History

| Source

… 249 more files in changeset.

lams-github (v4.7): Merge remote-tracking branch 'origin/master' into lams31...

Marcin Cieslak — Wed, 28 Nov 2018 08:50:06 +0100

Marcin Cieslak committed 139e91c on branch v4.7, v4.8 in lams-github

Merge remote-tracking branch 'origin/master' into lams31

Conflicts:

lams_central/src/java/org/lamsfoundation/lams/web/ForgotPasswordServlet.java

lams_central/web/forgotPassword.jsp

lams_central/web/forgotPasswordChange.jsp

lams_central/web/forgotPasswordProc.jsp

lams_tool_assessment/web/pages/learning/results.jsp

· /lams_admin/conf/language/lams/ApplicationResources_en_AU.properties	(-0, +1)	\| History	\| Source	\| Diff
· /lams_build/build.xml	(-0, +1)	\| History	\| Source	\| Diff
· /lams_central/conf/language/lams/ApplicationResources_en_AU.properties	(-2, +3)	\| History	\| Source	\| Diff
· /lams_central/src/java/org/lamsfoundation/lams/web/ForgotPasswordServlet.java	(-83, +71)	\| History	\| Source	\| Diff
· /lams_central/web/WEB-INF/web.xml	(-1, +0)	\| History	\| Source	\| Diff
· /lams_central/web/forgotPassword.jsp	(-11, +11)	\| History	\| Source	\| Diff
· /lams_central/web/forgotPasswordChange.jsp	(-4, +3)	\| History	\| Source	\| Diff
· /lams_central/web/forgotPasswordProc.jsp	(-39, +11)	\| History	\| Source	\| Diff
· /lams_central/web/login.jsp	(-4, +18)	\| History	\| Source	\| Diff
· /lams_common/src/java/org/lamsfoundation/lams/util/ConfigurationKeys.java	(-0, +2)	\| History	\| Source	\| Diff
· /lams_tool_assessment/web/pages/learning/results.jsp	(-0, +4)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-4710 Add config setting to enable "Forgot your password?" option...

Andrey Balan — Tue, 27 Nov 2018 20:54:22 +0100

Andrey Balan committed ec8852a on branch v4.7, v4.8 in lams-github

LDEV-4710 Add config setting to enable "Forgot your password?" option

Also if people try to get to the login page by going to the URL

directly, we display a 404 error message.

· /lams_admin/conf/language/lams/ApplicationResources_en_AU.properties	(-0, +1)	\| History	\| Source	\| Diff
· /lams_central/src/java/org/lamsfoundation/lams/web/ForgotPasswordServlet.java	(-1, +10)	\| History	\| Source	\| Diff
· /lams_central/web/WEB-INF/web.xml	(-1, +0)	\| History	\| Source	\| Diff
· /lams_central/web/login.jsp	(-4, +18)	\| History	\| Source	\| Diff
· /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch20181127.sql	(-0, +15)	\| History	\| Source
· /lams_common/src/java/org/lamsfoundation/lams/util/ConfigurationKeys.java	(-0, +2)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-4440 Various fixes in admin

Marcin Cieslak — Fri, 31 Aug 2018 11:19:08 +0200

Marcin Cieslak committed d11fc4c on branch v4.7, v4.8 in lams-github

LDEV-4440 Various fixes in admin

· /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/UserOrgRoleSaveController.java	(-1, +1)	\| History	\| Source	\| Diff
· /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/UserOrgSaveController.java	(-1, +1)	\| History	\| Source	\| Diff
· /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/UserRolesSaveController.java	(-1, +1)	\| History	\| Source	\| Diff
· /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/UserSaveController.java	(-2, +1)	\| History	\| Source	\| Diff
· /lams_admin/web/user.jsp	(-2, +2)	\| History	\| Source	\| Diff
· /lams_admin/web/userrole.jsp	(-3, +9)	\| History	\| Source	\| Diff
· /lams_central/src/java/org/lamsfoundation/lams/web/LoginAsController.java	(-1, +2)	\| History	\| Source	\| Diff
· /lams_central/web/login.jsp	(-4, +5)	\| History	\| Source	\| Diff

lams-github (v4.7): Monthly merge from master to lams31...

Marcin Cieslak — Sat, 21 Apr 2018 12:33:44 +0200

Marcin Cieslak committed f2c0865 on branch v4.7, v4.8 in lams-github

Monthly merge from master to lams31

Conflicts:

lams_build/conf/slim/standalone.xml

lams_build/conf/standalone.xml

lams_build/lib/lams/lams-central.jar

lams_build/lib/lams/lams.jar

lams_central/src/java/org/lamsfoundation/lams/authoring/ObjectExtractor.java

lams_central/src/java/org/lamsfoundation/lams/authoring/template/web/LdTemplateAction.java

lams_central/src/java/org/lamsfoundation/lams/authoring/template/web/TBLTemplateAction.java

lams_central/src/java/org/lamsfoundation/lams/authoring/web/AuthoringAction.java

lams_central/src/java/org/lamsfoundation/lams/web/SessionListener.java

lams_common/src/java/org/lamsfoundation/lams/integration/security/SsoHandler.java

lams_tool_preview/src/java/org/lamsfoundation/lams/tool/peerreview/web/action/MonitoringAction.java

lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/service/ScratchieServiceImpl.java

· /lams_build/conf/slim/standalone.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/conf/standalone.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/lams/lams-central.jar

(binary)

| History

| Source

| Diff

· /lams_build/lib/lams/lams.jar

(binary)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/authoring/ObjectExtractor.java

(-2, +0)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/authoring/template/Assessment.java

(-0, +160)

| History

| Source

· /lams_central/src/java/org/lamsfoundation/lams/authoring/template/web/LdTemplateAction.java

(-52, +35)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/authoring/template/web/TBLTemplateAction.java

(-38, +70)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/authoring/web/AuthoringAction.java

(-1, +22)

| History

| Source

| Diff

· /lams_central/src/java/org/lamsfoundation/lams/web/SessionListener.java

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/login.jsp

(-0, +1)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/integration/security/SsoHandler.java

(-10, +11)

| History

| Source

| Diff

· /lams_common/src/java/org/lamsfoundation/lams/web/session/SessionManager.java

(-10, +23)

| History

| Source

| Diff

· /lams_tool_larsrc/src/java/org/lamsfoundation/lams/tool/rsrc/service/ResourceServiceImpl.java

(-7, +38)

| History

| Source

| Diff

· /lams_tool_larsrc/src/java/org/lamsfoundation/lams/tool/rsrc/web/action/MonitoringAction.java

(-1, +2)

| History

| Source

| Diff

… 6 more files in changeset.

lams-github (v4.7): LDEV-4548 Disable login button after clicking

Marcin Cieslak — Thu, 12 Apr 2018 13:41:06 +0200

Marcin Cieslak committed 3c797b7 on branch v4.7, v4.8 in lams-github

LDEV-4548 Disable login button after clicking

· /lams_central/web/login.jsp	(-0, +1)	\| History	\| Source	\| Diff
· /lams_central/web/loginTwoFactorAuth.jsp	(-0, +1)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-4293 Tune session log out...

Marcin Cieslak — Mon, 09 Oct 2017 15:14:08 +0200

Marcin Cieslak committed 42c6da4 on branch v4.7, v4.8 in lams-github

LDEV-4293 Tune session log out

Make sure mapping login->session is cleared in certain situations.

Check if a session already exists for the given login. If so, invalidate

one of the sessions.

· /lams_central/src/java/org/lamsfoundation/lams/web/SessionListener.java	(-1, +5)	\| History	\| Source	\| Diff
· /lams_central/web/login.jsp	(-5, +6)	\| History	\| Source	\| Diff
· /lams_common/src/java/org/lamsfoundation/lams/web/session/SessionManager.java	(-5, +21)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-4293 Rewrite session invalidation mechanism...

Marcin Cieslak — Mon, 09 Oct 2017 10:23:40 +0200

Marcin Cieslak committed 131ce42 on branch v4.7, v4.8 in lams-github

LDEV-4293 Rewrite session invalidation mechanism

Server-side non-current session invalidation does not work well on

clustered WildFly 10. It breaks Infinispan distributed session cache and

makes a logged out user clear LAMS cookies, otherwise he/she gets a

blank screen. See WFLY-7281 and WFLY-7229.

So instead of invalidating a session we mark it for invalidation. The

next time the user tries to use it, the session gets invalidated and the

user gets an error screen (not a very clean solution, but more effective

than another filter which would nicely redirect the user to logout

screen).

This solution seems to work nicely if both browsers interact with the

same node. Since we use distributed session for failover rather than

replication, it should be OK.

· /lams_central/src/java/org/lamsfoundation/lams/web/SessionListener.java	(-17, +6)	\| History	\| Source	\| Diff
· /lams_central/web/login.jsp	(-4, +3)	\| History	\| Source	\| Diff
· /lams_common/src/java/org/lamsfoundation/lams/integration/security/SsoHandler.java	(-30, +17)	\| History	\| Source	\| Diff
· /lams_common/src/java/org/lamsfoundation/lams/web/session/SessionManager.java	(-12, +14)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-4367 Skins can be created...

Wed, 19 Jul 2017 12:30:17 +0200

Fiona Malikoff committed 4583983 on branch v4.7, v4.8 in lams-github

LDEV-4367 Skins can be created

The SASS files are now configured to allow a new variable file to be

set up with different colours and for users to be able to switch

between skins.

· /lams_admin/web/WEB-INF/tags/Page.tag

(-2, +2)

| History

| Source

| Diff

· /lams_admin/web/WEB-INF/tlds/lams/lams.tld

(-1, +12)

| History

| Source

| Diff

· /lams_admin/web/css/learningLibraryGroup.scss

(-15, +0)

| History

| Source

| Diff

· /lams_admin/web/includes/javascript/learningLibraryGroup.js

(-2, +2)

| History

| Source

| Diff

· /lams_build/common.properties

(-1, +1)

| History

| Source

| Diff

· /lams_build/conf/scss/_bootstrap-variables.scss

(-840, +0)

| History

| Source

| Diff

· /lams_build/conf/scss/_lams_variables.scss

(-56, +0)

| History

| Source

| Diff

· /lams_central/conf/scss/_bootstrap-variables.scss

(-0, +840)

| History

| Source

· /lams_central/conf/scss/_lams_variables.scss

(-0, +79)

| History

| Source

· /lams_central/conf/scss/_mixins.scss

(-0, +109)

| History

| Source

· /lams_central/src/java/org/lamsfoundation/lams/web/tag/CssTag.java

(-10, +37)

| History

| Source

| Diff

· /lams_central/web/WEB-INF/tags/Page.tag

(-2, +2)

| History

| Source

| Diff

· /lams_central/web/WEB-INF/tlds/lams/lams.tld

(-1, +12)

| History

| Source

| Diff

· /lams_central/web/addLesson.jsp

(-1, +1)

| History

| Source

| Diff

· /lams_central/web/authoring/authoring.jsp

(-1, +1)

| History

| Source

| Diff

… 142 more files in changeset.

lams-github (v4.7): LDEV-4030: renaming label

Sat, 17 Dec 2016 00:41:28 +0100

erniegx committed 20dd59c on branch v4.7, v4.8 in lams-github

LDEV-4030: renaming label

· /lams_central/web/login.jsp

(-1, +1)

| History

| Source

| Diff

lams-github (v4.7): LDEV-4030 :Disable login for a few minutes after X number of attempts

Thu, 01 Dec 2016 09:46:29 +0100

SanjanaPabsetti committed 810579c on branch v4.7, v4.8 in lams-github

LDEV-4030 :Disable login for a few minutes after X number of attempts

· /lams_central/conf/language/lams/ApplicationResources.properties	(-1, +1)	\| History	\| Source	\| Diff
· /lams_central/web/login.jsp	(-1, +1)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-4030 :Disable login for a few minutes after X number of attempts

Thu, 01 Dec 2016 04:08:05 +0100

SanjanaPabsetti committed fd43a18 on branch v4.7, v4.8 in lams-github

LDEV-4030 :Disable login for a few minutes after X number of attempts

· /lams_central/conf/language/lams/ApplicationResources.properties	(-0, +1)	\| History	\| Source	\| Diff
· /lams_central/src/java/org/lamsfoundation/lams/security/UniversalLoginModule.java	(-1, +1)	\| History	\| Source	\| Diff
· /lams_central/src/java/org/lamsfoundation/lams/web/LoginAsAction.java	(-1, +1)	\| History	\| Source	\| Diff
· /lams_central/src/java/org/lamsfoundation/lams/web/LoginRequestServlet.java	(-1, +1)	\| History	\| Source	\| Diff
· /lams_central/web/login.jsp	(-0, +7)	\| History	\| Source	\| Diff
· /lams_common/src/java/org/lamsfoundation/lams/integration/security/SsoHandler.java	(-41, +86)	\| History	\| Source	\| Diff