Clone Tools
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
LDEV-5428 Remove lesson presence and chat

  1. … 40 more files in changeset.
LDEV-5440 Revert some unnecessary package name changes

    • -1
    • +1
    ./controller/AbstractTimeLimitWebsocketServer.java
    • -1
    • +1
    ./controller/LamsAuthoringFinishController.java
    • -1
    • +1
    ./filter/TransactionRetryInterceptor.java
  1. … 459 more files in changeset.
LDEV-5440 Refactor packages of imported classes

    • -1
    • +1
    ./controller/LamsAuthoringFinishController.java
    • -1
    • +1
    ./filter/TransactionRetryInterceptor.java
  1. … 477 more files in changeset.
LDEV-5440 Rewrite config files and library references

    • -7
    • +7
    ./controller/AbstractTimeLimitWebsocketServer.java
    • -6
    • +6
    ./controller/LamsAuthoringFinishController.java
    • -2
    • +2
    ./filter/LamsContextLoaderListener.java
    • -2
    • +2
    ./filter/TransactionRetryInterceptor.java
    • -10
    • +10
    ./session/SystemSessionFilter.java
  1. … 947 more files in changeset.
LDEV-5438 Add timer change logs

    • -1
    • +18
    ./controller/AbstractTimeLimitWebsocketServer.java
LDEV-5436 Project-wide user sorting by last then first name

  1. … 150 more files in changeset.
LDEV-5426 Switch from custom time zones to built-in Java ones

  1. … 40 more files in changeset.
LDEV-5204 Fix leader finished detection

Also fix misleading session invalidated warnings

  1. … 4 more files in changeset.
Merge branch 'LDEV-5401' into v4.7

# Conflicts:

# lams_common/src/java/org/lamsfoundation/lams/web/controller/AbstractTimeLimitWebsocketServer.java

    • -8
    • +15
    ./controller/AbstractTimeLimitWebsocketServer.java
  1. … 1 more file in changeset.
LDEV-5142 Fortify time limit websocket server code to prevent NPEs

    • -51
    • +43
    ./controller/AbstractTimeLimitWebsocketServer.java
  1. … 1 more file in changeset.
LDEV-5401 Add learner-triggered absolute time limit authoring and learning

    • -29
    • +32
    ./controller/AbstractTimeLimitWebsocketServer.java
  1. … 16 more files in changeset.
LAI-5 Add menu item in authoring to open AI wizard

  1. … 6 more files in changeset.
LDEV-5260 Prevent EventStream retransmission from invalidating session

Event Stream, which LAMS uses for reactive communication via Flux, keeps

a line open between browser and LAMS. If this line is considered

stalled, usually because there is no interaction neither on back nor on

front end, it closes. It happens after about 5 minutes.

If in the meantime the teacher navigated to another LAMS lesson via LMS,

he/she gets reauthenticated via integrations mechanism and gets a new

HTTP session ID. This works fine and allows working on multiple

monitoring windows via LMS.

If now the stalled Event Stream sends a message to LAMS, it uses the old

session ID, not the new one. It happens even when the monitoring window

where the Event Stream was created gets closed. It is a browser

"feature".

This request with old session ID gets picked up by LAMS double login

prevention mechanism. LAMS does not allow users to be logged in to same

account on two browsers. And this Event Stream retransmission looks like

a double login. So LAMS invalidates the correct current session.

It results in teacher getting logged out from the monitoring window and

getting the login page on refresh.

The fix is just throwing an exception on Event Stream retransmission

which would otherwise invalidate the current session. It should be good

enough as the Event Stream does not need a valid response, no one is

waiting for one anymore.

LDEV-5200 Prevent invalidated session error from propagating

There seems to be a problem with Infinispan session invalidation similar

to this

https://issues.redhat.com/browse/UNDERTOW-478

We already have got a patched version, but similar problems occur. They

probably have to do with async servlet processing.

Until we upgrade WildFly we need to keep these safety measures.

LDEV-5200 Prevent invalidated session error from propagating

There seems to be a problem with Infinispan session invalidation similar

to this

https://issues.redhat.com/browse/UNDERTOW-478

We already have got a patched version, but similar problems occur. They

probably have to do with async servlet processing.

Until we upgrade WildFly we need to keep these safety measures.

LDEV-4408 Allow listing invalidated sessions

LDEV-4408 Allow listing invalidated sessions

LDEV-5335 Fix audit logging when no user is authenticated

LDEV-5335 Log adjustments and fixes

  1. … 8 more files in changeset.
LDEB-5335 Add structured audit logs on various admin actions

  1. … 22 more files in changeset.
LDEV-5320 replace CR for values

As logs are parsed one line at the time, if some of these contain CRs, then these cannot be parsed properly and regexp for log monitors aren't triggered properly

Revert "LDEV-5320 Add LAMS instance information to audit logs"

This reverts commit 3db824f7e69ecba2b1e53b1060cf849cfe23ae9c.

LDEV-5320 Add LAMS instance information to audit logs

LDEV-5083 Prevent WF from freezing on shutdown because of unclosed Flux

Open Fluxes prevent WF from shutting down as they are threads not

managed by the server lifecycle.

Now we force complete Sinks on Spring context destroy. It closes

underlying Flux threads.

The problem is that it occurs when most Spring beans are already

destroyed. Fluxes on close want to emit a signal to front end

subscribers. Spring tries to reinitialise controllers which should send

those signals. It fails as context basically does not exist anymore.

All in all we get some harmless errors on server shutdown.

The way to avoid would be to have more control over Spring bean destroy

order which does not seem easily achievable.

    • -0
    • +13
    ./filter/LamsContextLoaderListener.java
  1. … 3 more files in changeset.
LDEV-5320 Give more details about course roles being added and removed

This approach uses logs in controllers rather than in services.

  1. … 5 more files in changeset.
LDEV-5320 Rename security filter to audit filter

    • -0
    • +80
    ./filter/AuditLogFilter.java
  1. … 3 more files in changeset.
LDEV-5320 Add security logger

It logs calls to Spring controllers in Admin module.

    • -0
    • +80
    ./filter/SecurityLogFilter.java
  1. … 3 more files in changeset.
LDEV-5305 Discard changes made for Spring 4

For LAMS 4.7 which uses Spring 5 an upgrade to latest Spring version

will be sufficient.

    • -29
    • +0
    ./filter/LamsAnnotationMethodHandlerAdapter.java
  1. … 11 more files in changeset.
LDEV-5305 Add disallowed fields to every Spring binding

    • -0
    • +29
    ./filter/LamsAnnotationMethodHandlerAdapter.java
  1. … 1 more file in changeset.
LDEV-4293 Skip session creation when displaying error page

If the error was HTTP session being stale or incorrectly invalidated, we

should not try to use the same session to display the error page. The

error page should not require a session at all.

Also if making a decision which session to invalidate in case of double

login, always invalidate the other session and not current one as

otherwise it can lead to a loop of self-invalidating sessions.

  1. … 1 more file in changeset.