Clone Tools
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
LDEV-3382 don't force all the previous/existing integration servers to enable the TTL

LDEV-3315: Prevent session fixation attack.

LDEV-3382 Add datetime parameter check to LoginRequest.

    • -0
    • +9
    ./lamsfoundation/lams/dbupdates/patch02040036.sql
  1. … 7 more files in changeset.
LDEV-1978, LDEV-3340: Remove AccessPermissionFilter. It was designed to control lesson access for Learners, but it was not really used. With the new SecurityService it is/will be obsolete.

  1. … 4 more files in changeset.
LDEV-2265 Utilise URL Shortner to shorten lesson URL

  1. … 6 more files in changeset.
LDEV-3316: Add releaseFromCache method to LAMSBaseDAO

LDEV-3316: Get rid of HibernateTemplate and HibernateDaoSupport usage in set of LAMS DAO types from lams_tool_assesment. Change assesment DAOs hierarchy super type to LAMSBaseDAO.

  1. … 7 more files in changeset.
LDEV-3383: Remove Web authentication method.

    • -0
    • +10
    ./lamsfoundation/lams/dbupdates/patch02040035.sql
  1. … 4 more files in changeset.
LDEV-3383: Remove Web authentication method.

    • -0
    • +10
    ./lamsfoundation/lams/dbupdates/patch02040035.sql
  1. … 4 more files in changeset.
LDEV-3316: Get rid of HibernateTemplate and HibernateDaoSupport in set of LAMS DAO types from lams_common. Alter DAO references in set of services to code against interfaces not implementations.

    • -10
    • +10
    ./lamsfoundation/lams/util/Configuration.java
LDEV-3382 Add datetime parameter check to LoginRequest.

    • -0
    • +9
    ./lamsfoundation/lams/dbupdates/patch02040034.sql
  1. … 2 more files in changeset.
LDEV-3316: Get rid of HibernateTemplate and HibernateDaoSupport in set of LAMS DAO types from lams_common.

LDEV-3316: Register PersistenceExceptionTranslationPostProcessor bean. Together with HibernateTemplate we lose automatic exception translation from hibernate's to spring's DataAccessException exception hierarchy. This PostProcessor is responsible for handling such conversion in all java types annotated with @Repository stereotype annotation.

    • -0
    • +3
    ./lamsfoundation/lams/applicationContext.xml
LDEV-3316: clean some test code that shouldn't get into repository.

LDEV-3316: add missing 'insert' method to ICompetenceMappingDAO after reference changed from implementation to interface in AuthoringService.

LDEV-3316: Introduce LAMSBaseDAO. This is basically a copy of BaseDAO type but not extending HibernateTemplate. In order to get rid of HibernateTemplate, in next steps: subtypes will be moved from BaseDAO type hierarchy into LAMSBaseDAO hierarchy.

    • -0
    • +557
    ./lamsfoundation/lams/dao/hibernate/LAMSBaseDAO.java
LDEV-3316: change DAO references from implementations to corresponding interfaces.

  1. … 1 more file in changeset.
LDEV-3382 Add datetime parameter check to LoginRequest.

    • -0
    • +9
    ./lamsfoundation/lams/dbupdates/patch02040034.sql
  1. … 1 more file in changeset.
LDEV-3335, LDEV-3340: Make SessionManager a storage for servlet context, so it can be accesses by other classes at any time. Remove obsolete SSO classes.

    • -1
    • +1
    ./lamsfoundation/lams/util/LanguageUtil.java
    • -89
    • +85
    ./lamsfoundation/lams/util/NumberUtil.java
  1. … 7 more files in changeset.
LDEV-3335, LDEV-3340: Remove a filter which sets inactive timeout in sessions. With new SSO it is just needed in Central and it is already taken care of by SessionListener.

  1. … 33 more files in changeset.
LDEV-3335, LDEV-3340: Remove or simplify SSO components. Fix sysadmin LoginAs functionality.

    • -37
    • +39
    ./lamsfoundation/lams/util/LanguageUtil.java
  1. … 12 more files in changeset.
LDEV-3335, LDEV-3334: Use SSO mechanism introduced in WildFly 9. Do not create web.xml files with XDoclet as it can not produce them based on 3.1 schema. Use static ones instead. Make SessionManager just a proxy to webserver's HTTP session. Remov custom shared sessions and JSESSIONIDSSO cookie as they are obsolete. Remove own session monitoring as the container should take care of invalidation. Move injecting UserDTO into session to SsoHandler intead of UniversalLoginModule as an authentication request may not reach the latter due to WildFly credentials caching.

    • -5
    • +2
    ./lamsfoundation/lams/commonContext.xml
    • -0
    • +133
    ./lamsfoundation/lams/integration/security/SsoHandler.java
    • -10
    • +12
    ./lamsfoundation/lams/util/CSSThemeUtil.java
    • -502
    • +14
    ./lamsfoundation/lams/web/session/SessionManager.java
  1. … 217 more files in changeset.
LDEV-3347: alter hibernateProperties settings. set default Infinispan cache for contentrepository entities to 'contentrepository-entity'.

    • -17
    • +7
    ./lamsfoundation/lams/applicationContext.xml
LDEV-3275: Make XStream use enhanced mode in which it can instantinate classes without no-arg constructors. This requires Oracle's JVM to be used, but it is a requirement of LAMS anyway. Otherwise multiple LAMS classes (mainly DTOs) would have to be given no-arg constructors or implement Serializable.

    • -1
    • +2
    ./lamsfoundation/lams/util/FileUtil.java
  1. … 9 more files in changeset.
LDEV-3275: Add missing dependencies. Update XStream to version 1.5.0, and its corresponding libraries. Reimplement LD attachment importing. Reimplement Content Repository credential check. Moja joda-time library to separate folder as it is not a part of XStream deployment anymore, but it is still needed in LAMS code.

    • -0
    • +3
    ./lamsfoundation/lams/util/FileUtil.java
  1. … 348 more files in changeset.
LDEV-3315: Omit organisation role check for preview lessons.

    • -8
    • +14
    ./lamsfoundation/lams/security/SecurityService.java
LDEV-3315: Omit organisation role check for preview lessons.

    • -8
    • +14
    ./lamsfoundation/lams/security/SecurityService.java
LDEV-3373: Set current and next activity for learners who finished a lesson, when the activity was added in Live Edit.

  1. … 3 more files in changeset.
LDEV-3373: Set current and next activity for learners who finished a lesson, when the activity was added in Live Edit.

  1. … 3 more files in changeset.
LDEV-3315, LDEV-3367: Refactor SecurityService methods. Improve security in several places.

    • -74
    • +79
    ./lamsfoundation/lams/security/SecurityService.java
  1. … 16 more files in changeset.