• last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
LDEV-3315: Prevent session fixation attack.

LDEV-3382 Add datetime parameter check to LoginRequest.

  1. … 7 more files in changeset.
LDEV-1978, LDEV-3340: Remove AccessPermissionFilter. It was designed to control lesson access for Learners, but it was not really used. With the new SecurityService it is/will be obsolete.

  1. … 4 more files in changeset.
LDEV-2265 Utilise URL Shortner to shorten lesson URL

  1. … 6 more files in changeset.
LDEV-3316: Add releaseFromCache method to LAMSBaseDAO

LDEV-3316: Get rid of HibernateTemplate and HibernateDaoSupport usage in set of LAMS DAO types from lams_tool_assesment. Change assesment DAOs hierarchy super type to LAMSBaseDAO.

  1. … 7 more files in changeset.
LDEV-3383: Remove Web authentication method.

  1. … 4 more files in changeset.
file patch02040035.sql was added on branch lams2_head_wildfly on 2014-11-28 12:27:20 +0000

LDEV-3383: Remove Web authentication method.

    • binary
    ./org/lamsfoundation/lams/dbupdates/patch02040035.sql
  1. … 4 more files in changeset.
LDEV-3316: Get rid of HibernateTemplate and HibernateDaoSupport in set of LAMS DAO types from lams_common. Alter DAO references in set of services to code against interfaces not implementations.

LDEV-3382 Add datetime parameter check to LoginRequest.

  1. … 2 more files in changeset.
LDEV-3316: Get rid of HibernateTemplate and HibernateDaoSupport in set of LAMS DAO types from lams_common.

LDEV-3316: Register PersistenceExceptionTranslationPostProcessor bean. Together with HibernateTemplate we lose automatic exception translation from hibernate's to spring's DataAccessException exception hierarchy. This PostProcessor is responsible for handling such conversion in all java types annotated with @Repository stereotype annotation.

LDEV-3316: clean some test code that shouldn't get into repository.

LDEV-3316: add missing 'insert' method to ICompetenceMappingDAO after reference changed from implementation to interface in AuthoringService.

LDEV-3316: Introduce LAMSBaseDAO. This is basically a copy of BaseDAO type but not extending HibernateTemplate. In order to get rid of HibernateTemplate, in next steps: subtypes will be moved from BaseDAO type hierarchy into LAMSBaseDAO hierarchy.

file LAMSBaseDAO.java was initially added on branch lams2_head_wildfly.

    • -0
    • +0
    ./org/lamsfoundation/lams/dao/hibernate/LAMSBaseDAO.java
LDEV-3316: change DAO references from implementations to corresponding interfaces.

  1. … 1 more file in changeset.
file patch02040034.sql was added on branch lams2_head_wildfly on 2014-11-27 12:25:50 +0000

LDEV-3382 Add datetime parameter check to LoginRequest.

  1. … 1 more file in changeset.
LDEV-3335, LDEV-3340: Make SessionManager a storage for servlet context, so it can be accesses by other classes at any time. Remove obsolete SSO classes.

    • -91
    • +87
    ./org/lamsfoundation/lams/util/NumberUtil.java
  1. … 7 more files in changeset.
LDEV-3335, LDEV-3340: Remove a filter which sets inactive timeout in sessions. With new SSO it is just needed in Central and it is already taken care of by SessionListener.

  1. … 33 more files in changeset.
LDEV-3335, LDEV-3340: Remove or simplify SSO components. Fix sysadmin LoginAs functionality.

  1. … 12 more files in changeset.
file SsoHandler.java was initially added on branch lams2_head_wildfly.

    • -0
    • +0
    ./org/lamsfoundation/lams/integration/security/SsoHandler.java
LDEV-3335, LDEV-3334: Use SSO mechanism introduced in WildFly 9.

Do not create web.xml files with XDoclet as it can not produce them based on 3.1 schema. Use static ones instead.

Make SessionManager just a proxy to webserver's HTTP session. Remov custom shared sessions and JSESSIONIDSSO cookie as they are obsolete. Remove own session monitoring as the container should take care of invalidation.

Move injecting UserDTO into session to SsoHandler intead of UniversalLoginModule as an authentication request may not reach the latter due to WildFly credentials caching.

    • -5
    • +2
    ./org/lamsfoundation/lams/commonContext.xml
  1. … 217 more files in changeset.
LDEV-3347: alter hibernateProperties settings. set default Infinispan cache for contentrepository entities to 'contentrepository-entity'.

LDEV-3275: Make XStream use enhanced mode in which it can instantinate classes without no-arg constructors.

This requires Oracle's JVM to be used, but it is a requirement of LAMS anyway.

Otherwise multiple LAMS classes (mainly DTOs) would have to be given no-arg constructors or implement Serializable.

    • -1
    • +2
    ./org/lamsfoundation/lams/util/FileUtil.java
  1. … 9 more files in changeset.
LDEV-3275: Add missing dependencies. Update XStream to version 1.5.0, and its corresponding libraries.

Reimplement LD attachment importing. Reimplement Content Repository credential check.

Moja joda-time library to separate folder as it is not a part of XStream deployment anymore, but it is still needed in LAMS code.

    • -0
    • +3
    ./org/lamsfoundation/lams/util/FileUtil.java
  1. … 348 more files in changeset.
LDEV-3315: Omit organisation role check for preview lessons.

LDEV-3315: Omit organisation role check for preview lessons.