Commit Graph

403 Commits

Author SHA1 Message Date
Misagh Moayyed 248643cf30 CASC-219: switched warn to error, fixed typo and this refs 2014-03-11 08:46:00 -07:00
Misagh Moayyed dfb3629dc2 CASC-219: updated internal map to be a static ref instead 2014-03-11 07:11:53 -07:00
Misagh Moayyed 511bce2471 CASC-219: allowed extensions for ignoring urls 2014-03-11 05:04:59 -07:00
Misagh Moayyed 3773fc9e54 CASC-219: updated javadocs and added map to keep track of pattern matchers 2014-03-11 04:24:27 -07:00
Misagh Moayyed b97d03d126 CASC-219: Cleaned up formatting issues 2014-03-10 05:22:44 -07:00
Scott Battaglia a4df6582ee Removed debug statements used to confirm private methods worked. 2014-03-09 23:18:14 -04:00
Scott Battaglia 75584a2c33 CASC-214 Improve Service Url Construction to Add Non-Standard Ports if Missing from Configuration
Problem: sometimes the port is missing from the configuration.  This generates the wrong service url.
Solution: Add the server port if the server configuration does not have one.
QA Notes: Added unit tests to confirm behavior (and old unit tests still pass)
2014-03-09 23:13:04 -04:00
John Gasper 0ef575ae84 Refactored the match logic and cache the regex patterns. 2014-03-07 16:11:00 -08:00
Misagh Moayyed 71b366cbf3 CASC-219: Provide support for certain urls to be excluded from CAS filters. 2014-03-07 11:17:14 -07:00
Misagh Moayyed b9ac92cf25 CASC-219: Provide support for certain urls to be excluded from CAS filters. 2014-03-07 01:52:50 -07:00
John Gasper 887da3bffd no message 2014-03-05 10:54:34 -08:00
John Gasper 90ccc41db3 Minor corrections. 2014-03-05 10:45:35 -08:00
John Gasper 80ff9857f0 Added support for having regex expressions in the proxy (chaining) list. 2014-03-05 10:17:59 -08:00
Misagh Moayyed 44d1413fa7 CAS-219: Provide support for certain urls to be excluded from CAS filters. 2014-03-02 03:03:24 -07:00
Misagh Moayyed c857e4610b CAS-219: Provide support for certain urls to be excluded from CAS filters. 2014-02-27 22:02:19 -07:00
Scott Battaglia 36b8db1e86 CASC-203 Properly Parse Response to Keep Line Breaks
Problem: The CAS Client uses a buffer reader which strips out the returned line breaks.
Solution: Switch to a normal input stream reader and add appropriate test.
2014-02-17 23:09:32 -05:00
Scott Battaglia 4d7b2517a9 [maven-release-plugin] prepare for next development iteration 2014-01-07 21:15:06 -05:00
Scott Battaglia 4d12772bc4 [maven-release-plugin] prepare release v3.3.0 2014-01-07 20:37:19 -05:00
Scott Battaglia 19e5e0671b Added generated notice files 2014-01-07 20:00:30 -05:00
Scott Battaglia 89e6bfd521 Fixed license files 2014-01-05 23:04:03 -05:00
Scott Battaglia 6ba3f6f884 Added missing license headers 2014-01-05 22:53:17 -05:00
Scott Battaglia fe9dac934a [maven-release-plugin] rollback the release of v3.3.0 2014-01-05 22:06:46 -05:00
Marvin S. Addison 5b1bd87e7a Put HttpServletRequest#logout() in separate try/catch block. 2013-10-28 16:07:28 -04:00
Marvin S. Addison 82c95aaf19 Respond to code review feedback.
1. Call HttpServletRequest#logout() on SLO callback since it is available.
2. Use final for local variables where possible.
2013-10-28 15:58:40 -04:00
Marvin S. Addison 328692bb40 Remove cached assertions on logout to prevent credential replay attack. 2013-10-24 12:57:25 -04:00
Marvin S. Addison 5ce3bcb3d3 CASC-174 Remove @version javadoc tag. 2013-08-15 11:05:32 -04:00
Marvin S. Addison 75406c916e CASC-174 Remove JBoss verbiage from error message. 2013-08-01 14:10:38 -04:00
Marvin S. Addison 517f94bd97 CASC-174 Provide facility for Servlet 3.0 programmatic JAAS login.
Servlet3AuthenticationFilter supersede the JBoss-specific
WebAuthenticationFilter for JBoss 7. It should also provide support for
programmatic JAAS login for any container that is Servlet 3.0/JEE6
compliant.
2013-08-01 14:05:01 -04:00
Scott 15103333e5 Merge pull request #52 from battags/CASC-211
CASC-211 Better Ticket Validation Error Logic
2013-06-20 16:31:59 -07:00
Scott Battaglia 8ab75b883a Renamed arguments 2013-06-20 19:28:35 -04:00
Scott Battaglia 715659ebcf Switched to SaxParserFactory directly. Unit tests pass. CASC-212 2013-06-20 00:15:53 -04:00
Scott Battaglia a9d640b1b0 Fixed formatting again. 2013-06-19 23:16:17 -04:00
Scott Battaglia b802354fdb Changed default for exceptionOnValidationFailure and message.
This seems to have some formatting changes in it also for some reason.
2013-06-19 23:11:22 -04:00
Scott Battaglia 1993718cc7 Reformat all files using shared CAS Eclipse formatter. 2013-06-19 22:50:02 -04:00
Scott Battaglia 9674ad8a45 Swithed to existing Reflection utils. Added supporting unit test. 2013-06-19 22:26:09 -04:00
Scott Battaglia 8a7e32e5be Merge branch 'master' into CASC-206 2013-06-19 22:25:18 -04:00
Scott Battaglia 077e991ae6 CASC-207
Converted logger to static for de-serialization purposes.
2013-06-18 22:38:25 -04:00
Scott Battaglia 8643e85b1e Added missing javadoc 2013-06-18 22:07:50 -04:00
Scott Battaglia 73e36bf6d2 Fixed failing test case that was missing an import statement. 2013-06-18 21:57:22 -04:00
Scott Battaglia 8df9f0272b Added redirect strategy to support Faces. 2013-06-18 21:56:58 -04:00
Scott Battaglia 091f1d5f90 Merge branch 'master' of github.com:Jasig/java-cas-client 2013-06-18 21:08:50 -04:00
mores 2b53bdf882 getSocketFactory() should only be called on a sslContext that has been initialized. 2013-05-06 13:46:47 -04:00
mores e6e0f907b8 Fix to allow client to work with Server 3.5.2 2013-04-25 09:11:11 -04:00
Misagh Moayyed 089fca4ca4 Merge pull request #40 from mmoayyed/CASC-180
CASC-180: Fix the issue with casting to http url connections and provide...
2013-03-11 13:35:54 -07:00
Misagh Moayyed 4f79cd1014 CASC-180: Renamed factory to be HttpURLConnectionFactory. 2013-03-10 20:51:27 -07:00
Misagh Moayyed 2e6df8c5b7 CASC-180: Fixed try/catch block issue with URL creation. 2013-03-09 15:00:45 -07:00
Misagh Moayyed 3964e739c0 CASC-180: Removed the default url connection factory, allowed proxy retrieval to use the configured factory instance. 2013-03-06 09:34:39 -07:00
Misagh Moayyed c34ff785dd CASC-180: Fix the issue with casting to http url connections and provide a default instance for the http url factory. 2013-03-04 14:17:55 -07:00
Marvin S. Addison 6e12f43b16 CASC-204 Prevent renew misconfiguration.
Prevent renew from being configured via filter init param, which can lead
to a half-configured state where authentication filter is configured for
renew without validation filter. With this change in place, renew MUST be
configured by a global configuration facility such as context parameter or
JNDI to ensure proper configuration.
2013-03-04 10:43:55 -05:00
Scott Battaglia 974c3beb67 Merge branch 'master' of github.com:battags/java-cas-client 2013-02-17 21:31:55 -05:00
Misagh Moayyed d102c50779 CASC-180 - Add support for Client Side Certificates
Moved url connection factory interface and its https impl into the ssl package.
2013-01-24 15:47:22 -07:00
Misagh Moayyed d1ae0f5bbf Fixed javadoc for unused parameter. 2013-01-24 12:07:22 -07:00
Misagh Moayyed b54cd179e2 CASC-180 - Add support for Client Side Certificates
In order to utilize client side certificates, this commit facilitates the creation of a SSLSocketFactory on HttpsURLConnection for the client. The configuration is encapsulated inside a url factory instance that applies the adjustments where necessary.

This commit is continuation of the posted pending pull on github that is at:
https://github.com/Jasig/java-cas-client/pull/26

...and applies the suggestions and fixes that were brought to light during the code review.
2013-01-24 12:01:47 -07:00
Scott Battaglia b4367f595e Fix formatting of pom.xml and update licensing to match CAS project. 2013-01-15 22:04:16 -05:00
Scott Battaglia 2f9d384b1e CASC-202
convert Commons Logging to SLF4J.  Add Enforcer.
2013-01-11 23:25:52 -05:00
Scott Battaglia 06ccec017d CASC-202
migration to SLF4J
2013-01-11 22:23:49 -05:00
Scott Battaglia 105bd17b61 Merge branch 'master' into CASC-202 2013-01-08 23:34:01 -05:00
Scott Battaglia f2df7a8603 CASC-202
migrated some to SLF4J
2013-01-08 23:32:35 -05:00
Scott d69e083f28 Merge pull request #34 from battags/CASC-179
CASC-179
2013-01-08 05:18:40 -08:00
David Ordás eed831191a re-add support for multi-valued attributes
Add tests for ensure re-add support for multi-valued attributes is working
2013-01-08 13:28:35 +01:00
Scott Battaglia 67bb0a6ef8 CASC-196
re-add support for multi-valued attributes
2013-01-07 23:10:24 -05:00
Scott Battaglia e95d867792 Merge branch 'master' into CASC-196 2013-01-07 22:56:07 -05:00
Scott Battaglia 5af7c331b7 CASC-179
added parameter to determine whether to create sessions.  Also, now properly does a return.
2013-01-07 22:51:45 -05:00
Scott 27d89ccb30 Merge pull request #28 from battags/CASC-192
CASC-192
2013-01-07 06:22:28 -08:00
Scott f733760e68 Merge pull request #30 from battags/CASC-168
CASC-168
2013-01-07 05:02:05 -08:00
Scott 9294fbdffd Merge pull request #29 from battags/CASC-191
CASC-191
2013-01-07 05:01:51 -08:00
Scott c26329d21b Merge pull request #27 from battags/CASC-195
CASC-195
2013-01-06 21:02:08 -08:00
Scott Battaglia 82c0207c25 NOJIRA fix minor missing final tags and javadoc. 2013-01-06 23:56:24 -05:00
Scott Battaglia 980d0ff116 CASC-196
real XML parsing example if using <cas:attributes>.  Updated tests to make sure it works if there are line breaks.
2013-01-06 23:40:46 -05:00
Scott Battaglia ac8a134192 CASC-168
added ability to specify class name in order to use a sub-class.
2013-01-06 19:36:37 -05:00
Scott Battaglia 5ad57084cc CASC-191
isValid method with simple implementation
2013-01-06 18:45:05 -05:00
Scott Battaglia 41e7258af3 CASC-192
cast to XSAny in order to actually get the text content.
2013-01-06 18:24:11 -05:00
Scott Battaglia dcd9bda3df CASC-195
null check in ProxyGrantingTicketStorageImpl.
2013-01-06 18:14:42 -05:00
Misagh Moayyed 5f1a30a314 CASC-199: Allow for an additional option to exclude empty proxy chains. 2012-12-10 21:10:10 -07:00
Bernd Eckenfels 3deac9e1a9 Corrected JavaDoc (force if useSession=false force redirect=false) 2012-09-21 04:11:22 +02:00
Bernd Eckenfels 5f1e5e0ed4 make default value of useRedirect visible. Add some JavaDoc for the
options.
2012-09-21 01:32:06 +02:00
Scott bacf0c6142 Merge pull request #13 from serac/casc-166
CASC-166 Fix race condition in cached assertion cleanup.
2012-08-01 18:59:09 -07:00
Marvin S. Addison ee2b719098 CASC-166 Address code review feedback.
Use ConcurrentHashMap to avoid explicit synchronization.
Use TimeUnit to allow more user-friendly configuration of the units of the cache timeout (e.g. MINUTES, SECONDS) and rename option from cacheTimeoutUnits to cacheTimeoutUnit for consistency.
2012-07-26 10:25:06 -04:00
Marvin S. Addison ec0c7d5162 CASC-166 Fix race condition in cached assertion cleanup.
Perform assertion cleanup on same thread as JAAS module invocations to ensure that cleanup of expired assertions occurs before the cache is interrogated. A verifying test case accompanies this fix. The test case required a new module option, cacheTimeoutUnits, in order to complete on a time scale suitable for unit tests.
2012-07-25 16:58:36 -04:00
Misagh Moayyed b2f038a174 Merge pull request #12 from battags/CASC-185
CASC-185 - Merged.
2012-07-25 09:34:46 -07:00
Scott Battaglia bae8e68f55 CASC-185
add authentication time to assertion and also actually use the validity period for Assertion.
2012-07-24 23:01:35 -04:00
Scott Battaglia 3816e29861 CASC-169
change to hashmap to allow values to be added
2012-07-24 22:39:06 -04:00
Scott Battaglia 6e3f802cba CASC-184
improved SAML support.  Also execute old AND new XML in the unit tests.

cr for the first round of changes: serac
2012-07-24 22:13:25 -04:00
Scott Battaglia 616bbfa403 CASC-184
upgrade to OpenSAML2
2012-07-23 22:09:09 -04:00
Misagh Moayyed 37b4058640 CASC-182: Combined logging statements into one. 2012-07-11 10:12:20 -07:00
Misagh Moayyed 09ffc2c05d CASC-182 - reset the redirectAfterValidation parameter to false when useSession is false. 2012-07-10 14:52:20 -07:00
Scott Battaglia d0ecca4274 CAS-172
don't log proxy message when there is no PGTIOU
2012-04-23 00:00:56 -04:00
Scott Battaglia eff195aaa9 CASC-171
check x-forwarded host header
2012-04-22 23:38:22 -04:00
unknown 7302ca6a99 CASC-175
ensure state can be shared
2012-04-22 23:29:38 -04:00
lavrovdv 4b454e1e2e Parsing the attributes using xml dom parser. 2012-03-15 11:04:47 +04:00
lavrovdv 26e959c3d0 The result of parsing the xml document should not depend on the "\n" symbols. 2012-03-13 15:08:13 +04:00
Marvin S. Addison de2ab6a3ad Update POM for GitHub and update other stale project information.
Reformat pom.xml for 2-space indentation.
2012-03-07 09:43:26 -05:00
Scott Battaglia a19c27f75b CASC-165
disable DTD reading.
2011-10-31 02:44:07 +00:00
Scott Battaglia 80693a3db9 CASC-157
added pre and post hooks
2011-09-22 02:02:03 +00:00
Scott Battaglia 477fc582f0 CASC-163
SSO filter supports ticket over POST.
2011-09-22 01:10:19 +00:00
Scott Battaglia 84aa06629f CASC-160
added a check to make sure we really wanted to gateway.
2011-09-22 00:55:15 +00:00
Scott Battaglia 5cd43c2139 CASC-101
additional protected getters
2011-09-12 04:12:37 +00:00
Scott Battaglia d754bc8d8c NOJIRA
ignore to get the CI to run.
2011-09-11 16:54:16 +00:00
Scott Battaglia fb42fefaf9 NOJIRA
fixed some bugs and updated pom to 3.3-SNAPSHOT
2011-09-11 16:46:53 +00:00
Scott Battaglia 97e6573e32 NOJIRA
accidental Java 1.6 dependency
2011-09-11 16:35:23 +00:00
Scott Battaglia e055585cf2 CASC-144
added support for multiple hosts with a space separated value
2011-09-11 16:15:30 +00:00
Scott Battaglia 3b6ccaac0a CASC-154
added method to AbstractCasFilter that can be overwritten in ticket validation and authentication to support other methods of retrieving the ticket.
2011-09-11 15:11:43 +00:00
Scott Battaglia 6a98fc61a5 CASC-156
call sendError
2011-07-31 19:01:17 +00:00
Scott Battaglia 3d965426ac [maven-release-plugin] prepare for next development iteration 2011-07-10 23:44:18 +00:00
Scott Battaglia e0af12eeba [maven-release-plugin] prepare release cas-client-3.2.1 2011-07-10 23:43:33 +00:00
Scott Battaglia 413837e4df CASC-153
added check to make sure only serverName or serviceName is set, but not both.
2011-06-27 03:00:45 +00:00
Scott Battaglia f3b6ae5a4d CASC-149
parse the trailing slash on a path.  Added a javadoc to explain a bit better, as well as an INFO level message.
2011-06-27 02:58:51 +00:00
Scott Battaglia 49f556575e CASC-149
parse the trailing slash on a path.  Added test cases.
2011-06-21 02:33:15 +00:00
Scott Battaglia d5bc8e3757 CASC-148
update documentation about JNDI loading order.
2011-06-21 02:12:11 +00:00
Scott Battaglia 7d4c35417f CASC-146
added encoding for SAML request.
2011-06-21 01:54:37 +00:00
Scott Battaglia 8941d96a99 CASC-147
ignore logout requests for multipart forms
2011-06-21 01:39:49 +00:00
Scott Battaglia e9569564d7 CASC-143
fix for the changes Atlassian made to seraph
2011-03-27 18:17:44 +00:00
Scott Battaglia 3b1c1ac85f CASC-139
generate correct identifier value.
2011-02-27 05:06:50 +00:00
Scott Battaglia 84ad620b34 CASC-138
added hostnameVerifier to the list of reserved keywords
2011-02-12 22:00:45 +00:00
Scott Battaglia 8c53e4b0e6 CASC-138
added hostnameVerifier to the list of reserved keywords
2011-02-12 22:00:06 +00:00
Scott Battaglia 90d6625e7f CASC-137
fix null pointer exception when the anyhostname verifier is used.
2011-02-12 18:30:25 +00:00
Scott Battaglia ec87c31ecd NOJIRA
switch to stringbuilder since we're on Java 5
2011-02-12 18:29:41 +00:00
Scott Battaglia 035a6f7a8e [maven-release-plugin] prepare for next development iteration 2010-12-08 04:22:32 +00:00
Scott Battaglia f6ff486939 [maven-release-plugin] prepare release cas-client-3.2.0 2010-12-08 04:22:21 +00:00
Scott Battaglia 18b70ee8ce NOJIRA
updated Atlassian dependencies and documented where to download provided jars
2010-12-08 04:16:23 +00:00
Scott Battaglia 2055d0891b NOJIRA
updated to say Jasig instead of JA-SIG
2010-12-08 02:47:08 +00:00
Scott Battaglia cbb51b0506 CASC-135
added encryption mechanism to distributed proxy granting ticket storage mechanisms
2010-11-27 23:23:24 +00:00
Scott Battaglia 4a36b023a6 CASC-134
change to get Attributes instead of just getAttribute in case there are multiple values.
2010-11-20 06:05:40 +00:00
Scott Battaglia befd53e456 CASC-128
ability to disable SAML 1.1 schema validation
2010-11-16 04:43:08 +00:00
Scott Battaglia 1abdee8399 CASC-133
fixed the fact that we were logging value3 when we meant to log value4.
2010-11-15 04:17:50 +00:00
Marvin S. Addison c6b1bc775a CASC-120
Add type parameters to fix unchecked compiler warnings where possible,
otherwise add SuppressWarnings("unchecked") compiler directive in a couple
places.
Use ReflectUtils.newInstance for creating new instances of objects from
class names.
2010-10-28 17:44:53 +00:00
Marvin S. Addison 5faf72b876 CASC-120
Use Collections.enumeration.
2010-10-28 16:06:32 +00:00
Scott Battaglia aa4afd9c5f NOJIRA
migrated to Java 5
2010-10-25 03:59:14 +00:00
Scott Battaglia f68afc177c NOJIRA:
upgrade to Java 1.5, upgrade Clover, Ehcache version, switch to 3.2.0-SNAPSHOT, and Jasig Parent pom.  Switch to Apache license.
2010-10-23 04:03:14 +00:00
Scott Battaglia b0044cd075 NOJIRA:
upgrade to Java 1.5, upgrade Clover, Ehcache version, switch to 3.2.0-SNAPSHOT, and Jasig Parent pom.  Switch to Apache license.
2010-10-23 03:49:49 +00:00
Scott Battaglia df8211cf68 [maven-release-plugin] prepare for next development iteration 2010-10-13 03:45:34 +00:00
Scott Battaglia 0270596bac [maven-release-plugin] prepare release cas-client-3.1.12 2010-10-13 03:44:57 +00:00
Scott Battaglia 54964cb5a4 CASC-129
updated exception message thrown when there no valid assertions to better indicate that it may be a clock drift issue.
2010-10-13 02:51:53 +00:00
Scott Battaglia ff5a99ea0a CASC-126
improved logging of errors.
2010-10-06 03:30:57 +00:00
Scott Battaglia ac08968c30 NOJIRA
extremely minor formatting fixes
2010-10-06 03:27:37 +00:00
Marvin S. Addison a947490c04 CASC-33
Add SingleSignOutValve, which required some refactoring in core
org.jasig.cas.client.session package to facilitate code reuse.
2010-09-23 15:03:50 +00:00
Scott Battaglia f64a23b1ae CASC-125
added default auth filter for saml1.1 and made sure that it and the validation filter set the required saml parameters.
2010-09-20 03:33:49 +00:00
Scott Battaglia cd3ecb8e3c CASC-33
support for Tomcat: more authentication mechanisms.  Just need to do the abstract class now.
2010-09-01 03:56:46 +00:00
Scott Battaglia 9ffca231a0 CASC-33
support for Tomcat: logout, proxy callback.
2010-08-29 21:53:32 +00:00
Scott Battaglia 74a8cff651 CASC-115
applied Marvin's patch.  Made changes to check for debug enabled before doing any concatenation and to renable the initCause
2010-08-16 03:15:45 +00:00
Scott Battaglia 649b39b1c8 CASC-116
removed secondary call to response.encodeRedirectUrl because according to the Tomcat source code they essentially do the same thing.
2010-07-20 02:33:36 +00:00
Scott Battaglia b1f6e24f7e CASC-117
added init cause to login exceptions
2010-07-20 02:12:02 +00:00
Scott Battaglia 40c006389e [maven-release-plugin] prepare for next development iteration 2010-06-17 03:08:14 +00:00
Scott Battaglia 07cc6b62f3 [maven-release-plugin] prepare release cas-client-3.1.11 2010-06-17 03:08:03 +00:00
Scott Battaglia 4776006b07 NOJIRA
preparations for 3.1.11 release
2010-06-17 02:59:34 +00:00
Scott Battaglia 8bd5e8ba07 [maven-release-plugin] prepare release cas-client-3.1.11 2010-06-17 02:54:34 +00:00
Scott Battaglia 206c5180a7 NOJIRA
preparations for 3.1.11 release
2010-06-17 02:37:42 +00:00
Scott Battaglia 0e289c70b5 [maven-release-plugin] prepare release cas-client-3.1.11 2010-06-17 02:28:49 +00:00
Scott Battaglia dcddfe5d65 NOJIRA
preparations for 3.1.11 release
2010-06-17 02:19:15 +00:00
Marvin S. Addison a57e3d401f CASC-108
Minor logging fixes/improvements.
2010-06-07 15:29:23 +00:00