Author: jleroux
Date: Wed Feb 7 14:20:49 2018
New Revision: 1823469
URL: http://svn.apache.org/viewvc?rev=1823469&view=rev
Log:
"Applied fix from trunk for revision: 1823467"
------------------------------------------------------------------------
r1823467 | jleroux | 2018-02-07 15:17:51 +0100 (mer., 07 févr. 2018) | 7 lines
Completed:: Security issue in Token Based Authentication
(OFBIZ-10206)
Updates the security.properties content related to JWT
Refers to the last up to date external-server-test-example.patch at OFBIZ-10206
Makes demo-trunk.ofbiz.apache.org default external-server-name so that anybody
can try the feature from own machine. The use-external-server=Y was already set
------------------------------------------------------------------------
Modified:
ofbiz/ofbiz-framework/branches/release17.12/ (props changed)
ofbiz/ofbiz-framework/branches/release17.12/framework/security/config/security.properties
Propchange: ofbiz/ofbiz-framework/branches/release17.12/
------------------------------------------------------------------------------
--- svn:mergeinfo (original)
+++ svn:mergeinfo Wed Feb 7 14:20:49 2018
@@ -10,4 +10,4 @@
/ofbiz/branches/json-integration-refactoring:1634077-1635900
/ofbiz/branches/multitenant20100310:921280-927264
/ofbiz/branches/release13.07:1547657
-/ofbiz/ofbiz-framework/trunk:1819499,1819598,1819800,1819805,1819811,1820038,1820262,1820374-1820375,1820441,1820457,1820644,1820658,1820790,1820823,1820949,1820966,1821012,1821036,1821112,1821115,1821144,1821186,1821219,1821226,1821230,1821386,1821600,1821613,1821628,1821965,1822125,1822310,1822377,1822383,1822393,1822882,1823324
+/ofbiz/ofbiz-framework/trunk:1819499,1819598,1819800,1819805,1819811,1820038,1820262,1820374-1820375,1820441,1820457,1820644,1820658,1820790,1820823,1820949,1820966,1821012,1821036,1821112,1821115,1821144,1821186,1821219,1821226,1821230,1821386,1821600,1821613,1821628,1821965,1822125,1822310,1822377,1822383,1822393,1822882,1823324,1823467
Modified:
ofbiz/ofbiz-framework/branches/release17.12/framework/security/config/security.properties
URL:
http://svn.apache.org/viewvc/ofbiz/ofbiz-framework/branches/release17.12/framework/security/config/security.properties?rev=1823469&r1=1823468&r2=1823469&view=diff
==============================================================================
---
ofbiz/ofbiz-framework/branches/release17.12/framework/security/config/security.properties
(original)
+++
ofbiz/ofbiz-framework/branches/release17.12/framework/security/config/security.properties
Wed Feb 7 14:20:49 2018
@@ -132,12 +132,11 @@ default.error.response.view=view:viewBlo
# -- If false, then no externalLoginKey parameters will be added to
cross-webapp urls
security.login.externalLoginKey.enabled=true
-### To have this working, an example of the change needed on the source server
is available in OFBIZ-9833-external-server-test-example.patch
-### With this example, the external-server-query must be /catalog/control/
+### To have this working, an example of the change needed on the source server
is available in OFBIZ-10206-external-server-test-example.patch
# -- If true, then it's possible to connect to another webapp on another
server w/o signing in
# -- This needs to be changed on both the source server and the target server
use-external-server=N
# -- Name of the external server (DNS) ex: demo-trunk.ofbiz.apache.org where
the port is not needed, or localhost:8443 (default) for local tests (not using
the same webapp)
-external-server-name=localhost:8443
+external-server-name=demo-trunk.ofbiz.apache.org
# -- Time To Live of the token send to the external server in seconds
external-server-token-duration=30
