This is an automated email from the ASF dual-hosted git repository.
radcortez pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/tomee.git.
from 340c637 Merge pull request #323 from otaviojava/optmizes_try_catch
new 6e37459 TOMEE-2365 - Added project for EE Security JSR-375
implementation.
new f5f202b TOMEE-2365 - Added initial test to setup module.
new 7dad419 TOMEE-2365 - Replaced ApplicationComposer with TomEE Embedded.
new a3e8dce TOMEE-2365 - Initial implementation classes with
ServerAuthModule to support Security spec Authentication Mechanisms.
new dc81bb9 TOMEE-2365 - Initial API code.
new 7aa11b3 TOMEE-2365 - Added IdentityStore API.
new c33ad08 TOMEE-2365 - Implemented default IdentifyStoreHandler.
new cdd673a TOMEE-2365 - Added credentials API for Basic Auth.
new e753603 TOMEE-2365 - Added HttpMessageContext wrapper API.
new 5df4e8f TOMEE-2365 - CDI Extension to register
AuthenticationMechanism if definitions are found.
new 36543b8 TOMEE-2365 - Only register JASPIC provider if
AuthenticationMechanism exist in the CDI context.
new f1315f6 TOMEE-2365 - Added default IdentityStore.
new a6b99d9 TOMEE-2365 - Basic Auth test.
new 839c85e TOMEE-2365 - Fixed Authorization header read.
new c57e6dd TOMEE-2365 - Additional bean to map Servlets to their
Authentication Mechanisms.
new 8f15bd3 TOMEE-2365 - Fixed Basic header parsing.
new 369fc95 TOMEE-2365 - Test to load users to in-memory database.
new 627224f TOMEE-2365 - Properly override validate method on default
Identity Store.
new 7366bbd TOMEE-2365 - Initial implementation of HttpMessageContext.
Not complete yet, just basic stuff.
new 868ea32 TOMEE-2365 - Implementation of validateRequest delegating to
the proper CDI bean.
new a88d557 TOMEE-2365 - Propagate CallbackHandler to perform
authentication.
new 8fa7252 TOMEE-2365 - Fixed NPE on empty Authorization header.
new e83f7ff TOMEE-2365 - Added a Default Authentication Mechanism to
passthrough request to Servlet that don't require authentication.
new a465769 TOMEE-2365 - Test servlet without authentication.
new b485d4b TOMEE-2365 - Refactored tests to be more scalable.
new 0c8ec2b TOMEE-2365 - Additional tests to Basic Authentication.
new 200a84e TOMEE-2365 - Initial implementation and wiring of
FormAuthenticationMechanism.
new 6f8a939 TOMEE-2365 - Allow a generic authentication mechanism for the
entire app or specific ones per servlet.
new fe9fab6 TOMEE-2365 - Skeleton implementation for the
LoginToContinueInterceptor.
new f4b8c03 TOMEE-2365 - Added way to inject LoginToContinue when
required by the specific AuthenticationMechanism.
new 73f975b TOMEE-2365 - First step of FormAuthentication. Forward to
login page.
new f0c4fa7 TOMEE-2365 - Added HtmlUnit to test authentication form.
new 199b352 TOMEE-2365 - Save original request on first form login step.
new c5c8a3e TOMEE-2365 - Perform authentication on the second step of the
form.
new 6121de4 TOMEE-2365 - Actual implementation of the form authentication
validation.
new e635b26 TOMEE-2365 - Final step of form authentication. Retrieve
original request and authentication data and pass it to the original requested
resource.
new 0f046f5 TOMEE-2365 - Simplified test.
new ab0eb4c TOMEE-2365 - Removed unneeded methods.
new b4c85be TOMEE-2365 - Added AutoApplySession annotation to the API.
new 4294930 TOMEE-2365 - Implemented AutoApplySessionInterceptor.
new 99318c8 TOMEE-2365 - AutoApplySession to FormAuthentication to keep
session.
new 99d6f10 TOMEE-2365 - Values for layer and appContext.
new cbc6f42 TOMEE-2365 - Moved AbstractTomEESecurityTest to the base
package.
new 3281fa4 TOMEE-2365 - MessageInfo to pass AuthenticationParameters for
SecurityContext.
new e0eea23 TOMEE-2365 - Improved exception message on multiple
HttpAuthenticationMechanism.
new 8242f23 TOMEE-2365 - Default appContext to root when context path is
empty.
new 62431cf TOMEE-2365 - Fixed layer and appContextId with values used by
Tomcat.
new 38ebd25 TOMEE-2365 - Fixed tests.
The 48 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
tomee/pom.xml | 1 +
tomee/tomee-security/pom.xml | 74 +++++++
.../enterprise/AuthenticationException.java | 39 ++++
.../security/enterprise/AuthenticationStatus.java | 24 +++
.../javax/security/enterprise/CallerPrincipal.java | 35 ++++
.../mechanism/http/AuthenticationParameters.java | 68 ++++++
.../mechanism/http/AutoApplySession.java | 32 +++
.../BasicAuthenticationMechanismDefinition.java | 29 +++
...ustomFormAuthenticationMechanismDefinition.java | 31 +++
.../FormAuthenticationMechanismDefinition.java | 31 +++
.../http/HttpAuthenticationMechanism.java | 42 ++++
.../mechanism/http/HttpMessageContext.java | 77 +++++++
.../mechanism/http/HttpMessageContextWrapper.java | 159 ++++++++++++++
.../mechanism/http/LoginToContinue.java | 44 ++++
.../credential/AbstractClearableCredential.java | 39 ++++
.../credential/BasicAuthenticationCredential.java | 67 ++++++
.../security/enterprise/credential/Credential.java | 29 +++
.../security/enterprise/credential/Password.java | 56 +++++
.../credential/UsernamePasswordCredential.java | 54 +++++
.../identitystore/CredentialValidationResult.java | 119 +++++++++++
.../enterprise/identitystore/IdentityStore.java | 61 ++++++
.../identitystore/IdentityStoreHandler.java | 23 ++
.../security/cdi/AutoApplySessionInterceptor.java | 76 +++++++
.../security/cdi/BasicAuthenticationMechanism.java | 74 +++++++
.../cdi/DefaultAuthenticationMechanism.java | 68 ++++++
.../security/cdi/FormAuthenticationMechanism.java | 70 +++++++
.../security/cdi/LoginToContinueInterceptor.java | 169 +++++++++++++++
.../tomee/security/cdi/TomEESecurityExtension.java | 139 ++++++++++++
...curityServletAuthenticationMechanismMapper.java | 88 ++++++++
.../security/http/LoginToContinueMechanism.java | 144 +++++++++++++
.../tomee/security/http/SavedAuthentication.java | 41 ++++
.../security/http/SavedHttpServletRequest.java | 34 +++
.../apache/tomee/security/http/SavedRequest.java | 178 ++++++++++++++++
.../security/http/TomEEHttpMessageContext.java | 232 +++++++++++++++++++++
.../identitystore/TomEEDefaultIdentityStore.java | 71 +++++++
.../identitystore/TomEEIdentityStoreHandler.java | 103 +++++++++
.../tomee/security/message/TomEEMessageInfo.java | 41 ++++
.../provider/TomEESecurityAuthConfigProvider.java | 44 ++++
.../provider/TomEESecurityServerAuthConfig.java | 69 ++++++
.../provider/TomEESecurityServerAuthContext.java | 52 +++++
.../provider/TomEESecurityServerAuthModule.java | 109 ++++++++++
.../TomEESecurityServletContainerInitializer.java | 43 ++++
.../services/javax.enterprise.inject.spi.Extension | 33 +++
.../javax.servlet.ServletContainerInitializer | 17 ++
.../tomee/security/AbstractTomEESecurityTest.java | 48 +++++
.../tomee/security/client/BasicAuthFilter.java | 41 ++++
.../security/servlet/BasicAuthServletTest.java | 92 ++++++++
.../security/servlet/FormAuthServletTest.java | 107 ++++++++++
.../tomee/security/servlet/SimpleServletTest.java | 53 +++++
.../src/test}/resources/META-INF/beans.xml | 0
.../src/test/resources/conf/server.xml | 166 +++++++++++++++
.../src/test/resources/conf/tomcat-users.xml | 20 ++
52 files changed, 3556 insertions(+)
create mode 100644 tomee/tomee-security/pom.xml
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/AuthenticationException.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/AuthenticationStatus.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/CallerPrincipal.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/authentication/mechanism/http/AuthenticationParameters.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/authentication/mechanism/http/AutoApplySession.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/authentication/mechanism/http/BasicAuthenticationMechanismDefinition.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/authentication/mechanism/http/CustomFormAuthenticationMechanismDefinition.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/authentication/mechanism/http/FormAuthenticationMechanismDefinition.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/authentication/mechanism/http/HttpAuthenticationMechanism.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/authentication/mechanism/http/HttpMessageContext.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/authentication/mechanism/http/HttpMessageContextWrapper.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/authentication/mechanism/http/LoginToContinue.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/credential/AbstractClearableCredential.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/credential/BasicAuthenticationCredential.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/credential/Credential.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/credential/Password.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/credential/UsernamePasswordCredential.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/identitystore/CredentialValidationResult.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/identitystore/IdentityStore.java
create mode 100644
tomee/tomee-security/src/main/java/javax/security/enterprise/identitystore/IdentityStoreHandler.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/cdi/AutoApplySessionInterceptor.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/cdi/BasicAuthenticationMechanism.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/cdi/DefaultAuthenticationMechanism.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/cdi/FormAuthenticationMechanism.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/cdi/LoginToContinueInterceptor.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/cdi/TomEESecurityExtension.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/cdi/TomEESecurityServletAuthenticationMechanismMapper.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/http/LoginToContinueMechanism.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/http/SavedAuthentication.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/http/SavedHttpServletRequest.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/http/SavedRequest.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/http/TomEEHttpMessageContext.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/identitystore/TomEEDefaultIdentityStore.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/identitystore/TomEEIdentityStoreHandler.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/message/TomEEMessageInfo.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/provider/TomEESecurityAuthConfigProvider.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/provider/TomEESecurityServerAuthConfig.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/provider/TomEESecurityServerAuthContext.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/provider/TomEESecurityServerAuthModule.java
create mode 100644
tomee/tomee-security/src/main/java/org/apache/tomee/security/servlet/TomEESecurityServletContainerInitializer.java
create mode 100644
tomee/tomee-security/src/main/resources/META-INF/services/javax.enterprise.inject.spi.Extension
create mode 100644
tomee/tomee-security/src/main/resources/META-INF/services/javax.servlet.ServletContainerInitializer
create mode 100644
tomee/tomee-security/src/test/java/org/apache/tomee/security/AbstractTomEESecurityTest.java
create mode 100644
tomee/tomee-security/src/test/java/org/apache/tomee/security/client/BasicAuthFilter.java
create mode 100644
tomee/tomee-security/src/test/java/org/apache/tomee/security/servlet/BasicAuthServletTest.java
create mode 100644
tomee/tomee-security/src/test/java/org/apache/tomee/security/servlet/FormAuthServletTest.java
create mode 100644
tomee/tomee-security/src/test/java/org/apache/tomee/security/servlet/SimpleServletTest.java
copy {examples/mp-config-example/src/main =>
tomee/tomee-security/src/test}/resources/META-INF/beans.xml (100%)
create mode 100644 tomee/tomee-security/src/test/resources/conf/server.xml
create mode 100644
tomee/tomee-security/src/test/resources/conf/tomcat-users.xml
