- updated CAS dependency to
3.6.0
- updated Hazelcast dependency to version
3.5.1
- refactored
metadata-populators
parsing code intoAbstractDefaultAuthenticationManagerBeanDefinitionParser
- added
metadata-populators
attribute to authentication-manager-with-bind-ldap-handler custom XML schema element - added
metadata-populators
attribute toauthentication-manager-with-accept-users-handler
custom XML schema element - added
attribute-repository-for-principal-resolver
attribute todefault-test-authentication-manager
custom XML schema element - added
id
attribute tohazelcast-ticket-registry
custom XML schema element
- added TGT id to exposed CAS SSO events (via AbstractCasSsoEvent)
- updated Hazelcast dependency to version
3.4.1
- updated Hazelcast dependency to version
3.4
- updated CAS dependency to
3.5.3
- updated Shiro dependency to
1.2.3
- updated Junit dependency to
4.12
- updated Spring dependency to
3.2.13.RELEASE
- updated Groovy dependency to
2.4.0
- updated Slf4j dependency to
1.7.10
- updated joda-time dependency to
2.7
- updated jedis dependency to
2.6.2
- updated spring-data-redis dependency to
1.4.2.RELEASE
- updated spring-data-mongodb dependency to
1.6.2.RELEASE
- updated Hazelcast dependency to version
3.2.5
- updated Hazelcast dependency to version
3.2.4
- updated CAS dependency to
3.5.2.1
- updated Hazelcast dependency to version
3.1.6
- exposed
LdapContextSource
bean in Spring application context via newexpose-context-source-bean-as
attribute inauthentication-manager-with-bind-ldap-handler
andbind-ldap-authentication-handler
custom schema elements - added explicit
attribute-repository-for-principal-resolver
along with parser implementation toauthentication-manager-with-bind-ldap-handler
andauthentication-manager-with-accept-users-handler
- fixed issue with MongoServiceRegistryDao
to recognize registered services with id of
-1
- added RedisStatsRecorderForSsoSessionEstablishedEvents
- added RedisStatsRecorderForServiceTicketValidatedEvents
- added custom XML schema element (
events-redis-recorder
)BeanDefinitionParser
implementation forRedisStatsRecorderForSsoSessionEstablishedEvents
andRedisStatsRecorderForServiceTicketValidatedEvents
- added CasLoginViewSelector
- added RequestPararameterCasLoginViewSelector
- added CompositeTicketGrantingTicketExpirationPolicy
- added TicketExpirationPolicyEvaluator
- added IpAddressBasedExpirationPolicyEvaluator
- added HazelcastTicketRegistry
- added custom XML schema element (
hazelcast-ticket-registry
)BeanDefinitionParser
implementation forHazelcastTicketRegistry
- added URL-based resources support for JSON services registry
- added ServiceRedirectionAdvisor
- added ServiceRedirectionAction
- added InMemoryServiceRedirectionByClientIpAddressAdvisor
- added custom XML schema element (
service-redirection-action
)BeanDefinitionParser
implementation forServiceRedirectionAction
- added custom XML schema element (
request-param-login-view-selector
)BeanDefinitionParser
implementation forRequestPararameterCasLoginViewSelector
- moved
net.unicon.cas.addons.web.support.view.saml
components over tonet.unicon.cas.addons.response.view.saml
- fixed issue with ReadWriteJsonServiceRegistryDao
where service definitions were assigned a
-1
identifier automatically. - fixed issue with ReadWriteJsonServiceRegistryDao where updates to an existing service resulted into duplicate service definitions
- modified ReadWriteJsonServiceRegistryDao to not persist service attributes with empty values.
- removed
ReloadableServicesManagerSuppressionAspect
- added RegisteredServicesReloadDisablingBeanFactoryPostProcessor
- refactored bean definition parser impl for
disable-default-registered-services-reloading
element to useRegisteredServicesReloadDisablingBeanFactoryPostProcessor
instead ofReloadableServicesManagerSuppressionAspect
- bumped up dependencies versions
- added TimingAspectRemovingBeanFactoryPostProcessor
- added custom XML schema element (
disable-perf4j-timing-aspect
)BeanDefinitionParser
implementation forTimingAspectRemovingBeanFactoryPostProcessor
- added HostNameBasedUniqueTicketIdGenerator
- added NamedStubPersonAttributeDao
- refactored
CasNamespaceHandler#DefaultTestAuthenticationManagerBeanDefinitionParser
to extend reusable abstract class for creation of defaultAuthenticationManagerImpl
and its default components - added
CasNamespaceHandler#AuthenticationManagerWithAcceptUsersHandlerBeanDefinitionParser
- added
CasNamespaceHandler#AuthenticationManagerWithBindLdapHandlerBeanDefinitionParser
- refactored
CasNamespaceHandler#AuthenticationManagerWithStormpathHandlerBeanDefinitionParser
to extend AbstractDefaultAuthenticationManagerBeanDefinitionParser for reuse - refactored default value for
config-file
attribute ofjson-services-registry
element to${service.registry.config.location:file:/etc/cas/servicesRegistry.conf}
- refactored default value for
config-file
attribute ofjson-attribute-repository
element to${attribute.repository.config.location:file:/etc/cas/person-attributes.conf}
- added Saml10SuccessResponseView
- removed verification of Ant patterns from the JsonServiceRegistryDao
- fixed ServiceAuthorizationAction crash when the service registry is configured against an empty service registry
- added custom XML schema element
BeanDefinitionParser
implementation forYubiKeyAuthenticationHandler
- added
metadata-populators
attribute tocas:default-test-authentication-manager
element and refactored the corresponding BeanDefinitionParser implementation - added custom XML schema element
BeanDefinitionParser
implementation forAcceptUsersAuthenticationHandler
- added custom XML schema element
BeanDefinitionParser
implementation forBindLdapAuthenticationHandler
- added ReadWriteJsonServiceRegistryDao
- added
read-write
boolean attribute tojson-services-registry
element to indicate the type of registry being created
- added logic to ServiceAuthorizationAction to allow services without RBAC rules to use CAS
- renamed default Yubikey account registry to reflect its accept-any behavior
- added more explicit JavaDoc about how completely not okay it is to accept the default Yubikey account registry in production
- added warning log message on YubiKeyAuthenticationHandler instantiation with unsafe default config of Yubikey account registry
- added flag to
ReloadableServicesManagerSuppressionAspect
to make decisions whether to suppress target calls or not at runtime (suppression is off by default) - added the ability to
turn on
ReloadableServicesManagerSuppressionAspect's reloading suppression by means of custom<cas:disable-default-registered-services-reloading/>
Spring bean element
- fixed bug resolving default
servicesManager
bean in the implementation ofnet.unicon.cas.addons.config.CasNamespaceHandler#ServiceAuthorizationActionBeanDefinitionParser
- updated CAS dependency to 3.5.2 General Availability
- refactored StormpathPrincipal not to store a reference to Stormpath SDK Account instances as they are not Serialiazble thus preventing it to be stored in EhCacheTicketRegistry
- updated Jackson dependency to 2.2.0
- updated Jersey dependency to 1.17
- added RegisteredServiceAuthorizer
- added DefaultRegisteredServiceAuthorizer
- added RoleBasedServiceAuthorizationException
- added ServiceAuthorizationAction
- added ServiceValidateFailureJsonView
- added YubiKeyAuthenticationHandler
- upgraded Stormpath Java SDK dependency to 0.7.0
- added StormpathPrincipal
- added StormpathPrincipalResolver
- added Stormpath related custom XML schema types and parsers
- renamed
cas-addons-1.3.xsd
tocas-addons.xsd
- added RegisteredServicesPolicies
- added DefaultRegisteredServicesPolicies
- added ServiceInitiatingWebSsoAwareCookieGenerator
- added SsoDestroyingServiceValidateController
- removed CAS client related classes and moved them to a sister cas-java-clients-addons project
- added gmaven plugin to the pom in order for Spock tests to run during the maven build
- updated pom dependecies to the latest versions (where available)
- added Assertions
- added ClearpassRetrievingCasAuthenticationProvider
- added CentralAuthenticationServiceEventsPublishingAspect
- refactored unauthorized service view attribute
unauthorizedUrl
->disabledServiceUrl
- removed tgt_id from Single SignOn Sessions Report
- added TicketSupport
- added SingleSignOnSessionsReport
- added SingleSignOnSessionsReportResource
- updated Jackson library dependency to 2.1.0
- added MongoServiceRegistryDao
- added the info package
- updated CAS dependency to 3.5.1 General Availability
- updated CAS dependency to 3.5.1-RC1
- fixed bug preventing real-time reloading of JSON-based configured registered services
- updated JASIG's Person Directory Service to 1.5.1
- refactored
StormpathBasicAuthenticationHandler -> StormpathAuthenticationHandler
to use Stormpath's Java SDK instead of a low level REST API
- added ReloadableServicesManagerSuppressionAspect
- refactored JsonServiceRegistryDao to support real time reloading using resource change notify/listen framework
- added ThreadSafe
- added NotThreadSafe
- added GuardedBy
- added Immutable
- added StormpathBasicAuthenticationHandler
- refactored JsonServiceRegistryDao as a 'raw' Java class instead of a Groovy one
- added EmailAddressToPrincipalNameTransformer
- added EmailAddressPasswordCredentialsToPrincipalResolver
- added ServiceValidateSuccessJsonView
- added Cas20ServiceTicketJsonValidationFilter
- added Cas20ServiceTicketJsonValidator
- upgraded Groovy dependency to 2.0.0
- upgraded Jackson dependency to 2.0.4
- upgraded CAS server dependency to 3.5.0
- added RegexRegisteredServiceWithAttributes
- added support for RegexRegisteredServiceWithAttributes in JsonServiceRegistryDao
- added AdditionalAuthenticationFactorPolicy
- added TotpOathDetailsSource
- added TOTP
- added TOTPUtils
- added TotpAuthenticationHandler
- added PasswordExpirationStatusPolicySupport
- upgraded CAS dependency to 3.5.0-RC2
- added groovy-eclipse-compiler to maven-compiler-plugin so that JsonServiceRegistryDao.groovy is compiled into native Java class during build time an so could be used as a regular Spring bean without requireing dynamic Groovy class loading at runtime