[maven-release-plugin] prepare release redback-2.6.2

fix git url

Signed-off-by: Olivier Lamy <olamy@apache.org>

Bump actions/setup-java from 3.1.1 to 3.2.0 (#40)

Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3.1.1 to 3.2.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3.1.1...v3.2.0)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

cleanup

Signed-off-by: Olivier Lamy <olamy@apache.org>

not needed

Signed-off-by: Olivier Lamy <olamy@apache.org>

default 2 threads

Signed-off-by: Olivier Lamy <olamy@apache.org>

reduce size of waht we store

Signed-off-by: Olivier Lamy <olamy@apache.org>

fix name

Signed-off-by: Olivier Lamy <olamy@apache.org>

use config for 2.6.x branch

Signed-off-by: Olivier Lamy <olamy@apache.org>

cleanup not needed reports (#39)

Signed-off-by: Olivier Lamy <olamy@apache.org>

fix name

Signed-off-by: Olivier Lamy <olamy@apache.org>

test filtering commit

Signed-off-by: Olivier Lamy <olamy@apache.org>

force to branch

Signed-off-by: Olivier Lamy <olamy@apache.org>

will fix first build of PRs

Signed-off-by: Olivier Lamy <olamy@apache.org>

Bump actions/setup-java from 3.1.0 to 3.1.1

Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3.1.0...v3.1.1)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

use only maven central for dependabot

Signed-off-by: Olivier Lamy <olamy@apache.org>

use only maven central for dependabot

Signed-off-by: Olivier Lamy <olamy@apache.org>

ensure user update has correct permissions

Signed-off-by: Olivier Lamy <olamy@apache.org>

Bump actions/checkout from 2 to 3

Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump actions/setup-java from 2.3.1 to 3.1.0

Bumps [actions/setup-java](https://github.com/actions/setup-java) from 2.3.1 to 3.1.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v2.3.1...v3.1.0)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

fix branches

Signed-off-by: Olivier Lamy <olamy@apache.org>

should run for branch as well

Signed-off-by: Olivier Lamy <olamy@apache.org>

get rid of travis

Signed-off-by: Olivier Lamy <olamy@apache.org>

test gh action

Signed-off-by: Olivier Lamy <olamy@apache.org>

[MRM-2029] Updating log4j2 for redback

Switching to log4j2 2.17.0 and updating slf4j version

Switching to log4j2 2.16.0

Switching to new log4j2 version

Fixing JDK and maven labels for build

[maven-release-plugin] prepare for next development iteration

[maven-release-plugin] prepare release redback-2.6.1

Improving LDAP filters by escaping characters

Adding parameter for threads to jenkins file

Fix of Jenkinsfile

Update of Jenkinsfile

Updating jenkins build file

[MRM-2008] Fix for group names with slashes

Changing the group name retrieval to attribute read. Using CompositeName and
LdapName to retrieve the result. Slashes are treated special in JNDI.

Switching to SNAPSHOT version 2.6.1-SNAPSHOT

[maven-release-plugin] prepare release redback-2.6

Preparing new release 2.6

Fixing X-Forwarded-Host header handling

formatting

Signed-off-by: olivier lamy <olamy@apache.org>

add some logs

Signed-off-by: olivier lamy <olamy@apache.org>

Changing to list based request validation configuration

last parent snapshot

Signed-off-by: olivier lamy <olamy@apache.org>

a bit more details for debug

Signed-off-by: olivier lamy <olamy@apache.org>

exclude Jenkinsfile from rat

Signed-off-by: olivier lamy <olamy@apache.org>

display maven error

Signed-off-by: olivier lamy <olamy@apache.org>

add simple Jenkinsfile

Signed-off-by: olivier lamy <olamy@apache.org>

[maven-release-plugin] prepare for next development iteration

[maven-release-plugin] prepare release redback-2.5

Changing to new parent pom version 17

[MRM-1937] Prevent creation of wrong initial admin

Throws a error, if the admin user has the wrong name.

Adding some information about redback configuration settings

Fixing tests for rest services

Fixing bad import

Adding token validation to interceptor

Adding log statements

Adding validationToken to toString method

Using random iv vector to generate unique tokens for each login

Adding validation token generator got login

Adding port check for Referer header

Implementing Header verification for REST API calls

Implementing header verification techniques mentioned in:
https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet#Verifying_Same_Origin_with_Standard_Headers

Fixing validation error in unit tests

Adding flag for authenticator to avoid autowiring exceptions

Adds a isValid() method to the authenticator to avoid exceptions during
initialization.

Use NamingManager instead of LdapCtxFactory

Fixes deprecation warnings on LdapCtxFactory

unused imports

Signed-off-by: olivier lamy <olamy@apache.org>

use last parent snapshot

Signed-off-by: olivier lamy <olamy@apache.org>

Merge branch 'pr/10'
[MRM-1923] merge pr

Merge branch 'pr/9'
closed #9
[MRM-1908] Logged on users can write any repository

Merge branch 'pr/7'
close #7

Merge branch 'pr/6' #6
close #6

Fixing bind issue with certain ldap servers, when user not found

Subsequent calls of NamingResult#hasMoreElements returns different values in some
environments and situations.
e.g. it occured on IBM JDK 7 with Windows Active Directory LDAP when the first value of 'hasMoreElements'
was false.
The first value is cached now.

Adding parameter references in authorization resource

In certain cases the resource must be dynamically set by parameter values.
This patch allows to add a reference into the resource field of the redback
annotation '{parameterName}' that fills the resource of the permission dynamically
with the parameter value, if found.

Beautify case of default ldap group attribute

More of a style issue, since attribute descriptions are case insensitive
according to RFC4512.

Ignore Netbeans artifacts

change target back to 1.6

[MRM-1827] Redback core fail with jdk 1.7 (compiler target 1.7) use new bcel 6.0

[maven-release-plugin] prepare for next development iteration

[maven-release-plugin] prepare release redback-2.4

fix javadoc error

Signed-off-by: olivier lamy <olamy@apache.org>

use staged released parent pom

Signed-off-by: olivier lamy <olamy@apache.org>

change style and template to have a kind of enunciate 1.x style that we can use

Fixed issue with syntax for filter

Allowing filtering of LDAP groups

disable travis build with 1.8 as does not work

last parent with bundle plugin last version

rat ignore travis file

add travis file

slf4j upgrade

upgrade spring version

Fix for MRM-1873 which broke AD group assignments

Escaping only needed in the LDAP filter string

last spring 4.1.6

log4j2 2.3

[maven-release-plugin] prepare for next development iteration

[maven-release-plugin] prepare release redback-2.3

use staged release

fix MRM-1873

plugin version inherited from parent(

Escape user DN used to build group filter. Fixes MRM-1873