Resolve "2FA enabling for LabraCORE" (!9) · Merge requests · EIP / Labrador / LabraCORE

May 08, 2020
- Add names to maven repositories in build.gradle.kts · 4f51dedb
  Chris Lemaire authored May 8, 2020
  
  4f51dedb
- Revert changes to application.yml and regen tables · c36502f6
  Chris Lemaire authored May 8, 2020
  
  c36502f6
- Add a logback configuration against CRLF injections · 6bb46474
  Chris Lemaire authored May 8, 2020
  
  6bb46474
- Fix various security warnings · c6bc8e89
  Chris Lemaire authored May 8, 2020
  
  Possible XSS injection in APIAuthenticationEntryPoint, possible hash comparison in AuthTokenExtractor, etc.
  c6bc8e89
- Fix tests and add to testing setup for TOTP keys · 43cec6a3
  Chris Lemaire authored May 7, 2020
  
  43cec6a3
- Add jitpack repository to Pom generation · 54b87d89
  Chris Lemaire authored May 6, 2020
  
  54b87d89
- Add endpoint for confirming the existence of a key · 589a6522
  Chris Lemaire authored May 5, 2020
  
  589a6522
- Add jdoc for TOTP classes and test for embedded 2FA · 97f653a7
  Chris Lemaire authored May 5, 2020
  
  The test for embedding 2FA is to check that Hibernate does indeed relate back an embedded data object with the right embedder (Person in our case). Adds test data to DevDatabaseLoader for development. Removes the UUID field from Person as it is to be replaced by ID and external ID for each their own purposes.
  97f653a7
May 07, 2020

Rename Api to API · 7e5c2f85
Chris Lemaire authored May 1, 2020

7e5c2f85

Uppercase abbreviations and add intermediate 2FA · e160d1ed

Chris Lemaire authored May 1, 2020

Intermediate 2FA embedded class is added for future expansion.
If we want to add HOTP keys for a Person, this can be added in the
2FA object for that Person. This saves us some managing within the
Person class and keeps 2FA related operations separate from the Person
information related operations.

Totp was preferred to be TOTP.
In a future commit we will also change Api to API.

e160d1ed

Add TOTP through controller endpoints · 9efcafd6

Chris Lemaire authored May 1, 2020

- TotpKey is used to represent a user's TotpKey in the database.
  This key is linked to the Person that registered it.
- A TotpKeyRepository is added for getting TotpKeys and saving them.
- The TotpController and TotpService provide the methods for controlling
  endpoints and data regarding TOTP authentication.

9efcafd6

Reorganize API Key packages and remove filter · 29559ca1

Chris Lemaire authored May 1, 2020

Originally, a custom filter was used to process API-keyed requests.
Now a custom WebAuthenticationDetails object and Spring-provided
header-authentication methods are used to authenticate.

29559ca1

Resolve "2FA enabling for LabraCORE"

Merge request reports

Activity