[Project] Added <allowSessionRefresh> to PrivilegeConfig.xml

This commit is contained in:
Robert von Burg 2020-06-05 15:42:47 +02:00
parent 41b3cd137d
commit 87bdc26380
4 changed files with 144 additions and 138 deletions

View File

@ -8,26 +8,27 @@
<Parameter name="secretKey" value="CHANGE-ME-1"/> <Parameter name="secretKey" value="CHANGE-ME-1"/>
<Parameter name="secretSalt" value="CHANGE-ME-2"/> <Parameter name="secretSalt" value="CHANGE-ME-2"/>
<Parameter name="persistSessions" value="true"/> <Parameter name="persistSessions" value="true"/>
<Parameter name="autoPersistOnUserChangesData" value="false"/> <Parameter name="autoPersistOnUserChangesData" value="true"/>
<Parameter name="privilegeConflictResolution" value="MERGE"/> <Parameter name="privilegeConflictResolution" value="MERGE"/>
<Parameter name="allowSessionRefresh" value="true"/>
</Parameters> </Parameters>
<EncryptionHandler class="li.strolch.privilege.handler.DefaultEncryptionHandler"> <EncryptionHandler class="li.strolch.privilege.handler.DefaultEncryptionHandler">
<Parameters> <Parameters>
<!-- WARNING: If you change iterations or keyLength, then all passwords are invalid --> <!-- WARNING: If you change iterations or keyLength, then all passwords are invalid -->
<!-- default algorithm is: PBKDF2WithHmacSHA512 --> <!-- default algorithm is: PBKDF2WithHmacSHA512 -->
<Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512" /> <Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512"/>
<!-- default iterations: 200000 --> <!-- default iterations: 200000 -->
<Parameter name="hashIterations" value="10000" /> <Parameter name="hashIterations" value="10000"/>
<!-- default key length: 256 --> <!-- default key length: 256 -->
<Parameter name="hashKeyLength" value="256" /> <Parameter name="hashKeyLength" value="256"/>
</Parameters> </Parameters>
</EncryptionHandler> </EncryptionHandler>
<PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler"> <PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler">
<Parameters> <Parameters>
<Parameter name="usersXmlFile" value="PrivilegeUsers.xml" /> <Parameter name="usersXmlFile" value="PrivilegeUsers.xml"/>
<Parameter name="rolesXmlFile" value="PrivilegeRoles.xml" /> <Parameter name="rolesXmlFile" value="PrivilegeRoles.xml"/>
</Parameters> </Parameters>
</PersistenceHandler> </PersistenceHandler>
@ -38,7 +39,7 @@
<Policies> <Policies>
<Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege"/> <Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege"/>
<Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege" /> <Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege"/>
<Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege"/> <Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege"/>
<Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege"/> <Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege"/>
<Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/> <Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/>

View File

@ -5,27 +5,29 @@
<Parameters> <Parameters>
<!-- parameters for the container itself --> <!-- parameters for the container itself -->
<Parameter name="secretKey" value="test-secret"/> <Parameter name="secretKey" value="CHANGE-ME-1"/>
<Parameter name="secretSalt" value="test-secret"/> <Parameter name="secretSalt" value="CHANGE-ME-2"/>
<Parameter name="autoPersistOnUserChangesData" value="true" /> <Parameter name="persistSessions" value="true"/>
<Parameter name="autoPersistOnUserChangesData" value="true"/>
<Parameter name="privilegeConflictResolution" value="MERGE"/>
</Parameters> </Parameters>
<EncryptionHandler class="li.strolch.privilege.handler.DefaultEncryptionHandler"> <EncryptionHandler class="li.strolch.privilege.handler.DefaultEncryptionHandler">
<Parameters> <Parameters>
<!-- WARNING: If you change iterations or keyLength, then all passwords are invalid --> <!-- WARNING: If you change iterations or keyLength, then all passwords are invalid -->
<!-- default algorithm is: PBKDF2WithHmacSHA512 --> <!-- default algorithm is: PBKDF2WithHmacSHA512 -->
<Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512" /> <Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512"/>
<!-- default iterations: 200000 --> <!-- default iterations: 200000 -->
<Parameter name="hashIterations" value="10000" /> <Parameter name="hashIterations" value="10000"/>
<!-- default key length: 256 --> <!-- default key length: 256 -->
<Parameter name="hashKeyLength" value="256" /> <Parameter name="hashKeyLength" value="256"/>
</Parameters> </Parameters>
</EncryptionHandler> </EncryptionHandler>
<PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler"> <PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler">
<Parameters> <Parameters>
<Parameter name="usersXmlFile" value="PrivilegeUsers.xml" /> <Parameter name="usersXmlFile" value="PrivilegeUsers.xml"/>
<Parameter name="rolesXmlFile" value="PrivilegeRoles.xml" /> <Parameter name="rolesXmlFile" value="PrivilegeRoles.xml"/>
</Parameters> </Parameters>
</PersistenceHandler> </PersistenceHandler>
@ -35,10 +37,10 @@
</Container> </Container>
<Policies> <Policies>
<Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege" /> <Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege"/>
<Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege" /> <Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege"/>
<Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege" /> <Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege"/>
<Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege" /> <Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege"/>
<Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/> <Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/>
</Policies> </Policies>

View File

@ -17,18 +17,18 @@
<Parameters> <Parameters>
<!-- WARNING: If you change iterations or keyLength, then all passwords are invalid --> <!-- WARNING: If you change iterations or keyLength, then all passwords are invalid -->
<!-- default algorithm is: PBKDF2WithHmacSHA512 --> <!-- default algorithm is: PBKDF2WithHmacSHA512 -->
<Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512" /> <Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512"/>
<!-- default iterations: 200000 --> <!-- default iterations: 200000 -->
<Parameter name="hashIterations" value="10000" /> <Parameter name="hashIterations" value="10000"/>
<!-- default key length: 256 --> <!-- default key length: 256 -->
<Parameter name="hashKeyLength" value="256" /> <Parameter name="hashKeyLength" value="256"/>
</Parameters> </Parameters>
</EncryptionHandler> </EncryptionHandler>
<PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler"> <PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler">
<Parameters> <Parameters>
<Parameter name="usersXmlFile" value="PrivilegeUsers.xml" /> <Parameter name="usersXmlFile" value="PrivilegeUsers.xml"/>
<Parameter name="rolesXmlFile" value="PrivilegeRoles.xml" /> <Parameter name="rolesXmlFile" value="PrivilegeRoles.xml"/>
</Parameters> </Parameters>
</PersistenceHandler> </PersistenceHandler>
@ -39,7 +39,7 @@
<Policies> <Policies>
<Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege"/> <Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege"/>
<Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege" /> <Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege"/>
<Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege"/> <Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege"/>
<Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege"/> <Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege"/>
<Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/> <Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/>

View File

@ -5,27 +5,30 @@
<Parameters> <Parameters>
<!-- parameters for the container itself --> <!-- parameters for the container itself -->
<Parameter name="secretKey" value="test-secret"/> <Parameter name="secretKey" value="CHANGE-ME-1"/>
<Parameter name="secretSalt" value="test-secret"/> <Parameter name="secretSalt" value="CHANGE-ME-2"/>
<Parameter name="autoPersistOnUserChangesData" value="true" /> <Parameter name="persistSessions" value="true"/>
<Parameter name="autoPersistOnUserChangesData" value="true"/>
<Parameter name="privilegeConflictResolution" value="MERGE"/>
<Parameter name="allowSessionRefresh" value="true"/>
</Parameters> </Parameters>
<EncryptionHandler class="li.strolch.privilege.handler.DefaultEncryptionHandler"> <EncryptionHandler class="li.strolch.privilege.handler.DefaultEncryptionHandler">
<Parameters> <Parameters>
<!-- WARNING: If you change iterations or keyLength, then all passwords are invalid --> <!-- WARNING: If you change iterations or keyLength, then all passwords are invalid -->
<!-- default algorithm is: PBKDF2WithHmacSHA512 --> <!-- default algorithm is: PBKDF2WithHmacSHA512 -->
<Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512" /> <Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512"/>
<!-- default iterations: 200000 --> <!-- default iterations: 200000 -->
<Parameter name="hashIterations" value="10000" /> <Parameter name="hashIterations" value="10000"/>
<!-- default key length: 256 --> <!-- default key length: 256 -->
<Parameter name="hashKeyLength" value="256" /> <Parameter name="hashKeyLength" value="256"/>
</Parameters> </Parameters>
</EncryptionHandler> </EncryptionHandler>
<PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler"> <PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler">
<Parameters> <Parameters>
<Parameter name="usersXmlFile" value="PrivilegeUsers.xml" /> <Parameter name="usersXmlFile" value="PrivilegeUsers.xml"/>
<Parameter name="rolesXmlFile" value="PrivilegeRoles.xml" /> <Parameter name="rolesXmlFile" value="PrivilegeRoles.xml"/>
</Parameters> </Parameters>
</PersistenceHandler> </PersistenceHandler>
@ -35,10 +38,10 @@
</Container> </Container>
<Policies> <Policies>
<Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege" /> <Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege"/>
<Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege" /> <Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege"/>
<Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege" /> <Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege"/>
<Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege" /> <Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege"/>
<Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/> <Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/>
</Policies> </Policies>