[Project] Added <allowSessionRefresh> to PrivilegeConfig.xml

This commit is contained in:
Robert von Burg 2020-06-05 15:42:47 +02:00
parent 41b3cd137d
commit 87bdc26380
4 changed files with 144 additions and 138 deletions

View File

@ -1,47 +1,48 @@
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<Privilege> <Privilege>
<Container> <Container>
<Parameters> <Parameters>
<!-- parameters for the container itself --> <!-- parameters for the container itself -->
<Parameter name="secretKey" value="CHANGE-ME-1"/> <Parameter name="secretKey" value="CHANGE-ME-1"/>
<Parameter name="secretSalt" value="CHANGE-ME-2"/> <Parameter name="secretSalt" value="CHANGE-ME-2"/>
<Parameter name="persistSessions" value="true"/> <Parameter name="persistSessions" value="true"/>
<Parameter name="autoPersistOnUserChangesData" value="false"/> <Parameter name="autoPersistOnUserChangesData" value="true"/>
<Parameter name="privilegeConflictResolution" value="MERGE"/> <Parameter name="privilegeConflictResolution" value="MERGE"/>
</Parameters> <Parameter name="allowSessionRefresh" value="true"/>
</Parameters>
<EncryptionHandler class="li.strolch.privilege.handler.DefaultEncryptionHandler"> <EncryptionHandler class="li.strolch.privilege.handler.DefaultEncryptionHandler">
<Parameters> <Parameters>
<!-- WARNING: If you change iterations or keyLength, then all passwords are invalid --> <!-- WARNING: If you change iterations or keyLength, then all passwords are invalid -->
<!-- default algorithm is: PBKDF2WithHmacSHA512 --> <!-- default algorithm is: PBKDF2WithHmacSHA512 -->
<Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512" /> <Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512"/>
<!-- default iterations: 200000 --> <!-- default iterations: 200000 -->
<Parameter name="hashIterations" value="10000" /> <Parameter name="hashIterations" value="10000"/>
<!-- default key length: 256 --> <!-- default key length: 256 -->
<Parameter name="hashKeyLength" value="256" /> <Parameter name="hashKeyLength" value="256"/>
</Parameters> </Parameters>
</EncryptionHandler> </EncryptionHandler>
<PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler"> <PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler">
<Parameters> <Parameters>
<Parameter name="usersXmlFile" value="PrivilegeUsers.xml" /> <Parameter name="usersXmlFile" value="PrivilegeUsers.xml"/>
<Parameter name="rolesXmlFile" value="PrivilegeRoles.xml" /> <Parameter name="rolesXmlFile" value="PrivilegeRoles.xml"/>
</Parameters> </Parameters>
</PersistenceHandler> </PersistenceHandler>
<UserChallengeHandler class="li.strolch.privilege.handler.ConsoleUserChallengeHandler"> <UserChallengeHandler class="li.strolch.privilege.handler.ConsoleUserChallengeHandler">
</UserChallengeHandler> </UserChallengeHandler>
</Container> </Container>
<Policies> <Policies>
<Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege"/> <Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege"/>
<Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege" /> <Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege"/>
<Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege"/> <Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege"/>
<Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege"/> <Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege"/>
<Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/> <Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/>
</Policies> </Policies>
</Privilege> </Privilege>

View File

@ -1,45 +1,47 @@
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<Privilege> <Privilege>
<Container> <Container>
<Parameters> <Parameters>
<!-- parameters for the container itself --> <!-- parameters for the container itself -->
<Parameter name="secretKey" value="test-secret"/> <Parameter name="secretKey" value="CHANGE-ME-1"/>
<Parameter name="secretSalt" value="test-secret"/> <Parameter name="secretSalt" value="CHANGE-ME-2"/>
<Parameter name="autoPersistOnUserChangesData" value="true" /> <Parameter name="persistSessions" value="true"/>
</Parameters> <Parameter name="autoPersistOnUserChangesData" value="true"/>
<Parameter name="privilegeConflictResolution" value="MERGE"/>
</Parameters>
<EncryptionHandler class="li.strolch.privilege.handler.DefaultEncryptionHandler"> <EncryptionHandler class="li.strolch.privilege.handler.DefaultEncryptionHandler">
<Parameters> <Parameters>
<!-- WARNING: If you change iterations or keyLength, then all passwords are invalid --> <!-- WARNING: If you change iterations or keyLength, then all passwords are invalid -->
<!-- default algorithm is: PBKDF2WithHmacSHA512 --> <!-- default algorithm is: PBKDF2WithHmacSHA512 -->
<Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512" /> <Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512"/>
<!-- default iterations: 200000 --> <!-- default iterations: 200000 -->
<Parameter name="hashIterations" value="10000" /> <Parameter name="hashIterations" value="10000"/>
<!-- default key length: 256 --> <!-- default key length: 256 -->
<Parameter name="hashKeyLength" value="256" /> <Parameter name="hashKeyLength" value="256"/>
</Parameters> </Parameters>
</EncryptionHandler> </EncryptionHandler>
<PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler"> <PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler">
<Parameters> <Parameters>
<Parameter name="usersXmlFile" value="PrivilegeUsers.xml" /> <Parameter name="usersXmlFile" value="PrivilegeUsers.xml"/>
<Parameter name="rolesXmlFile" value="PrivilegeRoles.xml" /> <Parameter name="rolesXmlFile" value="PrivilegeRoles.xml"/>
</Parameters> </Parameters>
</PersistenceHandler> </PersistenceHandler>
<UserChallengeHandler class="li.strolch.privilege.handler.ConsoleUserChallengeHandler"> <UserChallengeHandler class="li.strolch.privilege.handler.ConsoleUserChallengeHandler">
</UserChallengeHandler> </UserChallengeHandler>
</Container> </Container>
<Policies> <Policies>
<Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege" /> <Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege"/>
<Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege" /> <Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege"/>
<Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege" /> <Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege"/>
<Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege" /> <Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege"/>
<Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/> <Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/>
</Policies> </Policies>
</Privilege> </Privilege>

View File

@ -1,48 +1,48 @@
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<Privilege> <Privilege>
<Container> <Container>
<Parameters> <Parameters>
<!-- parameters for the container itself --> <!-- parameters for the container itself -->
<Parameter name="secretKey" value="CHANGE-ME-1"/> <Parameter name="secretKey" value="CHANGE-ME-1"/>
<Parameter name="secretSalt" value="CHANGE-ME-2"/> <Parameter name="secretSalt" value="CHANGE-ME-2"/>
<Parameter name="persistSessions" value="true"/> <Parameter name="persistSessions" value="true"/>
<Parameter name="autoPersistOnUserChangesData" value="false"/> <Parameter name="autoPersistOnUserChangesData" value="false"/>
<Parameter name="privilegeConflictResolution" value="MERGE"/> <Parameter name="privilegeConflictResolution" value="MERGE"/>
<Parameter name="allowSessionRefresh" value="true"/> <Parameter name="allowSessionRefresh" value="true"/>
</Parameters> </Parameters>
<EncryptionHandler class="li.strolch.privilege.handler.DefaultEncryptionHandler"> <EncryptionHandler class="li.strolch.privilege.handler.DefaultEncryptionHandler">
<Parameters> <Parameters>
<!-- WARNING: If you change iterations or keyLength, then all passwords are invalid --> <!-- WARNING: If you change iterations or keyLength, then all passwords are invalid -->
<!-- default algorithm is: PBKDF2WithHmacSHA512 --> <!-- default algorithm is: PBKDF2WithHmacSHA512 -->
<Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512" /> <Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512"/>
<!-- default iterations: 200000 --> <!-- default iterations: 200000 -->
<Parameter name="hashIterations" value="10000" /> <Parameter name="hashIterations" value="10000"/>
<!-- default key length: 256 --> <!-- default key length: 256 -->
<Parameter name="hashKeyLength" value="256" /> <Parameter name="hashKeyLength" value="256"/>
</Parameters> </Parameters>
</EncryptionHandler> </EncryptionHandler>
<PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler"> <PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler">
<Parameters> <Parameters>
<Parameter name="usersXmlFile" value="PrivilegeUsers.xml" /> <Parameter name="usersXmlFile" value="PrivilegeUsers.xml"/>
<Parameter name="rolesXmlFile" value="PrivilegeRoles.xml" /> <Parameter name="rolesXmlFile" value="PrivilegeRoles.xml"/>
</Parameters> </Parameters>
</PersistenceHandler> </PersistenceHandler>
<UserChallengeHandler class="li.strolch.privilege.handler.ConsoleUserChallengeHandler"> <UserChallengeHandler class="li.strolch.privilege.handler.ConsoleUserChallengeHandler">
</UserChallengeHandler> </UserChallengeHandler>
</Container> </Container>
<Policies> <Policies>
<Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege"/> <Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege"/>
<Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege" /> <Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege"/>
<Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege"/> <Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege"/>
<Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege"/> <Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege"/>
<Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/> <Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/>
</Policies> </Policies>
</Privilege> </Privilege>

View File

@ -1,45 +1,48 @@
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<Privilege> <Privilege>
<Container> <Container>
<Parameters> <Parameters>
<!-- parameters for the container itself --> <!-- parameters for the container itself -->
<Parameter name="secretKey" value="test-secret"/> <Parameter name="secretKey" value="CHANGE-ME-1"/>
<Parameter name="secretSalt" value="test-secret"/> <Parameter name="secretSalt" value="CHANGE-ME-2"/>
<Parameter name="autoPersistOnUserChangesData" value="true" /> <Parameter name="persistSessions" value="true"/>
</Parameters> <Parameter name="autoPersistOnUserChangesData" value="true"/>
<Parameter name="privilegeConflictResolution" value="MERGE"/>
<Parameter name="allowSessionRefresh" value="true"/>
</Parameters>
<EncryptionHandler class="li.strolch.privilege.handler.DefaultEncryptionHandler"> <EncryptionHandler class="li.strolch.privilege.handler.DefaultEncryptionHandler">
<Parameters> <Parameters>
<!-- WARNING: If you change iterations or keyLength, then all passwords are invalid --> <!-- WARNING: If you change iterations or keyLength, then all passwords are invalid -->
<!-- default algorithm is: PBKDF2WithHmacSHA512 --> <!-- default algorithm is: PBKDF2WithHmacSHA512 -->
<Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512" /> <Parameter name="hashAlgorithm" value="PBKDF2WithHmacSHA512"/>
<!-- default iterations: 200000 --> <!-- default iterations: 200000 -->
<Parameter name="hashIterations" value="10000" /> <Parameter name="hashIterations" value="10000"/>
<!-- default key length: 256 --> <!-- default key length: 256 -->
<Parameter name="hashKeyLength" value="256" /> <Parameter name="hashKeyLength" value="256"/>
</Parameters> </Parameters>
</EncryptionHandler> </EncryptionHandler>
<PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler"> <PersistenceHandler class="li.strolch.privilege.handler.XmlPersistenceHandler">
<Parameters> <Parameters>
<Parameter name="usersXmlFile" value="PrivilegeUsers.xml" /> <Parameter name="usersXmlFile" value="PrivilegeUsers.xml"/>
<Parameter name="rolesXmlFile" value="PrivilegeRoles.xml" /> <Parameter name="rolesXmlFile" value="PrivilegeRoles.xml"/>
</Parameters> </Parameters>
</PersistenceHandler> </PersistenceHandler>
<UserChallengeHandler class="li.strolch.privilege.handler.ConsoleUserChallengeHandler"> <UserChallengeHandler class="li.strolch.privilege.handler.ConsoleUserChallengeHandler">
</UserChallengeHandler> </UserChallengeHandler>
</Container> </Container>
<Policies> <Policies>
<Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege" /> <Policy name="DefaultPrivilege" class="li.strolch.privilege.policy.DefaultPrivilege"/>
<Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege" /> <Policy name="ModelPrivilege" class="li.strolch.runtime.privilege.ModelPrivilege"/>
<Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege" /> <Policy name="RoleAccessPrivilege" class="li.strolch.privilege.policy.RoleAccessPrivilege"/>
<Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege" /> <Policy name="UserAccessPrivilege" class="li.strolch.privilege.policy.UserAccessPrivilege"/>
<Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/> <Policy name="UserSessionAccessPrivilege" class="li.strolch.privilege.policy.UsernameFromCertificatePrivilege"/>
</Policies> </Policies>
</Privilege> </Privilege>