[zanata/zanata-server] d0a8b0: ZNTA-942 make Zanata server an OAuth 2.0 AS and RS

[GitHub]

  Branch: refs/heads/ZNTA-942-oauth
  Home:   https://github.com/zanata/zanata-server
  Commit: d0a8b046073327098b193666958429399aabf6c5
      https://github.com/zanata/zanata-server/commit/d0a8b046073327098b193666958429399aabf6c5
  Author: Patrick Huang <pahuang at redhat.com>
  Date:   2016-05-23 (Mon, 23 May 2016)

  Changed paths:
    M zanata-war/pom.xml
    M zanata-war/src/main/java/org/zanata/ApplicationConfiguration.java
    M zanata-war/src/main/java/org/zanata/action/LoginAction.java
    A zanata-war/src/main/java/org/zanata/dao/AuthorizationCodeDAO.java
    A zanata-war/src/main/java/org/zanata/rest/oauth/AuthorizedResource.java
    A zanata-war/src/main/java/org/zanata/rest/oauth/TokenService.java
    M zanata-war/src/main/java/org/zanata/rest/service/AccountService.java
    M zanata-war/src/main/java/org/zanata/security/SecurityFunctions.java
    A zanata-war/src/main/java/org/zanata/security/annotations/AuthType.java
    A zanata-war/src/main/java/org/zanata/security/oauth/AuthorizeAction.java
    A zanata-war/src/main/java/org/zanata/security/oauth/SecurityTokens.java
    A zanata-war/src/main/java/org/zanata/service/AuthenticationService.java
    A zanata-war/src/main/java/org/zanata/service/impl/AuthenticationServiceImpl.java
    A zanata-war/src/main/java/org/zanata/servlet/OAuthFilter.java
    M zanata-war/src/main/java/org/zanata/servlet/UrlRewriteConfig.java
    M zanata-war/src/main/java/org/zanata/util/FacesNavigationUtil.java
    M zanata-war/src/main/resources/messages.properties
    M zanata-war/src/main/webapp-jboss/WEB-INF/web.xml
    A zanata-war/src/main/webapp/authorize/home.xhtml

  Log Message:
  -----------
  ZNTA-942 make Zanata server an OAuth 2.0 AS and RS

Zanata server now can act as a AS(Authorization Server) and itself being
a RS (Resource Server). It uses authorization code, access token and
refresh token.

This implementation is still a WIP because client id and refresh token
are not persisted to the database. Access token authorization is
temporarily enabled for just one REST resource.


  Commit: 2b87b9fdca73d1f6a4e79b29864ee90fad2d84a2
      https://github.com/zanata/zanata-server/commit/2b87b9fdca73d1f6a4e79b29864ee90fad2d84a2
  Author: Patrick Huang <pahuang at redhat.com>
  Date:   2016-05-23 (Mon, 23 May 2016)

  Changed paths:
    A zanata-model/src/main/java/org/zanata/model/AllowedApp.java
    M zanata-model/src/main/java/org/zanata/model/HAccount.java
    A zanata-war/src/main/java/org/zanata/dao/AllowedAppDAO.java
    R zanata-war/src/main/java/org/zanata/dao/AuthorizationCodeDAO.java
    M zanata-war/src/main/java/org/zanata/rest/oauth/TokenService.java
    M zanata-war/src/main/java/org/zanata/security/oauth/AuthorizeAction.java
    M zanata-war/src/main/java/org/zanata/security/oauth/SecurityTokens.java
    A zanata-war/src/main/resources/db/changelogs/db.changelog-4.0.xml
    M zanata-war/src/main/resources/db/db.changelog.xml
    M zanata-war/src/main/webapp-jboss/WEB-INF/classes/META-INF/persistence.xml
    M zanata-war/src/main/webapp/authorize/home.xhtml
    M zanata-war/src/test/resources/META-INF/persistence.xml
    M zanata-war/src/test/resources/arquillian/persistence.xml

  Log Message:
  -----------
  ZNTA-942 - OAuth information persisted to database


  Commit: 2d3f906fc8710ecdad4a70163fb9bfecf6831d29
      https://github.com/zanata/zanata-server/commit/2d3f906fc8710ecdad4a70163fb9bfecf6831d29
  Author: Patrick Huang <pahuang at redhat.com>
  Date:   2016-05-23 (Mon, 23 May 2016)

  Changed paths:
    M zanata-war/src/main/java/org/zanata/ApplicationConfiguration.java
    A zanata-war/src/main/java/org/zanata/config/SysConfig.java
    M zanata-war/src/main/java/org/zanata/limits/RateLimitManager.java
    M zanata-war/src/main/java/org/zanata/rest/RestLimitingFilter.java
    M zanata-war/src/main/java/org/zanata/rest/ZanataRestSecurityInterceptor.java
    M zanata-war/src/main/java/org/zanata/rest/oauth/AuthorizedResource.java
    A zanata-war/src/main/java/org/zanata/rest/oauth/OAuthUtil.java
    M zanata-war/src/main/java/org/zanata/rest/oauth/TokenService.java
    M zanata-war/src/main/java/org/zanata/rest/service/IntrospectableObjectMonitorService.java
    M zanata-war/src/main/java/org/zanata/seam/security/ZanataJpaIdentityStore.java
    M zanata-war/src/main/java/org/zanata/security/SecurityFunctions.java
    M zanata-war/src/main/java/org/zanata/security/ZanataIdentity.java
    M zanata-war/src/main/java/org/zanata/security/oauth/AuthorizeAction.java
    M zanata-war/src/main/java/org/zanata/security/oauth/SecurityTokens.java
    M zanata-war/src/main/java/org/zanata/servlet/OAuthFilter.java
    M zanata-war/src/main/java/org/zanata/util/Introspectable.java
    M zanata-war/src/test/java/org/zanata/rest/RestLimitingFilterTest.java
    A zanata-war/src/test/java/org/zanata/rest/ZanataRestSecurityInterceptorTest.java
    A zanata-war/src/test/java/org/zanata/security/oauth/SecurityTokensTest.java

  Log Message:
  -----------
  ZNTA-1090 allow REST api to support OAuth


  Commit: 402da5641075ce7c1ececddc2103a3158ab32f15
      https://github.com/zanata/zanata-server/commit/402da5641075ce7c1ececddc2103a3158ab32f15
  Author: Patrick Huang <pahuang at redhat.com>
  Date:   2016-05-23 (Mon, 23 May 2016)

  Changed paths:
    M zanata-war/src/main/java/org/zanata/security/oauth/AuthorizeAction.java
    M zanata-war/src/main/java/org/zanata/util/FacesNavigationUtil.java

  Log Message:
  -----------
  ZNTA-1090 - propagate redirect exception


  Commit: 4bb1c1a032a3bb243ababe7d750428ecf19c6ab8
      https://github.com/zanata/zanata-server/commit/4bb1c1a032a3bb243ababe7d750428ecf19c6ab8
  Author: Patrick Huang <pahuang at redhat.com>
  Date:   2016-05-23 (Mon, 23 May 2016)

  Changed paths:
    M zanata-war/src/main/java/org/zanata/rest/ZanataRestSecurityInterceptor.java
    M zanata-war/src/main/java/org/zanata/security/SecurityFunctions.java

  Log Message:
  -----------
  refactor ZanataRestSecurityInterceptor


  Commit: dc2e2fbfa2820086cfc035cb2bdf68976c924fa9
      https://github.com/zanata/zanata-server/commit/dc2e2fbfa2820086cfc035cb2bdf68976c924fa9
  Author: Patrick Huang <pahuang at redhat.com>
  Date:   2016-05-23 (Mon, 23 May 2016)

  Changed paths:
    M zanata-war/src/main/java/org/zanata/ApplicationConfiguration.java
    M zanata-war/src/main/java/org/zanata/config/SystemPropertyConfigStore.java
    M zanata-war/src/main/java/org/zanata/rest/ZanataRestSecurityInterceptor.java
    M zanata-war/src/main/java/org/zanata/security/oauth/AuthorizeAction.java
    M zanata-war/src/main/resources/messages.properties
    M zanata-war/src/main/webapp/authorize/home.xhtml

  Log Message:
  -----------
  ZNTA-1090 - system property to disable/enable OAuth


Compare: https://github.com/zanata/zanata-server/compare/2df004afd5b3...dc2e2fbfa282