Only OIDC providers that support configuration discovery are supported.

Google shuts down its Google+ Sign-In.

Daniel Gerhardt authored 6 years ago and Daniel Gerhardt committed 6 years ago

The field of the inner class is kept for compatibilty reasons.

Slighly refactored ControllerAdvices to include handling of Spring's
HTTP Exceptions. This fixes 500 status codes being sent instead of the
correct one.

Fixes GH-67.

Backport of d052fd73.

Migration version now falls back to -1 if no document exists.

Limit logging for profile handling to WARN level for privacy reasons.

Marius Renner authored 7 years ago and Daniel Gerhardt committed 6 years ago

Cast int to double before division to avoid truncation of the division
result. Changed corresponding test so that it fails with the old
implementation.

Cherry-picked and backported from GH-52.

Paul-Christian Volkmer authored 7 years ago and Daniel Gerhardt committed 6 years ago

Cherry-picked from GH-51.

Paul-Christian Volkmer authored 7 years ago and Daniel Gerhardt committed 6 years ago

Cherry-picked from GH-51.

libapr alone is not sufficiant. libtcnative is required for Tomcat.

Removed X-Forwarded header handling from the application code and
documented how to setup the servlet container and reverse proxy to
handle those.

The link property of Facebook Oauth profiles no longer has a consistent
value across logins and will be completly removed in future versions of
Facebook's Graph API.

We generate a link in the old format from the id for backwards
compatibility.

The public CORS config was always overriden by the more generic config.
Credentials are no longer allowed to be sent with default CORS config.

Setting 'security.cors.origins' did not have any effect since the the
configuration was overriden by the default path settings.

Made links relative for GitHub compatibility.

Made links relative for GitHub compatibility.

This fixes a regression caused by a change in CouchDB4J 0.8 introduced
in commit 1eaebde0. CouchDB4J 0.8+
always defaults to `reduce=false` as long as grouping is not enabled.

Always set `creationTime` on session creation. Sessions with invalid
timestamps might otherwise be deleted by the scheduled cleanup.

Fixes a regression introduced with commit
dd749370.

Refs arsnova#85
Refs !16

Fixes a regression introduced with commit
d74ef999.

Refs arsnova#85
Refs !25

Fixes a regression introduced with commit
7207bad9.

Fixes arsnova#84