A new service, repository and entity have been introduced to handle file
attachments to other entities. Attachments store meta data about the
file. The file upload is not yet implemented. It is planned to abstract
the storage handling to allow the support for different storage
solutions (local file system, database, cloud).

Limit logging for profile handling to WARN level for privacy reasons.

Paul-Christian Volkmer authored 7 years ago and Daniel Gerhardt committed 6 years ago

Cherry-picked from GH-52.

Java's ScriptEnging is used to transform design doc JS objects into
valid JSON. A custom CouchDbConnector has been implemented to handle
this transformation and create the design docs in the database at
startup.

Functions need to be stringified to create valid JSON which is accepted
by CouchDB.

Daniel Gerhardt authored 7 years ago and Daniel Gerhardt committed 7 years ago

This eliminates issues in edge cases like calling annotated methods from
inside the same class. The use of `AopContext.currentProxy()` and the
`exposeProxy` setting are no longer necessary for these cases.

The cleanup is now disabled by default and can be set up by uncommenting
the configuration parameter `session.guest-session.cleanup-days`.

Configuration for Socket.IO has been refactored to support proxies and
replace ambiguous property names:
* Added API property `socketioPath` to `/configuration/`
* Added property `socketio.proxy-path`
* Removed property `security.ssl`
* Renamed properties:
  * `socketio.ip` -> `socketio.bind-address`
  * `security.keystore` -> `socketio.ssl.jks-file`
  * `security.storepass` -> `socketio.ssl.jks-password`

The default port to bind to has been changed from 10443 to 8090 since
SSL is not enabled by default. There is enough room (8081-8089) for
additional severs (e.g. `grunt run`) in development environments.

The original implementation did not correcly implement the W3C
Recommendation (https://www.w3.org/TR/2014/REC-cors-20140116/). CORS is
now implemented based the CorsFilter provided by Spring MVC.

Origins allowed for CORS can now be set in the configuration.
Additionally, GET access to the following request URLs is allowed from
all origins:

* /
* /arsnova-config and /configuration/
* /statistics

See also:
003b064b

Also added documentation for the property.

 - add controller/service/entity/dao-functions
 - add motdlist so that users can tell the backend, which motds they have read
 - add admin account (in arsnova.properties: security.adminaccount).
 - add permission function for admin

Version information is now compiled as part of a build and written to
version.properties. It is exposed by the API.

Markdown and learning progress features are no longer considered
experimental. Leaning progress can no longer be globally disabled.

Added 'ui' prefix for splash screen settings.

An LDAP search pattern can now be used instead of binding with a DN
pattern.

This reverts commit fc78eb18.

SASS variables only exist at compile time and are not available for
arsnova.properties.