Robin Drangmeister authored 8 years ago and Daniel Gerhardt committed 8 years ago

This fixes WebSocket communication for course sessions. (dg)

Refs GH-40.

Changed `security.facebook.enabled-roles` to
`security.facebook.allowed-roles`.

The backend wrongly trusted user input allowing the circumvention of
access control checks.

The security.*.enabled properties are now loaded as booleans.

The original implementation did not correcly implement the W3C
Recommendation (https://www.w3.org/TR/2014/REC-cors-20140116/). CORS is
now implemented based the CorsFilter provided by Spring MVC.

Origins allowed for CORS can now be set in the configuration.
Additionally, GET access to the following request URLs is allowed from
all origins:

* /
* /arsnova-config and /configuration/
* /statistics

The implementation (introduced by
2084f33a) was to permissive and posed a
security risk. As a consequence, cross origin requests requiring client
authentication are no longer possible.

Convert database user IDs to lowercase on account creation an login.
Additionally, LDAP UIDs are lowercased as a fallback when they cannot be
retrieved from the server.

Fixes failing start up because of no longer existent
`security.guest.lecturer.enabled` setting.

(https://github.com/thm-projects/arsnova-backend/wiki/Caching
^-- see List of cache entries and associated keys)

In some cases the Socket.IO servers used in test cases are not closed
when starting a new test. In this cases the tests will fail with
an address conflict because an other Socket.IO server is still running.

Using a new port, starting with previous defined port 1234 up to 1243 will
assign every new created Socket.IO server an other address/port.

An address conflict will still occure if an other service is running on
ports from 1234 to 1243, so it is generally a bad idea to have tests in the
hope that no side effects will occure from outside of application scope.

Conflicts:
	src/main/java/de/thm/arsnova/controller/LecturerQuestionController.java

fix bug where abstention questions are not exported