githubFork/gitblit.git - Solinfo Gitblit

Gitblit devel

prevent session fixation for external authentication

Joel Johnson

2015-06-26 62e0259129fa7147a3899244569c05f4e7fd3b7c

refs
author	Joel Johnson <joel.johnson@issinc.com>
	Friday, June 26, 2015 18:10 -0400
committer	Joel Johnson <mrjoel@lixil.net>
	Tuesday, July 14, 2015 15:59 -0400
commit	62e0259129fa7147a3899244569c05f4e7fd3b7c
tree	02747b84d28c32ead796bc70c03276e50eec4153 tree \| zip \| gz
parent	4dfbfdd4681cfad922725f8989450c24eaed64f5 view \| diff

prevent session fixation for external authentication

  + use request instead of session to flag authentication status
    and user, for external authentication types

4 files modified

	src/main/java/com/gitblit/Constants.java	4 ●●●●● diff \| view \| raw \| blame \| history
	src/main/java/com/gitblit/manager/AuthenticationManager.java	35 ●●●●● diff \| view \| raw \| blame \| history
	src/main/java/com/gitblit/wicket/pages/RootPage.java	6 ●●●●● diff \| view \| raw \| blame \| history
	src/main/java/com/gitblit/wicket/pages/SessionPage.java	68 ●●●●● diff \| view \| raw \| blame \| history