- b75542f Updated HtmlCleaner version to 2.10 by Scott Wilson · 9 years ago trunk
- 45a38bc updated svn:ignore by Scott Wilson · 9 years ago
- 75ba3a5 Added build dir to svn:ignore by Scott Wilson · 9 years ago
- f69c079 Added Redis module to build by Scott Wilson · 9 years ago
- 624adbb Added more stubs and updated license header by Scott Wilson · 9 years ago
- 8db6f16 Ensure the abstract test works from a clean instance, otherwise if you run it alongside the DefaultImpl test they'll clash as they're working from the same in-memory store. (Basically, the in-memory store is not thread-safe - you need a single instance) by Scott Wilson · 9 years ago
- be8a31a Added workflow SPI (for locking and resuming widgets) by Scott Wilson · 9 years ago
- cea3b5b added Maven target folder to svn:ignore by Scott Wilson · 9 years ago
- d219015 Added default service injection (store Prefs in server memory) by Scott Wilson · 9 years ago
- 9e09e81 Use callbacks and async processing in the demo scripts; this is important as otherwise things can get tangled up very easily. by Scott Wilson · 10 years ago
- 18aaf64 Changed version number in demo site by Scott Wilson · 10 years ago
- e7a7e6d Removed debugging output by Scott Wilson · 10 years ago
- b141ff0 Ensure the ApiKeys test restores the original state of the keys file after it executes, as otherwise it can cause other tests to fail by Scott Wilson · 10 years ago
- 46a66e7 Removed the ApiKeys REST API from Wookie 2.x as this is no longer consistent with the new security model which relies on secrets not being transmitted over HTTP; if admins want to manage keys on the server remotely they need to do so via SSH, VPN etc. by Scott Wilson · 10 years ago
- 613a31d Re-implemented support for default preferences specified in config.xml, and added functional tests to ensure it works. by Scott Wilson · 10 years ago
- 4b0b84e Updated the JS connector used in the demo to take account of the changes to the Properties API by Scott Wilson · 10 years ago
- 6bc028c Updated test for cloning widget instances taking account changes to Properties API by Scott Wilson · 10 years ago
- a04603a Added support in REST API for POSTing or PUTting multiple preferences and shared data in one request. See WOOKIE-414 by Scott Wilson · 10 years ago
- b154be1 Send security tokens in Authorization header instead of in querystring (see WOOKIE-427) by Scott Wilson · 10 years ago
- 458a693 Updated HtmlCleaner to v 2.7 and removed redundant code. See WOOKIE-428 by Scott Wilson · 10 years ago
- 6dcd7f5 Modified the core widget JS to first exchange the single-use token in the URL for a session token from the WOOKIE REST API (see WOOKIE-426). Also moved these various API calls into functions rather than inline within init() for better readability. by Scott Wilson · 10 years ago
- d84d371 When a request is made to get or create an instance, mint a new single-use token to return for the URL of the widget. See WOOKIE-426. by Scott Wilson · 10 years ago
- c77eb4a Added token controller to the API by Scott Wilson · 10 years ago
- 79b96eb Added an API for requesting a new token, either on first render to exchange a single-use token for a session token, or periodically to avoid token expiry. by Scott Wilson · 10 years ago
- c60cf7e Added support for single-use tokens to authz filter (see WOOKIE-426) by Scott Wilson · 10 years ago
- 4c9361e Use convenience constructors for tokens in tests, also added tests for nonce and single use by Scott Wilson · 10 years ago
- 76e4589 Created a cache for expired single-use tokens. See WOOKIE-426. by Scott Wilson · 10 years ago
- fac6848 Use nonce and single use flag when encrypting and decrypting tokens by Scott Wilson · 10 years ago
- 867b88a Added a nonce to AuthToken; this is needed as when creating a new instance, the token must never be the same even when the "content" of the token is identical. by Scott Wilson · 10 years ago
- 41eb50a Replaced calls to decryptAuthToken with calls to validateAuthToken. The difference is that the validate method also checks expiry times on tokens. The call decrpytAuthToken will be made private to avoid this problem in future. Also use new convenience constructor for a standard-lifespan token by Scott Wilson · 10 years ago
- 2fb4d1b Added a single-use flag to AuthToken, and some convenience constructors for different kinds of token. by Scott Wilson · 10 years ago
- a55ff6f Replaced calls to decryptAuthToken with calls to validateAuthToken. The difference is that the validate method also checks expiry times on tokens. The call decrpytAuthToken will be made private to avoid this problem in future. by Scott Wilson · 10 years ago
- 524d092 added null guard for participant thumbnail URL when rendering by Scott Wilson · 10 years ago
- bf68b06 Removed unused dependencies from cargo configuration by Scott Wilson · 10 years ago
- 7943490 Fixed paths in parser tests; these had become broken when re-organizing the project structure. by Scott Wilson · 10 years ago
- 4a17970 added note on persistence providers by Scott Wilson · 10 years ago
- 927b238 Removed unused dependencies from pom.xml; many of these are instead now used as part of other modules. by Scott Wilson · 10 years ago
- dfe3ad2 Removed dependency on DWR for core widgets; this is only needed for widgets using the Wave, oAuth and Wookie-Ext features. by Scott Wilson · 10 years ago
- 3878823 Replaced calls to DWR from the wookie.js feature script, instead using AJAX to directly call Wookie services by Scott Wilson · 10 years ago
- daf4bb6 Replaced the DWR-based WidgetAPI with two REST servlets connected to the WidgetAuthorizationFilter in web.xml. This means we don't require DWR for simple widgets. by Scott Wilson · 10 years ago
- a676ed0 Created a new Authz filter for requests from widgets to APIs, for example for handling preferences and metadata. This is so we can migrate these facilities from relying on DWR. by Scott Wilson · 10 years ago
- 4601d89 Removed unused utility classes; these supported the UI for requesting and emailing API keys in Wookie 1.x by Scott Wilson · 10 years ago
- 678dd2e Removed unused imports by Scott Wilson · 10 years ago
- 00f94d4 Changed Java connector to use HMAC-signed requests instead of HTTP BASIC AUTH by Scott Wilson · 10 years ago
- 653c86d Removed unused import by Scott Wilson · 10 years ago
- 4a46618 Added a helper to the connector for making signed API requests by Scott Wilson · 10 years ago
- c17f045 Updated more functional tests to use HMAC signed requests for accessing the REST API by Scott Wilson · 10 years ago
- 8e73084 removing empty folders by Scott Wilson · 10 years ago
- c2e242e Moved queues from server core to JPA module by Scott Wilson · 10 years ago
- 786cdd5 Use Request class for signed requests in test framework used for conformance testing by Scott Wilson · 10 years ago
- 767b84c Support signed API requests in JS connector and the demo site by Scott Wilson · 10 years ago
- 51e080f Improved support for ISO datetime format in timestamps by Scott Wilson · 10 years ago
- 1d4f4b0 Added the HMAC filter to all REST APIs. Only exception is GET /widgets[/*] for metadata access. by Scott Wilson · 10 years ago
- 318a9a6 Changed structure of API key from "id, value, email" to "key, secret" following the HMAC authz scheme by Scott Wilson · 10 years ago
- 98d4a6f Updated tests to use Request test framework class, and use signed API method calls by Scott Wilson · 10 years ago
- a1756c9 Added stateful requests, cookies and PUT body to the API test framework by Scott Wilson · 10 years ago
- d096265 Added a helper for making signed requests from functional tests by Scott Wilson · 10 years ago
- 871f791 Implemented headers in Mock servlet request to make testing easier by Scott Wilson · 10 years ago
- bb3da0d Created a HMAC authorization provider for Wookie REST APIs (see WOOKIE-279, and linked discussion with Tien). This will be used in place of "plaintext" API keys in Wookie 2.x by Scott Wilson · 10 years ago
- 6f9ebb7 Made the SPIs for prefs and shareddata consistent, requiring all the parameters used for the data (app, widget, context, viewer) by Scott Wilson · 10 years ago
- b3da6d3 Removed legacy non-REST API by Scott Wilson · 10 years ago
- d274baa Applied fixes to SPI implementations to make sure they pass all the unit tests; this mostly involved adding null and empty string guards by Scott Wilson · 10 years ago
- 608dc3d Corrected test: trying to add a participant with an id matching an existing participant should return false, and not overwrite the existing participant by Scott Wilson · 10 years ago
- 90a46fb Make the default SPI implementations reuse the common test cases by Scott Wilson · 10 years ago
- 37ab9ca Refactored tests so that all the unit tests created for wookie-redis are in wookie-spi and can be reused by all SPI implementations by Scott Wilson · 10 years ago
- aecc57b Added a method missing from API, to update sharedData by object as well as by strings by Scott Wilson · 10 years ago
- 360974b Allow test jars from wookie-spi to be used in implementations; and added to wookie-redis dependencies. This is so that we can define a set of common tests in wookie-spi that can be run for all implementations. by Scott Wilson · 10 years ago
- 6e0ea13 Added test cases for Redis shared data service, and updated implementation to fix a few errors, notably failing to release the jedis resource on a couple of logic branches, and catching all nulls and empty strings. by Scott Wilson · 10 years ago
- 4ef6ac0 added target folder and eclipse settings to svn:ignore by Scott Wilson · 10 years ago
- fee29e3 Removed Ivy from Eclipse settings by Scott Wilson · 10 years ago
- 73b10f6 Removed migration scripts as these are only relevant to the 1.x branch by Scott Wilson · 10 years ago
- 0f43ea8 First commit of SharedContextService provider using Redis by Scott Wilson · 10 years ago
- 8f89778 Added the Redis implementation of the preferences SPI by Scott Wilson · 10 years ago
- 3b6f695 commented out JPA module as we don't need this now to run a "basic" Wookie server by Scott Wilson · 10 years ago
- a056197 Removed JPA dependencies by Scott Wilson · 10 years ago
- e633497 Removed flatpack servlet as we've taken this out of 2.0 by Scott Wilson · 10 years ago
- 400e7f5 Removed all remaining JPA hooks from server by Scott Wilson · 10 years ago
- b43c176 Removed unused method by Scott Wilson · 10 years ago
- 688e5c2 Removed the support for OpenSocial gadgets - not only was this way behind spec, I think its much more obvious to run Wookie alongside Shindig rather than expect one or the other to handle both types of widget. by Scott Wilson · 10 years ago
- 4323221 Updated OAuth client to use SPI by Scott Wilson · 10 years ago
- aa510f3 Added OAuth token management SPI by Scott Wilson · 10 years ago
- d26846a Removed a copy-and-paste error - this method shouldn't make a callback by Scott Wilson · 10 years ago
- 7e0aa88 Fixed a problem with appending shared data - I hadn't implemented it yet! Now it works fine... by Scott Wilson · 10 years ago
- 149e8c2 Added JUnit dependency for testing by Scott Wilson · 10 years ago
- 1aef638 Updated tests to reflect that WidgetInstance (such as it now is) is no longer persisted, so you'll always get a 200, never 201 by Scott Wilson · 10 years ago
- dbcfe29 Updated tests to reflect that WidgetInstance (such as it now is) is no longer persisted, so you'll always get a 200, never 201 by Scott Wilson · 10 years ago
- bc8570a Updated tests to reflect that there is now no "internal" ID for a Widget that you can call for by Scott Wilson · 10 years ago
- 4cb267a Removed persistence tests - we'll need to create new tests based on the SPIs by Scott Wilson · 10 years ago
- a703f96 Replaced PersistanceManager and IWidgetInstance with AuthToken and SPI by Scott Wilson · 10 years ago
- b8bf75f Removed unused method relying on IWidgetInstance by Scott Wilson · 10 years ago
- 1eae275 Removing legacy helpers, and the WidgetInstanceFactory now that the job of IWIdgetInstance is done by AuthToken by Scott Wilson · 10 years ago
- 1047281 Changed WidgetInstancesHelper to, in effect, being a facade for returning AuthToken info. Eventually it will be renamed. by Scott Wilson · 10 years ago
- e49686e Changed WidgetInstancesController to, in effect, being a facade for AuthTokens. Eventually the controller will be renamed. by Scott Wilson · 10 years ago
- 1694cbd Changed expected localisation parameter from "lang" to "locale" by Scott Wilson · 10 years ago
- 671c09c Removed the IWidgetInstance scaffold for SharedContext by Scott Wilson · 10 years ago
- 5bad978 Removed the IWidgetInstance scaffold for AuthToken by Scott Wilson · 10 years ago
- d7ae739 Removing flatpack feature from 2.x = we can always restore it later by porting from 1.x if there is a demand for it. by Scott Wilson · 10 years ago
- bec378f updated to use AuthToken and SPIs instead of PersistenceManager and IWidgetInstance by Scott Wilson · 10 years ago
- a0a9ccb Removed deprecated methods, and updated implementation to use AuthToken and SPIs by Scott Wilson · 10 years ago
- 746e017 Replaced use of persistence manager with AuthToken and SPIs by Scott Wilson · 10 years ago
