PASS Authorization 0.5.0

• Updates the ShibAuthUserProvider, AuthUser, UserServlet to capture User.affiliation
• User.affiliation is properly created or updated on User resources.

PASS Authorization 0.4.5

• Updates the ShibAuthUserProvider to consume the Givenname and Sn attributes.
• Updates the pass-user-service to populate the User.firstName from the Givenname attribute when creating or updating a User resource
• Updates the pass-user-service to populate the User.lastName from the Sn attribute when creating or updating a User resource

Reduce Elasticsearch effects

• Eliminated timing dependencies on elasticsearch by refactoring all user-related activities into the LRUCache's critical section.
• Updated documentation
• Clean up module naming and organization

Avoid duplicate User record

• Changes to avoid new User records being added twice

Add 401 response body

• Sets 401 response body to "Unauthorized"

Authz listener and tools

• Adds an authz listener application for reacting to updates
• Adds administrative tools for manually updating ACLs

Fix Logging and Repo Authentication

• Updates logging dependencies allowing a uniform approach to logging when combined with other webapps in a container
• Updates to version 0.3.3-SNAPSHOT of the PASS Fedora client, which is able to handle authentication to the Fedora repository using both internal and external representations of a URI
• Updates the authentication credentials used when testing Fedora availability for integration tests

Context 2.2

Move to context/model 2.2

Initial Release

Highlights include:

• User service, which updates, creates, or merely relays a User info to the caller, based on shib headers
• AuthRolesProvider, which populates the header pass-roles with URIs signifying a user's roles, e.g. http://oapass.org/ns/roles/johnshopkins.edu#submitter