| f015d695b84915f1c2c3fcf81f339548af1852c4 |
|
26-Jun-2014 |
Peter Major <majorpetya@gmail.com> |
Fix for OPENAM-1773 and OPENAM-3462 - review: CR-3803
DAS now supports goto URL validation.
Changes:
* The valid goto URL domain setting has been moved to a new service called
validationService, the new property name is
"openam-auth-valid-goto-resources"
* A new delegation policy has been created that allows agent accounts to
read the validationService settings
* The necessary upgrade step has been implemented that should migrate
existing valid goto domains to the new service (also removes the old ones),
which also ensures that the new delegation policy is added to the system.
* The Goto URL validation logic has been extracted out to a separate class
called GotoUrlValidator, which is now can be used from both openam-core
and openam-federation-library (for Relaystate evaluations). |