OPENAM-7395

OPENAM-7340 Add a servlet filter for invalid FQDNs, and reject REST calls that use an invalid FQDN

OPENAM-7915 Corrected Servlet 3.0 schema declaration

OPENAM-7761 Use Servlet v3.0

Add access filter for jato pages in web.xml

AME-8505 Removal of legacy sts code

AME-9098/AME-9100 Refactoring AMSetupFilter

AME-7905 - Refactor SAML code base AME-8078 - SAML2 Authentication Module AME-8598 - SAML2 AuthModule: Code Review Large Commit covering the work on the SAML2 refactor and authentication module. More detail on the individual commits is preservered in the branch feature/AME-8078-saml2-authentication-module on the fork repository openam-newton

CR-8034 / AME-8176 & AME-8177. Remove old PE and SE

AME-6274 Add authentication to /xacml endpoint, bind OAuth2 CREST endpoints and startup fixes

AME-6274 Start of refactoring the RestEndpoints registration mechanism

AME-6274 CR-7525 Add integration with commons HTTP Framework

AME-7672 CR-7567 Add an API for creating & publishing audit events

OPENAM-5941 CR-7218 CR-7252 Server-side fixes for XUI caching issue

AME-6913 CR-6950 CR-6952 CR-6953 CR-6954 Implement Audit TransactionId

OPENAM-5624 CR-6430 Reintroduce dashboard endpoint on 11.0.x

OPENAM-5438 - resolve iss references in oidc/oauth discovery

OPENAM-5326 Make OAuth2 properly realm-aware Reverse OPENAM-5232 and apply OPENAM-4556, OPENAM-4333 and OPENAM-5457

AME-5570 CR-6144 Create policy application on the fly

Epic: AME-3550 - UMA Commit contains stories: AME-5385, AME-5386 (CR-5922), AME-5391 (CR-5924), AME-5382 (CR-5813), AME-5383 (CR-5846), AME-5384 (CR-5847), AME-5387 (CR-5869), AME-5390 (CR-5822), AME-5392 (CR-5839), AME-5535 (CR-5936), AME-5534 (CR-5921), AME-5498 (CR-5933), AME-5537 (CR-6037), AME-5539 (CR-5980) initial_uma@r12470

soap-sts: AME-3998, AME-5401, AME-5501; CR-5776, CR-5895, CR-5894

OPENAM-5232 OPENAM-4333 Make OAuth2 properly realm-aware

OPENAM-4277 CR-5043 - Allow cookie and header token validation via REST

AME-4264, CR-4815. Registered SetupListener with AMStartupServlet to publish previously-published rest-sts instances in site deployment.

AME-2712, CR-4746. Authz filtering for rest-sts-publish service and token generation service

OPENAM-4513 CR-4749 Improve CORS filter example declaration in web.xml

AME-4616 CR-4649 Add XACML Restlet endpoint ; AME-4610 CR-4670 XACML import updates existing entities

AME-4014, CR-4405: supporting X509->SAML2 token transformations. AME-4364, CR-4432 - adding version information to CREST service invocations.

OPENAM-3848, FR-354 - Update OpenAM's REST routing mechanism to allow authorization filters to be added via new fluent API.

AME-3538, AME-3539, CR-3797, CR-3849

Fix for OPENAM-4005 - review: FR-197 Modifying RestAuthorizationDispatcherFilter to handle /sessions authorization.

Fix for OPENAM-3277 - review: FR-196 Modifying RestAuthorizationDispatcherFilter to handle /serverinfo authorization.

Fix for OPENAM-4005 - review: FR-197 Modifying RestAuthorizationDispatcherFilter to handle /sessions authorization.

Fix for OPENAM-3277 - review: FR-196 Modifying RestAuthorizationDispatcherFilter to handle /serverinfo authorization.

OPENAM-3569, FR-184 - Update web.xml to include example configuration for CORS Filter

AME-3383. CR-3453. New TokenGenerationService for consumption by STS to issue SAML2 assertions.

AME-3080 - Admin-only filter applied to the new policies endpoint

AME-3292, CR-3435 - New CREST endpoint for ConditionTypes

CR-3445 - AME-3113 - Prepare for OAuth2 and OpenID Connect Provider to become a common library - part 2

AME-3268, CR-3392 - New CREST end point for conditions

AME-3285, CR-3337 - New CREST ernd point for application types. See bug (sub-task) for documentation.

CR-3161 - AME-3114 - Break OAuth2/OpenID Connect compile dependency on OpenAM

AME-2711 - programmatic deployment of rest STS instances, CR-3122

CR-3070 - CAF-33 - Update OpenAMs Authz Modules

CR-3054 - AME-3008 - Update OpenAM to use forgerock-guice in commons

adding build and config-related changes to support new sts

CR-2940 - AME-2827 - Remove RestSecurityContextMapper

CR-2834 - AME-2647 - Authenticate REST endpoint to be able to contain realm(s) in URI

AME-2703 Update REST endpoint protection to work with forgerock-auth-filters 1.3.0-SNAPSHOT updates

OPENAM-3303 - CR-2767 - Replace Jersey dependency with Restlet in REST auth endpoint

Fix for OPENAM-3156 - review: CR-2667 Removing distributable element from web.xml to prevent web containers from enabling HTTP session clustering unnecessarily.

Fix for OPENAM-3156 - review: CR-2667 Removing distributable element from web.xml to prevent web containers from enabling HTTP session clustering unnecessarily.

OPENAM-3183 - CR-2527 - The forgerock-REST authN filters inside of web.xml only handle top-level-realm use cases

OPENAM-3183 - CR-2527 - The forgerock-REST authN filters inside of web.xml only handle top-level-realm use cases

CR-2373 OpenAM-3024 put the OAuth 2 rest endpoints under the common rest auth filter.

AME-2446 - CR-2335 - CR-2336 Align versioning with platform-wide REST API versioning

OPENAM-2929 - CR-2325 REST ?_action=idFromSession returning 403 when containing cookie of similar name

OPENAM-2880: Included request dispatcher to the XUI filter

OPENAM-2880 (CR-2261): Modified the XUIFilter configuration to allow forwarded URLs

CR-2174 AME-1913 Implemented a servlet filter to filter incoming requests and redirect them XUI based on the result of a new attribute openam-xui-interface-enabled. Since OPENAM-2811 affects XUI and the ability to login, this filter is currently disabled by default on all installations and upgrades until OPENAM-2811 is fixed.

CR-2171 AME-397 OpenID Session Management

AME-2375 - CR-2146 CREST library upgrade

AME-2158 - CR-2111 Protect users, groups and agents REST API's with authn and authz filter

OPENAM-2723 - CR-2110

OPENAM-2680 - CR-2076 XUI logout only works with administrator

AME-2157 fix for incorrect package name in web.xml

AME-2157 - CR-2029 Extend authorization filter to add flexible configuration and logging

OPENAM-2198 CR-1934 The Session REST endpoint is now protected by an admin level SSOToken Filter to prevent unauthorised access.

AME-2075 - CR-1976

AME-521 LocalSSOTokenSessionModule for JASPI commons authn filter

AME-396 CR-1802

AME-1306 Implement modular Guice mappings

AME-1451 -- Remove XACML3 Prototype End-Point, fixed comment.

AME-1451 -- Remove XACML3 Prototype End-Point

AME-1046 Rest Auth Service Improvements and AME-1158 Rest Auth Service with IWA Authentication

AME-349. CR-1326.

AME-407 / CR-1293, as well as additional Function Objects. For Sprint 18.

AME-350 Merging in AME-350 Implement REST Auth service

AME-302/AME-712/AME-722 -- Refactoring of locale's and applicable property files from openam-server-only to openam-locale. A couple of additional changes to fix NPE's and latest XACML3 development.

Checking in AME-237 and CR 987

Fix for OPENAM-1871, review CR-918.

AME-186 CR-788 moving OAuth 2.0 provider into trunk

Fix for AME-202 - review: CR-802