OPENAM-7340 Add a servlet filter for invalid FQDNs, and reject REST calls that use an invalid FQDN

OPENAM-6347 Automatically logout XUI "users" to login page, admins still use session expiry dialog

AME-8895: Disable logging of AM_ACCESS_ATTEMPT by default

OPENAM-7109 Enable FileUploader.jsp upload size to be configurable

OPENAM-6673 Adds new end-point to expose version information

OPENAM-5941 CR-7218 CR-7252 Server-side fixes for XUI caching issue

OPENAM-3266(CR-7187): Enable users to set heartbeat timeout via advanced setting org.forgerock.openam.ldap.heartbeat.timeout

AME-7053 CR-7126, AME-7055 CR-7180, AME-7054 CR-7199 move Device Id (Match) scripts to scripting service and introduce global default scripts

Fix for OPENAM-5925, review FR-689

AME-5556 CR-6276 CR-6058 CR-6048 CR-6047 CR-6045 introduces refactoring and cleanup around Session and SessionService code base

OPENAM-5456 CR-5945 Change OpenSSO to OpenAM in JavaDoc where possible

OPENAM-5311 CR-5815 Allow to set default timelimit for LDAP operations

OPENAM-5311 CR-5815 Allow to set default timelimit for LDAP operations

OPENAM-5311 CR-5815 Allow to set default timelimit for LDAP operations

Backport of OPENAM-4562 to OpenAM 11.0.x

AME-5055 CR-5040 Allow Referrals to be enabled or disabled from Policy Configuration page and server info endpoint to report status through "referralsEnabled" attribute.

OPENAM-4562 FR-441

AME-5055, CR-5040: Add a new property to validserverconfig.properties to (potentially) enable or disable access to referrals in the UI.

AME-3540 CR-4952 Disable CoreTokenResource endpoint by default

Backport of OPENAM-4253 to 11.0.x

Fix for OPENAM-4253, review FR-301.

AME-3573 CR-3927 CR-3928 CR-3929 CR-3930 CR-3931 CR-3932 CR-3792 The CTS implementation has been updated to perform all operations asynchronously.

Fix for OPENAM-3989 - review: CR-3574 ResourceLookup changes: * instead of always using cache, we are now using an advanced property to determine if the lookup results should be cached * using ConcurrentHashMap instead of Hashtable * now only XMLs are looked up from classpath * Cached filenames are no longer verified before returning them to prevent extra lookups

Fix for OPENAM-3989 - review: CR-3574 ResourceLookup changes: * instead of always using cache, we are now using an advanced property to determine if the lookup results should be cached * using ConcurrentHashMap instead of Hashtable * now only XMLs are looked up from classpath * Cached filenames are no longer verified before returning them to prevent extra lookups

Fix for OPENAM-3918 - review: FR-164

Fix for OPENAM-500 - review: CR-3440 TransformerFactory objects are now also cached using the PerThreadCache solution.

Fix for OPENAM-500 - review: CR-3440 TransformerFactory objects are now also cached using the PerThreadCache solution.

OPENAM-3959: auth chain miscalculates auth level (CR-3492)

OPENAM-3959: auth chain miscalculates auth level (CR-3492)

Fix for OPENAM-3918 - review: FR-164

Fix for OPENAM-3706 Backporting performance improvements: Use singleton ObjectMapper instance for JSON serialisation as per performance best practice: http://wiki.fasterxml.com/JacksonBestPracticesPerformance. AME-2914: CR-2886: Cache initialised Ciphers per-thread to avoid initialisation overhead on each call. AME-2921: CR-2895: Cache XML DocumentBuilder instances per thread to avoid expensive initialisation overhead.

Fix for OPENAM-2145 - review: CR-3080 This commit reverts OPENAM-1622.

Fix for OPENAM-2145 - review: CR-3080 This commit reverts OPENAM-1622.

AME-2921: CR-2895: Cache XML DocumentBuilder instances per thread to avoid expensive initialisation overhead.

CR-2430 OpenAM-3033 added the heartbeat value to the CTS.

OPENAM-3053 CR-2405 After upgrade the CTS Tab no longer throws an unchecked exception.

AME-2166 CR-2348 The CTS now supports storing Tokens under a separate Root Suffix or in an external Directory store. AME-2291 CR-2319 The CTS expired tokens deletion feature was too slow, this has now been improved.

AME-2160 CR-2161 A story focussed on reducing the Session size when persisted in the CTS.

Fix for OPENAM-2580 - review: CR-1871 DAS now has a new JVM property called: openam.das.bootstrap.file This property can be used to point to the exact location of the DAS configuration file.

Fix for OPENAM-2354 - review: CR-1549 Zero page login is now configurable

Fix for OPENAM-2230 (CR-1334)

Fix for OPENAM-1517, review CR-933.

Fix for OPENAM-751, review CR-1239.

Merging openam_10.1.0_AME-211 branch to trunk - Fix for AME-211

Fix for AME-210 - review: CR-829

AME-186 CR-788 moving OAuth 2.0 provider into trunk

Fix for OPENAM-1622

AME-187 - Commit of Update for Session HA Failover capabilities. Code Review Approved CR-757 / CR-779.

AME-52 / AME-129 - Checking into trunk latest changes for session failover from today's end of sprint demo. Additional development will continue.

AME-52 -- fix delete expired.

Changing the work around for OPENAM-1174. View bean permissions have been modified.

AME-52 -- Make the Top Internal Container for SFHA dynamic. Comment the ACI for serialized Session Data, push the InternalSession object get serialized to a specific field for Marshaling.

AME-52 -- Updates to remove cts references earlier added and updates for closer completion of project.

AME-52 -- Finalized clean-up of properties surrounding session failover.

AME-52 -- Refactor code to remove duplicate and deprecated Constants class in common. Using Constants from shared.

AME-52 -- Refactor code to remove duplicate and deprecated Constants class in common. Using Constants from shared.

Moved shared files into openam-shared