OPENIDM-4217 - Align with CUI-111 and 21dcdac9 to properly use managed/user authzRoles. Still blocked by OPENIDM-4246

[OPENIDM-3469] reverted change or internal "roles" to "authzroles"

[OPENIDM-3469] Updated logic to process user's internal roles as relationship objects.

CR-7438 - OPENIDM-3344 - Separate different role types into different fields for managed/user

IDME-340 (CR-5999) Add "static user" auth module to authenticate anonymous user against module config to avoid repo read for self-registration use-cases.

OPENIDM-1708 (CR-3633) Support reauth for any auth module configured in authentication.json. * AuthenticationService now handles requests on /authentication, replaciing AuthFilter which was not a filter, and did not fully handle reauth. * Authenticators are used from both JASPI auth modules and AuthenticationService to provide the authentication--either with Http headers in the case of the auth modules, or from the authcid in the HttpContext and the reauth header in the case of reauthentication. * AuthenticationService now satisfies the AuthenticationConfig service for the purposes of OSGiAuthFilterBuilder's access to the config to build the JASPI CAF. * The duplicative managed/user config at the top of the sample authentication.json files are now removed, thus satisfying OPENIDM-1781.

OPENIDM-1762 (CR-3586) Additional decoupling of auth module role calculation and security context population from auth module validation code. Notably: * factor out basic auth code to allow PassthroughModule to support both basic auth and X-OpenIDM- header auth. * remove IWAPassthroughModule in favor of using auth module configuration to control order of execution * separate client cert auth into its own module, supporting an list of "allowedAuthenticationIdPatterns" to compare against the subject DN * remove static dependency on OSGIAuthnFilterBuilder for injection of OSGi artifacts - improves testability

CAF-93/CAF-103 - Reverting file changes made for testing

CF-2495 - CAF-93/CAF-103 - Session integration with OpenAM via common session module

OPENIDM-1687 Still more userId/authenticationId mixups

OPENIDM-1687 Missed a userId -> authenticationId in config

CR-3215 - OPENIDM-1683 - Pass-through authentication support for enduser ui

IDME-140 (CR-3137) Add support for per-auth module security context augmentation script.

Setting jwt to be session-only by default

OPENIDM-1556 Update IDM Jaspi authentication configuration to work with forgerock-auth-filters 1.3.0-SNAPSHOT updates

http://sources.forgerock.org/cru/FR-20 - Pulling in numerous updates to common ui from bridge work http://sources.forgerock.org/cru/FR-22 - Updates to pass-through auth config and script to be more flexible with choice of ldap backend

IB-448 - CR-2548 - JWT cookie should be browser session only, rather than persistant

Allow the location of the authnPopulateContext.js script to be customisable (r2490 from trunk

IB-600 - CR-2356 Allow the location of the authnPopulateContext.js script to be customisable

OPENIDM-1442 - CR-2169 Integrate Commons Authn Filter into OpenIDM CREST v2.0.0 branch

Missing short name for auth module in authentication.json

Change the way the authentication.json file is read, made servlet filter registered in code - issue with specifying augment security context scripts

Fixed typo in jwt session module class name

Review comments changes

merging authnfilter.json into authentication.json

Updates based on review comments from previous CR

CR-607 CR-630 - ui divided into three modules, - customizable forms, - new dashboard & apps views, - js refactoring, - apps request approval simple workflow, - users table pagination

Actually applying changes outlined in r1119. Not sure why they weren't committed with the last one. Fixed!

- logging in as openidm-admin (internal_user) - form validation msg next to submit button in registration - fixed problems reported in CR-485 & CR-490 - functional tests update - removed profiles

remove file based authentication entries

add conf/authentication.json for auth configuration