fdrouet / plcrowd Goto Github PK

View Code? Open in Web Editor NEW

3.0 3.0 2.0 108 KB

Playframework Security module for Crowd

Java 100.00%

plcrowd's People

Contributors

Stargazers

Watchers

Forkers

aheritier

plcrowd's Issues

ability to choose the expiration time of the logged-in user's groups

define a property in the application.conf file to override the default expiration time of 30 minutes
document it

new Annotation @MemberOf

Provide the ability to secure any controller method with an annotation @memberof (String group)

CrowdClient should be reachable outside a Controller

For exemple, we should be able to use the CrowdClient from a Job

Wrap HTML content returned in Crowd Exceptions

Hi,

Sometimes (especially when it is a security error like ApplicationPermissionException) the message of Crowd exceptions contains the html output of the tomcat error page.
It may be better to extract the content of the body with something like that :

        // We may have an HTML output here
        String message = e.getLocalizedMessage();
        Pattern extractBody = Pattern.compile("<body>(.*)</body>");
        Matcher matcher = extractBody.matcher(message);
        while (matcher.find()){
            message = matcher.group(1);
        }
        flash.error("Oops. Authentication failed (%s)", message);
        Logger.warn(e, "An authentication failed");

Recommend Projects