Brian Demers

WIP: First pass at using the new EventBus to fire AuthC events.

5

I'm digging the simplicity of the `EventBus`, but currently it is only `really`\* used by the `ReflectionBuilder` This is attempt to see what publishing auth events from the `AuthenticationRealm` would...

WIP: CDI feature import SHIRO-337

10

I spent about a day looking into this, the original code was pretty good, but I ran into a few issues when adding a sample project Added CDI [README.md](support/cdi/README.md) Added...

Feature request: Add support for eXtended-nonce ChaCha (AEAD_XChaCha20_Poly1305)

3

https://tools.ietf.org/html/draft-irtf-cfrg-xchacha-01#section-2 ```txt AEAD_XChaCha20_Poly1305 XChaCha20-Poly1305 is a variant of the ChaCha20-Poly1305 AEAD construction as defined in [RFC7539] that uses a 192-bit nonce instead of a 96-bit nonce. ```

Setting password can result in loss of custom data

2

Originally reported by: @brussellc5 in: okta/okta-sdk-java#117 > With the Okta version of the Stormpath SDK, we're getting these same results (loss of custom profile attributes) in the following scenarios: >...

instead of `getResourceAsStream()` use a `ResourceFactory`

They only contain the relative path (minus the base URL) at the moment

Master without client api

3

The diff of the pull request is going to look jacked. Compare it with 1.5.x and it should look fine. https://github.com/stormpath/stormpath-sdk-java/compare/1.5.x...master-without-client-api This basically moves master back to 1.5.x (without changing...

Reuse BOM for interproject dependencies.

1

cc: @dogeared You may have already tried this, if so just close

The 401 challenge for the `/me` endpoint differs between servlet and spring-mvc integrations For Spring-MVC the 401 is set directly from the [MeController](https://github.com/stormpath/stormpath-sdk-java/blob/e39caa66bbcfbdd1e9a127b828d22b4dddf1ca8d/extensions/servlet/src/main/java/com/stormpath/sdk/servlet/mvc/MeController.java#L100-L112) This causes a few problems: 1. If...