mrioan

Note: This issue is happening in Servlet plugin A user has reported that he has a RESTful service configured under `/rest/**` and also added `stormpath.web.uris./rest/** = authc` in `application.properties` When...

351 tenant resolver

2

Resolve #351

The fix for #1295 is always appending `?` while obviously it should append `&` when `?` already exists in the url

`AccountStoreVisitorAdapter` should be changed to not throw on each method. Additionally: 1. [This commit](https://github.com/stormpath/stormpath-sdk-java/commit/74dbf117243db4619628c83a668b76c9403df50c#diff-63341606beae5c59bff35881f09ca9f8) must be undone. 2. Check that `AccountStoreVisitorAdapter` is not being used anywhere else and that this...

Account Store for OAuth 2.0 Access Token

1

The [Password Grant type implementation](https://github.com/stormpath/stormpath-sdk-java/blob/master/extensions/servlet/src/main/java/com/stormpath/sdk/servlet/filter/oauth/DefaultAccessTokenAuthenticationRequestFactory.java#L55) is ready to accept and AccountStore. However we only have a `DisabledAccountStoreResolver`. We must be sure we support this: https://docs.stormpath.com/rest/product-guide/latest/auth_n.html#generate-oauth-token. It must also be documented...

Issue #849 was wrongly implemented using the state property instead of a adding a new RelayState property (or relayState, not sure which is the actual claim that IDSite and SAML...

It seems that what was discussed [here](https://github.com/stormpath/stormpath-sdk-java/pull/974#discussion_r79402182) will not be addressed during MFA's implementation for the sake of speed. I am creating this issue so we remember to get rid...

Authentication in Spring Security does not support specifying an `accountStore`

5

StormpathAuthenticationProvider#createAuthenticationRequest is missing `inAccountStore(AccountStore)` ``` protected AuthenticationRequest createAuthenticationRequest(Authentication authentication) { String username = (String) authentication.getPrincipal(); String password = (String) authentication.getCredentials(); return UsernamePasswordRequest.builder().setUsernameOrEmail(username).setPassword(password).build(); } ```

Depends on https://stormpath.atlassian.net/browse/AM-3744 Relates to #1138 Please tackle https://github.com/stormpath/stormpath-sdk-java/pull/1170/files#diff-1090313069a4d2e2ff4077f6b9b9baa1R147

AccountStoreMapping interface is misleading as it cannot be instantiated

2

When we introduced `Organizations` our `DefaultAccountStoreMapping` disappeared. Now we have `DefaultApplicationAccountStoreMapping` and `DefaultOrganizationAccountStoreMapping`. This causes the following code to fail: `client.instantiate(AccountStoreMapping.class)`. It was working previously since we had a `DefaultAccountStoreMapping`...