stormpath-sdk-java

stormpath-sdk-java copied to clipboard

Authentication in Spring Security does not support specifying an `accountStore`

5

StormpathAuthenticationProvider#createAuthenticationRequest is missing `inAccountStore(AccountStore)` ``` protected AuthenticationRequest createAuthenticationRequest(Authentication authentication) { String username = (String) authentication.getPrincipal(); String password = (String) authentication.getCredentials(); return UsernamePasswordRequest.builder().setUsernameOrEmail(username).setPassword(password).build(); } ```

mrioan

Implement Organizations / multi-tenant for the Spring stack

2

dogeared

Depends on https://stormpath.atlassian.net/browse/AM-3744 Relates to #1138 Please tackle https://github.com/stormpath/stormpath-sdk-java/pull/1170/files#diff-1090313069a4d2e2ff4077f6b9b9baa1R147

mrioan

Steps to recreate: 1) Launch one of the SDK sample applications with a stormpath.application.href of an Application which has either a Group or Organization mapped to it (or both). 2)...

iancorcoran

Allow cookies to be turned off for /oauth/token

1

mraible

At the start of the [Spring Boot Web tutorial](https://docs.stormpath.com/java/spring-boot-web/tutorial.html) it links to [tutorials/spring-boot](https://github.com/stormpath/stormpath-sdk-java/tree/master/tutorials/spring-boot) and suggests creating your very first Stormpath demo application like so: ```text mkdir MyProject cd MyProject cp...

george-hawkins-work

Access tokens should resolve the apiKey based on the `kid` header and not just based on the current apiKeyId.

josebarrueta

Non-caching of collections is costing us large numbers of API requests

1

We've breached the quota of API requests for our current subscription. As the given subscription covers a tenant that we reserve for development only we initially suspected a test gone...

george-hawkins-work

AuthorizationHeaderAccountResolver throws InvalidJwtException if request URI contains /stormpathCallback

1

iancorcoran

Spring Web Integration - If access_token cookie is present the Stormpath filter is executed twice

1

This happens at least in the `/login` route

josebarrueta