core-jgi/migration/iD11/oracle/202308071538_IDEMPIERE-5346...

29 lines
1.6 KiB
MySQL
Raw Normal View History

IDEMPIERE-5346 : Adding SSO support (#1571) * IDEMPIERE-5346 : Adding SSO support * IDEMPIERE-5346 : Fix as per peer review feedback. Valid user should have password not null removing #SSO_IS_ALREADY_AUTHENTICATE context variable due to security risk Cross site scripting issue on error.htm Making show role panel as system configurable Adding language selection on role panel Adding SSO support on iDempiere monitor and osgi console * IDEMPIERE-5346: Redirect to console using static URL to avoid security vulenarabilit * Committing patch from Carlos pr1571PR * IDEMPIERE-5565: fixing NPE issue on Role change * IDEMPIERE-5346: Appling pr1571PR2 from Carlos * 1. IDEMPIERE-5346: Fix idempiereMonitor goes in a loop of sign-in - Fix NPE when changing role - Fix NPE when a user with single role & sysconfig: SSO_SELECT_ROLE is 'N' * IDEMPIERE-5346 : IDempiere Monitor, use out of box login when SSO is not configured. * IDEMPIERE-5346: Adding Authorization type on User and Tenant window. Created /webui/admin page for login with application credential. * IDEMPIERE-5346: Implementing Hengsi's Code review comments Showing meaning full error when Identity Provider returns error In SSO filter, ignoreing css, zkau, images and resource URL Correcting typo in Principal name. Updated Documentation * IDEMPIERE-5346 : Fixed documentation, typo and pending review comments * IDEMPIERE-5346: Use token & SSO principal service to validate in Login.GetClient * IDEMPIERE-5346: Remove the Domain URL column and refactor the code. * IDEMPIERE-5346: Adding flag ENABLE_SSO_IDEMPIERE_MONITOR and ENABLE_SSO_OSGI_CONSOLE, using cache for SSOService, defaulting Authentication type on client to “Application and SSO” * IDEMPIERE-5346: Fixed issue of User SSO type not respected and support for Zoom URL
2023-09-21 15:43:49 +07:00
-- IDEMPIERE-5346 SSO Support
SELECT register_migration_script('202308071538_IDEMPIERE-5346.sql') FROM dual;
SET SQLBLANKLINES ON
SET DEFINE OFF
-- Aug 7, 2023, 3:38:25 PM IST
UPDATE AD_Column SET DefaultValue='AAS',IsMandatory='Y',Updated=TO_TIMESTAMP('2023-08-07 15:38:25','YYYY-MM-DD HH24:MI:SS'),UpdatedBy=100 WHERE AD_Column_ID=215840
;
-- Aug 7, 2023, 3:54:21 PM IST
ALTER TABLE AD_Client MODIFY AuthenticationType VARCHAR2(10 CHAR) DEFAULT 'AAS'
;
-- Aug 7, 2023, 3:54:21 PM IST
UPDATE AD_Client SET AuthenticationType='AAS' WHERE AuthenticationType IS NULL
;
-- Aug 7, 2023, 3:54:21 PM IST
ALTER TABLE AD_Client MODIFY AuthenticationType NOT NULL
;
-- Aug 17, 2023, 8:34:57 PM IST
INSERT INTO AD_SysConfig (AD_SysConfig_ID,AD_Client_ID,AD_Org_ID,Created,Updated,CreatedBy,UpdatedBy,IsActive,Name,Value,Description,EntityType,ConfigurationLevel,AD_SysConfig_UU) VALUES (200231,0,0,TO_TIMESTAMP('2023-08-17 20:34:56','YYYY-MM-DD HH24:MI:SS'),TO_TIMESTAMP('2023-08-17 20:34:56','YYYY-MM-DD HH24:MI:SS'),100,100,'Y','ENABLE_SSO_IDEMPIERE_MONITOR','N','Enable SSO Authentication Login for iDempiere Monitor','D','S','b9ab5ead-5743-4b62-aaab-6c3ae9d969ac')
;
-- Aug 17, 2023, 8:35:22 PM IST
INSERT INTO AD_SysConfig (AD_SysConfig_ID,AD_Client_ID,AD_Org_ID,Created,Updated,CreatedBy,UpdatedBy,IsActive,Name,Value,Description,EntityType,ConfigurationLevel,AD_SysConfig_UU) VALUES (200232,0,0,TO_TIMESTAMP('2023-08-17 20:35:21','YYYY-MM-DD HH24:MI:SS'),TO_TIMESTAMP('2023-08-17 20:35:21','YYYY-MM-DD HH24:MI:SS'),100,100,'Y','ENABLE_SSO_OSGI_CONSOLE','N','Enable SSO Authentication Login for Felix Web Console','D','S','063c3226-5c7f-40af-ba8d-d594a4ca469c')
;