[Fixes #35655999] Gem does not strip "/" from target url

Change-Id: I73c62f5b0f35ad577f47269820416543027d1b45
Add summary of lockout policy.

Documents default settings. Fixes [#35577665].

Change-Id: I8baa2384b77be1b89cb7457b91edd2bc8a1a8594
Fixed the gem to set the target correctly and only when requested.

[#35638855]

Change-Id: Idb9b9c35a517191f752d3e206769f392f32d2c48
Unify endpoint return codes and message bodies

[#35432427] Remove references to old /User endpoint
[Fixes #35352691] All API endpoints should return JSON

Change-Id: I66940398991b7e642ec23c7103e51b918ffa6a6f
cfid-39: user id returned in the token to a user created by the login server

[Fixes #35642261]

Change-Id: I813a7f6cdd474d525ab6a0ea47cf14d2f3698fe9
[Fixes #35830651] [cfid-69] Runtime error in gem (frozen string)

Change-Id: Ibcd06b4c0f773a8192a6d632f03e066a21c1bd4d
[#35832353] [cfid-71] investigate cause of problem

- be defensive in the app sample too [#35831915]
- and use default scopes in browser client
- confirmed that the sample works with local UAA
- but not with local login server (even the sample app)

Change-Id: Iee33c49a78dc3ebea737ab6ab4cf1db7f0886f7a
[cfid-71] Add CORS filter to api sample

The issue is not to do with the login server specificially,
just that I was testing it with the api service in a different
domain than the app sample, so the browser common-origin
policy was preventing the xhr from completing (and giving very
little clue as to what was happening other than a pre-flight
OPTIONS request).

I added a filter to the api sample that I thought would fix it
but it hasn't.  Not really a super high priority to fix though.

[#35832353]: Fix implicit demo in app sample

Change-Id: I780786c60723fa0eb13e0a69c89dc75c9e6aaafe
Upgraded szxcvbn library to version 0.2

[Fixes #35625257]. Provides support for matching dates and digits, as
well as some minor bug fixes.

Change-Id: I580bbc91b6ddf8ff2fb7ecdfe38c716b1e9da999
support saml login server, separate token_endpoint

35825009

Change-Id: I875a946ccfeffccc5862f0f5a16d0e3cd5237e1b
Merge "support saml login server, separate token_endpoint" into develop
[#35352681] Add /Groups endpoints as defined in the SCIM spec.

Initial commit that adds GET, POST, PUT, DELETE endpoints for listing, creating, updating
and deleting groups. Access control based on readers and writers for each group,
apart from the general scim.read and scim.write based access for the endpoints.

Exhaustive test coverage, and synchronization with user accounts (updating user.groups
attribute when group membership is touched) coming soon.

When users are bootstrapped, they are automatically added to the respective groups. No support
yet for bootstrapping groups.

Change-Id: I6788c986c616e9e3a09ab31c08682c042554bde0
Support for user data at password strength endpoint.

[Fixes #35785273]. A "userData" parameter containing a comma-separated
list of user-specific words can be passed along with the password.
The words will be added to the standard dictionary search and any
matches will drastically reduce the password score.

Change-Id: Ibf52759ef74515ec3820e7b62e2a9c9146476db6
[cfid-76] Add explicit session creation flag to login security config

[Fixes #35917577]
Login server not getting session cookie on login authentication to /oauth/authorize

Change-Id: I689f616923e655549ecb1c55982839d2231becf6
[cfid-72] Add option to configure authz filter to allow more HTTP methods

Also add option to configure auto-add of new user accounts
(Adding this feature to the default profile where before it was only
available in non-default profiles)

[#35907911] Required for autologin for trusted SSO clients that know the user

Change-Id: I6b8333af9b15cf964f1a8d98b30513efea4abb34
Fixed gem unit test, failing since last week. Fixed jenkins too.

Change-Id: I691370a9b06f6803126d879966a8eaadd7955c1f
[cfid-9] whitelabel the login sample

[#35352705] [cfid-9] separate CF login server from uaa

Change-Id: Ib67c1b9a610214bba63251522aef093698b8d0f0
[cfid-9] extract batch features into separate app

[#35352705] [cfid-9] separate CF login server from uaa

Change-Id: Ie2f7d376c08fa62bb145027c263dd01fed462eb3
[#35952177] Add bootstrap support for groups and members.

Change-Id: Icf187568f362da5e604e70f9f0a22049ed44b385
Fixed gem unit test, failing since last week. Fixed jenkins too.

Change-Id: I691370a9b06f6803126d879966a8eaadd7955c1f