GTNPORTAL-2973: More reliable fix, using a4j and oncomplete.
GTNPORTAL-2979 Add default configuration simple user propagation with WS-Security (unencrypted!)
Initial support for OAuth. Support for Facebook login. Saving informations about usernames and access tokens to UserProfile

Initial support for Facebook login works (limitation that FB username needs to be same as GateIn username)

Conflicts:

	component/web/pom.xml
	pom.xml

Saving FB accessToken into userProfile after successful authentication

Simplify code to use newest FacebookProcessor from picketlink 3.x

Logging message

Added method UserDAOImpl.findUserByUniqueAttribute

Added initial logic for deal with storing informations (usernames and accessCodes)

Bind FB username with attribute on user profile

Move GateInException classes to common module to be visible from everywhere. Handle oauth error with duplicate username in OrganizationManagementPortlet

minor change in comment

Added AccountSocial tab to UIAccountSettings portlet

Move webui components for RegistrationPortlet to webui/portal project

Conflicts:

	webui/portal/src/main/java/org/exoplatform/portal/webui/register/UIRegisterForm.java

Base methods to AuthenticationRegistry to have it more flexible
Support for registration via OAuth

Conflicts:

	webui/portal/src/main/java/org/exoplatform/portal/webui/register/UIRegisterForm.java

Registration workflow improvements and fixes

Conflicts:

	webui/portal/src/main/java/org/exoplatform/portal/webui/register/UIRegisterForm.java

Change OAuthDataStorage to SocialNetworkService

Added support for displayName in registration form

Don't store principal in httpSession in facebookProcessor

Fixed localization labels for UIRegistrationForm to be available for OAuth registration

Conflicts:

	portlet/exoadmin/src/main/resources/locale/portlet/exoadmin/RegisterPortlet_it.properties
	webui/portal/src/main/java/org/exoplatform/portal/webui/register/UIRegisterForm.java

Fix localization messages in UIAccountPortlet

Added linking/unlinking social accounts

Introduce OAuthProviderType enum and refactor code due to it

Refactoring existing code to be more generic (not facebook specific). Introduce OAuthLinkAccountFilter to link new social network

Added messages for success/fail during link social account

Renamed lifecycle class to OAuthLifecycle
GUI improvements, refactoring, access token encryption. Added CodecInitializer, so codec could be used in other components (not just CookieTokenService)

Conflicts:

	pom.xml

Added module oauth-common. Refactoring existing code. Remove redundant request to Facebook

Conflicts:

	pom.xml

Improvement in FB workflow to handle revoked authorization request

Removed OAuthHelper. Added UISocialLoginButtons and reuse it in UILoginForm.gtmpl and UIRegisterPortlet.gtmpl

Added OAuthDelegateFilter and Oauth integrators to simplify configuration

Added CodecInitializer, so codec could be used in other components (not just for CookieTokenService))

Encryption of oauth accessTokens. AccessTokenInvalidationListener for invalidation of accessTokens when oauth username was changed

Move most of the stuff to oauth-common module. Renamed module oauth to oauth-web

Conflicts:

	component/web/pom.xml

Externalize some content in FacebookProcessor, so portlets could read it
Support for Twitter and Google+ . Bugfixing

Fill more informations related to user registration

Finished work on twitter. More operations added to TwitterProcessor

Basic support for Google+. Still need to fix some issues

Added OAuthProviderTypeRegistry so users can plugin their own OAuthProviders if needed

Possibility to have accessToken saved in more attributes of UserProfile

Don't save IdToken in GoogleProcessorImpl as it's too long

Export module com.google.apis so portlet applications could find it

Fix UIRegisterForm so it compiles again

Rename GateInException to OAuthException, so it's OAuth specific

Refactoring of exception messages

Fix bug with unlinking social account in UIAccountSocial

Don't overwrite refreshToken in GoogleProcessorImpl

Support for remote revocation of accessTokens

Added method refreshToken on GoogleProcessor

minor

Handle revocation with invalid token
Support for revocation of access tokens. Initial support for alternative (error) flows

Use setArgsLocalized in ApplicationMessages to ensure that arguments are not localized

Fix type-safety issue and make FacebookAccessTokenContext to be Serializable

Use 'email' scope only if configuration scope is null

Some needed fixes for Facebook flow with custom added scope

Handle case when user denied dialog during Facebook OAuth interaction
GTNPORTAL-2909 OAuth design init
More support for alternative flows. Bugfixing

Correctly handle case when user denied dialog during Facebook OAuth interaction

Refactoring: Introduce abstract class AccessTokenContext and refactor OAuth processors according to it. Simplify OAuth filters and create common superclass OAuthProviderFilter

Handle revoking in Facebook

Handle cases when user didn't permit scope or accessToken is invalid during revocation (Google, Twitter)

Improve warning message in UIAccountSocial

Improve error handling for Facebook

Remove installed from customScope in FacebookFilter
GTNPORTAL-2909 - added localization and status validation
Added GateIn API support. Added OauthLoginModule. Support for Tomcat packaging. More bugfixing, javadoc, comments
GTNPORTAL-2981 Support for authentication and registration via OAuth (Facebook, Twitter, Google+)