Added the "sharedSecret" to the config
Almost a complete rewrite. Handles authentication by token with a custom authentication token
Undetectable modification
Custom authentication token using a meta programming function "loadUserByToken"
Custom access denied handler for spring security that sends a 401 with an authorized error message when spring security doesn't allow users granted authority to access a service.
Added some jackson JSON libs, jose-jwt and http-builder along with spring security acl and cors plugins.
Handles CORS OPTIONS pre-flight along with 401 JSON response
Switched to JOSE JWT handling to build the UsfTokenUserDetails object from a token
Switched to JOSE JWT handling to build the UsfTokenUserDetails object from a token
Custom AuthenticationException
Custom AuthenticationFailureHandler that also handles pre-flight CORS along with 401 unauthorized with JSON response
Removed debug statement
Updated the validate function to using http-builder RESTClient with ignoreSSLIssues option
Uses JOSE JWT for testing the signed token (JWS)
Uses JOSE JWT for testing the signed token (JWS)
No need for spring security as the plugin includes it already
Added the shared secret along with playing with the filterProcessesUrl
Added the shared secret setting
Tightened up plugin script and added some dynamic methods
Added a blank options method for CORS