Patrick Plate
155d56e8e8
- Move bigmind/ -> mcp/bigmind/ - Move webscraper/ -> mcp/webscraper/ - Move mss-failsafe/ -> java/mss-failsafe/ - Move Wellmann-Shop/ -> java/wellmann-shop/ (normalize to kebab-case) - Add .roo/ IDE config files to tracking - Add plans/REPO_STRATEGY.md (monorepo strategy document) - Expand .gitignore: Java/Maven, Node/TS, coverage, uv.lock - Rewrite README.md as navigation index - Update .roo/mcp.json webscraper path to mcp/webscraper/
91 lines
3.5 KiB
XML
91 lines
3.5 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<web-app version="4.0" xmlns="http://xmlns.jcp.org/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_4_0.xsd">
|
|
<welcome-file-list>
|
|
<welcome-file>/index.xhtml</welcome-file>
|
|
</welcome-file-list>
|
|
<error-page>
|
|
<!-- Missing login -->
|
|
<error-code>401</error-code>
|
|
<location>/error.xhtml</location>
|
|
</error-page>
|
|
<error-page>
|
|
<!-- Forbidden directory listing -->
|
|
<error-code>403</error-code>
|
|
<location>/error.xhtml</location>
|
|
</error-page>
|
|
<security-constraint>
|
|
<web-resource-collection>
|
|
<web-resource-name>authorise</web-resource-name>
|
|
<url-pattern>/user/*</url-pattern>
|
|
<http-method>GET</http-method>
|
|
<http-method>POST</http-method>
|
|
<http-method>TRACE</http-method>
|
|
<http-method>HEAD</http-method>
|
|
<http-method>DELETE</http-method>
|
|
<http-method>CONNECT</http-method>
|
|
<http-method>OPTIONS</http-method>
|
|
<http-method>PUT</http-method>
|
|
</web-resource-collection>
|
|
<auth-constraint>
|
|
<role-name>ADMIN</role-name>
|
|
<role-name>USER</role-name>
|
|
</auth-constraint>
|
|
<!--
|
|
<user-data-constraint>
|
|
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
|
|
</user-data-constraint>-->
|
|
</security-constraint>
|
|
<security-constraint>
|
|
<web-resource-collection>
|
|
<web-resource-name>authorise</web-resource-name>
|
|
<url-pattern>/admin/*</url-pattern>
|
|
<http-method>GET</http-method>
|
|
<http-method>POST</http-method>
|
|
<http-method>TRACE</http-method>
|
|
<http-method>HEAD</http-method>
|
|
<http-method>DELETE</http-method>
|
|
<http-method>CONNECT</http-method>
|
|
<http-method>OPTIONS</http-method>
|
|
<http-method>PUT</http-method>
|
|
</web-resource-collection>
|
|
<auth-constraint>
|
|
<role-name>ADMIN</role-name>
|
|
</auth-constraint>
|
|
<!--<user-data-constraint>
|
|
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
|
|
</user-data-constraint>-->
|
|
</security-constraint>
|
|
<security-role>
|
|
<description>Normal User which got invited</description>
|
|
<role-name>USER</role-name>
|
|
</security-role>
|
|
<security-role>
|
|
<description>Admin user who can change entries, invite new domains and more..</description>
|
|
<role-name>ADMIN</role-name>
|
|
</security-role>
|
|
<context-param>
|
|
<param-name>javax.faces.PROJECT_STAGE</param-name>
|
|
<param-value>Development</param-value>
|
|
</context-param>
|
|
<servlet>
|
|
<servlet-name>Faces Servlet</servlet-name>
|
|
<servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
|
|
<load-on-startup>1</load-on-startup>
|
|
</servlet>
|
|
<servlet-mapping>
|
|
<servlet-name>Faces Servlet</servlet-name>
|
|
<url-pattern>*.xhtml</url-pattern>
|
|
</servlet-mapping>
|
|
<session-config>
|
|
<session-timeout>
|
|
30
|
|
</session-timeout>
|
|
<cookie-config>
|
|
<http-only>true</http-only>
|
|
<!-- Prevent client side scripting from accessing/manipulating session cookie. -->
|
|
</cookie-config>
|
|
<tracking-mode>COOKIE</tracking-mode>
|
|
<!-- This disables URL rewriting. -->
|
|
</session-config>
|
|
</web-app>
|