[Dev] WSO2 Committers += Theviyanthan Krishnamohan

2020-04-29 Thread Thanuja Jayasinghe
Hi All, It's my pleasure to announce Theviyanthan Krishnamohan as a WSO2 Committer. He has been a valuable contributor and enthusiast to the WSO2 IAM team. In recognition of his contribution, dedication, and commitment he has been voted as a WSO2 committer. Congratulations Theviyanthan and keep

Re: [Dev] [Architecture] Binding access token to the browser for new IAM Portal Applications

2020-03-24 Thread Thanuja Jayasinghe
the access token >>>> that already present in the cookie, there are two concerns, >>>> >>>>1. This will open up CSRF vulnerability as any malicious client >>>>running on the same browser can also access APIs successfully. >>

[Dev] WSO2 Committers += Nipuni Paaris

2020-03-23 Thread Thanuja Jayasinghe
Hi All, It's my pleasure to announce Nipuni Paaris as a WSO2 Committer. She has been a valuable contributor and enthusiast to the WSO2 IAM team. In recognition of her contribution, dedication, and commitment she has been voted as a WSO2 committer. Congratulations Nipuni and keep up the good work

[Dev] WSO2 Committers += Brion Silva

2020-03-23 Thread Thanuja Jayasinghe
Hi All, It's my pleasure to announce Brion Silva as a WSO2 Committer. He has been a valuable contributor and enthusiast to the WSO2 IAM team. In recognition of his contribution, dedication, and commitment he has been voted as a WSO2 committer. Congratulations Brion and keep up the good work...!!

[Dev] WSO2 Identity Server 5.11.0 M6 Released!

2020-03-10 Thread Thanuja Jayasinghe
WSO2 Identity and Access Management team is pleased to announce the release of Identity Server 5.11.0 M6! Download You can download WSO2 Identity Server 5.11.0 M6 from here

[Dev] WSO2 Committers += Sominda Gamage

2020-01-20 Thread Thanuja Jayasinghe
Hi All, It's my pleasure to announce Sominda Gamage as a WSO2 Committer. He has been a valuable contributor and enthusiast to the WSO2 IAM team. In recognition of his contribution, dedication, and commitment he has been voted as a WSO2 committer. Congratulations Sominda and keep up the good work

[Dev] WSO2 Committers += Piraveena Paralogarajah

2019-11-25 Thread Thanuja Jayasinghe
Hi All, It's my pleasure to announce Piraveena Paralogarajah as a WSO2 Committer. She has been a valuable contributor and enthusiast to the WSO2 IAM team. In recognition of her contribution, dedication, and commitment she has been voted as a WSO2 committer. Congratulations Piraveena and keep up

[Dev] WSO2 Committers += Tharmakulasingham Inthirakumaaran

2019-11-25 Thread Thanuja Jayasinghe
Hi All, It's my pleasure to announce Tharmakulasingham Inthirakumaaran as a WSO2 Committer. He has been a valuable contributor and enthusiast to the WSO2 IAM team. In recognition of his contribution, dedication, and commitment he has been voted as a WSO2 committer. Congratulations Inthirakumaara

Re: [Dev] WSO2 IS - SAML SSO External IdP: handling several AttributeConsumingServiceIndex

2019-10-29 Thread Thanuja Jayasinghe
Hi Angelo, If I summarize what you are trying to achieve, - SP sends a SAML2 Authentication request with AttributeConsumingServiceIndex value. - A federated IdP is configured for authentication for this SP. - Identity Server needs to pass the received AttributeConsumingServiceIndex value wi

Re: [Dev] [VOTE] Release WSO2 Identity Server 5.9.0 RC2

2019-10-03 Thread Thanuja Jayasinghe
Hi All, I have tested the following API implementations and no blocking issues found. - Session management API - User Account Association API - Export User profile - Consent Management API [+] Stable - go ahead and release Thanks, Thanuja On Thu, Oct 3, 2019 at 6:16 PM Piraveena Paralogarajah

Re: [Dev] Binding access token to the browser for new IAM Portal Applications

2019-09-05 Thread Thanuja Jayasinghe
n Thu, Sep 5, 2019 at 12:41 PM Thanuja Jayasinghe wrote: > Hi Hasintha, > > We are going to introduce the capability to bind the token to an external > attribute as a part of this feature. So the updated schemas will be as > follows, > > IDN_OAUTH2_ACCESS_TOKEN ( >

Re: [Dev] Binding access token to the browser for new IAM Portal Applications

2019-09-05 Thread Thanuja Jayasinghe
tive > tokens for same client, user with random scopes ? Or are we just revoking > the old token if the same scopes are being used ?. > > Or else do we have the facility to have multiple active tokens for the > same user, application with same scopes in latest IS versions ? > &

[Dev] Binding access token to the browser for new IAM Portal Applications

2019-09-02 Thread Thanuja Jayasinghe
Hi All, With the introduction of new IAM portal applications, there is a requirement to provide additional security measures to secure these SPAs. We have already implemented the OAuth2 authorization code flow(public client) with PKCE for these applications and with this feature, it will be possib

[Dev] WSO2 Committers += Pamoda Wimalasiri

2019-08-25 Thread Thanuja Jayasinghe
Hi All, It's my pleasure to announce Pamoda Wimalasiri as a WSO2 Committer. She has been a valuable contributor and enthusiast to the WSO2 IAM team. In recognition of her contribution, dedication, and commitment she has been voted as a WSO2 committer. Congratulations Pamoda and keep up the good

Re: [Dev] [Architecture] [VOTE] Release WSO2 Identity Server 5.8.0 RC3

2019-05-22 Thread Thanuja Jayasinghe
Hi All, Tested following scenarios, - Local user account association - OAuth2 grat types (code, implicit, password, client credential) - SAML2 SSO & SLO [+] Stable - go ahead and release. Thanks, Thanuja On Wed, May 22, 2019 at 8:07 PM Farasath Ahamed wrote: > Hi All, > > Test the below scen

[Dev] WSO2 Identity Server 5.8.0-alpha2 Released!

2019-03-23 Thread Thanuja Jayasinghe
WSO2 Identity and Access Management team is pleased to announce the release of Identity Server 5.8.0 alpha2! Download You can download WSO2 Identity Server 5.8.0 alpha2 from here . You can download WSO2 I

[Dev] WSO2 Identity Server 5.8.0-M25 Released!

2019-03-10 Thread Thanuja Jayasinghe
WSO2 Identity and Access Management team is pleased to announce the release of Identity Server 5.8.0 M25! Download You can download WSO2 Identity Server 5.8.0 M25 from here . You can download WSO2 Identity Serv

[Dev] WSO2 Identity Server 5.8.0-M24 Released!

2019-03-06 Thread Thanuja Jayasinghe
WSO2 Identity and Access Management team is pleased to announce the release of Identity Server 5.8.0 M24! Download You can download WSO2 Identity Server 5.8.0 M24 from here . You can download WSO2 Identity Serv

[Dev] WSO2 Identity Server 5.8.0-M3 Released!

2018-10-07 Thread Thanuja Jayasinghe
WSO2 Identity and Access Management team is pleased to announce the release of Identity Server 5.8.0 M3! Download You can download WSO2 Identity Server 5.8.0 M3 from here . You can download WSO2 Identity Server A

Re: [Dev] Custom captcha with WSO2 Identity Server

2018-10-04 Thread Thanuja Jayasinghe
Hi Jorge, Identity Server only supports reCaptcha in the password recovery flow. But you can implement CaptchaConnector[1] interface and have a custom captcha which does not require an internet connection. You can refer [2] which is the reCaptcha implementation for password recovery flow. [1] htt

[Dev] WSO2 Identity Server 5.8.0-M2 Released!

2018-09-29 Thread Thanuja Jayasinghe
WSO2 Identity and Access Management team is pleased to announce the release of Identity Server 5.8.0 M2! Download You can download WSO2 Identity Server 5.8.0 M2 from here . You can download WSO2 Identity Server A

[Dev] WSO2 Identity Server 5.8.0-M1 Released!

2018-09-23 Thread Thanuja Jayasinghe
WSO2 Identity and Access Management team is pleased to announce the release of Identity Server 5.8.0 M1! Download You can download WSO2 Identity Server 5.8.0 M1 from here . You can download WSO2 Identity Server A

Re: [Dev] [VOTE] Release of WSO2 Identity Server Analytics 5.7.0 RC3

2018-09-18 Thread Thanuja Jayasinghe
Hi All, I have tested the following and no issues were found. - Overall login attempts dashboard - Suspicious login attempts dashboard [+] Stable - go ahead and release Thanks, Thanuja On Tue, Sep 18, 2018 at 5:07 PM Chamath Samarawickrama wrote: > Hi, > > I have tested the following o

Re: [Dev] [VOTE] Release of WSO2 Identity Server Analytics 5.7.0 RC2

2018-09-17 Thread Thanuja Jayasinghe
Hi All, I have tested the following and no issues were found. - Overall login attempts dashboard - Suspicious login attempts dashboard [+] Stable - go ahead and release Thanks, Thanuja On Sat, Sep 15, 2018 at 12:45 PM Dilin Dampahalage wrote: > Hi all, > > > We are pleased to announce

Re: [Dev] [Architecture] [VOTE] Release WSO2 Identity Server 5.7.0 RC3

2018-09-16 Thread Thanuja Jayasinghe
have tested the following and no issues were found. >>>> >>>> * Settip up MySQL 5.7 >>>> * Configuring a Read-write Active Directory User Store as a >>>> secondary user store >>>> * Configuring Multi-factor Authentic

Re: [Dev] [Architecture] [VOTE] Release WSO2 Identity Server 5.7.0 RC3

2018-09-14 Thread Thanuja Jayasinghe
Hi All, I have tested the following and no issues were found. - User account association - Workflow management - Adaptive authentication - Role-based - User age based [+] Stable - go ahead and release Thanks, Thanuja ___ Dev mailing

Re: [Dev] [VOTE] Release of WSO2 Identity Server 5.7.0 RC1

2018-09-10 Thread Thanuja Jayasinghe
Hi All, We are closing the vote as we found an issue while working with the PostgreSQL database. We will fix the issue and release another release candidate as soon as possible. Thanks, Thanuja On Sat, Sep 8, 2018 at 6:34 AM Thanuja Jayasinghe wrote: > Hi All, > > We are pleased to

Re: [Dev] [VOTE] Release of WSO2 Identity Server Analytics 5.7.0 RC1

2018-09-10 Thread Thanuja Jayasinghe
Hi All, We are closing the vote as we found an issue while configuring it for risk-based adaptive authentication. We will fix the issue and release another release candidate as soon as possible. Thanks, Thanuja On Sat, Sep 8, 2018 at 11:17 PM Thanuja Jayasinghe wrote: > Hi All, > &g

[Dev] [VOTE] Release of WSO2 Identity Server Analytics 5.7.0 RC1

2018-09-08 Thread Thanuja Jayasinghe
Hi All, We are pleased to announce the first release candidate(RC) of WSO2 Identity Server Analytics 5.7.0. This release fixes the following issues, - 5.7.0-RC Fixes Source and distribution, - https://github.com/wso2/analytics-

[Dev] [VOTE] Release of WSO2 Identity Server 5.7.0 RC1

2018-09-07 Thread Thanuja Jayasinghe
Hi All, We are pleased to announce the first release candidate(RC) of WSO2 Identity Server 5.7.0. This release fixes the following issues, - 5.7.0-RC Fixes - 5.7.0-Beta2 Fixes

[Dev] WSO2 Identity Server 5.7.0-beta2 Released!

2018-09-02 Thread Thanuja Jayasinghe
WSO2 Identity and Access Management team is pleased to announce the release of Identity Server 5.7.0 Beta2! Download You can download WSO2 Identity Server 5.7.0 beta2 from here . You can download WSO2 Ident

Re: [Dev] [Architecture] [VOTE] Release of WSO2 Identity Server 5.6.0 RC3

2018-06-19 Thread Thanuja Jayasinghe
Hi All, Tested user account association scenarios. No blocking issues found. [+] Stable - Go ahead and release Thanks, Thanuja On Tue, Jun 19, 2018 at 3:48 PM Isuri Anuradha wrote: > Hi all, > > I've tested following scenarios on the IS 5.6.0-RC3 pack. > >- SAML to SAML federation flow. >

Re: [Dev] [Architecture] [VOTE] Release WSO2 Identity Server 5.5.0 RC2

2018-03-15 Thread Thanuja Jayasinghe
Hi, Tested following scenarios on RC2 pack. - User account association(Local/Federated) - SAML2 IdP creation with metadata file - Workflow management [+] Stable - Go ahead and release. Thanks, Thanuja On Thu, Mar 15, 2018 at 2:52 PM, Prakhash Sivakumar wrote: > Hi all, > > I have r

Re: [Dev] Set captcha on by default for tenants

2018-02-22 Thread Thanuja Jayasinghe
On Fri, Feb 23, 2018 at 8:55 AM, Isura Karunaratne wrote: > According to the code [1], we should call the method > setSSOLoginConnectorConfigs from CaptchaUtil.buildReC > aptchaFilterProperties method to get the default values from > captcha-config.properties > file. So, currently, we cannot set

Re: [Dev] Wso2_5.4.0-update-4

2018-02-19 Thread Thanuja Jayasinghe
Hi Deepak, Can you please provide the following information, 1. Is the user authenticated from WSO2 IS or from a federated IdP? 2. Do you see this warning log for all users or is it for some users? 3. Is the warning log intermittent? 4. Can you share the service provider configuration

Re: [Dev] [TokenBinding][OAuth] Need to add a sample application to IS

2017-11-20 Thread Thanuja Jayasinghe
Hi Inthirakumaaran, You need to add your sample to https://github.com/wso2/product-is/tree/5.x.x/modules/samples/oauth2. Please send a pull request. Thanks, Thanuja On Mon, Nov 20, 2017 at 3:17 PM, Inthirakumaaran Tharmakulasingham < inthirakumaa...@wso2.com> wrote: > Hi all, > I developed a sa

Re: [Dev] [Architecture] Does WSO2 Identity Server support IDP initiated logout from federated IDP?

2017-11-20 Thread Thanuja Jayasinghe
Hi Roman, On Thu, Nov 16, 2017 at 5:56 PM, Roman CHRENKO wrote: > Hello. > > We are using WSO2 Identity Server 5.3.0. > > I configured trust between WSO2 IDP (symbolic name "IDP1") and the Service > Provider (Shibboleth, symbolic name "SP1"). > > Then I configured second trust between WSO2 actin

Re: [Dev] Roles and Groups in IS

2017-11-19 Thread Thanuja Jayasinghe
Hi Nila, In C4, we consider roles and groups are the same. That's why when you add groups to a user, IS set those values as roles to that user. But in C5, we will have two separate concepts for Group and Role. Group - Collection of users Role - Collection of permissions We can assign roles to a g

Re: [Dev] Exposing WorkflowImplService as a OSGi service

2017-11-13 Thread Thanuja Jayasinghe
y.workflow.impl/src/main/java/org/wso2/carbon/identity/workflow/impl/WorkflowImplService.java> > > On Mon, Nov 13, 2017 at 6:50 PM, Thanuja Jayasinghe > wrote: > >> Hi All, >> >> Is it possible to register WorkflowImplService[1] as OSGi service? It >> will be really useful

Re: [Dev] [IS] SAML 2 SSO Login Session Issue

2017-11-13 Thread Thanuja Jayasinghe
Hi Hasintha, This is the session created by Travelocity app(SP session) and Travelocity keeps SAML2 assertion in that session. So better have look at the logic which Travelocity set the cookie after receiving the SAML2 response from the Identity Server. Thanks, Thanuja On Mon, Nov 13, 2017 at 9:

[Dev] Exposing WorkflowImplService as a OSGi service

2017-11-13 Thread Thanuja Jayasinghe
Hi All, Is it possible to register WorkflowImplService[1] as OSGi service? It will be really useful when we write custom workflow templates. [1] - https://github.com/wso2-extensions/identity-workflow-impl-bps/blob/master/components/org.wso2.carbon.identity.workflow.impl/src/main/java/org/wso2/car

Re: [Dev] [IS][SAML] Using different cert for SAML response signing

2017-11-08 Thread Thanuja Jayasinghe
Hi Danushka, In the current implementation, it is not possible to set different keystore for signing OOTB as it is not required in most of the cases. But you can provide your own implementation for signing by implementing org.wso2.carbon.identity.sso.saml.builders.signature.SSOSigner interface an

Re: [Dev] UserAccountAssociationService having “/permission/admin/login” permissions in some operations

2017-10-26 Thread Thanuja Jayasinghe
Hi Mushthaq, UserAccountAssociationService.switchLoggedInUser() service method is only useful for users who has logged in session. Because this feature provides support for switch between associated user accounts in that logged in session. In order to create a session we need to call A uthenticati

Re: [Dev] Enable Response signing cannot be done through admin service when creating SAML2 Web SSO Configuraton for a Service Provider

2017-10-23 Thread Thanuja Jayasinghe
Hi Chamara, SAML service provider UI uses the same admin service to add sp configurations. So theoretically this should work. So can you please attach the SOAP request used to create the SAML2 service provider? Thanks, Thanuja On Sun, Oct 22, 2017 at 10:19 PM, Chamara Ariyarathne wrote: > Of

Re: [Dev] Please review and merge the PRs

2017-09-19 Thread Thanuja Jayasinghe
Thanks. On Tue, Sep 19, 2017 at 4:33 PM, Thusitha Thilina Dayaratne < thusit...@wso2.com> wrote: > Hi Thanuja, > > Merged the PRs > > Thanks > Thusitha > > On Tue, Sep 19, 2017 at 3:49 PM, Thanuja Jayasinghe > wrote: > >> Hi, >> >> Can y

[Dev] Please review and merge the PRs

2017-09-19 Thread Thanuja Jayasinghe
Hi, Can you please review and merge the following PRs. [1] - https://github.com/wso2/carbon-kernel/pull/1535 [2] - https://github.com/wso2/carbon-kernel/pull/1531 Thanks, Thanuja -- *Thanuja Lakmal* Associate Technical Lead WSO2 Inc. http://wso2.com/ *lean.enterprise.middleware* Mobile: +94715

Re: [Dev] Please review and merge the pull request

2017-07-20 Thread Thanuja Jayasinghe
Thanks! On Fri, Jul 21, 2017 at 10:17 AM, Thusitha Thilina Dayaratne < thusit...@wso2.com> wrote: > Hi Thanuja, > > PR is merged to 4.4.x branch. > > Thanks > Thusitha > > On Thu, Jul 20, 2017 at 6:31 PM, Thanuja Jayasinghe > wrote: > >> Hi Kishanth

[Dev] Please review and merge the pull request

2017-07-20 Thread Thanuja Jayasinghe
Hi Kishanthan, Please merge the pull request [1] which contains the fix for [2]. [1] - https://github.com/wso2/carbon-kernel/pull/1445 [2] - https://github.com/wso2/carbon-kernel/issues/1444 Thanks, Thanuja -- *Thanuja Lakmal* Associate Technical Lead WSO2 Inc. http://wso2.com/ *lean.enterpris

Re: [Dev] Why we use timestampSkew default value as 300 seconds in identity.xml, why not 0 seconds.

2017-05-30 Thread Thanuja Jayasinghe
Hi Dinali, Consider the following calculation. expiry time = issuedTimeInMillis + validityPeriodMillis - (System.currentTimeMillis() - timestampSkew) So actually token is valid for (validityPeriodMillis + timestampSkew) seconds. This additional time is added to avoid the error occurred due to th

Re: [Dev] Please review and merge the pull request

2017-05-30 Thread Thanuja Jayasinghe
wso2.com > mobile: +94772207259 <+94%2077%20220%207259> > <http://wso2.com/signature> > > On Tue, May 30, 2017 at 12:28 PM, Thanuja Jayasinghe > wrote: > >> Hi Jayanga, >> >> Please merge the pull request [1] which contains the fix for [2]. >>

[Dev] Please review and merge the pull request

2017-05-29 Thread Thanuja Jayasinghe
Hi Jayanga, Please merge the pull request [1] which contains the fix for [2]. [1] - https://github.com/wso2/carbon-kernel/pull/1388 [2] - https://github.com/wso2/carbon-kernel/issues/1387 Thanks, Thanuja -- *Thanuja Lakmal* Senior Software Engineer WSO2 Inc. http://wso2.com/ *lean.enterprise.m

Re: [Dev] [IDENTITY-5131] A solution for the possible deadlock due to session cleanup task

2017-04-24 Thread Thanuja Jayasinghe
es each day - Need to provide a way to configure the time which this operation need to run. Do we need to configure this in every node? (Only one node will run this operation) Having stored procedures to handle this, does not have above complexities. > Cheers, > Ruwan > > On Mon, Apr

Re: [Dev] [IDENTITY-5131] A solution for the possible deadlock due to session cleanup task

2017-04-24 Thread Thanuja Jayasinghe
Hi Dinali, +1 for the 2nd solution. Since this operation takes a considerable amount of time, it's better to handle this from the DB side during the off-peak hours. Thanks, Thanuja On Fri, Apr 21, 2017 at 11:12 AM, Dinali Dabarera wrote: > Hi All, > > There is a public issue reported in [3],

Re: [Dev] [IS] Starting over authentication flow as a different user

2017-03-01 Thread Thanuja Jayasinghe
Hi Pulasthi, The best approach is to ask Alice to log-out when she leaves the browser. Or from the application side, we can give an option like "fresh-login" which sends a "forceAuth=true" request to the IS. So he will go through the authentication process again. Thanks, Thanuja On Thu, Mar 2,

Re: [Dev] SAML Request validation happens after completing all the authentication steps

2017-02-28 Thread Thanuja Jayasinghe
nt domain ?. > Yes, we get the tenant domain of SP in the request. Therefore we can validate authentication request before the authetication. But considering the performance we have implemented it this way. > >> On Tue, Feb 28, 2017 at 2:49 PM, Thanuja Jayasinghe >> wrote: >&g

Re: [Dev] SAML Request validation happens after completing all the authentication steps

2017-02-28 Thread Thanuja Jayasinghe
Hi Farasath, On Tue, Feb 28, 2017 at 2:39 PM, Farasath Ahamed wrote: > Hi, > > Noticed $subject happening when we configure SAML SSO with SAML Request > Validation enabled. > > This means that even for an invalid SAML Request (with an invalid > signature) the user will go through the authenticat

Re: [Dev] [IS-6] Need clarifications on Unique claim(s) as user identifier in Identity Server

2017-02-22 Thread Thanuja Jayasinghe
Hi Johann, On Tue, Feb 21, 2017 at 12:58 AM, Johann Nallathamby wrote: > Hi Isura, > > On Mon, Feb 20, 2017 at 5:23 PM, Isura Karunaratne wrote: > >> Hi, >> >> >> >> On Mon, Feb 20, 2017 at 2:20 PM, Johann Nallathamby >> wrote: >> >>> Hi Ayesha, >>> >>> On Mon, Feb 20, 2017 at 11:49 AM, Ayesha

[Dev] Please review and merge

2017-01-20 Thread Thanuja Jayasinghe
Hi All, Please review and merge [1]. This is the fix for [2]. [1] - https://github.com/wso2/carbon-kernel/pull/1277 [2] - https://github.com/wso2/carbon-kernel/issues/1276 Thanks, Thanuja -- *Thanuja Lakmal* Senior Software Engineer WSO2 Inc. http://wso2.com/ *lean.enterprise.middleware* Mobil

Re: [Dev] Please review and commit

2017-01-18 Thread Thanuja Jayasinghe
gt; > > > On Wed, Jan 18, 2017 at 10:34 PM, Thanuja Jayasinghe > wrote: > >> Hi Chamila, >> >> Please use following diffs for the 4.2.0 branch. >> >> Thanks, >> >> On Wed, Jan 18, 2017 at 12:52 PM, Chamila De Alwis >> wrote: >>

Re: [Dev] Please review and commit

2017-01-18 Thread Thanuja Jayasinghe
s://medium.com/@chamilad > > > > On Wed, Jan 18, 2017 at 12:45 PM, Niranjan Karunanandham < > niran...@wso2.com> wrote: > >> Hi ChamilaD, >> >> Can you look into this? >> >> Regards, >> Nira >> >> On Wed, Jan 18, 2017 at 11:47 AM, Than

Re: [Dev] Please review and commit

2017-01-17 Thread Thanuja Jayasinghe
Hi Team, The same fix [1] added for carbon-kernel 4.4.x branch and created the issue [2] also. [1] - https://github.com/wso2/carbon-kernel/pull/1273 [2] - https://github.com/wso2/carbon-kernel/issues/1272 Thanks, Thanuja On Wed, Jan 18, 2017 at 9:54 AM, Thanuja Jayasinghe wrote: > Hi T

[Dev] Please review and commit

2017-01-17 Thread Thanuja Jayasinghe
Hi Team, Please find the attached svn diffs created to resolve issue [1] and [2]. Please review and commit them. [1] - https://wso2.org/jira/browse/IDENTITY-5551 [2] - https://wso2.org/jira/browse/IDENTITY-3457 Thanks, Thanuja -- *Thanuja Lakmal* Senior Software Engineer WSO2 Inc. http://wso2.

[Dev] Show images persisted in a database or in a non-public folder from a uuf app

2017-01-13 Thread Thanuja Jayasinghe
Hi Sajith, For the user portal feature in IS 6.0.0, we have a requirement to show user image in the app. These images are currently persisted inside a database. So we need a way to provide image URL for those. I have created the issue [1] to track this. [1] - https://github.com/wso2/carbon-uuf/i

Re: [Dev] [VOTE] Release WSO2 Identity Server 5.3.0- RC3

2017-01-08 Thread Thanuja Jayasinghe
Hi, Tested following, - Account recovery with notification - Account recovery with security questions - Recaptcha - Self signup [+] Stable - go ahead and release Thanks, Thanuja On Mon, Jan 9, 2017 at 11:05 AM, Rushmin Fernando wrote: > Tested following features with MSSQL > > 1)

Re: [Dev] Clarification on C5 permission model

2016-08-11 Thread Thanuja Jayasinghe
Hi Vinod, You have to use the JAAS authorization API, instead calling CarbonPrincipal. isAuthorized. As an example, let say we have a CarbonPrincipal. So we can use that principal to build a Subject. Subject subject = new Subject(); subject.getPrincipals().add(carbonPrincipal); Then we can use

Re: [Dev] [C5] [CAAS] On Authentication: Invoking loginContext.login() returns LoginException of CNF for UsernamePasswordLoginModule

2016-07-26 Thread Thanuja Jayasinghe
Hi Rasika, This issue happens when 'carbon-security-caas' module does not activate properly. Can you debug the code [1], and check whether activate method is getting called. [1] - https://github.com/wso2/carbon-security/blob/master/components/org.wso2.carbon.security.caas/src/main/java/org/wso2/c

Re: [Dev] Controlling access to jaggery pages by permissions

2016-07-15 Thread Thanuja Jayasinghe
On Fri, Jul 15, 2016 at 3:56 PM, Rajkumar Rajaratnam wrote: > Hi, > > I have a jaggery app with some pages and secured them via SAML SSO with > WSO2 IS. So the authentication is implemented, now I have to implement the > authorization. I need to control access to these jaggery pages by > roles/pe

[Dev] [Architecture] WSO2 Identity Server 5.3.0 Milestone 3 Released..!!

2016-07-08 Thread Thanuja Jayasinghe
*WSO2 Identity Server 5.3.0 Milestone 3 Released..!!* The WSO2 Identity Server team is pleased to announce the 3rd Milestone of WSO2 Identity Server 5.3.0. You can download this distribution from https://github.com/wso2/product-is/releases/tag/v5.3.0-m3 Following list contains all features, impr

Re: [Dev] [Architecture] Force Password Reset and Password History validation

2016-06-20 Thread Thanuja Jayasinghe
Hi Pushpalanka/Isura, On Mon, Jun 20, 2016 at 4:50 PM, Pushpalanka Jayawardhana wrote: > Hi Isura, > > On Mon, Jun 20, 2016 at 10:52 AM, Isura Karunaratne > wrote: > >> HI all, >> >> I am working on $subject for WSO2 Identity Sever 5.3.0 release. Following >> are the currently identified impro

[Dev] [Architecture] WSO2 Identity Server 5.3.0 Milestone 2 Released..!!

2016-06-13 Thread Thanuja Jayasinghe
*WSO2 Identity Server 5.3.0 Milestone 2 Released..!!* The WSO2 Identity Server team is pleased to announce the 2nd Milestone of WSO2 Identity Server 5.3.0. You can download this distribution from https://github.com/wso2/product-is/releases/tag/v5.3.0-m2. Following list contains all features, imp

Re: [Dev] [C5] Retrieving claim values with Claim Manager changes

2016-05-25 Thread Thanuja Jayasinghe
Hi Himasha, This is a known issue and Jayanga will provide a fix soon. Thanks, Thanuja On Thu, May 26, 2016 at 10:19 AM, Himasha Guruge wrote: > [1] > https://github.com/wso2-extensions/carbon-security-user-store-jdbc/blob/75d466dd4110ab55fb5dcb728b33611ec116bf63/feature/resources/database/WSO

[Dev] WSO2 Carbon Security CAAS 1.0.0-M1 Released

2016-05-02 Thread Thanuja Jayasinghe
*WSO2 Carbon Security CAAS 1.0.0-M1 Released* The Identity Server team is pleased to announce the release of Carbon Security CAAS 1.0.0-M1. It is now available to download from here . *Features* *https://wso2.org/jira/issues/?filter

Re: [Dev] Code Quality Improvements for carbon-identity

2016-03-21 Thread Thanuja Jayasinghe
Hi Ayman, Thank you for your interest in carbon-identity repo. We are willing to get help from the open-source community to improve the quality of our repos. Please send pull request with the code improvements, we are willing to review and merge them. Thanks, Thanuja On Tue, Mar 22, 2016 at 10:

Re: [Dev] [VOTE] Release WSO2 Identity Server 5.1.0 RC2

2015-12-22 Thread Thanuja Jayasinghe
Hi All, I have tested Associated Accounts feature for both local(with multiple tenants and users stores) and federated users. So here is my vote. [x] -Stable - go ahead and release Thanks, Thanuja On Wed, Dec 23, 2015 at 12:46 PM, Pandula Kariyawasam wrote: > Hi All, > > I have tested follow

Re: [Dev] [IS] createApplication does not add values in to the DB for non-mandatory fields

2015-12-06 Thread Thanuja Jayasinghe
Hi Shani, Yes. First you need to call createApplication to register the service provider with a unique name. After that, call updateApplication method with required service provider configurations(like IS_SAAS_APP). We follow the same way in the management console also. Thanks, Thanuja On Sun, D

Re: [Dev] WSO2 Committers += Nuwandi Wickramasinghe

2015-08-30 Thread Thanuja Jayasinghe
Congtrz Nuwandi.!!! On Thu, Aug 27, 2015 at 8:32 PM, Johann Nallathamby wrote: > Hi All, > > It's my pleasure to announce Nuwandi Wickramasinghe as a WSO2 Committer. > Nuwandi has been a valuable contributor for WSO2 Identity Server product, > and in recognition of her contribution to WSO2,

Re: [Dev] WSO2 Committers += Madusanka Premaratne

2015-08-18 Thread Thanuja Jayasinghe
Congratz.!!! On Tue, Aug 18, 2015 at 11:33 AM, Harsha Kumara wrote: > Congratulations! > > On Tue, Aug 18, 2015 at 11:21 AM, Chamin Dias wrote: > >> Congratulations Madusanka..!!! >> >> On Tue, Aug 18, 2015 at 11:15 AM, Malintha Amarasinghe < >> malint...@wso2.com> wrote: >> >>> Congratzzz

Re: [Dev] XACML Sample Policy : Invalid Entitlement Policy

2015-06-19 Thread Thanuja Jayasinghe
Hi Abimaran, Please try following XACML policy, http://www.w3.org/2001/XMLSchema#string";> http://localhost:8280/services/echo/ http://www.w3.org/2001/XMLSchema#string"; MustBePresent="true">

Re: [Dev] [IS] [UserCore] When trying creating a role with existing name all the permissions get removed from existing user

2015-06-19 Thread Thanuja Jayasinghe
Hi Thusitha, Able to reproduce and created a public jira [1] for this issue. [1] - https://wso2.org/jira/browse/IDENTITY-3359 Thanks, Thanuja On Fri, Jun 19, 2015 at 11:51 AM, Thusitha Thilina Dayaratne < thusit...@wso2.com> wrote: > Hi Isura, > > > I'm writing some tests for user core functi

Re: [Dev] [IS] Foreign key references from Identity tables to User Manager tables

2015-06-09 Thread Thanuja Jayasinghe
Hi Tanya, We already have a public jira [1] for this. [1] - https://wso2.org/jira/browse/IDENTITY-3335 Thanks, Thanuja On Tue, Jun 9, 2015 at 3:25 PM, Tanya Madurapperuma wrote: > Hi IS team, > > We have encountered the following issue when running the identity mysql > script before the user

Re: [Dev] WSO2 Identity Server 5.1.0 release?

2015-05-18 Thread Thanuja Jayasinghe
No. This is the M1 release. Thanks, Thanuja On Mon, May 18, 2015 at 4:10 PM, Shyamal Pandya wrote: > Thanks, Thanuja! Is this the official GA release? > > > > *From:* Thanuja Jayasinghe [mailto:than...@wso2.com] > *Sent:* 18 May 2015 16:07 > *To:* Shyamal Pandya

Re: [Dev] WSO2 Identity Server 5.1.0 release?

2015-05-18 Thread Thanuja Jayasinghe
Hi Shyamal, You can download milestone 1 release from [1]. [1] - https://github.com/wso2/product-is/releases/tag/product-is-5.1.0-M1 Thanks, Thanuja On Mon, May 18, 2015 at 4:03 PM, Shyamal Pandya wrote: > Hello, > > > > I am hoping someone can help me out with this. The JIRA pages for WSO2

Re: [Dev] OAuth issues

2015-05-17 Thread Thanuja Jayasinghe
Hi Harshan, Copy and replace following element in identity.xml. ... false ... This will give you a access token response but scope will receive as 'default'. You may need to merge the fix done by APIM team as you are using "org.wso2.c

Re: [Dev] WSO2 Committers += Malithi Edirisinghe

2015-03-20 Thread Thanuja Jayasinghe
Congratz Malithi... On Fri, Mar 20, 2015 at 3:04 PM, Johann Nallathamby wrote: > Hi All, > > It's my pleasure to announce Malithi Edirisinghe as a WSO2 Committer. > Malithi has been a valuable contributor for WSO2 Identity Server product, > and in recognition of her contribution to WSO2, she

Re: [Dev] WSO2 Committers += Amila Godwin Shrimal

2015-03-20 Thread Thanuja Jayasinghe
Congratz Godwin... On Fri, Mar 20, 2015 at 3:04 PM, Johann Nallathamby wrote: > Hi All, > > It's my pleasure to announce Amila Godwin Shrimal as a WSO2 Committer. > Godwin has been a valuable contributor for WSO2 Identity Server product, > and in recognition of his contribution to WSO2, he h

Re: [Dev] IS sever start up issue in TAF 4.3.1

2015-03-17 Thread Thanuja Jayasinghe
t;> >> On Tue, Mar 17, 2015 at 1:14 PM, Krishantha Samaraweera < >> krishan...@wso2.com> wrote: >> >>> Hi Thanuja, >>> >>> Do you have default instance listed in automation.xml ? Can you share >>> automation.xml with all product config

Re: [Dev] IS sever start up issue in TAF 4.3.1

2015-03-17 Thread Thanuja Jayasinghe
gt; automation.xml with all product configurations. > > Are you getting this error when start the first node or third node ? > > Thank, > Krishantha. > > On Tue, Mar 17, 2015 at 1:03 PM, Thanuja Jayasinghe > wrote: > >> Hi All, >> >> Thanks for the replies

Re: [Dev] IS sever start up issue in TAF 4.3.1

2015-03-17 Thread Thanuja Jayasinghe
; Senior Software Engineer >> WSO2, Inc. >> Mobile: +94772325511 >> >> On Tue, Mar 17, 2015 at 8:45 AM, Akalanka Pagoda Arachchi < >> darsha...@wso2.com> wrote: >> >>> Hi Thanuja, >>> >>> While getting a new AutomationContext you are passing a

[Dev] IS sever start up issue in TAF 4.3.1

2015-03-16 Thread Thanuja Jayasinghe
Hi, We are in the process of moving existing test cases to TAF 4.3.1 and experienced following issue when we try to start another IS server. automation.xml configuration - localhost *9764*

Re: [Dev] Deploy Web App to Tomcat issue

2015-03-04 Thread Thanuja Jayasinghe
Hi All, I'm also getting the same exception[1] when I try to deploy the travelocity.war to the embedded tomcat with automation framework 4.3.x. But same war works fine without any issues for automation framework 4.2.6 and 4.2.8. How can I resolve this? [1] - java.lang.ClassNotFoundException: org

Re: [Dev] Test failure in org.wso2.carbon.registry.social.impl module due to a commit to user.core 4.4.0-SNAPSHOT

2015-02-26 Thread Thanuja Jayasinghe
> Sameera. > > On Thu, Feb 26, 2015 at 11:39 AM, Thanuja Jayasinghe > wrote: > >> Hi Sameera, >> >> This test case need to be fixed. will do the needful. >> >> Thanks, >> Thanuja. >> >> On Thu, Feb 26, 2015 at 11:32 AM, Sameera Jayasom

Re: [Dev] Test failure in org.wso2.carbon.registry.social.impl module due to a commit to user.core 4.4.0-SNAPSHOT

2015-02-25 Thread Thanuja Jayasinghe
Hi Sameera, This test case need to be fixed. will do the needful. Thanks, Thanuja. On Thu, Feb 26, 2015 at 11:32 AM, Sameera Jayasoma wrote: > I am building carbon-registry by changing the kernel version to Carbon > 4.4.0-SNAPSHOT. I am getting the following build failure. This failure > occur

Re: [Dev] WSO2 Committers += Senduran Balasubramaniyam

2015-02-18 Thread Thanuja Jayasinghe
Congratz Senduran.. On Thu, Feb 19, 2015 at 10:11 AM, Dilan Udara Ariyaratne wrote: > Congratulations, Senduran!!! > > > *Dilan U. Ariyaratne* > Software Engineer > WSO2 Inc. > Mobile: +94775149066 > lean . enterprise . middleware > > On Thu, Feb 19, 2015 at 12:05 AM, Rosh

Re: [Dev] WSO2 Committers += Pulasthi Mahawithana

2015-02-13 Thread Thanuja Jayasinghe
Congratz pulasthi On Fri, Feb 13, 2015 at 3:13 PM, Dakshika Jayathilaka wrote: > Congratulations Pulasthi! > > *Dakshika Jayathilaka* > Software Engineer > WSO2, Inc. > lean.enterprise.middleware > 0771100911 > > On Fri, Feb 13, 2015 at 3:03 PM, Prasanna Dangalla > wrote: > >> Congr

Re: [Dev] WSO2 Committers += Gayan Gunawardana

2015-02-04 Thread Thanuja Jayasinghe
Congratz Gayan... On Thu, Feb 5, 2015 at 8:53 AM, Jerad Rutnam wrote: > Congratulations Gayan! :) > > On Tue, Feb 3, 2015 at 8:32 AM, Jayanga Dissanayake > wrote: > >> Congratulations Gayan! >> >> *Jayanga Dissanayake* >> Senior Software Engineer >> WSO2 Inc. - http://wso2.com/ >> lean . en

Re: [Dev] WSO2 Committers += Tharindu Edirisinghe

2015-02-01 Thread Thanuja Jayasinghe
Congratz Tharindu... :) On Mon, Feb 2, 2015 at 9:53 AM, Chanuka Dissanayake wrote: > Congratulations Tharindu.. :) > > On Mon, Feb 2, 2015 at 9:30 AM, Aiyadurai Rajeevan > wrote: > >> Congrats Tharindu :) >> >> Thanks & Regards, >> S.A.Rajeevan >> Software Engineer WSO2 Inc >> E-Mail: rajeev...

Re: [Dev] WSO2 Committers += Buddhima Wijeweera

2014-12-31 Thread Thanuja Jayasinghe
CongratzBuddhima... On Wed, Dec 31, 2014 at 7:14 AM, Lasitha Wattaladeniya wrote: > Congratulations Buddhima! > > On Mon, Dec 29, 2014 at 7:55 AM, Kasun Indrasiri wrote: > >> Hi devs, >> >> Its my pleasure to welcome Buddhima Wijeweera as a WSO2 Committer. >> >> Buddhima, welcome aboard and

Re: [Dev] WSO2 Committers += Hasintha Indrajee

2014-12-29 Thread Thanuja Jayasinghe
Congratz Hasintha.!!! On Mon, Dec 29, 2014 at 10:29 AM, Tharindu Edirisinghe wrote: > Congratulations Hasintha !!! > > On Mon, Dec 29, 2014 at 8:51 PM, Milinda Perera wrote: > >> Congratulations Hasintha ... :) >> >> On Mon, Dec 29, 2014 at 8:27 PM, Chamin Nalinda wrote: >> >>> Congratulat

Re: [Dev] WSO2 Committers += Firzhan Naqash

2014-12-23 Thread Thanuja Jayasinghe
Congratz Firzhan. On Tue, Dec 23, 2014 at 5:42 AM, Dakshika Jayathilaka wrote: > Congratulations !! > > *Dakshika Jayathilaka* > Software Engineer > WSO2, Inc. > lean.enterprise.middleware > 0771100911 > > On Tue, Dec 23, 2014 at 2:27 PM, Manoj Kumara wrote: > >> Congratulations !! >> >

Re: [Dev] WSO2 Committers += Roshan Deniyage

2014-12-18 Thread Thanuja Jayasinghe
Congratz Roshan!!! On Thu, Dec 18, 2014 at 12:59 PM, Prabath Ariyarathna wrote: > > Congratulations Roshan > > On Thu, Dec 18, 2014 at 11:23 PM, Harsha Kumara wrote: >> >> Congratulations Roshan! >> >> On Thu, Dec 18, 2014 at 10:24 PM, Vijitha Ekanayake >> wrote: >>> >>> Congratulations

  1   2   >