[AMQ-5491] Standalone Web console Session timeout with user/password input

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.11.0
• Fix Version/s: 5.11.0
• Component/s: Web Console

Environment

Ubuntu 13.10 64Bits

• Patch Info: Patch Available
• Assignee: Hadrian Zbarcea
• Reporter: Dumitru HUSLEAG
• Created: 17/Dec/14 13:20
• Updated: 12/Jan/15 09:23
• Resolved: 05/Jan/15 19:02

Description

We use the web console as a standalone application deployed on a Jetty instance.
And we need to secure web access to it with ssl and user/password authentication.
We need to have a session timeout and to force re-input of the credentials on each session expiry.
As BASIC authentication does not allow easily to force login again on each HTTP session expiration I have to add a login form and a default session expiration of 30 minutes.

I am attaching to this request the git patch proposal containing:

• a new file login.html (modified copy of 403.html)
• the modified site.css
• and the modified web.xml (with extra <session-config>)

The Git patch is made on the current 5.11 SNAPSHOT.

The top commit at the moment I cloned the project from Git on the master branch is:

commit d25c52ccb2c9c23535f9d4488fe8be8600148852
Author: gtully <[e-mail]>
Date: Thu Dec 11 14:40:56 2014 +0000

https://issues.apache.org/jira/browse/AMQ-5483 - fix and test - assigned group counts are updated when lru map evicts a group assignment