IdStory Identity Manager

Hard, but I found and fixed problems.

Main problems were two:

• If token is disabled (because logout or some permissions changed), then AUTHORITY_CHANGED exception is throw. On this exception did FE logout the currently logged user. Problem here was in situation, when some request pending (long-polling) and in meantime user made a logout and login as differed user. After original request ended, was throw exception form BE, because token in the request was already disabled (because logout). FE receive the exception and made a logout for new user. I implemented new behavior, when logout of the user is made only if hash of token on FE and in the exception is same (if AUTHORITY_CHANGED exception is returned). I had to add new library on FE for computing SHA1 hash. I extended AUTHORITY_CHANGED exception on BE for return hash of token in this exception.
• The second problem was in situations where BE returns some response with exception. In this caseses was returned token used as new and setted to the SecurityContext. I modified this behavior and if FE receive response with some HTTP code larger then 400, then I don't make refresh of the token.

Commit: https://github.com/bcvsolutions/CzechIdMng/commit/d93dc03581705453990fac5981accfc2b7da61f1

I did test and code review, it works and code is nice, thx!