Add support for access control via Apache shiro

sebbonnet commented 8 years ago

that enables access control conditionally. This required upgrading dropwizard and so its jersey api client dependencies.
when enabled uses shiro.ini file to perform authentication and automatically redirects to login url when a protected resource is accessed without login
add login and logout endpoint for session management conditionally based on whether accessControl is enabled
allow session timeout to be configured conditionally too
end users are meant to provide a shiro.ini config file to define protected resources, users and other authentication logic based on Apache Shiro - an example of shiro.ini is available under test resources
also based on java8

Look here for the UI corresponding changes: spodkowinski/cassandra-reaper-ui#1

sebbonnet commented 8 years ago

The travis build is failing for this PR too, as it builds using java7. Do you envisage to upgade to java8 anytime soon? If not I'll have to revise the PR to make it work on java7 too

adejanovski commented 6 years ago

Hi @sebbonnet,

as you may know, we at The Last Pickle now maintain a hard fork of this project, in agreement with Spotify. As we widen its scope outside of just running repairs, Reaper users are requiring to secure the web UI now. Would you be willing to adapt your work on this PR (and on the UI part) and send it to github.com/thelastpickle/cassandra-reaper ?

It would be an awesome addition to the project for a most wanted feature !

adejanovski commented 6 years ago

I finally ported the feature to the TLP fork. Thanks for making the original work @sebbonnet !

spotify / cassandra-reaper

Add support for access control via Apache shiro #146