This is an automated email from the ASF dual-hosted git repository.
dependabot[bot] pushed a change to branch
dependabot/maven/org.apache.commons-commons-jexl3-3.7.0
in repository https://gitbox.apache.org/repos/asf/cxf.git
discard 4e6495820a2 Bump org.apache.commons:commons-jexl3 from 3.6.4 to 3.7.0
add 64f8929e1f8 Switch AbstractJwtHandler to require that the subject =
the client Id by default (#3291)
add d8009cd9593 Set setReuseAddress on the test socket to try to reduce
port conflicts (#3290)
add ff845cc5a75 Bump org.eclipse.persistence:org.eclipse.persistence.moxy
(#3286)
add 2f715e930cf Plug URIResolver into StaxUtils (#3293)
add 6af78b897f7 Enforce that Access tokens only are accepted in
JwtAccessTokenValidator (#3294)
add 0cc2bcad929 Bump cxf.tomcat.version from 11.0.23 to 11.0.24 (#3295)
add a36490434e2 CXF-9230: Update to Spring Boot 4.1 release line (#3040)
add db945030a75 Bump
org.apache.camel.springboot:camel-spring-boot-dependencies (#3285)
add 40bbcd8acfe Update Jetty to 12.1.11
add 42fafe58066 Put log messages and SOAP Fault messages to a resource
bundle so that downstream intergations of CXF can hint about their own
configuration parameters (#3300)
add 8ab0d8bc99f Fix bug with SAML clientAddress (#3298)
add 2a508d5235c Plug URIResolver into EndpointReferenceUtils (#3296)
add 3fa2ffd04bc Disallow a dynamic registration client from requesting
scopes without validation (#3297)
add 7a12ad6adb9 Bump cxf.hibernate.em.version from 7.4.3.Final to
7.4.4.Final (#3302)
add 16ac0e403ca [CXF-9229] Add PQC TLS 1.3 support via X25519MLKEM768
hybrid KEM (#3299)
add da5edccdb85 Add maxSize to BinaryDataProvider so the payload size
could be constrained (to 1Gb by default) (#3301)
add 3682dd9bbdc Bump org.hibernate.validator:hibernate-validator (#3306)
add 29759b77fe7 Bump actions/setup-java from 5.4.0 to 5.5.0 (#3309)
add 9ade17cb603 Bump github/codeql-action/upload-sarif from 4.36.2 to
4.37.0 (#3305)
add 7564c7005e3 Bump github/codeql-action/analyze from 4.36.2 to 4.37.0
(#3308)
add dad42493b27 Bump io.opentelemetry.semconv:opentelemetry-semconv (#3312)
add 45685c09712 Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38
(#3313)
add 1d6be7fe572 Bump cxf.opentelemetry.version from 1.63.0 to 1.64.0
(#3314)
add 89e1fa866b9 Bump cxf.jackson.version from 3.2.0 to 3.2.1 (#3315)
add c409f44cd71 Filter claims by granted scopes for the IdToken case
(#3304)
add 0607af83c10 Make sure MessageContextImpl respects the limit to the
maximum number of attachments to be collected (#3311)
add 413d75ec1d9 Enforce TLS client certificate and store the application
certificates for dynamic registration (#3316)
add fd3cc5f7d93 Don't perpetuate security sensitive values from the JWT
(#3317)
add 924de9178df Bump cxf.junit6.version from 6.1.1 to 6.1.2 (#3320)
add 6061f356304 Bump actions/setup-java from 5.5.0 to 5.6.0 (#3319)
add 0008935708d For SAML, require that the TLS client certificate subject
matches that of the SAML Assertion (#3322)
add c1d7602f692 Bump org.graalvm.buildtools:native-maven-plugin from 1.1.3
to 1.1.4 (#3324)
add ef597b0d721 Read WSDL imports through CXF's StaxUtils instead of
WSDL4J (#3323)
add 4a2ec3445fb Validate redirect URIs according to OpenID Connect Dynamic
Client Registration 1.0 specification (#3318)
add eca4abb9966 Bump org.graalvm.buildtools:native-maven-plugin from 1.1.4
to 1.1.5 (#3326)
add faf40ba0c98 CXF-9225 - Enforce nonce for the hybrid case (#3328)
add 62623da87f0 Perform validation for OIDC self-issued tokens (#3327)
add 10a34cb6e3f Bump com.puppycrawl.tools:checkstyle from 13.7.0 to 13.8.0
(#3329)
add 71ec1d3d2f7 CXF-9223 - Improve prefix matching for OAuth audience URIs
(#3331)
add 26dc065a7b6 CXF-9223 - Disable audienceIsEndpointAddress on main only
(#3332)
add 5ec112363bf Fix ExecutorService leak in WS-RM oneway tests (#2963)
add 4a3901b2d6f Update Jettison to 1.5.7 (#3335)
add 4aee04cb8dd Update Neethi to 3.2.3 (#3336)
add 1695c05def5 Default to sending binary JMS messages as BytesMessages
from now on, make it configurable (#3325)
add 6db9f73fdf1 Bump actions/checkout from 7.0.0 to 7.0.1 (#3338)
add bd9f34a61b0 Bump github/codeql-action/init from 4.37.0 to 4.37.3
(#3339)
add c040fefbb36 Bump github/codeql-action/upload-sarif from 4.37.0 to
4.37.3 (#3340)
add 7f4cb4e3b76 Disable JMS ObjectMessage deserialization by default
(#3337)
add dd9af5c9ae4 match saml sso issuer exactly instead of by prefix (#3281)
add 3df6120893d Honor the set-remove boolean in
DefaultEncryptingCodeDataProvider (#3345)
add e18116b9458 Make sure LazyAttachmentCollection respects max attachment
count in all cases (#3344)
add df5795760b3 Check if tokens have been revoked first in
DefaultEncryptingOAuthDataProvider (#3347)
add c95fb636693 Make sure the refresh token client matches that of the
authenticated client (#3346)
add 61ca70fdbb7 Fixing security versions
add 396096f8493 Add a lock when revoking tokens (#3348)
add 6512e0a4b53 update CXF 4.2.3 release notes
add 54f2cdc2f78 avoid using snapshot cxf.build-utils.version
add 33259395b45 [maven-release-plugin] prepare release cxf-4.2.3
add 1022175ea5d [maven-release-plugin] prepare for next development
iteration
add 7c0c41157d5 Fix flaky SSE system tests (#3349)
add 8df5c6271f8 Bump org.bouncycastle:bc-fips from 2.1.2 to 2.1.3 (#3334)
add 8ae7149597e Bump cxf.hibernate.em.version from 7.4.4.Final to
7.4.5.Final (#3352)
add 5755d9f2d1f Bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#3351)
add c37c9aedfbb Bump org.apache.felix:maven-bundle-plugin from 6.0.2 to
6.1.0 (#3353)
add 457dfbefb2e [CXF-9234]Concurrent DynamicClientFactory.createClient for
the same W… (#3350)
add 28da8f17c37 Bump cxf.tika.version from 3.3.1 to 3.3.2 (#3354)
add 24c06e09c4d Bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.1
(#3355)
add 2cdbf700836 Update Netty to 4.2.17.Final
add 04045cdfb8c Update Jetty to 12.1.12
add 1acb713ec0b Update Swagger Core to 2.2.53
add 1d015b2adfe Fix max_age check in OidcClientCodeRequestFilter (#3357)
add d2b1efb117a Bump actions/setup-java from 5.6.0 to 5.7.0 (#3361)
add 4516b07cbf2 Bump cxf.bcprov.version from 1.84 to 1.85 (#3356)
add 2cacc27205c Bump github/codeql-action/upload-sarif from 4.37.3 to
4.37.6 (#3360)
add 0bf19d9b061 Bump github/codeql-action/init from 4.37.3 to 4.37.6
(#3362)
add 3ac37bcd7b7 Fixup action comments using pinact
add d1a09b318c7 Update cxf-build-utils to 4.1.5-SNAPSHOT
add 32007a00c2b Update AsyncHttpClient to 3.0.13
add 854c678b244 Update JUnit Jupiter to 6.1.3
add 29d3443f149 Update OpenTelemetry to 1.65.0
add 4d814b8f741 Revert "Update OpenTelemetry to 1.65.0"
add 90206a28630 Fix some atomicity issues in removeCodeGrant (#3358)
add 78910f85249 Bump cxf.openwebbeans.version from 4.1.0 to 4.1.1 (#3363)
add 6a24c19501c Bump versions in coverage-report and cxf-rest-tck
add c21d5d310bb Porting locking fixes to revokeRefreshToken (#3364)
add 6f3e9de130d Bump org.apache.groovy:groovy from 5.0.7 to 5.0.8 (#3365)
add a272d6c8ed1 Fix SHA comments
add 58fe3d16056 CXF-9240 - OAuthJSONProvider.appendJsonPair() does not
escape JSON string values (#3367)
add d8f201b8484 Bump org.webjars:swagger-ui from 5.32.8 to 5.32.11 (#3368)
add cefe44b7ee8 Bump cxf.johnzon.version from 2.1.0 to 2.2.0 (#3374)
add a588b3f4080 Bump org.apache.httpcomponents.client5:httpclient5 from
5.6.2 to 5.6.4 in /parent (#3371)
add e7b86b90c91 Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0
to 3.5.1 (#3376)
add 98f5aa50913 Bump org.apache.commons:commons-jexl3 from 3.6.4 to 3.7.0
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (4e6495820a2)
\
N -- N -- N
refs/heads/dependabot/maven/org.apache.commons-commons-jexl3-3.7.0 (98f5aa50913)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.github/workflows/codeql-analysis.yml | 8 +-
.github/workflows/pull-request-build.yml | 4 +-
.github/workflows/scorecards.yml | 6 +-
SECURITY.md | 5 +-
bom/pom.xml | 2 +-
core/pom.xml | 2 +-
.../cxf/attachment/AttachmentDeserializer.java | 3 +-
.../cxf/attachment/LazyAttachmentCollection.java | 16 +-
.../jsse/TLSClientParametersConfig.java | 3 +
.../cxf/configuration/jsse/TLSParameterBase.java | 21 ++
.../jsse/TLSServerParametersConfig.java | 3 +
.../java/org/apache/cxf/helpers/CastUtils.java | 10 +-
.../main/java/org/apache/cxf/helpers/IOUtils.java | 30 +-
.../java/org/apache/cxf/io/CachedOutputStream.java | 8 +-
.../java/org/apache/cxf/staxutils/StaxUtils.java | 2 +
.../cxf/ws/addressing/AddressingConstants.java | 2 +-
.../org/apache/cxf/ws/addressing/ContextUtils.java | 119 +++++-
.../cxf/ws/addressing/EndpointReferenceUtils.java | 19 +-
.../apache/cxf/ws/addressing/Messages.properties | 19 +-
.../resources/schemas/configuration/security.xsd | 32 ++
.../cxf/attachment/AttachmentDeserializerTest.java | 124 ++++--
.../org/apache/cxf/staxutils/StaxUtilsTest.java | 13 +
.../apache/cxf/ws/addressing/ContextUtilsTest.java | 81 ++++
.../ws/addressing/EndpointReferenceUtilsTest.java | 141 +++++++
coverage/pom.xml | 2 +-
distribution/javadoc/pom.xml | 46 +--
distribution/manifest/pom.xml | 94 ++---
distribution/pom.xml | 122 +++---
distribution/src/main/release/release_notes.txt | 28 +-
.../src/main/release/samples/aegis/pom.xml | 10 +-
.../main/release/samples/aegis_standalone/pom.xml | 4 +-
.../src/main/release/samples/callback/pom.xml | 10 +-
.../samples/configuration_interceptor/pom.xml | 10 +-
.../src/main/release/samples/corba/bank/pom.xml | 4 +-
.../samples/corba/bank_ws_addressing/pom.xml | 4 +-
.../main/release/samples/corba/hello_world/pom.xml | 10 +-
.../release/samples/groovy_spring_support/pom.xml | 10 +-
.../main/release/samples/in_jvm_transport/pom.xml | 10 +-
.../main/release/samples/java_first_jaxws/pom.xml | 8 +-
.../samples/java_first_jaxws_factory_bean/pom.xml | 8 +-
.../main/release/samples/java_first_jms/pom.xml | 6 +-
.../main/release/samples/java_first_pojo/pom.xml | 8 +-
.../samples/java_first_spring_support/pom.xml | 8 +-
.../src/main/release/samples/jax_rs/basic/pom.xml | 8 +-
.../samples/jax_rs/basic_http2_jetty/pom.xml | 6 +-
.../samples/jax_rs/basic_http2_netty/pom.xml | 6 +-
.../samples/jax_rs/basic_http2_undertow/pom.xml | 6 +-
.../release/samples/jax_rs/basic_https/pom.xml | 8 +-
.../main/release/samples/jax_rs/basic_oidc/pom.xml | 10 +-
.../main/release/samples/jax_rs/big_query/pom.xml | 14 +-
.../samples/jax_rs/content_negotiation/pom.xml | 10 +-
.../pom.xml | 2 +-
.../samples/jax_rs/description_openapi_v3/pom.xml | 2 +-
.../jax_rs/description_openapi_v3_spring/pom.xml | 2 +-
.../jax_rs/description_openapi_v3_web/pom.xml | 2 +-
.../release/samples/jax_rs/graalvm_basic/pom.xml | 6 +-
.../src/main/release/samples/jax_rs/odata/pom.xml | 6 +-
.../src/main/release/samples/jax_rs/search/pom.xml | 14 +-
.../release/samples/jax_rs/spring_boot/pom.xml | 8 +-
.../jax_rs/spring_boot_scan/application/pom.xml | 6 +-
.../samples/jax_rs/spring_boot_scan/client/pom.xml | 6 +-
.../spring_boot_scan/eureka-registry/pom.xml | 2 +-
.../release/samples/jax_rs/spring_security/pom.xml | 8 +-
.../main/release/samples/jax_rs/sse_cdi/pom.xml | 8 +-
.../main/release/samples/jax_rs/sse_client/pom.xml | 8 +-
.../main/release/samples/jax_rs/sse_spring/pom.xml | 6 +-
.../main/release/samples/jax_rs/sse_tomcat/pom.xml | 6 +-
.../release/samples/jax_rs/tracing_brave/pom.xml | 4 +-
.../samples/jax_rs/tracing_micrometer/pom.xml | 14 +-
.../samples/jax_rs/tracing_opentelemetry/pom.xml | 14 +-
.../jax_rs/tracing_opentelemetry_camel/pom.xml | 2 +-
.../samples/jax_rs/tracing_opentracing/pom.xml | 14 +-
.../main/release/samples/jax_rs/websocket/pom.xml | 10 +-
.../release/samples/jax_rs/websocket_web/pom.xml | 2 +-
.../samples/jax_server_aegis_client/pom.xml | 10 +-
.../src/main/release/samples/jaxws_async/pom.xml | 14 +-
.../samples/jaxws_dispatch_provider/pom.xml | 10 +-
.../src/main/release/samples/jaxws_graalvm/pom.xml | 8 +-
.../samples/jaxws_graalvm_dynamic/client/pom.xml | 4 +-
.../samples/jaxws_graalvm_dynamic/server/pom.xml | 6 +-
.../main/release/samples/jaxws_handlers/pom.xml | 10 +-
.../main/release/samples/jaxws_spring_boot/pom.xml | 6 +-
.../src/main/release/samples/jms_pubsub/pom.xml | 4 +-
.../src/main/release/samples/jms_queue/pom.xml | 8 +-
.../src/main/release/samples/jms_spec_demo/pom.xml | 8 +-
.../main/release/samples/jms_spring_config/pom.xml | 4 +-
.../samples/js_browser_client_java_first/pom.xml | 10 +-
.../samples/js_browser_client_simple/pom.xml | 12 +-
.../src/main/release/samples/js_client/pom.xml | 12 +-
.../src/main/release/samples/js_provider/pom.xml | 10 +-
distribution/src/main/release/samples/mtom/pom.xml | 10 +-
.../main/release/samples/performance/base/pom.xml | 2 +-
.../main/release/samples/performance/jaxrs/pom.xml | 2 +-
.../samples/performance/soap_http_doc_lit/pom.xml | 2 +-
distribution/src/main/release/samples/pom.xml | 24 +-
.../main/release/samples/restful_dispatch/pom.xml | 10 +-
.../release/samples/ruby_spring_support/pom.xml | 8 +-
.../src/main/release/samples/soap_header/pom.xml | 10 +-
distribution/src/main/release/samples/sts/pom.xml | 20 +-
.../src/main/release/samples/throttling/pom.xml | 16 +-
.../src/main/release/samples/ws_addressing/pom.xml | 10 +-
.../src/main/release/samples/ws_discovery/pom.xml | 14 +-
.../src/main/release/samples/ws_eventing/pom.xml | 12 +-
.../main/release/samples/ws_notification/pom.xml | 2 +-
.../src/main/release/samples/ws_policy/pom.xml | 10 +-
.../src/main/release/samples/ws_rm/pom.xml | 12 +-
.../release/samples/ws_security/sign_enc/pom.xml | 20 +-
.../samples/ws_security/sign_enc_policy/pom.xml | 16 +-
.../main/release/samples/ws_security/ut/pom.xml | 12 +-
.../release/samples/ws_security/ut_policy/pom.xml | 16 +-
.../release/samples/ws_transaction/client/pom.xml | 2 +-
.../main/release/samples/ws_transaction/pom.xml | 6 +-
.../samples/ws_transaction/ws_first/pom.xml | 2 +-
.../samples/ws_transaction/ws_second/pom.xml | 2 +-
.../src/main/release/samples/wsdl_first/pom.xml | 20 +-
.../samples/wsdl_first_dynamic_client/pom.xml | 10 +-
.../main/release/samples/wsdl_first_https/pom.xml | 12 +-
.../release/samples/wsdl_first_pure_xml/pom.xml | 10 +-
.../main/release/samples/wsdl_first_rpclit/pom.xml | 10 +-
.../main/release/samples/wsdl_first_soap12/pom.xml | 10 +-
.../release/samples/wsdl_first_xml_wrapped/pom.xml | 10 +-
integration/cdi/pom.xml | 2 +-
integration/jca/pom.xml | 2 +-
integration/pom.xml | 2 +-
integration/spring-boot/autoconfigure/pom.xml | 2 +-
integration/spring-boot/pom.xml | 2 +-
integration/spring-boot/starter-jaxrs/pom.xml | 2 +-
integration/spring-boot/starter-jaxws/pom.xml | 2 +-
integration/tracing/tracing-brave/pom.xml | 2 +-
integration/tracing/tracing-micrometer/pom.xml | 2 +-
integration/tracing/tracing-opentelemetry/pom.xml | 2 +-
integration/tracing/tracing-opentracing/pom.xml | 2 +-
maven-plugins/archetypes/cxf-jaxrs-service/pom.xml | 2 +-
.../archetypes/cxf-jaxws-javafirst/pom.xml | 4 +-
.../archetypes/cxf-jaxws-wsdlfirst/pom.xml | 2 +-
maven-plugins/archetypes/pom.xml | 2 +-
maven-plugins/codegen-plugin/pom.xml | 2 +-
maven-plugins/corba/pom.xml | 2 +-
maven-plugins/java2wadl-plugin/pom.xml | 4 +-
maven-plugins/java2ws-plugin/pom.xml | 2 +-
maven-plugins/pom.xml | 2 +-
maven-plugins/wadl2java-plugin/pom.xml | 2 +-
maven-plugins/wsdl-validator-plugin/pom.xml | 2 +-
parent/pom.xml | 62 +--
pom.xml | 6 +-
rt/bindings/coloc/pom.xml | 2 +-
rt/bindings/corba/pom.xml | 2 +-
rt/bindings/pom.xml | 2 +-
rt/bindings/soap/pom.xml | 2 +-
rt/bindings/xml/pom.xml | 2 +-
rt/databinding/aegis/pom.xml | 2 +-
rt/databinding/jaxb/pom.xml | 2 +-
rt/databinding/pom.xml | 2 +-
rt/features/clustering/pom.xml | 2 +-
rt/features/logging/pom.xml | 2 +-
rt/features/metrics/pom.xml | 2 +-
rt/features/pom.xml | 2 +-
rt/features/throttling/pom.xml | 2 +-
rt/frontend/jaxrs/pom.xml | 2 +-
.../apache/cxf/jaxrs/ext/MessageContextImpl.java | 27 +-
.../cxf/jaxrs/provider/BinaryDataProvider.java | 7 +-
.../cxf/jaxrs/provider/EntityPartProvider.java | 8 +
.../cxf/jaxrs/provider/BinaryDataProviderTest.java | 19 +
.../cxf/jaxrs/provider/EntityPartProviderTest.java | 170 +++++++++
.../cxf/jaxrs/provider/MultipartProviderTest.java | 133 +++++++
rt/frontend/jaxws/pom.xml | 2 +-
rt/frontend/js/pom.xml | 2 +-
rt/frontend/pom.xml | 2 +-
rt/frontend/simple/pom.xml | 2 +-
.../cxf/endpoint/dynamic/DynamicClientFactory.java | 12 +-
rt/javascript/javascript-rt/pom.xml | 2 +-
rt/javascript/javascript-tests/pom.xml | 2 +-
rt/javascript/pom.xml | 2 +-
rt/management/pom.xml | 2 +-
rt/pom.xml | 2 +-
rt/rs/client/pom.xml | 2 +-
.../cache/CacheControlClientReaderInterceptor.java | 9 +-
.../jaxrs/client/cache/CacheControlFeature.java | 8 +-
rt/rs/description-common-openapi/pom.xml | 2 +-
rt/rs/description-microprofile-openapi/pom.xml | 2 +-
rt/rs/description-openapi-v3/pom.xml | 2 +-
rt/rs/description-swagger-ui/pom.xml | 2 +-
rt/rs/description/pom.xml | 2 +-
rt/rs/extensions/json-basic/pom.xml | 2 +-
rt/rs/extensions/providers/pom.xml | 2 +-
rt/rs/extensions/reactivestreams/pom.xml | 2 +-
rt/rs/extensions/reactor/pom.xml | 2 +-
rt/rs/extensions/rx/pom.xml | 2 +-
rt/rs/extensions/rx2/pom.xml | 2 +-
rt/rs/extensions/rx3/pom.xml | 2 +-
rt/rs/extensions/search/pom.xml | 2 +-
rt/rs/http-sci/pom.xml | 2 +-
rt/rs/microprofile-client/pom.xml | 2 +-
rt/rs/pom.xml | 2 +-
rt/rs/security/cors/pom.xml | 2 +-
rt/rs/security/http-signature/pom.xml | 2 +-
rt/rs/security/jose-parent/jose-jaxrs/pom.xml | 2 +-
rt/rs/security/jose-parent/jose/pom.xml | 2 +-
rt/rs/security/jose-parent/pom.xml | 2 +-
rt/rs/security/oauth-parent/oauth2-saml/pom.xml | 13 +-
.../grants/saml/Saml2BearerGrantHandler.java | 113 ++++++
.../security/oauth2/saml/SamlOAuthValidator.java | 2 +-
.../grants/saml/Saml2BearerGrantHandlerTest.java | 218 +++++++++++
.../oauth2/saml/SamlOAuthValidatorTest.java | 127 +++++++
rt/rs/security/oauth-parent/oauth2/pom.xml | 2 +-
.../oauth2/filters/JwtAccessTokenValidator.java | 17 +
.../oauth2/filters/OAuthRequestFilter.java | 28 +-
.../code/DefaultEncryptingCodeDataProvider.java | 34 +-
.../oauth2/grants/code/JPACMTCodeDataProvider.java | 55 ++-
.../oauth2/grants/code/JPACodeDataProvider.java | 8 +-
.../oauth2/grants/code/JwtRequestCodeFilter.java | 19 +
.../oauth2/grants/jwt/AbstractJwtHandler.java | 7 +
.../oauth2/provider/AbstractOAuthDataProvider.java | 14 +
.../DefaultEncryptingOAuthDataProvider.java | 8 +
.../oauth2/provider/JPAOAuthDataProvider.java | 22 ++
.../oauth2/provider/OAuthJSONProvider.java | 125 ++----
.../oauth2/services/AbstractTokenService.java | 37 +-
.../services/DynamicRegistrationService.java | 135 ++++++-
.../filters/JwtAccessTokenValidatorTest.java | 39 +-
.../oauth2/filters/OAuthRequestFilterTest.java | 134 +++++++
.../DefaultEncryptingCodeDataProviderTest.java | 240 ++++++++++++
.../grants/code/JPACodeDataProviderTest.java | 25 ++
.../grants/code/JwtRequestCodeFilterTest.java | 201 ++++++++++
.../grants/jwt/JwtBearerGrantHandlerTest.java | 134 +++++++
.../provider/AbstractOAuthDataProviderTest.java | 57 +++
.../DefaultEncryptingOAuthDataProviderTest.java | 377 ++++++++++++++++++
.../oauth2/provider/OAuthJSONProviderTest.java | 72 +++-
.../oauth2/services/AbstractTokenServiceTest.java | 90 +++++
.../services/DynamicRegistrationServiceTest.java | 273 ++++++++++++++
rt/rs/security/oauth-parent/pom.xml | 2 +-
rt/rs/security/pom.xml | 2 +-
rt/rs/security/sso/oidc/pom.xml | 2 +-
.../cxf/rs/security/oidc/idp/UserInfoService.java | 60 ++-
.../rs/security/oidc/rp/OidcClaimsValidator.java | 111 ++++--
.../oidc/rp/OidcClientCodeRequestFilter.java | 94 ++++-
.../rs/security/oidc/idp/UserInfoServiceTest.java | 82 ++++
.../security/oidc/rp/OidcClaimsValidatorTest.java | 420 +++++++++++++++++++++
.../rp/OidcClientCodeRequestFilterMaxAgeTest.java | 332 ++++++++++++++++
.../rp/OidcClientCodeRequestFilterNonceTest.java | 402 ++++++++++++++++++++
rt/rs/security/sso/saml/pom.xml | 2 +-
.../saml/sso/SAMLSSOResponseValidator.java | 68 +++-
.../saml/sso/SAMLSSOResponseValidatorTest.java | 82 ++++
rt/rs/security/xml/pom.xml | 2 +-
rt/rs/sse/pom.xml | 2 +-
rt/security-saml/pom.xml | 2 +-
rt/security/pom.xml | 2 +-
rt/transports/http-hc/pom.xml | 2 +-
rt/transports/http-hc5/pom.xml | 2 +-
.../http/asyncclient/hc5/AsyncHTTPConduit.java | 3 +-
.../hc5/URLConnectionAsyncHTTPConduit.java | 3 +-
rt/transports/http-jetty/pom.xml | 2 +-
.../http_jetty/BCJsseServerALPNProcessor.java | 79 ++++
.../http_jetty/JettyHTTPServerEngine.java | 31 +-
.../org.eclipse.jetty.io.ssl.ALPNProcessor$Server | 1 +
rt/transports/http-netty/netty-client/pom.xml | 2 +-
rt/transports/http-netty/netty-server/pom.xml | 2 +-
rt/transports/http-undertow/pom.xml | 2 +-
rt/transports/http/pom.xml | 2 +-
.../cxf/transport/http/HttpClientHTTPConduit.java | 4 +
.../cxf/transport/https/InsecureTrustManager.java | 43 +++
.../org/apache/cxf/transport/https/SSLUtils.java | 40 ++
rt/transports/jms/pom.xml | 2 +-
.../org/apache/cxf/transport/jms/JMSConduit.java | 3 +-
.../apache/cxf/transport/jms/JMSConfigFactory.java | 2 +
.../apache/cxf/transport/jms/JMSConfiguration.java | 38 ++
.../apache/cxf/transport/jms/JMSDestination.java | 4 +-
.../apache/cxf/transport/jms/JMSMessageUtils.java | 18 +-
.../apache/cxf/transport/jms/uri/JMSEndpoint.java | 26 ++
.../transport/jms/util/JMSMessageConverter.java | 13 +
.../org/apache/cxf/transport/jms/util/JMSUtil.java | 20 +-
.../cxf/transport/jms/JMSConfigFactoryTest.java | 14 +
.../cxf/transport/jms/uri/JMSEndpointTest.java | 24 ++
.../jms/util/JMSMessageConverterTest.java | 55 +++
.../apache/cxf/transport/jms/util/JMSUtilTest.java | 18 +-
rt/transports/local/pom.xml | 2 +-
rt/transports/pom.xml | 2 +-
rt/transports/udp/pom.xml | 2 +-
rt/transports/websocket/pom.xml | 2 +-
rt/ws/addr/pom.xml | 2 +-
.../ws/addressing/impl/InternalContextUtils.java | 16 +-
.../cxf/ws/addressing/impl/MAPAggregatorImpl.java | 21 +-
rt/ws/eventing/pom.xml | 2 +-
rt/ws/mex/pom.xml | 2 +-
rt/ws/policy/pom.xml | 2 +-
rt/ws/pom.xml | 2 +-
rt/ws/rm/pom.xml | 2 +-
rt/ws/security/pom.xml | 2 +-
rt/ws/transfer/pom.xml | 2 +-
rt/wsdl/pom.xml | 2 +-
.../cxf/wsdl11/AbstractWrapperWSDLLocator.java | 39 ++
.../org/apache/cxf/wsdl11/WSDLManagerImpl.java | 35 +-
.../org/apache/cxf/wsdl11/WSDLManagerImplTest.java | 49 +++
.../apache/cxf/wsdl11/wsdl_xxe_import_main.wsdl | 50 ++-
.../cxf/wsdl11/wsdl_xxe_import_malicious.xsd | 49 +++
services/pom.xml | 2 +-
services/sts/pom.xml | 2 +-
services/sts/sts-core/pom.xml | 2 +-
services/sts/systests/advanced/pom.xml | 2 +-
services/sts/systests/basic/pom.xml | 2 +-
services/sts/systests/pom.xml | 2 +-
services/sts/systests/sts-osgi/pom.xml | 2 +-
services/ws-discovery/pom.xml | 2 +-
services/ws-discovery/ws-discovery-api/pom.xml | 2 +-
services/ws-discovery/ws-discovery-service/pom.xml | 2 +-
services/wsn/pom.xml | 2 +-
services/wsn/wsn-api/pom.xml | 2 +-
services/wsn/wsn-core/pom.xml | 2 +-
services/wsn/wsn-osgi/pom.xml | 2 +-
services/xkms/pom.xml | 2 +-
services/xkms/xkms-client/pom.xml | 2 +-
services/xkms/xkms-common/pom.xml | 2 +-
services/xkms/xkms-service/pom.xml | 2 +-
services/xkms/xkms-war/pom.xml | 2 +-
services/xkms/xkms-x509-handlers/pom.xml | 2 +-
services/xkms/xkms-x509-repo-ldap/pom.xml | 2 +-
systests/cdi/base/pom.xml | 2 +-
systests/cdi/cdi-owb/cdi-multiple-apps-owb/pom.xml | 2 +-
systests/cdi/cdi-owb/cdi-no-apps-owb/pom.xml | 2 +-
systests/cdi/cdi-owb/cdi-producers-owb/pom.xml | 2 +-
systests/cdi/cdi-owb/pom.xml | 2 +-
.../cdi/cdi-weld/cdi-multiple-apps-weld/pom.xml | 2 +-
systests/cdi/cdi-weld/cdi-no-apps-weld/pom.xml | 2 +-
systests/cdi/cdi-weld/cdi-producers-weld/pom.xml | 2 +-
systests/cdi/cdi-weld/pom.xml | 2 +-
systests/cdi/pom.xml | 2 +-
systests/container-integration/grizzly/pom.xml | 2 +-
systests/container-integration/pom.xml | 2 +-
systests/container-integration/webapp/pom.xml | 2 +-
systests/databinding/pom.xml | 2 +-
.../apache/cxf/systest/jaxb/MTOMBase64Test.java | 2 +
systests/forked/pom.xml | 2 +-
systests/jaxrs/pom.xml | 2 +-
systests/jaxws/pom.xml | 2 +-
.../jaxws/DynamicClientConcurrencyTest.java | 120 ++++++
systests/kerberos/pom.xml | 2 +-
systests/ldap/pom.xml | 2 +-
systests/microprofile/client/async/pom.xml | 2 +-
systests/microprofile/client/jaxrs/pom.xml | 2 +-
systests/microprofile/client/nocdi/pom.xml | 2 +-
systests/microprofile/client/tracing/pom.xml | 2 +-
systests/microprofile/client/weld/pom.xml | 2 +-
systests/microprofile/pom.xml | 2 +-
systests/pom.xml | 2 +-
systests/rs-http-sci/pom.xml | 2 +-
systests/rs-security/pom.xml | 2 +-
.../jaxrs/security/oauth2/tls/serverTls-fips.xml | 5 +
.../jaxrs/security/oauth2/tls/serverTls.xml | 5 +
.../cxf/systest/jaxrs/security/oidc/client.xml | 3 +
.../jaxrs/security/oidc/oidc-server-dynreg.xml | 2 +-
systests/rs-sse/pom.xml | 2 +-
systests/rs-sse/rs-sse-base/pom.xml | 2 +-
.../jaxrs/sse/BookStoreClientCloseable.java | 14 +-
systests/rs-sse/rs-sse-jetty/pom.xml | 2 +-
systests/rs-sse/rs-sse-tomcat/pom.xml | 2 +-
systests/rs-sse/rs-sse-undertow/pom.xml | 2 +-
systests/spring-boot/pom.xml | 2 +-
systests/tracing/pom.xml | 2 +-
systests/transport-hc5/pom.xml | 2 +-
.../http2/AbstractApacheClientServerHttp2Test.java | 2 +-
.../hc5/https/clientauth/ClientAuthTest.java | 2 +-
.../systest/hc5/https/trust/TrustManagerTest.java | 2 +-
.../hc5/https/trust/client-trust-manager-ref.xml | 2 +-
systests/transport-jms/pom.xml | 2 +-
systests/transport-netty/pom.xml | 2 +-
systests/transport-undertow/pom.xml | 2 +-
.../AbstractUndertowClientServerHttp2Test.java | 2 +-
systests/transports/pom.xml | 31 +-
.../cxf/systest/https/pqc/BCJssePQCTest.java | 166 ++++++++
.../apache/cxf/systest/https/pqc/PQCTLSTest.java | 148 ++++++++
.../src/test/resources/logging.properties | 4 +-
.../cxf/systest/https/pqc/bcjsse-client.xml} | 30 +-
.../cxf/systest/https/pqc/bcjsse-server.xml} | 58 ++-
.../apache/cxf/systest/https/pqc/pqc-client.xml} | 25 +-
.../apache/cxf/systest/https/pqc/pqc-server.xml} | 51 ++-
systests/uncategorized/pom.xml | 2 +-
systests/ws-rm/pom.xml | 2 +-
.../systest/ws/rm/DeliveryAssuranceOnewayTest.java | 11 +
.../systest/ws/rm/MessageCallbackOnewayTest.java | 12 +
systests/ws-security-examples/pom.xml | 2 +-
systests/ws-security/pom.xml | 2 +-
systests/ws-specs/pom.xml | 2 +-
systests/ws-transfer/pom.xml | 2 +-
systests/wsdl_maven/codegen/pom.xml | 2 +-
systests/wsdl_maven/java2ws/pom.xml | 2 +-
systests/wsdl_maven/pom.xml | 2 +-
tck/cxf-tck/pom.xml | 2 +-
testutils/pom.xml | 2 +-
.../org/apache/cxf/testutil/common/TestUtil.java | 2 +
tools/common/pom.xml | 2 +-
tools/corba/pom.xml | 2 +-
tools/javato/pom.xml | 2 +-
tools/javato/ws/pom.xml | 2 +-
tools/pom.xml | 2 +-
tools/validator/pom.xml | 2 +-
tools/wadlto/jaxrs/pom.xml | 2 +-
tools/wadlto/pom.xml | 2 +-
tools/wsdlto/core/pom.xml | 2 +-
tools/wsdlto/databinding/jaxb/pom.xml | 2 +-
tools/wsdlto/frontend/javascript/pom.xml | 2 +-
tools/wsdlto/frontend/jaxws/pom.xml | 2 +-
tools/wsdlto/misc/pom.xml | 2 +-
tools/wsdlto/pom.xml | 2 +-
tools/wsdlto/test/pom.xml | 2 +-
403 files changed, 7082 insertions(+), 1174 deletions(-)
create mode 100644
core/src/test/java/org/apache/cxf/ws/addressing/EndpointReferenceUtilsTest.java
create mode 100644
rt/frontend/jaxrs/src/test/java/org/apache/cxf/jaxrs/provider/EntityPartProviderTest.java
create mode 100644
rt/frontend/jaxrs/src/test/java/org/apache/cxf/jaxrs/provider/MultipartProviderTest.java
create mode 100644
rt/rs/security/oauth-parent/oauth2-saml/src/test/java/org/apache/cxf/rs/security/oauth2/grants/saml/Saml2BearerGrantHandlerTest.java
create mode 100644
rt/rs/security/oauth-parent/oauth2-saml/src/test/java/org/apache/cxf/rs/security/oauth2/saml/SamlOAuthValidatorTest.java
create mode 100644
rt/rs/security/oauth-parent/oauth2/src/test/java/org/apache/cxf/rs/security/oauth2/filters/OAuthRequestFilterTest.java
create mode 100644
rt/rs/security/oauth-parent/oauth2/src/test/java/org/apache/cxf/rs/security/oauth2/grants/code/DefaultEncryptingCodeDataProviderTest.java
create mode 100644
rt/rs/security/oauth-parent/oauth2/src/test/java/org/apache/cxf/rs/security/oauth2/grants/code/JwtRequestCodeFilterTest.java
create mode 100644
rt/rs/security/oauth-parent/oauth2/src/test/java/org/apache/cxf/rs/security/oauth2/grants/jwt/JwtBearerGrantHandlerTest.java
create mode 100644
rt/rs/security/oauth-parent/oauth2/src/test/java/org/apache/cxf/rs/security/oauth2/provider/DefaultEncryptingOAuthDataProviderTest.java
create mode 100644
rt/rs/security/oauth-parent/oauth2/src/test/java/org/apache/cxf/rs/security/oauth2/services/DynamicRegistrationServiceTest.java
create mode 100644
rt/rs/security/sso/oidc/src/test/java/org/apache/cxf/rs/security/oidc/idp/UserInfoServiceTest.java
create mode 100644
rt/rs/security/sso/oidc/src/test/java/org/apache/cxf/rs/security/oidc/rp/OidcClaimsValidatorTest.java
create mode 100644
rt/rs/security/sso/oidc/src/test/java/org/apache/cxf/rs/security/oidc/rp/OidcClientCodeRequestFilterMaxAgeTest.java
create mode 100644
rt/rs/security/sso/oidc/src/test/java/org/apache/cxf/rs/security/oidc/rp/OidcClientCodeRequestFilterNonceTest.java
create mode 100644
rt/transports/http-jetty/src/main/java/org/apache/cxf/transport/http_jetty/BCJsseServerALPNProcessor.java
create mode 100644
rt/transports/http-jetty/src/main/resources/META-INF/services/org.eclipse.jetty.io.ssl.ALPNProcessor$Server
create mode 100644
rt/transports/jms/src/test/java/org/apache/cxf/transport/jms/util/JMSMessageConverterTest.java
copy
tools/validator/src/test/resources/validator_wsdl/hello_world_doc_lit_type.wsdl
=> rt/wsdl/src/test/resources/org/apache/cxf/wsdl11/wsdl_xxe_import_main.wsdl
(50%)
create mode 100644
rt/wsdl/src/test/resources/org/apache/cxf/wsdl11/wsdl_xxe_import_malicious.xsd
create mode 100644
systests/jaxws/src/test/java/org/apache/cxf/systest/jaxws/DynamicClientConcurrencyTest.java
create mode 100644
systests/transports/src/test/java/org/apache/cxf/systest/https/pqc/BCJssePQCTest.java
create mode 100644
systests/transports/src/test/java/org/apache/cxf/systest/https/pqc/PQCTLSTest.java
copy
systests/{rs-security/src/test/resources/org/apache/cxf/systest/jaxrs/security/oidc/client.xml
=>
transports/src/test/resources/org/apache/cxf/systest/https/pqc/bcjsse-client.xml}
(67%)
copy
systests/{transport-hc5/src/test/resources/org/apache/cxf/systest/hc5/https/sni/client-sni-server.xml
=>
transports/src/test/resources/org/apache/cxf/systest/https/pqc/bcjsse-server.xml}
(50%)
copy
systests/{rs-security/src/test/resources/org/apache/cxf/systest/jaxrs/security/oidc/client.xml
=>
transports/src/test/resources/org/apache/cxf/systest/https/pqc/pqc-client.xml}
(73%)
copy
systests/{transport-hc5/src/test/resources/org/apache/cxf/systest/hc5/https/sni/client-sni-server.xml
=>
transports/src/test/resources/org/apache/cxf/systest/https/pqc/pqc-server.xml}
(55%)
