This is an automated email from the ASF dual-hosted git repository.
yuqi1129 pushed a change to branch me/fix-entity-change-log-poller-11736
in repository https://gitbox.apache.org/repos/asf/gravitino.git
from 8da547bccd [#11736] Rename VERSION_1_4_0 to VERSION_2_0_0 for the next
release
add 497ec019b6 [#11716] docs: Document Web UI OIDC setup with Keycloak
(secure context, public client, issuer alignment) (#11730)
add 788f42e19e [#11740] fix(trino-connector): Load Iceberg JDBC catalogs
with hidden credentials (#11741)
add f46468dea5 [#11743] fix(license): Correct Bouncy Castle license
attribution in release files (#11744)
add d81dd65d1c [MINOR] fix(license): fix missing LICENSE for some 3rd
party code (#11747)
add 5ae4b911a4 [MINOR ]fix(license): upgrade jcasbin version to fix
Aviator license (#11750)
add b843a49f53 [#11759] improvement(docs): Update docker-image-details.md
for the latest 1.3.0 Docker images (#11760)
add 084dd39eb0 [#11756] fix(authn): Switch built-in IdP password hashing
to JDK SHA3-512 (#11761)
add 4106a1de1c [MINOR] fix(oceanbase): Avoid MySQL driver version check
(#11717)
add 5fa0bfc910 [#8384] fix(catalog-oceanbase): Wrap column names with
backticks (#11768)
add d932116532 [#11770] fix(docs): Fix missing iceberg-aws-bundle
requirement in Spark Glue connector (#11772)
add bff164d057 [MINOR] fix(docs): Fix wrong metalake name in the
getting-started document (#11774)
add 8515fb545f [#11734] feat(s3): introduce WebIdentityTokenSource SPI
with file-based source (#11735)
add b7bb50c557 [MINOR] fix(license): add jcasbin-chain to
iceberg-rest-server LICENSE and required binary NOTICE entries (#11769)
add c20b543b75 [#11792] web-v2(UI): Forces logout after 5 hours of total
session time, regardless of activity. (#11799)
add ac57f2fade Merge branch 'main' into
me/fix-entity-change-log-poller-11736
No new revisions were added by this update.
Summary of changes:
LICENSE | 10 +
LICENSE.bin | 3 +-
LICENSE.iceberg | 5 +
NOTICE | 6 +
NOTICE.bin | 15 +-
NOTICE.iceberg | 3 +
NOTICE.trino | 6 +
bundles/aws/build.gradle.kts | 2 +
.../s3/credential/AwsIrsaCredentialGenerator.java | 175 ++++++++-------
.../webidentity/FileWebIdentityTokenSource.java | 88 ++++++++
.../webidentity/WebIdentityTokenSource.java | 52 +++++
.../webidentity/WebIdentityTokenSourceConfig.java | 37 ++--
.../webidentity/WebIdentityTokenSources.java | 108 ++++++++++
...3.credential.webidentity.WebIdentityTokenSource | 2 +-
.../credential/TestAwsIrsaCredentialGenerator.java | 129 ++++++++++++
.../TestFileWebIdentityTokenSource.java | 128 +++++++++++
.../webidentity/TestWebIdentityTokenSources.java | 187 ++++++++++++++++
.../catalog/oceanbase/OceanBaseCatalog.java | 3 +-
.../oceanbase/OceanBaseCatalogOperations.java} | 32 +--
.../operation/OceanBaseTableOperations.java | 15 +-
.../oceanbase/TestOceanBaseCatalogOperations.java | 30 ++-
.../glue/GravitinoGlueCredentialsProvider.java | 3 +
.../paimon/utils/PaimonViewTestCatalogHelper.java | 8 +-
design-docs/gravitino-local-authentication.md | 31 +--
docs/docker-image-details.md | 17 +-
docs/getting-started/index.md | 10 +-
docs/security/how-to-authenticate.md | 80 +++++++
docs/spark-connector/spark-catalog-glue.md | 50 +++--
docs/trino-connector/index.md | 1 +
gradle/libs.versions.toml | 4 +-
.../iceberg/service/FederatedCatalogWrapper.java | 4 +
.../ops/gravitino/JsonArrowSchemaConverter.java | 8 +-
.../lance/common/ops/gravitino/PageUtil.java | 7 +-
licenses/bouncycastle.txt | 16 --
plugins/idp-basic/build.gradle.kts | 5 -
.../idp/basic/password/Argon2idPasswordHasher.java | 234 ---------------------
.../idp/basic/password/PasswordHasherFactory.java | 2 +-
...{Argon2idDefaults.java => Sha3512Defaults.java} | 25 ++-
.../idp/basic/password/Sha3512PasswordHasher.java | 176 ++++++++++++++++
...dHasher.java => TestSha3512PasswordHasher.java} | 75 +++----
.../glue/GravitinoGlueCredentialsProvider.java | 3 +
.../iceberg/IcebergCatalogPropertyConverter.java | 3 +-
.../TestIcebergCatalogPropertyConverter.java | 26 +++
web-v2/web/.env | 15 ++
web-v2/web/.env.static | 15 ++
web-v2/web/src/app/login/page.js | 11 +
.../web/src/lib/hooks/useAbsoluteSessionTimeout.js | 158 ++++++++++++++
web-v2/web/src/lib/provider/IdleSessionProvider.js | 81 +++++--
48 files changed, 1585 insertions(+), 519 deletions(-)
create mode 100644
bundles/aws/src/main/java/org/apache/gravitino/s3/credential/webidentity/FileWebIdentityTokenSource.java
create mode 100644
bundles/aws/src/main/java/org/apache/gravitino/s3/credential/webidentity/WebIdentityTokenSource.java
copy common/src/main/java/org/apache/gravitino/file/FileInfo.java =>
bundles/aws/src/main/java/org/apache/gravitino/s3/credential/webidentity/WebIdentityTokenSourceConfig.java
(51%)
create mode 100644
bundles/aws/src/main/java/org/apache/gravitino/s3/credential/webidentity/WebIdentityTokenSources.java
copy
authorizations/authorization-ranger/src/main/resources/META-INF/services/org.apache.gravitino.connector.authorization.AuthorizationProvider
=>
bundles/aws/src/main/resources/META-INF/services/org.apache.gravitino.s3.credential.webidentity.WebIdentityTokenSource
(91%)
create mode 100644
bundles/aws/src/test/java/org/apache/gravitino/s3/credential/TestAwsIrsaCredentialGenerator.java
create mode 100644
bundles/aws/src/test/java/org/apache/gravitino/s3/credential/webidentity/TestFileWebIdentityTokenSource.java
create mode 100644
bundles/aws/src/test/java/org/apache/gravitino/s3/credential/webidentity/TestWebIdentityTokenSources.java
copy
catalogs-contrib/{catalog-jdbc-hologres/src/main/java/org/apache/gravitino/catalog/hologres/HologresCatalogOperations.java
=>
catalog-jdbc-oceanbase/src/main/java/org/apache/gravitino/catalog/oceanbase/OceanBaseCatalogOperations.java}
(58%)
copy
catalogs/catalog-jdbc-mysql/src/test/java/org/apache/gravitino/catalog/mysql/operation/TestMysqlCatalogOperations.java
=>
catalogs-contrib/catalog-jdbc-oceanbase/src/test/java/org/apache/gravitino/catalog/oceanbase/TestOceanBaseCatalogOperations.java
(50%)
delete mode 100644 licenses/bouncycastle.txt
delete mode 100644
plugins/idp-basic/src/main/java/org/apache/gravitino/idp/basic/password/Argon2idPasswordHasher.java
rename
plugins/idp-basic/src/main/java/org/apache/gravitino/idp/basic/password/{Argon2idDefaults.java
=> Sha3512Defaults.java} (58%)
create mode 100644
plugins/idp-basic/src/main/java/org/apache/gravitino/idp/basic/password/Sha3512PasswordHasher.java
rename
plugins/idp-basic/src/test/java/org/apache/gravitino/idp/basic/password/{TestArgon2idPasswordHasher.java
=> TestSha3512PasswordHasher.java} (61%)
create mode 100644 web-v2/web/src/lib/hooks/useAbsoluteSessionTimeout.js
