This is an automated email from the ASF dual-hosted git repository.
jamesbognar pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/juneau.git
from bd08d89b25 TODO-397: Add injectable LoginStateStore SPI for multi-node
OIDC login state
new 4c63c6acb9 READY-393: Reject CR/LF and control chars in multipart part
name/filename/content-type
new 18e68d819d READY-387: Enforce declared document-length bounds in the
BSON parser
new 1b22e38502 READY-379: Bind SAML assertions to the request ACS
recipient (bearer subject-confirmation)
new e3adb833a7 READY-363: Fix RestContext annotationWork init-ordering NPE
in framework-bean memoizers
new 694bed1ddc READY-388/391: Bound Protobuf LEN fields by maxLength and
reject overlong varints
new ad28481527 READY-395: Don't mount unauthenticated /info and /loggers
actuator endpoints by default
new 69fca6f618 READY-382: Enforce HTTPS-or-loopback on the
OidcDiscoveryClient issuer
new 0219941939 READY-384: Remove the MCP DCR requireSecure(false)
plaintext escape hatch
The 8 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../juneau/marshall/bson/BsonInputStream.java | 82 +++++++++-
.../juneau/marshall/protobuf/ProtobufReader.java | 37 ++++-
.../juneau/marshall/bson/BsonInputStream_Test.java | 68 ++++++++
.../marshall/bson/BsonParserSession_Test.java | 5 +-
.../marshall/protobuf/ProtobufReader_Test.java | 42 +++++
.../rest/server/auth/saml/SamlAuthFilter_Test.java | 3 +-
.../management/BasicActuatorGroup.java | 26 ++-
.../management/BasicActuatorGroup_Test.java | 86 +++++++---
.../rest/auth/oauth/oidc/OidcDiscoveryClient.java | 4 +
.../oidc}/OidcDiscoveryClient_Builder_Test.java | 40 +++--
.../client/mcp/auth/McpDynamicClientRegistrar.java | 14 +-
.../mcp/auth/McpDynamicClientRegistrar_Test.java | 7 +
.../apache/juneau/http/entity/MultipartBody.java | 67 +++++++-
.../apache/juneau/http/entity/HttpBodies_Test.java | 53 ++++++
.../server/auth/saml/SamlAssertionValidator.java | 69 ++++++--
.../rest/server/auth/saml/SamlAuthFilter.java | 71 +++++++-
...ssertionValidator_SubjectConfirmation_Test.java | 44 +++++
.../auth/saml/SamlAuthFilter_MaxInflate_Test.java | 3 +-
.../saml/SamlAuthFilter_RecipientBinding_Test.java | 182 +++++++++++++++++++++
.../rest/server/auth/saml/SamlAuthFilter_Test.java | 4 +-
.../org/apache/juneau/rest/server/RestContext.java | 24 ++-
.../rest/server/RestContext_Construction_Test.java | 18 ++
22 files changed, 841 insertions(+), 108 deletions(-)
copy
juneau-rest/{juneau-rest-server-auth-oauth/src/test/java/org/apache/juneau/rest/server/auth/oauth
=>
juneau-rest-auth-oauth-flow/src/test/java/org/apache/juneau/rest/auth/oauth/oidc}/OidcDiscoveryClient_Builder_Test.java
(55%)
create mode 100644
juneau-rest/juneau-rest-server-auth-saml/src/test/java/org/apache/juneau/rest/server/auth/saml/SamlAuthFilter_RecipientBinding_Test.java
