This is an automated email from the ASF dual-hosted git repository.
jamesbognar pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/juneau.git
from 0219941939 READY-384: Remove the MCP DCR requireSecure(false)
plaintext escape hatch
new 00e039c4b4 READY-385: Bound remote SAML metadata fetch size (1 MiB cap)
new af84870a44 READY-383: Don't union roles across distinct principals in
AuthFilterChain
new d45900b20c READY-381: Bind OAuth introspection results to the expected
audience/resource
new 89d90ece43 READY-394: Make ReadinessState lifecycle-owned instead of a
JVM-global singleton
new 4fa746fa2f Fix Eclipse/SonarLint warnings: CachingHttpServletResponse
resource suppression, javadoc refs, unused import/field, serialVersionUID, dead
debugBodyCap
new ae4cc786c7 Fix flaky MCP tools/call schema-validation timeout under
load: decouple validation compute budget from the structural-traversal
wall-clock deadline
The 6 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../server/DebugMarshalling_Behavior_Test.java | 2 +-
.../AuthFilterChain_GuardIntegration_Test.java | 10 +-
.../rest/server/auth/AuthFilterChain_Test.java | 6 +-
.../microservice/jetty/JettyServerComponent.java | 15 +-
...ponent_ReadinessStateDualStorePublish_Test.java | 178 +++++++++++++++++++++
.../microservice/tomcat/TomcatServerComponent.java | 15 +-
.../juneau/rest/client/mcp/McpAuthInterceptor.java | 3 +-
.../apache/juneau/rest/client/RestResponse.java | 2 -
.../apache/juneau/http/entity/HttpBodies_Test.java | 2 +
.../auth/oauth/OAuthIntrospectionValidator.java | 71 ++++++++
.../OAuthIntrospectionValidator_Audience_Test.java | 141 ++++++++++++++++
.../OAuthIntrospectionValidator_Builder_Test.java | 20 +++
.../auth/oidc/rp/OidcRelyingPartyBuilder_Test.java | 1 -
.../server/auth/saml/SamlMetadataResolvers.java | 113 ++++++++++++-
.../SamlMetadataResolvers_BoundedFetch_Test.java | 127 +++++++++++++++
.../rest/server/mcp/v20260728/McpSchemaSafety.java | 42 +++--
.../server/mcp/v20260728/McpSchemaSafety_Test.java | 88 ++++++++++
.../juneau/rest/server/auth/AuthFilterChain.java | 6 +-
.../rest/server/auth/AuthResultAccumulator.java | 27 +++-
.../juneau/rest/server/health/HealthServlet.java | 36 +++++
.../juneau/rest/server/health/ReadinessState.java | 20 ++-
.../server/util/CachingHttpServletResponse.java | 3 +
.../rest/server/auth/AuthFilterChain_Test.java | 31 +++-
.../server/auth/AuthResultAccumulator_Test.java | 14 +-
.../util/CachingHttpServletResponse_Test.java | 3 -
25 files changed, 924 insertions(+), 52 deletions(-)
create mode 100644
juneau-microservice/juneau-microservice-jetty/src/test/java/org/apache/juneau/microservice/jetty/JettyServerComponent_ReadinessStateDualStorePublish_Test.java
create mode 100644
juneau-rest/juneau-rest-server-auth-oauth/src/test/java/org/apache/juneau/rest/server/auth/oauth/OAuthIntrospectionValidator_Audience_Test.java
create mode 100644
juneau-rest/juneau-rest-server-auth-saml/src/test/java/org/apache/juneau/rest/server/auth/saml/SamlMetadataResolvers_BoundedFetch_Test.java
