This is an automated email from the ASF dual-hosted git repository. github-bot pushed a change to branch dependabot/npm_and_yarn/gateway-admin-ui/http-cache-semantics-4.1.1 in repository https://gitbox.apache.org/repos/asf/knox.git
discard 9d70ac73b Bump http-cache-semantics from 4.1.0 to 4.1.1 in /gateway-admin-ui add c55902826 KNOX-2872 - Make sure webshell WS connections work when used with LB (#728) add aa2231607 KNOX-2879 - pty4j depends on log4j1 (#730) add 383e04526 KNOX-2873 - Upgrade curator version to 5.4.0 and zookeeper to 3.8.1 (#729) add bfcbcda46 KNOX-2880 - Mark log4j1 as a banned dependency (#731) add c06874cc8 KNOX-2881 - KnoxCLI handles aliases when testing LDAP (system) authentication (#732) add e5427b1a3 KNOX-2883 Missing attach logging context from HadoopAuthFilter (#733) add 3408180ff Updated CHANGES to reflect 2.0.0 RC2 content add 6512cc870 KNOX-2884 - Skip generating read-only descriptor and provider generation from hxr (#734) add d5943c6d0 KNOX-2888 - Update gateway-version to 2.1.0 in build.xml (#735) add 698388eff KNOX-2889 - Changed message level when logging Hadoop Authentication failure on impersonation paths (#741) add 4a8c14b30 KNOX-2891 - Topology is not deployed if the referred provider file is not available initially and recreated later (#743) add 1b54d520b KNOX-2890 - Prevent non-idempotent requests from failing over (#742) add c81fb094e KNOX-2895 - KnoxShell supports dynamic truststore type when connecting to Knox (#746) add e49444249 KNOX-2894 - NPE when invalid composite provider name is given (#745) add 1672a7474 KNOX-2893 - Prevent generating topology from read only descriptor (#748) add 45394aa59 KNOX-2899 - Disable service-based discovery filter in Cloudera Manager service discovery (#749) add b2bc33f3b KNOX-2901 - Deleting a descriptor/provider via hadoop xml resource (#750) add ead942b83 KNOX-2903 - Add restart command to gateway.sh (#751) add 7dba8c01b KNOX-2905 - GatewayDescriptorImporter is not thread safe (#753) add 8d0564b1d KNOX-2904 - Mark the endpoint as failed when we failover AND request is non-idempotent (#752) add 4ee5073bc KNOX-2906 - SSO whitelist checker should cut off path segments and query params (#754) add 82d6d6039 KNOX-2907 - PollingConfigurationAnalyzer ignores services without service model generator (#755) add 2c339f746 KNOX-2912 - Don't fail over non idempotent requests unless it's a connect exception (#757) add 5ed96ecc0 KNOX-2909 - Ignoring CORE_SETTINGS CM service discovery (#758) add cd0ef1711 KNOX-2915 - Descriptors are reloaded before topology redeployment at startup (#760) add 989b99f33 KNOX-2915 - We need reloadDescriptors() when starting the monitors (#761) add 1d65e691c KNOX-2898 - Reconsider the usage of sso.unauthenticated.path.list (#756) add 017242ac7 KNOX-2912 - Don't fail over non idempotent requests unless it's a connect exception - ConnectionTimeout (#763) add 6b5de546e KNOX-2914 - Ozone HttpFS integration for Apache Knox (#765) add 8f1fe56e1 KNOX-2928 - For malformed url should return 400 bad request instead of 500 (#766) add 2886e70ae KNOX-2923 - Support for JDK 17 (#762) add dc00e6794 Handle multiple OMs and SCMs in Knox. (#767) add 8bb882d74 KNOX-2931 - Some special characters in the rewrite rule cannot be escaped (#769) add 1b2424d6c KNOX-2938 - jwks.json doesn't have double quotes which makes json invalid (#771) add 82a31c5ca KNOX-2936 - knoxcli convert-topology doesn't work with output-path parameter (#770) add e74e0b293 KNOX-2939 - Provider file configured with invalid syntax still gets created with few missing provider contents (#773) add 024897d8d KNOX-2932 - Fix TLS Ciphers issue and add kerberos support to the docker image (#772) add 74883eb1a KNOX-2887 - Add required changes to ozone-scm service definitions to handle DataNode WebUIs (#768) add ab2749bcd KNOX-2911: Allow metrics,roles, tagrest & xaudit Ranger Admin APIs via knox proxy (#759) add 8c4db7a9c KNOX-2942 - Miscellaneous HXR parser improvements (#779) add 1111d04ad KNOX-2943 - Handling CORE-SETTINGS service properly (#780) add 8294730b4 KNOX-2944 - Honoring the impalad_specialization role configuration (#781) add c46cdc9d9 KNOX-2945 - Removing redundant slash from target URL on Token Generation UI (#782) add 6eac567fa KNOX-2940 - knoxcli create-alias/create-aliases command doesn't support values starting with dash (#778) add 733a82fb3 KNOX-2947 - Deleting provider via hadoop xml resource should check if the provider is used by a descriptor (#783) add eb683275d KNOX-2948 - encryptQueryString provision should happen if needed (#784) add 7d18bc4fa KNOX-2949 - Topology file is not deleted after deleting descriptor via hadoop xml resource (#785) add 69a1a7164 Uniform http method of client metric to lowerCase (#789) add dcbba884a KNOX-2946 - Cookie Path Scoping doesn't work when using default topology URL (#786) add b9b732933 KNOX-2951 - During discovery if cm is not reachable and throws SocketException then retry is not happening (#788) add 550bcc401 KNOX-2948 - HXR parser can handle the new 'provisionEncryptQueryStringCredential' boolean field in SimpleDescriptor (#793) add 3f3a65bad KNOX-2955 - Knox Readiness Awareness and Notification (#792) add 3af43b73c KNOX-2896 - API services view on Knox Home page can be selected (#795) add 1da5edc9f KNOX-2959 - Auto discovery to support scaling scenarios (#796) add 8e7513a66 KNOX-2960 - DefaultDispatch doesn't forward inbound request headers in case of requestType=OPTIONS (#798) add c49302a0f KNOX-2961 - Knox SSO cookie Invalidation - Phase I (#797) add f91385662 KNOX-2961 - Knox SSO cookie Invalidation - Phase II (#799) add 01361812f KNOX-2950 - Handling application path aliases (#787) add 895022c45 KNOX-2966 - Improved logging around KnoxSSO cookie management (#802) add ff6bcbcac KNOX-2962 - Knox readiness check gateway-status endpoint should return the list of topologies for which it is waiting for (#800) add 838dcd837 KNOX-2963 - CM service discovery should work when legacy mode is turned off (#801) add 1eeaf7315 Revert "KNOX-2962 - Knox readiness check gateway-status endpoint should return the list of topologies for which it is waiting for (#800)" (#803) add 01a422ebf KNOX-2968 - Batch token enable action should succeed even if enabled KnoxSSO cookies are selected (#804) add eef24f4ae KNOX-2969 - KnoxSSO Cookies should be ignored while calculating token limit per user (#805) add 34a76c39c KNOX-2971 - Applying word wrapping in the comment and metadata columns on the Token Management UI (#807) add fbed6e7cf KNOX-2970 - Removing KnoxSSO cookie from the token state service upon logout (#806) add 03064bdbc KNOX-2973 - Fix redirect URI when host and port are query params of originalUrl (#809) add ad0ea7d4c KNOX-2972 - Session resource can generate application logout URL with profile/topologies query parameters (#808) add 672b3cb94 KNOX-2977 - The 'conf/descriptors' folder should be considered too when registering topology port mappings (#810) add bc4d5486b KNOX-2978 - Race condition between Service Discovery and Polling Config Analyzer (#811) add 7a5189a7c KNOX-2975, KNOX-2976 - Expired tokens must not be enabled/disabled in batches (#812) add 8e55969f3 KNOX-2974 - Add a new endpoint 'extauthz' similar to pre that accepts HTTP verbs other than GET and if confgiured ignores additional context path params (#813) add 6ec81a08c KNOX-2958 - Fixed API samples for certain services (#814) add d56937358 KNOX-2979 - Removed redundant 'refresh' query parameter from the application logout link after originalUrl (#815) add 32a8efddc KNOX-2980 - Applying word wrapping in various columns that can have 'long' content. (#816) add c4f77c9a2 KNOX-2985 - Introduced KNOXTOKEN API v2 and deprecated v1 methods (#818) add e888ec0cb KNOX-2929 - Logged in user is shown on Knox UIs (#819) add 083dc8977 KNOX-2983 - Combine the functionality of different identity assertion providers (#817) add 78278bf62 KNOX-2924 - Added MariaDB support in JDBCTokenStateService (#820) add 7ee5c8c0d KNOX-2991 - Sanitise Oozie rewrite rules (#824) add 303166953 KNOX-2992 - Cleaned up impersonation configs (#825) add 6f89529f0 KNOX-2989 - Multi arch support for Knox images (#822) add 14954a0f1 KNOX-2956 - Removing CM-specific 'advanced service discovery' handler and have everything process by the HXR parser (#821) add 050e2ceaa KNOX-2993 - Logging error stack trace at INFO level when failed to parse a descriptor (#827) add bb6719f3c KNOX-2994 - PollingConfigurationAnalyzer starts after the Knox GW is up and running (#831) add 16daa62c4 KNOX-2982 - Having one disabled one enabled identity-assertion provider in knoxsso doesn't work (#832) add 46cdc1593 KNOX-3001 - Avoid double XML-escaping during topology persistence from descriptors (#834) add 5e4741d20 KNOX-3000 - Add configurable socket / read timeout parameter to discovery client (#833) add 6047ea761 KNOX-2999 - [Docker] Add public CA to Knox trust store (#836) add b855e0f4b KNOX-3004 - Building a valid JDBC URL for Impala (#837) add afdb4cc3f KNOX-2990 - Using DerbyDatabaseTSS instead of AliasBasedTSS by default (#826) add 20fa65948 KNOX-3003 - Services with more than one serviceUrl metadata are grouped on the Knox Home page (#838) add d3f5a567a KNOX-3005 - Implemented KnoxSSO idle timeout (#839) add 58ae97fbf KNOX-3006 - PAM module occasionally generates garbage group names (#840) add d60c67fa8 KNOX-3009 - KNOX-SESSION missing from Manager Topology and Admin UI (#843) add bb5d265d8 KNOX-3002 - KnoxCLI command for generating descriptor for a role type from a list of hosts (#835) add fcee4ecff KNOX-3007 - Make http client cookie spec parameter configurable (#841) add f1ef30c49 Bump json-smart from 2.4.8 to 2.4.9 (#744) add 670f0df5a Bump http-cache-semantics from 4.1.0 to 4.1.1 in /knox-webshell-ui (#723) add bf5ebe6ab Bump http-cache-semantics in /knox-token-generation-ui (#724) add 06d18fe55 Bump http-cache-semantics from 4.1.0 to 4.1.1 in /knox-homepage-ui (#727) add 691ff459b Bump webpack and @angular-devkit/build-angular (#736) add 6a2bb8d28 Bump webpack and @angular-devkit/build-angular in /knox-webshell-ui (#737) add f0d9d16ed Bump http-cache-semantics from 4.1.0 to 4.1.1 in /gateway-admin-ui This update added new revisions after undoing existing revisions. That is to say, some revisions that were in the old version of the branch are not in the new version. This situation occurs when a user --force pushes a change and generates a repository containing something like this: * -- * -- B -- O -- O -- O (9d70ac73b) \ N -- N -- N refs/heads/dependabot/npm_and_yarn/gateway-admin-ui/http-cache-semantics-4.1.1 (f0d9d16ed) You should already have received notification emails for all of the O revisions, and so the following emails describe only the N revisions from the common base, B. Any revisions marked "omit" are not gone; other references still refer to them. Any revisions marked "discard" are gone forever. No new revisions were added by this update. Summary of changes: CHANGES | 297 +++++ build.xml | 2 +- gateway-admin-ui/admin-ui/app/app.module.ts | 7 +- .../session.information.component.html | 5 +- .../session.information.component.ts | 55 + .../session.information.service.ts | 69 ++ .../app/sessionInformation/session.information.ts | 0 gateway-admin-ui/admin-ui/index.html | 1 + .../resources/applications/knoxauth/app/logout.jsp | 32 +- .../security/ldap/SimpleLdapServerTest.java | 2 +- .../src/{main => test}/resources/log4j2.xml | 0 .../src/{main => test}/resources/users.ldif | 0 .../cm/ClouderaManagerServiceDiscovery.java | 68 +- .../ClouderaManagerServiceDiscoveryMessages.java | 25 +- .../ClouderaManagerServiceDiscoveryRepository.java | 15 +- .../topology/discovery/cm/DiscoveryApiClient.java | 23 +- .../discovery/cm/ServiceModelGenerator.java | 3 +- .../discovery/cm/ServiceModelGeneratorsHolder.java | 46 + .../cm/model/AbstractServiceModelGenerator.java | 11 + .../cm/model/atlas/AtlasServiceModelGenerator.java | 8 +- .../ClouderaManagerAPIServiceModelGenerator.java | 2 +- .../cm/model/flink/FlinkServiceModelGenerator.java | 2 +- .../model/hbase/HBaseUIServiceModelGenerator.java | 8 +- .../model/hbase/WebHBaseServiceModelGenerator.java | 8 +- .../cm/model/hdfs/HdfsUIServiceModelGenerator.java | 10 +- .../model/hdfs/NameNodeServiceModelGenerator.java | 3 +- .../model/hdfs/WebHdfsServiceModelGenerator.java | 4 +- .../model/hive/HiveOnTezServiceModelGenerator.java | 10 +- .../cm/model/hive/HiveServiceModelGenerator.java | 8 +- .../model/hive/WebHCatServiceModelGenerator.java | 8 +- .../cm/model/hue/HueLBServiceModelGenerator.java | 8 +- .../cm/model/hue/HueServiceModelGenerator.java | 8 +- .../model/impala/ImpalaServiceModelGenerator.java | 9 +- .../impala/ImpalaUIServiceModelGenerator.java | 8 +- .../cm/model/kudu/KuduUIServiceModelGenerator.java | 8 +- .../cm/model/livy/LivyServiceModelGenerator.java | 8 +- .../nifi/NifiRegistryServiceModelGenerator.java | 2 +- .../cm/model/nifi/NifiServiceModelGenerator.java | 2 +- .../cm/model/oozie/OozieServiceModelGenerator.java | 8 +- .../ozone/OzoneHttpfsServiceModelGenerator.java | 79 ++ .../cm/model/ozone/OzoneServiceModelGenerator.java | 8 +- .../cm/model/ozone/ReconServiceModelGenerator.java | 8 +- .../cm/model/ozone/SCMServiceModelGenerator.java | 8 +- .../phoenix/PhoenixServiceModelGenerator.java | 8 +- .../model/ranger/RangerServiceModelGenerator.java | 8 +- .../cm/model/solr/SolrServiceModelGenerator.java | 8 +- .../spark/SparkHistoryUIServiceModelGenerator.java | 8 +- .../yarn/JobHistoryUIServiceModelGenerator.java | 9 +- .../yarn/JobTrackerServiceModelGenerator.java | 8 +- .../ResourceManagerApiServiceModelGenerator.java | 8 +- .../ResourceManagerUIServiceModelGenerator.java | 9 +- .../cm/model/yarn/YarnUIServiceModelGenerator.java | 18 +- .../zeppelin/ZeppelinServiceModelGenerator.java | 8 +- .../zeppelin/ZeppelinWSServiceModelGenerator.java | 8 +- .../cm/monitor/PollingConfigurationAnalyzer.java | 230 +++- ...way.topology.discovery.cm.ServiceModelGenerator | 1 + ...uderaManagerServiceDiscoveryRepositoryTest.java | 32 +- .../cm/ClouderaManagerServiceDiscoveryTest.java | 4 +- .../model/AbstractServiceModelGeneratorTest.java | 3 +- .../impala/ImpalaServiceModelGeneratorTest.java | 2 +- ...a => OzoneHttpfsServiceModelGeneratorTest.java} | 55 +- .../monitor/PollingConfigurationAnalyzerTest.java | 94 +- gateway-docker/pom.xml | 85 +- .../src/main/resources/docker/Dockerfile | 12 +- .../main/resources/docker/gateway-entrypoint.sh | 175 ++- .../ha/dispatch/ConfigurableHADispatch.java | 67 +- .../ha/dispatch/i18n/HaDispatchMessages.java | 3 + .../knox/gateway/ha/provider/HaServiceConfig.java | 5 + .../ha/provider/impl/DefaultHaServiceConfig.java | 13 + .../ha/provider/impl/HaDescriptorConstants.java | 8 + .../ha/provider/impl/HaDescriptorFactory.java | 98 +- .../ha/provider/impl/HaDescriptorManager.java | 4 +- .../ha/provider/impl/HaServiceConfigConstants.java | 10 + .../gateway/ha/dispatch/DefaultHaDispatchTest.java | 393 +++++++ .../knox/gateway/IdentityAsserterMessages.java | 5 +- .../filter/CommonIdentityAssertionFilter.java | 35 +- .../common/filter/VirtualGroupMapper.java | 6 +- .../filter/CommonIdentityAssertionFilterTest.java | 3 + gateway-provider-identity-assertion-regex/pom.xml | 5 + .../rewrite/api/CookieScopeServletFilter.java | 11 +- .../rewrite/impl/CookieScopeResponseWrapper.java | 9 +- .../rewrite/api/UrlRewriteProcessorTest.java | 24 + .../impl/CookieScopeResponseWrapperTest.java | 9 + .../rewrite_escape.xml} | 3 + .../impl/CompositeAuthzDeploymentContributor.java | 11 +- .../gateway/hadoopauth/HadoopAuthMessages.java | 2 +- .../hadoopauth/filter/HadoopAuthFilter.java | 1 + gateway-provider-security-jwt/pom.xml | 4 + .../provider/federation/jwt/JWTMessages.java | 13 + .../federation/jwt/filter/AbstractJWTFilter.java | 69 +- .../jwt/filter/SSOCookieFederationFilter.java | 93 +- .../provider/federation/AbstractJWTFilterTest.java | 14 + .../provider/federation/SSOCookieProviderTest.java | 41 + .../provider/federation/TestFilterConfig.java | 38 +- ...okenIDAsHTTPBasicCredsFederationFilterTest.java | 15 +- .../pac4j/filter/Pac4jDispatcherFilter.java | 23 +- gateway-provider-security-shiro/pom.xml | 2 +- gateway-release-common/home/bin/knox-functions.sh | 8 + gateway-release/home/bin/gateway.sh | 72 +- gateway-release/home/bin/knoxcli.sh | 8 + gateway-release/home/conf/gateway-site.xml | 14 + gateway-release/home/conf/topologies/homepage.xml | 17 +- gateway-release/home/conf/topologies/knoxsso.xml | 5 + gateway-release/home/conf/topologies/manager.xml | 8 + gateway-server/pom.xml | 17 +- .../org/apache/knox/gateway/GatewayMessages.java | 27 +- .../org/apache/knox/gateway/GatewayServer.java | 49 +- .../org/apache/knox/gateway/GatewayServlet.java | 17 +- .../gateway/config/impl/GatewayConfigImpl.java | 124 +- .../gateway/filter/PortMappingHelperHandler.java | 4 +- .../knox/gateway/services/CLIGatewayServices.java | 2 + .../gateway/services/DefaultGatewayServices.java | 2 + ...ctory.java => GatewayStatusServiceFactory.java} | 17 +- .../services/factory/TokenStateServiceFactory.java | 28 +- .../impl/instr/InstrumentedGatewayFilter.java | 3 +- .../token/impl/AliasBasedTokenStateService.java | 9 +- .../token/impl/DefaultTokenStateService.java | 18 +- .../token/impl/DerbyDBTokenStateService.java | 99 ++ .../services/token/impl/JDBCTokenStateService.java | 45 +- .../token/impl/JournalBasedTokenStateService.java | 4 + .../services/token/impl/TokenStateDatabase.java | 16 +- .../token/impl/TokenStateServiceMessages.java | 22 + .../token/impl/ZookeeperTokenStateService.java | 3 + .../topology/impl/DefaultTopologyService.java | 6 +- .../topology/impl/GatewayStatusService.java | 98 ++ .../topology/monitor/DescriptorsMonitor.java | 5 + .../knox/gateway/util/DescriptorGenerator.java | 84 ++ .../org/apache/knox/gateway/util/JDBCUtils.java | 33 +- .../java/org/apache/knox/gateway/util/KnoxCLI.java | 169 ++- .../org/apache/knox/gateway/util/ServiceUrls.java | 57 + .../knox/gateway/util/TokenMigrationTool.java | 232 ++++ .../knox/gateway/util/TopologyToDescriptor.java | 4 +- .../websockets/GatewayWebsocketHandler.java | 2 +- ...org.apache.knox.gateway.services.ServiceFactory | 3 +- .../services/AbstractGatewayServicesTest.java | 1 + .../services/factory/ServiceFactoryTest.java | 66 +- .../factory/TokenStateServiceFactoryTest.java | 49 +- .../impl/AliasBasedTokenStateServiceTest.java | 1 + .../token/impl/JDBCTokenStateServiceTest.java | 27 +- .../token/impl/ZookeeperTokenStateServiceTest.java | 85 +- .../topology/DefaultTopologyServiceTest.java | 3 + .../topology/impl/GatewayStatusServiceTest.java | 42 +- .../simple/SimpleDescriptorFactoryTest.java | 50 +- .../simple/SimpleDescriptorHandlerTest.java | 33 +- .../knox/gateway/util/DescriptorGeneratorTest.java | 81 ++ .../apache/knox/gateway/util/JDBCUtilsTest.java | 49 +- .../org/apache/knox/gateway/util/KnoxCLITest.java | 93 +- .../websockets/GatewayWebsocketHandlerTest.java | 27 + .../conf-demo/conf/topologies/sandbox.xml | 8 + .../conf-full/conf/descriptors/test-topology.json | 1 + .../conf/shared-providers/test-providers.json | 2 +- ...AuthResource.java => AbstractAuthResource.java} | 76 +- .../knox/gateway/service/auth/AuthMessages.java | 3 + .../gateway/service/auth/ExtAuthzResource.java | 143 +++ .../knox/gateway/service/auth/PreAuthResource.java | 95 +- .../gateway/service/auth/ExtAuthzResourceTest.java | 214 ++++ .../resources/services/cm-api/1.0.0/service.xml | 4 +- .../resources/services/oozie/4.0.0/rewrite.xml | 6 - .../resources/services/oozie/5.0.0/rewrite.xml | 6 - .../resources/services/oozie/5.0.0/service.xml | 4 +- .../services/ozone-httpfs/1.4.0}/rewrite.xml | 10 +- .../0.2.2.0 => ozone-httpfs/1.4.0}/service.xml | 29 +- .../resources/services/ozone-scm/1.2.0/rewrite.xml | 178 ++- .../resources/services/ozone-scm/1.2.0/service.xml | 26 +- .../resources/services/ozone/1.2.0/rewrite.xml | 105 +- .../resources/services/ozone/1.2.0/service.xml | 16 +- .../resources/services/ranger/1.0.0/rewrite.xml | 19 + .../resources/services/ranger/1.0.0/service.xml | 4 + .../resources/services/webhdfs/2.4.0/service.xml | 6 +- .../resources/services/yarn-rm/2.5.0/service.xml | 4 +- .../knox/gateway/service/health/PingResource.java | 31 +- .../gateway/service/health/PingResourceTest.java | 2 +- .../gateway/service/knoxsso/KnoxSSOMessages.java | 7 +- .../gateway/service/knoxsso/WebSSOResource.java | 55 +- .../service/knoxsso/WebSSOResourceTest.java | 136 +++ .../gateway/service/knoxsso/KnoxSSOutMessages.java | 3 + .../gateway/service/knoxsso/WebSSOutResource.java | 29 + gateway-service-knoxtoken/pom.xml | 5 + .../gateway/service/knoxtoken/JWKSResource.java | 3 +- .../gateway/service/knoxtoken/TokenResource.java | 158 ++- .../gateway/service/knoxtoken/TokenResourceV2.java | 144 +++ .../service/knoxtoken/TokenServiceMessages.java | 3 + .../knoxtoken/TokenServiceResourceTest.java | 43 +- .../service/metadata/KnoxMetadataResource.java | 12 +- .../gateway/service/metadata/ServiceModel.java | 82 +- .../service/metadata/TopologyInformation.java | 11 + .../metadata/TopologyInformationWrapper.java | 3 +- .../gateway/service/metadata/ServiceModelTest.java | 78 +- .../service/session/SessionInformation.java | 22 + .../gateway/service/session/SessionResource.java | 39 +- .../hdfs/dispatch/AbstractHdfsHaDispatch.java | 77 +- .../hdfs/dispatch/HdfsHttpClientDispatch.java | 2 +- .../hdfs/dispatch/WebHdfsHaDispatchTest.java | 1 + .../apache/knox/gateway/shell/ClientContext.java | 11 +- .../org/apache/knox/gateway/shell/KnoxSession.java | 28 +- .../gateway/shell/util/ClientTrustStoreHelper.java | 6 + .../apache/knox/gateway/shell/KnoxSessionTest.java | 12 + .../org/apache/knox/gateway/GatewayTestConfig.java | 71 +- .../apache/knox/gateway/SpiGatewayMessages.java | 6 + .../apache/knox/gateway/config/GatewayConfig.java | 61 + .../deploy/ServiceDeploymentContributorBase.java | 5 +- .../knox/gateway/dispatch/DefaultDispatch.java | 3 +- .../gateway/dispatch/DefaultHttpClientFactory.java | 15 + .../gateway/dispatch/GatewayDispatchFilter.java | 23 +- .../knox/gateway/filter/AbstractGatewayFilter.java | 3 +- .../knox/gateway/i18n/GatewaySpiMessages.java | 3 + .../apache/knox/gateway/services/ServiceType.java | 3 +- .../services/security/impl/CMFMasterService.java | 30 +- .../services/security/token/TokenMetadata.java | 26 +- ...StateService.java => TokenMigrationTarget.java} | 8 +- .../services/security/token/TokenStateService.java | 5 + .../services/security/token/TokenUtils.java | 29 +- .../gateway/services/topology/TopologyService.java | 2 + .../knox/gateway/session/SessionInvalidator.java | 52 + .../knox/gateway/session/SessionInvalidators.java | 51 + .../org/apache/knox/gateway/topology/Topology.java | 5 +- .../apache/knox/gateway/util/AuthFilterUtils.java | 9 + .../org/apache/knox/gateway/util/FileUtils.java | 58 + .../dispatch/DefaultHttpClientFactoryTest.java | 8 + .../apache/knox/gateway/topology/TopologyTest.java | 19 + gateway-test-release/pom.xml | 1 + gateway-test-release/webhdfs-kerb-test/pom.xml | 1 + gateway-test-release/webhdfs-test/pom.xml | 1 + gateway-test/pom.xml | 7 + .../apache/knox/gateway/GatewayBasicFuncTest.java | 23 +- .../gateway/SimpleDescriptorHandlerFuncTest.java | 7 + .../org/apache/knox/gateway/WebHdfsHaFuncTest.java | 2 +- ...vanceServiceDiscoveryConfigurationMessages.java | 39 - .../advanced/AdvancedServiceDiscoveryConfig.java | 88 -- ...vancedServiceDiscoveryConfigChangeListener.java | 28 - ...vancedServiceDiscoveryConfigurationMonitor.java | 116 -- .../hadoop/xml/HadoopXmlResourceMessages.java | 34 +- .../hadoop/xml/HadoopXmlResourceMonitor.java | 68 +- .../hadoop/xml/HadoopXmlResourceParser.java | 219 ++-- .../hadoop/xml/HadoopXmlResourceParserResult.java | 34 +- .../hadoop/xml/HadoopXmlResourceParserTest.java | 127 +- .../src/test/resources/testDelete.xml | 66 ++ .../src/test/resources/testDelete2.xml | 35 +- .../src/test/resources/testDescriptor.xml | 1 + ...ation.xml => testDescriptorWithServiceList.xml} | 11 +- .../src/test/resources/testInvalidProvider.xml | 43 + .../gateway/topology/simple/SimpleDescriptor.java | 2 + .../topology/simple/SimpleDescriptorHandler.java | 24 +- .../topology/simple/SimpleDescriptorImpl.java | 12 + .../topology/simple/SimpleDescriptorMessages.java | 2 + gateway-util-common/pom.xml | 5 +- .../regex/filter/RegexTemplate.java | 0 .../java/org/apache/knox/gateway/plang/Arity.java | 18 + .../org/apache/knox/gateway/plang/Interpreter.java | 120 +- .../org/apache/knox/gateway/util/HttpUtils.java | 31 + .../org/apache/knox/gateway/util/RegExUtils.java | 18 + .../knox/gateway/util/X509CertificateUtil.java | 2 +- .../apache/knox/gateway/plang/InterpreterTest.java | 246 ++++ .../apache/knox/gateway/util/HttpUtilsTest.java | 17 + .../knox/gateway/util/urltemplate/Expander.java | 14 +- knox-homepage-ui/angular.json | 3 + knox-homepage-ui/home/app/app.module.ts | 2 + knox-homepage-ui/home/app/homepage.service.ts | 20 +- knox-homepage-ui/home/app/topologies/service.ts | 2 +- .../topologies/topology.information.component.css | 4 + .../topologies/topology.information.component.html | 110 +- .../topologies/topology.information.component.ts | 27 + .../home/app/topologies/topology.information.ts | 1 + knox-homepage-ui/package-lock.json | 17 +- knox-homepage-ui/package.json | 1 + knox-token-generation-ui/package-lock.json | 1131 ++++++++++++++---- knox-token-generation-ui/package.json | 2 +- .../token-generation/app/app.module.ts | 5 +- .../app/session.information.component.html | 6 +- .../app/session.information.component.ts | 56 + .../app/token-generation.component.ts | 6 +- .../app/token-generation.models.ts | 9 + .../app/token-generation.service.ts | 30 +- .../token-generation/index.html | 6 + .../token-management/app/app.module.ts | 11 +- .../token-management/app/knox.token.ts | 4 + .../token-management/app/metadata.ts | 2 + .../app/session.information.component.html | 6 +- .../app/session.information.component.ts | 56 + .../token-management/app}/session.information.ts | 2 + .../app/token.management.component.html | 169 +-- .../app/token.management.component.ts | 238 ++-- .../app/token.management.service.ts | 62 +- .../token-management/assets/green_checkmark.svg | 2 + .../token-management/assets/red_cross_circle.svg | 92 ++ .../token-management/assets/yellow_tip.png | Bin 0 -> 4748 bytes knox-webshell-ui/package-lock.json | 1219 +++++++++++++++----- knox-webshell-ui/package.json | 2 +- pom.xml | 78 +- 289 files changed, 9619 insertions(+), 2345 deletions(-) copy gateway-provider-rewrite/src/test/resources/org/apache/knox/gateway/filter/rewrite/api/UrlRewriteServletContextListenerTest/rewrite.xml => gateway-admin-ui/admin-ui/app/sessionInformation/session.information.component.html (89%) create mode 100644 gateway-admin-ui/admin-ui/app/sessionInformation/session.information.component.ts create mode 100644 gateway-admin-ui/admin-ui/app/sessionInformation/session.information.service.ts copy {knox-homepage-ui/home => gateway-admin-ui/admin-ui}/app/sessionInformation/session.information.ts (100%) copy gateway-demo-ldap/src/{main => test}/resources/log4j2.xml (100%) copy gateway-demo-ldap/src/{main => test}/resources/users.ldif (100%) create mode 100644 gateway-discovery-cm/src/main/java/org/apache/knox/gateway/topology/discovery/cm/ServiceModelGeneratorsHolder.java create mode 100644 gateway-discovery-cm/src/main/java/org/apache/knox/gateway/topology/discovery/cm/model/ozone/OzoneHttpfsServiceModelGenerator.java copy gateway-discovery-cm/src/test/java/org/apache/knox/gateway/topology/discovery/cm/model/ozone/{SCMServiceModelGeneratorTest.java => OzoneHttpfsServiceModelGeneratorTest.java} (55%) copy gateway-provider-rewrite/src/test/resources/org/apache/knox/gateway/filter/rewrite/api/{UrlRewriteServletContextListenerTest/rewrite.xml => UrlRewriteProcessorTest/rewrite_escape.xml} (84%) copy gateway-server/src/main/java/org/apache/knox/gateway/services/factory/{HostMappingServiceFactory.java => GatewayStatusServiceFactory.java} (75%) create mode 100644 gateway-server/src/main/java/org/apache/knox/gateway/services/token/impl/DerbyDBTokenStateService.java create mode 100644 gateway-server/src/main/java/org/apache/knox/gateway/services/topology/impl/GatewayStatusService.java create mode 100644 gateway-server/src/main/java/org/apache/knox/gateway/util/DescriptorGenerator.java create mode 100644 gateway-server/src/main/java/org/apache/knox/gateway/util/ServiceUrls.java create mode 100644 gateway-server/src/main/java/org/apache/knox/gateway/util/TokenMigrationTool.java copy gateway-provider-security-preauth/src/test/java/org/apache/knox/gateway/provider/federation/DefaultValidatorTest.java => gateway-server/src/test/java/org/apache/knox/gateway/services/topology/impl/GatewayStatusServiceTest.java (51%) create mode 100644 gateway-server/src/test/java/org/apache/knox/gateway/util/DescriptorGeneratorTest.java copy gateway-service-auth/src/main/java/org/apache/knox/gateway/service/auth/{PreAuthResource.java => AbstractAuthResource.java} (69%) create mode 100644 gateway-service-auth/src/main/java/org/apache/knox/gateway/service/auth/ExtAuthzResource.java create mode 100644 gateway-service-auth/src/test/java/org/apache/knox/gateway/service/auth/ExtAuthzResourceTest.java copy {gateway-server/src/test/resources/services/foo/1.0.0 => gateway-service-definitions/src/main/resources/services/ozone-httpfs/1.4.0}/rewrite.xml (75%) copy gateway-service-definitions/src/main/resources/services/{ambari/0.2.2.0 => ozone-httpfs/1.4.0}/service.xml (54%) create mode 100644 gateway-service-knoxtoken/src/main/java/org/apache/knox/gateway/service/knoxtoken/TokenResourceV2.java copy gateway-spi/src/main/java/org/apache/knox/gateway/services/security/token/{PersistentTokenStateService.java => TokenMigrationTarget.java} (80%) create mode 100644 gateway-spi/src/main/java/org/apache/knox/gateway/session/SessionInvalidator.java create mode 100644 gateway-spi/src/main/java/org/apache/knox/gateway/session/SessionInvalidators.java create mode 100644 gateway-spi/src/main/java/org/apache/knox/gateway/util/FileUtils.java delete mode 100644 gateway-topology-hadoop-xml/src/main/java/org/apache/knox/gateway/topology/discovery/advanced/AdvanceServiceDiscoveryConfigurationMessages.java delete mode 100644 gateway-topology-hadoop-xml/src/main/java/org/apache/knox/gateway/topology/discovery/advanced/AdvancedServiceDiscoveryConfig.java delete mode 100644 gateway-topology-hadoop-xml/src/main/java/org/apache/knox/gateway/topology/discovery/advanced/AdvancedServiceDiscoveryConfigChangeListener.java delete mode 100644 gateway-topology-hadoop-xml/src/main/java/org/apache/knox/gateway/topology/discovery/advanced/AdvancedServiceDiscoveryConfigurationMonitor.java create mode 100644 gateway-topology-hadoop-xml/src/test/resources/testDelete.xml copy gateway-server/src/main/resources/conf/gateway-site.xml => gateway-topology-hadoop-xml/src/test/resources/testDelete2.xml (57%) copy gateway-topology-hadoop-xml/src/test/resources/{testDescriptorConfigurationWithNonHadoopStyleConfiguration.xml => testDescriptorWithServiceList.xml} (83%) create mode 100644 gateway-topology-hadoop-xml/src/test/resources/testInvalidProvider.xml rename {gateway-provider-identity-assertion-regex => gateway-util-common}/src/main/java/org/apache/knox/gateway/identityasserter/regex/filter/RegexTemplate.java (100%) copy gateway-provider-rewrite/src/test/resources/org/apache/knox/gateway/filter/rewrite/api/UrlRewriteServletContextListenerTest/rewrite.xml => knox-token-generation-ui/token-generation/app/session.information.component.html (83%) create mode 100644 knox-token-generation-ui/token-generation/app/session.information.component.ts copy gateway-provider-rewrite/src/test/resources/org/apache/knox/gateway/filter/rewrite/api/UrlRewriteServletContextListenerTest/rewrite.xml => knox-token-management-ui/token-management/app/session.information.component.html (83%) create mode 100644 knox-token-management-ui/token-management/app/session.information.component.ts copy {knox-homepage-ui/home/app/sessionInformation => knox-token-management-ui/token-management/app}/session.information.ts (92%) create mode 100644 knox-token-management-ui/token-management/assets/green_checkmark.svg create mode 100644 knox-token-management-ui/token-management/assets/red_cross_circle.svg create mode 100644 knox-token-management-ui/token-management/assets/yellow_tip.png