This is an automated email from the ASF dual-hosted git repository.
dependabot[bot] pushed a change to branch
dependabot/pip/dot-github/workflows/tests/requests-2.33.0
in repository https://gitbox.apache.org/repos/asf/knox.git
discard 5315e28ef Bump requests from 2.32.4 to 2.33.0 in
/.github/workflows/tests
add 7c094442d KNOX-3288: Support for gateway database aliases in Docker
entrypoint script (#1187)
add 6042c7150 KNOX-3289: Fix failing GatewayWebsocketHandlerTest tests
(#1189)
add a695134ec Revert "KNOX-3279 - REST Catalog dispatch implementation for
including configurable metadata as outbound request headers (#1182)" (#1188)
add e2288201f Reapply "KNOX-3279 - REST Catalog dispatch implementation
for including configurable metadata as outbound request headers (#1182)"
(#1188) (#1191)
add d26c155fc KNOX-3291 - Fix modern theme 'Sign In' button style (#1192)
add 811e7edae KNOX-3291 - Fix modern theme 'Sign In' button style (#1192)
add 0c1415f07 KNOX-3286: update rewrite rule to put behind knox-proxy when
navigate to scheduler-ui (#1185)
add 47e8e7a4a KNOX-3286: update rewrite rule to put behind knox-proxy when
navigate to scheduler-ui (#1185)
add 72a48456e KNOX-3287: RAP truststore password alias improvements (#1190)
add 2fed77ba6 KNOX-3292 - Fix github workflow that pushes knox docker
image to apache docker hub (#1193)
add fa75d218d KNOX-3295: Set default type to JWT in issued knox token
headers (#1195)
add 3bca5f10b KNOX-3293: Add integration tests: health metrics JSON,
KnoxLDAP preauth/extauthz paths, RemoteAuth extauthz (#1194)
add e52a16953 KNOX-3296: Expand CI integration tests: health metrics,
HSTS, and KnoxLDAP auth paths (#1196)
add a38c9f636 KNOX-3297: Docker entrypoint script has issues that prevents
this image being run as docker container and as a pod in k8s (#1197)
add 16fc47b57 KNOX-3298: Change ApiClientFactory password check to
isNotBlank (#1200)
add dd021c359 KNOX-3299: adding inline documentation for usage of env.
var: TRUSTSTORE_IMPORTS (#1201)
add 72cc4ce4e KNOX-3301: Added missing API_KEY icon on Token Management
page (#1206)
add 5e873023f KNOX-3302: Falling back to gateway-level credential store
while looking up LDAP system password (#1207)
add 7646fea76 KNOX-3307: Upgrade jackson-core to 2.18.6 (#1210)
add bad8a3e72 KNOX-3306: Make server startup fail if a forbidden security
algorithm… (#1212)
add 4988a16a0 KNOX-3303: Support configurable 'sub' claim reconciliation
and client_id claim in Client Credentials flow (#1208)
add dced0376d KNOX-3304 - Support for Openshift/SCC + Make docker
entrypoint idempotent (#1209) + Docker build issue fix (contributed by
@sneethiraj)
add e39a318ae KNOX-3308 - Token Exchange Flow using wrong param name
(#1211)
add a8d2016e1 KNOX-3303: Subject created during identity assertion should
include TokenIdPrincipal, if any (#1214)
add 762593a26 KNOX-3310: Fix redundant ALIAS_PASSPHRASE assignment and
improve logging (#1216)
add 4f94d957c KNOX-3311: Fix
X509CertificateUtil.fetchPublicCertsFromServer issue w… (#1217)
add 37fbbde37 KNOX-3314: Ensure secure length for encryptQueryString
generated by descriptors (#1220)
add df175163e KNOX-3315: Adds BCFKS as an option cert export (#1221)
add fb707882a KNOX-3312 - Client Credentials Flow with HTTP Basic needs
Unwrapped S… (#1219)
add 7b5e5186e KNOX-3317: Fixed NPE when no token-metadata-headers are
declared for ICEBERG-REST (#1225)
add f54608484 KNOX-3321 - KnoxToken Support for RFC 8693 Token Exchange
act Claim (#1229)
add 96cd8f66f KNOX-3319 : Ranger REST API not fully implemented in
cdp-proxy-api (Dineshkumar Yadav <[email protected]>) (#1230)
add f79717bf8 KNOX-3323 - Upgrade dompurify version (#1232)
add cb4114151 Bump org.apache.mina:mina-core from 2.2.4 to 2.2.7 (#1226)
add 0610fd9e3 KNOX-3322: Upgrade Postgresql to 42.7.11 to Fix CVE's (#1231)
add 6878afaba Bump requests from 2.32.4 to 2.33.0 in
/.github/workflows/tests
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (5315e28ef)
\
N -- N -- N
refs/heads/dependabot/pip/dot-github/workflows/tests/requests-2.33.0 (6878afaba)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.github/workflows/docker-publish.yml | 68 ++++----
.github/workflows/tests/common_utils.py | 68 ++++++++
.github/workflows/tests/test_health.py | 77 +++++++--
.../tests/test_knox_auth_service_and_LDAP.py | 43 ++---
.github/workflows/tests/test_knox_configs.py | 22 +--
.../tests/test_knoxauth_preauth_and_paths.py | 87 ++++++++++
.github/workflows/tests/test_remote_auth.py | 31 +---
.../test_remoteauth_extauthz_additional_path.py | 60 +++++++
.../knoxauth/app/styles/themes/modern/theme.css | 134 ++++++++++-----
gateway-discovery-cm/pom.xml | 4 +
.../topology/discovery/cm/ApiClientFactory.java | 16 +-
.../discovery/cm/ApiClientFactoryTest.java | 26 +--
.../monitor/PollingConfigurationAnalyzerTest.java | 6 +-
.../src/main/resources/docker/Dockerfile | 24 +--
.../main/resources/docker/gateway-entrypoint.sh | 168 ++++++++++++-------
.../main/resources/swagger/swagger-ui-bundle.js | 2 +-
.../filter/AbstractIdentityAssertionFilter.java | 5 +
gateway-provider-security-authc-remote/pom.xml | 5 +
.../knox/gateway/filter/RemoteAuthFilter.java | 29 ++--
.../knox/gateway/filter/RemoteAuthFilterTest.java | 4 +-
.../federation/jwt/filter/AbstractJWTFilter.java | 19 ++-
.../federation/jwt/filter/JWTFederationFilter.java | 58 ++++---
.../federation/JWTFederationFilterTest.java | 38 ++++-
.../federation/OAuthFlowsFederationFilterTest.java | 172 ++++++++++++++-----
.../gateway/shirorealm/KnoxLdapContextFactory.java | 92 +++++-----
.../shirorealm/KnoxLdapContextFactoryTest.java | 110 ++++++++++++
gateway-release/pom.xml | 4 +
.../apache/knox/gateway/UrlEncodedFormRequest.java | 4 -
.../gateway/config/impl/GatewayConfigImpl.java | 17 +-
.../security/impl/DefaultCryptoService.java | 8 +-
.../java/org/apache/knox/gateway/util/KnoxCLI.java | 7 +-
.../knox/gateway/UrlEncodedFormRequestTest.java | 2 +-
.../services/security/CryptoServiceTest.java | 39 ++++-
.../websockets/GatewayWebsocketHandlerTest.java | 105 +++++++++---
.../resources/services/ranger/2.3.0/rewrite.xml | 20 +++
.../resources/services/ranger/2.3.0/service.xml | 5 +
.../resources/services/yarnuiv2/3.0.0/rewrite.xml | 5 +
.../knoxtoken/ClientCredentialsResource.java | 20 ++-
.../gateway/service/knoxtoken/TokenResource.java | 31 +++-
.../service/knoxtoken/TokenServiceMessages.java | 3 +
.../knoxtoken/TokenServiceResourceTest.java | 185 +++++++++++++++++++++
.../service/metadata/KnoxMetadataResource.java | 25 ++-
.../restcatalog/TokenMetadataHeaderHandler.java | 10 +-
.../TokenMetadataHeaderHandlerTest.java | 152 +++++++++++++++++
.../java/org/apache/knox/gateway/shell/KnoxSh.java | 3 +-
.../org/apache/knox/gateway/fips/FipsUtils.java | 34 +++-
.../apache/knox/gateway/security/SubjectUtils.java | 3 +
...PrimaryPrincipal.java => TokenIdPrincipal.java} | 27 ++-
.../gateway/services/security/AliasService.java | 9 +
.../services/security/token/JWTokenAttributes.java | 23 +++
.../security/token/JWTokenAttributesBuilder.java | 14 +-
.../services/security/token/TokenMetadata.java | 8 +-
.../gateway/services/security/token/impl/JWT.java | 2 +
.../services/security/token/impl/JWTToken.java | 33 ++++
.../knox/gateway/util/ServletRequestUtils.java | 11 ++
.../apache/knox/gateway/fips/FipsUtilsTest.java | 40 ++++-
.../services/security/token/TokenMetadataTest.java | 46 +++++
.../services/security/token/impl/JWTTokenTest.java | 12 ++
.../gateway/SimpleDescriptorHandlerFuncTest.java | 5 +-
.../topology/simple/SimpleDescriptorHandler.java | 4 +-
...ionUtils.java => TruststorePasswordSetter.java} | 36 ++--
.../knox/gateway/util/X509CertificateUtil.java | 23 ++-
.../gateway/util/TruststorePasswordSetterTest.java | 71 ++++++++
.../knox/gateway/util/X509CertificateUtilTest.java | 129 ++++++++++++++
.../token-management/assets/API_KEY.png | Bin 0 -> 121964 bytes
pom.xml | 11 +-
66 files changed, 2072 insertions(+), 482 deletions(-)
create mode 100644 .github/workflows/tests/common_utils.py
create mode 100644 .github/workflows/tests/test_knoxauth_preauth_and_paths.py
create mode 100644
.github/workflows/tests/test_remoteauth_extauthz_additional_path.py
create mode 100644
gateway-provider-security-shiro/src/test/java/org/apache/knox/gateway/shirorealm/KnoxLdapContextFactoryTest.java
create mode 100644
gateway-service-restcatalog/src/test/java/org/apache/knox/gateway/service/restcatalog/TokenMetadataHeaderHandlerTest.java
copy
gateway-spi/src/main/java/org/apache/knox/gateway/security/{PrimaryPrincipal.java
=> TokenIdPrincipal.java} (65%)
rename {gateway-server =>
gateway-spi}/src/main/java/org/apache/knox/gateway/util/ServletRequestUtils.java
(84%)
create mode 100644
gateway-spi/src/test/java/org/apache/knox/gateway/services/security/token/TokenMetadataTest.java
copy
gateway-util-common/src/main/java/org/apache/knox/gateway/util/{CollectionUtils.java
=> TruststorePasswordSetter.java} (56%)
create mode 100644
gateway-util-common/src/test/java/org/apache/knox/gateway/util/TruststorePasswordSetterTest.java
create mode 100644
gateway-util-common/src/test/java/org/apache/knox/gateway/util/X509CertificateUtilTest.java
create mode 100644 knox-token-management-ui/token-management/assets/API_KEY.png
