This is an automated email from the ASF dual-hosted git repository.
dependabot[bot] pushed a change to branch
dependabot/maven/org.pac4j-pac4j-core-6.4.1
in repository https://gitbox.apache.org/repos/asf/knox.git
discard f0e54e58a Bump org.pac4j:pac4j-core from 6.3.0 to 6.4.1
add 72cc4ce4e KNOX-3301: Added missing API_KEY icon on Token Management
page (#1206)
add 5e873023f KNOX-3302: Falling back to gateway-level credential store
while looking up LDAP system password (#1207)
add 7646fea76 KNOX-3307: Upgrade jackson-core to 2.18.6 (#1210)
add bad8a3e72 KNOX-3306: Make server startup fail if a forbidden security
algorithm… (#1212)
add 4988a16a0 KNOX-3303: Support configurable 'sub' claim reconciliation
and client_id claim in Client Credentials flow (#1208)
add dced0376d KNOX-3304 - Support for Openshift/SCC + Make docker
entrypoint idempotent (#1209) + Docker build issue fix (contributed by
@sneethiraj)
add e39a318ae KNOX-3308 - Token Exchange Flow using wrong param name
(#1211)
add a8d2016e1 KNOX-3303: Subject created during identity assertion should
include TokenIdPrincipal, if any (#1214)
add 762593a26 KNOX-3310: Fix redundant ALIAS_PASSPHRASE assignment and
improve logging (#1216)
add 4f94d957c KNOX-3311: Fix
X509CertificateUtil.fetchPublicCertsFromServer issue w… (#1217)
add 37fbbde37 KNOX-3314: Ensure secure length for encryptQueryString
generated by descriptors (#1220)
add df175163e KNOX-3315: Adds BCFKS as an option cert export (#1221)
add fb707882a KNOX-3312 - Client Credentials Flow with HTTP Basic needs
Unwrapped S… (#1219)
add 7b5e5186e KNOX-3317: Fixed NPE when no token-metadata-headers are
declared for ICEBERG-REST (#1225)
add f54608484 KNOX-3321 - KnoxToken Support for RFC 8693 Token Exchange
act Claim (#1229)
add 96cd8f66f KNOX-3319 : Ranger REST API not fully implemented in
cdp-proxy-api (Dineshkumar Yadav <[email protected]>) (#1230)
add f79717bf8 KNOX-3323 - Upgrade dompurify version (#1232)
add cb4114151 Bump org.apache.mina:mina-core from 2.2.4 to 2.2.7 (#1226)
add 0610fd9e3 KNOX-3322: Upgrade Postgresql to 42.7.11 to Fix CVE's (#1231)
add 0cc10cbcb KNOX-3320: Document logout flows in Knox (#1228)
add 43bab8273 Bump org.pac4j:pac4j-core from 6.3.0 to 6.4.1
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (f0e54e58a)
\
N -- N -- N
refs/heads/dependabot/maven/org.pac4j-pac4j-core-6.4.1 (43bab8273)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
gateway-discovery-cm/pom.xml | 4 +
.../topology/discovery/cm/ApiClientFactory.java | 16 +--
.../discovery/cm/ApiClientFactoryTest.java | 11 +-
.../monitor/PollingConfigurationAnalyzerTest.java | 6 +-
.../src/main/resources/docker/Dockerfile | 24 ++--
.../main/resources/docker/gateway-entrypoint.sh | 50 +++++--
.../main/resources/swagger/swagger-ui-bundle.js | 2 +-
.../filter/AbstractIdentityAssertionFilter.java | 5 +
.../federation/jwt/filter/AbstractJWTFilter.java | 19 ++-
.../federation/jwt/filter/JWTFederationFilter.java | 49 ++++---
.../federation/JWTFederationFilterTest.java | 38 ++++-
.../federation/OAuthFlowsFederationFilterTest.java | 159 +++++++++++++++------
.../gateway/shirorealm/KnoxLdapContextFactory.java | 92 ++++++------
.../shirorealm/KnoxLdapContextFactoryTest.java | 110 ++++++++++++++
.../apache/knox/gateway/UrlEncodedFormRequest.java | 7 -
.../gateway/config/impl/GatewayConfigImpl.java | 17 ++-
.../security/impl/DefaultCryptoService.java | 8 +-
.../java/org/apache/knox/gateway/util/KnoxCLI.java | 7 +-
.../knox/gateway/UrlEncodedFormRequestTest.java | 2 +-
.../services/security/CryptoServiceTest.java | 39 ++++-
.../resources/services/ranger/2.3.0/rewrite.xml | 20 +++
.../resources/services/ranger/2.3.0/service.xml | 5 +
.../knoxtoken/ClientCredentialsResource.java | 20 ++-
.../gateway/service/knoxtoken/TokenResource.java | 25 ++++
.../service/knoxtoken/TokenServiceMessages.java | 3 +
.../knoxtoken/TokenServiceResourceTest.java | 158 ++++++++++++++++++++
.../service/metadata/KnoxMetadataResource.java | 25 +++-
.../restcatalog/TokenMetadataHeaderHandler.java | 10 +-
.../TokenMetadataHeaderHandlerTest.java | 152 ++++++++++++++++++++
.../java/org/apache/knox/gateway/shell/KnoxSh.java | 3 +-
.../org/apache/knox/gateway/fips/FipsUtils.java | 34 ++++-
.../apache/knox/gateway/security/SubjectUtils.java | 3 +
...PrimaryPrincipal.java => TokenIdPrincipal.java} | 27 +++-
.../gateway/services/security/AliasService.java | 9 ++
.../services/security/token/JWTokenAttributes.java | 22 +++
.../security/token/JWTokenAttributesBuilder.java | 14 +-
.../services/security/token/TokenMetadata.java | 8 +-
.../gateway/services/security/token/impl/JWT.java | 2 +
.../services/security/token/impl/JWTToken.java | 33 +++++
.../knox/gateway/util/ServletRequestUtils.java | 11 ++
.../apache/knox/gateway/fips/FipsUtilsTest.java | 40 +++++-
.../services/security/token/TokenMetadataTest.java | 46 ++++++
.../services/security/token/impl/JWTTokenTest.java | 12 ++
.../gateway/SimpleDescriptorHandlerFuncTest.java | 5 +-
.../topology/simple/SimpleDescriptorHandler.java | 4 +-
...ionUtils.java => TruststorePasswordSetter.java} | 36 ++---
.../knox/gateway/util/X509CertificateUtil.java | 23 ++-
.../gateway/util/TruststorePasswordSetterTest.java | 71 +++++++++
.../knox/gateway/util/X509CertificateUtilTest.java | 129 +++++++++++++++++
knox-site/docs/knox_sso_logout.md | 126 ++++++++++++++++
knox-site/mkdocs.yml | 1 +
.../token-management/assets/API_KEY.png | Bin 0 -> 121964 bytes
pom.xml | 6 +-
53 files changed, 1521 insertions(+), 227 deletions(-)
create mode 100644
gateway-provider-security-shiro/src/test/java/org/apache/knox/gateway/shirorealm/KnoxLdapContextFactoryTest.java
create mode 100644
gateway-service-restcatalog/src/test/java/org/apache/knox/gateway/service/restcatalog/TokenMetadataHeaderHandlerTest.java
copy
gateway-spi/src/main/java/org/apache/knox/gateway/security/{PrimaryPrincipal.java
=> TokenIdPrincipal.java} (65%)
rename {gateway-server =>
gateway-spi}/src/main/java/org/apache/knox/gateway/util/ServletRequestUtils.java
(84%)
create mode 100644
gateway-spi/src/test/java/org/apache/knox/gateway/services/security/token/TokenMetadataTest.java
copy
gateway-util-common/src/main/java/org/apache/knox/gateway/util/{CollectionUtils.java
=> TruststorePasswordSetter.java} (56%)
create mode 100644
gateway-util-common/src/test/java/org/apache/knox/gateway/util/TruststorePasswordSetterTest.java
create mode 100644
gateway-util-common/src/test/java/org/apache/knox/gateway/util/X509CertificateUtilTest.java
create mode 100644 knox-site/docs/knox_sso_logout.md
create mode 100644 knox-token-management-ui/token-management/assets/API_KEY.png
