This is an automated email from the ASF dual-hosted git repository.
smolnar82 pushed a change to branch knox_idf
in repository https://gitbox.apache.org/repos/asf/knox.git
from a8d2016e1 KNOX-3303: Subject created during identity assertion should
include TokenIdPrincipal, if any (#1214)
add 762593a26 KNOX-3310: Fix redundant ALIAS_PASSPHRASE assignment and
improve logging (#1216)
add 4f94d957c KNOX-3311: Fix
X509CertificateUtil.fetchPublicCertsFromServer issue w… (#1217)
add 37fbbde37 KNOX-3314: Ensure secure length for encryptQueryString
generated by descriptors (#1220)
add df175163e KNOX-3315: Adds BCFKS as an option cert export (#1221)
add fb707882a KNOX-3312 - Client Credentials Flow with HTTP Basic needs
Unwrapped S… (#1219)
add 7b5e5186e KNOX-3317: Fixed NPE when no token-metadata-headers are
declared for ICEBERG-REST (#1225)
add f54608484 KNOX-3321 - KnoxToken Support for RFC 8693 Token Exchange
act Claim (#1229)
add 96cd8f66f KNOX-3319 : Ranger REST API not fully implemented in
cdp-proxy-api (Dineshkumar Yadav <[email protected]>) (#1230)
add f79717bf8 KNOX-3323 - Upgrade dompurify version (#1232)
add cb4114151 Bump org.apache.mina:mina-core from 2.2.4 to 2.2.7 (#1226)
add 0610fd9e3 KNOX-3322: Upgrade Postgresql to 42.7.11 to Fix CVE's (#1231)
add 0cc10cbcb KNOX-3320: Document logout flows in Knox (#1228)
add 8d59c6c45 KNOX-3325 - Bump maven enforcer version (#1234)
add d4eecad43 KNOX-3327: Support periodic refresh of gateway configuration
(#1235)
add 488e94a36 KNOX-3326: Add TCPS support for Oracle DB (#1237)
No new revisions were added by this update.
Summary of changes:
gateway-discovery-cm/pom.xml | 4 +
.../topology/discovery/cm/ApiClientFactory.java | 16 +--
.../discovery/cm/ApiClientFactoryTest.java | 11 +-
.../monitor/PollingConfigurationAnalyzerTest.java | 6 +-
.../main/resources/docker/gateway-entrypoint.sh | 5 +-
.../main/resources/swagger/swagger-ui-bundle.js | 2 +-
.../federation/jwt/filter/JWTFederationFilter.java | 15 +-
.../federation/OAuthFlowsFederationFilterTest.java | 159 +++++++++++++++------
.../org/apache/knox/gateway/GatewayMessages.java | 6 +
.../org/apache/knox/gateway/GatewayServer.java | 41 +++++-
.../gateway/config/impl/GatewayConfigImpl.java | 12 +-
.../gateway/database/OracleDataSourceFactory.java | 17 +++
.../java/org/apache/knox/gateway/util/KnoxCLI.java | 7 +-
.../org/apache/knox/gateway/GatewayServerTest.java | 98 +++++++++++++
.../gateway/config/impl/GatewayConfigImplTest.java | 39 +++++
.../gateway/database/DataSourceProviderTest.java | 17 +++
.../resources/services/ranger/2.3.0/rewrite.xml | 20 +++
.../resources/services/ranger/2.3.0/service.xml | 5 +
.../gateway/service/knoxtoken/TokenResource.java | 16 +++
.../service/knoxtoken/TokenServiceMessages.java | 3 +
.../knoxtoken/TokenServiceResourceTest.java | 127 ++++++++++++++++
.../service/metadata/KnoxMetadataResource.java | 25 +++-
.../restcatalog/TokenMetadataHeaderHandler.java | 10 +-
.../TokenMetadataHeaderHandlerTest.java | 152 ++++++++++++++++++++
.../java/org/apache/knox/gateway/shell/KnoxSh.java | 3 +-
.../org/apache/knox/gateway/GatewayTestConfig.java | 5 +
.../apache/knox/gateway/config/GatewayConfig.java | 6 +
.../services/security/token/JWTokenAttributes.java | 11 ++
.../security/token/JWTokenAttributesBuilder.java | 8 +-
.../gateway/services/security/token/impl/JWT.java | 2 +
.../services/security/token/impl/JWTToken.java | 29 ++++
.../gateway/SimpleDescriptorHandlerFuncTest.java | 5 +-
.../topology/simple/SimpleDescriptorHandler.java | 4 +-
...ionUtils.java => TruststorePasswordSetter.java} | 36 ++---
.../knox/gateway/util/X509CertificateUtil.java | 23 ++-
.../gateway/util/TruststorePasswordSetterTest.java | 71 +++++++++
.../knox/gateway/util/X509CertificateUtilTest.java | 129 +++++++++++++++++
knox-site/docs/knox_sso_logout.md | 126 ++++++++++++++++
knox-site/mkdocs.yml | 1 +
pom.xml | 10 +-
40 files changed, 1165 insertions(+), 117 deletions(-)
create mode 100644
gateway-server/src/test/java/org/apache/knox/gateway/GatewayServerTest.java
create mode 100644
gateway-service-restcatalog/src/test/java/org/apache/knox/gateway/service/restcatalog/TokenMetadataHeaderHandlerTest.java
copy
gateway-util-common/src/main/java/org/apache/knox/gateway/util/{CollectionUtils.java
=> TruststorePasswordSetter.java} (56%)
create mode 100644
gateway-util-common/src/test/java/org/apache/knox/gateway/util/TruststorePasswordSetterTest.java
create mode 100644
gateway-util-common/src/test/java/org/apache/knox/gateway/util/X509CertificateUtilTest.java
create mode 100644 knox-site/docs/knox_sso_logout.md
