This is an automated email from the ASF dual-hosted git repository.
dependabot[bot] pushed a change to branch
dependabot/maven/org.apache.shiro-shiro-core-2.1.0
in repository https://gitbox.apache.org/repos/asf/knox.git
discard 5fecfa186 Bump org.apache.shiro:shiro-core from 1.13.0 to 2.1.0
add 3f1cf239a KNOX-3247 - Knox LDAP Server with Pluggable Backend (#1144)
add 098ad0d41 KNOX-3252: Handle duplicate object exception during postgres
table creation race condition (#1146)
add d3654d891 KNOX-3251: Add fragment to Spark streaming page rewrite rule
(#1147)
add 644132219 KNOX-3255 - Allow fetching Knox public cert when SSL is
disabled (#1149)
add 79f0deb93 KNOX-3254 - Allow control the Secure flag in pac4j session
cookies (#1148)
add 882fe7f77 Fix image name collisions during Docker-based integration
tests (#1150)
add 40244868b KNOX-3257 - Update knox image creatation so that we do not
need escalated privileges in helm install (#1151)
add 84a0f3e1e KNOX-3260 - Extend Client Credentials Support to include the
client_id and client_secret as HTTP Basic (#1154)
add 71a72e5e0 KNOX-3259 - Implement OAuth Refresh Token and Exchange Token
Grant Types (#1155)
add 5d2b153be KNOX-3261 - Refactored JWTProvider and OAuthFlows tests to
avoid code duplication (#1156)
add 5961ac2cf KNOX-3253: Add advisory lock to the postgres table creation
to avoid catalog race condition when multiple Knox instance start up
simultaneously (#1157)
add 59a8fe981 KNOX-3263: Setting JVM's default truststore password as a
System property when creating CM service discovery ApiClient, if needed (#1159)
add f2d07eb14 KNOX-3262 Remove Java 17 message on Knox start-up (#1158)
add 04c91f5ed KNOX-3264 - Add workflow to push docker image on every
master push and new release & use docker hardened image (#1160)
add 4b7ae26f7 KNOX-3264 - Fix issues with docker workflow (#1162)
add ca145f614 KNOX-3264 - Updated default green certs URL to https (#1163)
add b2cd90243 KNOX-3264 - One more go at fixing docker (#1164)
add 1578c8c24 KNOX-3264 - Update knox push repo from
apache/knox/knox-gateway -> apache/knox (#1166)
add feb7dd11f KNOX-3269 - Support APIKEY and CLIENTID as services without
URLs or params in topology generation (#1167)
add 716ed152c KNOX-3266: Support JWKS verification in SSOCookieProvider
(#1168)
add 13a36567d KNOX-3271: Upgrade bouncycastle to 1.79 (#1169)
add 10ac9f6b2 KNOX-3272: Improved OAuth flow checks and return 401 in case
of missing client ID or invalid client secret (#1170)
add c0f143865 KNOX-3274: Unifid banner for TokenManagement,
TokenGeneration and Homepage UIs. Removed unnecessary closing div tags on
TokenManagement and TokenGeneration index.html (#1173)
add 74c0a84c0 KNOX-3275: Option to group/separate UI services on the
HomepageUI. Fi… (#1174)
add 5a42c04c4 KNOX-3276: New configuration added to control CM Client SSL
setup (#1175)
add 996bf1401 KNOX-3273 - Short Lived Tokens as Client Credentials (#1171)
add 9a03604ae Bump org.apache.zookeeper:zookeeper from 3.8.4 to 3.8.6
(#1172)
add a5552e192 KNOX-3276: Fix TLS version settings bug (#1176)
add 532c436d0 KNOX-3243 : Added Ambari 3.0.0 support (#1140)
add da88e2445 KNOX-3282: Add certain CM service discovery error stack
traces in the log at INFO level (#1179)
add 18ab6c5ed KNOX-3277 : LDAP Proxy improvements for working with AD
backend (#1177)
add b68a2bc66 KNOX-3283 - Login Page Branding and Themes Support (#1180)
add f81a5b85d KNOX-3284 - knox.token.hash.key will be available in Knox
Docker image (#1184)
add be2b9a41e KNOX-3279 - REST Catalog dispatch implementation for
including configurable metadata as outbound request headers (#1182)
add 6b351f9db KNOX-3249: Integrate new yarn scheduler-ui into KNOX
homepage (#1178)
add 7c094442d KNOX-3288: Support for gateway database aliases in Docker
entrypoint script (#1187)
add 6042c7150 KNOX-3289: Fix failing GatewayWebsocketHandlerTest tests
(#1189)
add a695134ec Revert "KNOX-3279 - REST Catalog dispatch implementation for
including configurable metadata as outbound request headers (#1182)" (#1188)
add e2288201f Reapply "KNOX-3279 - REST Catalog dispatch implementation
for including configurable metadata as outbound request headers (#1182)"
(#1188) (#1191)
add d26c155fc KNOX-3291 - Fix modern theme 'Sign In' button style (#1192)
add 811e7edae KNOX-3291 - Fix modern theme 'Sign In' button style (#1192)
add 0c1415f07 KNOX-3286: update rewrite rule to put behind knox-proxy when
navigate to scheduler-ui (#1185)
add 47e8e7a4a KNOX-3286: update rewrite rule to put behind knox-proxy when
navigate to scheduler-ui (#1185)
add 72a48456e KNOX-3287: RAP truststore password alias improvements (#1190)
add 2fed77ba6 KNOX-3292 - Fix github workflow that pushes knox docker
image to apache docker hub (#1193)
add fa75d218d KNOX-3295: Set default type to JWT in issued knox token
headers (#1195)
add 3bca5f10b KNOX-3293: Add integration tests: health metrics JSON,
KnoxLDAP preauth/extauthz paths, RemoteAuth extauthz (#1194)
add e52a16953 KNOX-3296: Expand CI integration tests: health metrics,
HSTS, and KnoxLDAP auth paths (#1196)
add a38c9f636 KNOX-3297: Docker entrypoint script has issues that prevents
this image being run as docker container and as a pod in k8s (#1197)
add 16fc47b57 KNOX-3298: Change ApiClientFactory password check to
isNotBlank (#1200)
add dd021c359 KNOX-3299: adding inline documentation for usage of env.
var: TRUSTSTORE_IMPORTS (#1201)
add 72cc4ce4e KNOX-3301: Added missing API_KEY icon on Token Management
page (#1206)
add 5e873023f KNOX-3302: Falling back to gateway-level credential store
while looking up LDAP system password (#1207)
add 7646fea76 KNOX-3307: Upgrade jackson-core to 2.18.6 (#1210)
add bad8a3e72 KNOX-3306: Make server startup fail if a forbidden security
algorithm… (#1212)
add 4988a16a0 KNOX-3303: Support configurable 'sub' claim reconciliation
and client_id claim in Client Credentials flow (#1208)
add dced0376d KNOX-3304 - Support for Openshift/SCC + Make docker
entrypoint idempotent (#1209) + Docker build issue fix (contributed by
@sneethiraj)
add e39a318ae KNOX-3308 - Token Exchange Flow using wrong param name
(#1211)
add a8d2016e1 KNOX-3303: Subject created during identity assertion should
include TokenIdPrincipal, if any (#1214)
add 762593a26 KNOX-3310: Fix redundant ALIAS_PASSPHRASE assignment and
improve logging (#1216)
add 4f94d957c KNOX-3311: Fix
X509CertificateUtil.fetchPublicCertsFromServer issue w… (#1217)
add 37fbbde37 KNOX-3314: Ensure secure length for encryptQueryString
generated by descriptors (#1220)
add df175163e KNOX-3315: Adds BCFKS as an option cert export (#1221)
add fb707882a KNOX-3312 - Client Credentials Flow with HTTP Basic needs
Unwrapped S… (#1219)
add 7b5e5186e KNOX-3317: Fixed NPE when no token-metadata-headers are
declared for ICEBERG-REST (#1225)
add f54608484 KNOX-3321 - KnoxToken Support for RFC 8693 Token Exchange
act Claim (#1229)
add 96cd8f66f KNOX-3319 : Ranger REST API not fully implemented in
cdp-proxy-api (Dineshkumar Yadav <[email protected]>) (#1230)
add f79717bf8 KNOX-3323 - Upgrade dompurify version (#1232)
add cb4114151 Bump org.apache.mina:mina-core from 2.2.4 to 2.2.7 (#1226)
add 0610fd9e3 KNOX-3322: Upgrade Postgresql to 42.7.11 to Fix CVE's (#1231)
add 0cc10cbcb KNOX-3320: Document logout flows in Knox (#1228)
add 8d59c6c45 KNOX-3325 - Bump maven enforcer version (#1234)
add d4eecad43 KNOX-3327: Support periodic refresh of gateway configuration
(#1235)
add 488e94a36 KNOX-3326: Add TCPS support for Oracle DB (#1237)
add 6549f4ee7 KNOX-3256: Refactor Docker build to use local Maven
artifacts and unify CI/Dev workflows (#1239)
add e738c080f KNOX-3328: Add Docker-based integration tests for Knox LDAP
service (#1242)
add e5ff30067 KNOX-3331: Add Maven option to skip Angular UI modules
(#1241)
add be8679c17 KNOX-3332: Add listeners on gateway config changes (#1243)
add 810abcd04 KNOX-3329: New database truststore type config (#1246)
add edbe02436 KNOX-3328: Implement recursive group resolution for LDAP
proxy (#1236)
add ea3a6e066 KNOX-3339: Upgrade log4j2 to 2.26.0 (#1248)
add d1c3046cc KNOX-3318: document LDAP service (#1227)
add 33df7d5da KNOX-3330: Refactor LDAP Proxy configuration to support
multiple backends (#1240)
add fafd793d7 KNOX-3336: New LDAP Service Factory (#1250)
add fc2987e73 KNOX-3330: Handle interceptor name collisions (#1251)
add 9c6647e5f KNOX-3337: Add optional LDAP role lookup support (#1247)
add 8342af3d3 KNOX-3342: Fixed NPE in HadoopGroupFilter when hadoopGroups
instance wasn't set (#1253)
add 344c393ef KNOX-3343: Fix NPE when cacheKeyHeader is not found in the
request (#1254)
add aae8f9848 KNOX-3294: Upgrade bootstrap to 5+ on login,logout and
redirecting pages (#1252)
add ccdb3fc2b KNOX-3345: ignore GatewayServerTest.testRefreshGatewayConfig
temporarily (#1255)
add 7c94926b1 KNOX-3345: Fix intermittent testRefreshGatewayConfig test
issue (#1259)
add 7e74d43e5 Bump org.apache.commons:commons-configuration2 from 2.10.1
to 2.15.0 (#1238)
add 46e7257a2 Bump org.apache.shiro:shiro-core from 1.13.0 to 2.1.0
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (5fecfa186)
\
N -- N -- N
refs/heads/dependabot/maven/org.apache.shiro-shiro-core-2.1.0 (46e7257a2)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
...e.api.UrlRewriteStepDescriptor => .dockerignore | 18 +-
.github/workflows/build/Dockerfile | 51 +-
.github/workflows/build/Dockerfile.local | 75 -
.../workflows/build/conf/topologies/knoxldap.xml | 8 +-
.github/workflows/build/gateway-site.xml | 92 +-
.github/workflows/compose/docker-compose.yml | 33 +-
.github/workflows/docker-publish.yml | 96 +
.github/workflows/tests.yml | 20 +-
.github/workflows/tests/common_utils.py | 68 +
.github/workflows/tests/test_health.py | 77 +-
.../tests/test_knox_auth_service_and_LDAP.py | 84 +-
.github/workflows/tests/test_knox_configs.py | 22 +-
.../tests/test_knoxauth_preauth_and_paths.py | 87 +
.github/workflows/tests/test_remote_auth.py | 31 +-
.../test_remoteauth_extauthz_additional_path.py | 60 +
.gitignore | 1 +
.../applications/knoxauth/app/js/knoxauth.js | 7 +-
.../resources/applications/knoxauth/app/login.html | 71 +-
.../resources/applications/knoxauth/app/logout.jsp | 15 +-
.../applications/knoxauth/app/redirecting.html | 17 +-
.../applications/knoxauth/app/redirecting.jsp | 13 +-
.../knoxauth/app/styles/bootstrap-icons.min.css | 5 +
.../knoxauth/app/styles/bootstrap.min.css | 6428 +-------------------
.../knoxauth/app/styles/fonts/bootstrap-icons.woff | Bin 0 -> 176032 bytes
.../app/styles/fonts/bootstrap-icons.woff2 | Bin 0 -> 130396 bytes
.../applications/knoxauth/app/styles/knox.css | 70 +-
.../knoxauth/app/styles/themes/DEPLOYMENT.md | 383 ++
.../knoxauth/app/styles/themes/README.md | 531 ++
.../app/styles/themes/modern/fonts/roboto-400.ttf | Bin 0 -> 123720 bytes
.../app/styles/themes/modern/fonts/roboto-600.ttf | Bin 0 -> 124288 bytes
.../themes/modern/images/modern-theme-logo.png | Bin 0 -> 67814 bytes
.../themes/modern/images/[email protected] | Bin 0 -> 67814 bytes
.../themes/modern/images/[email protected] | Bin 0 -> 67814 bytes
.../knoxauth/app/styles/themes/modern/theme.css | 550 ++
.../applications/knoxauth/app/theme-config.js | 61 +
gateway-discovery-cm/pom.xml | 4 +
.../topology/discovery/cm/ApiClientFactory.java | 46 +
.../cm/ClouderaManagerServiceDiscovery.java | 2 +-
.../ClouderaManagerServiceDiscoveryMessages.java | 17 +-
.../topology/discovery/cm/DiscoveryApiClient.java | 34 +-
.../discovery/cm/ServiceDiscoveryException.java | 10 +-
...a => YarnSchedulerUIServiceModelGenerator.java} | 13 +-
.../cm/monitor/PollingConfigurationAnalyzer.java | 3 +-
...way.topology.discovery.cm.ServiceModelGenerator | 1 +
.../discovery/cm/ApiClientFactoryTest.java | 131 +
.../cm/ClouderaManagerServiceDiscoveryTest.java | 45 +-
.../YarnSchedulerUIServiceModelGeneratorTest.java | 69 +
.../monitor/PollingConfigurationAnalyzerTest.java | 67 +-
.../src/main/resources/docker/Dockerfile | 64 +-
.../main/resources/docker/gateway-entrypoint.sh | 169 +-
.../main/resources/swagger/swagger-ui-bundle.js | 2 +-
.../filter/AbstractIdentityAssertionFilter.java | 5 +
.../pom.xml | 4 +
.../groups/filter/HadoopGroupProviderFilter.java | 60 +-
.../groups/filter/HadoopGroupProviderMessages.java | 3 +
.../filter/HadoopGroupProviderFilterTest.java | 74 +
gateway-provider-security-authc-remote/pom.xml | 5 +
.../knox/gateway/filter/RemoteAuthFilter.java | 31 +-
.../knox/gateway/filter/RemoteAuthFilterTest.java | 55 +-
.../federation/jwt/filter/AbstractJWTFilter.java | 64 +-
.../federation/jwt/filter/JWTFederationFilter.java | 146 +-
.../jwt/filter/SSOCookieFederationFilter.java | 6 +
.../provider/federation/AbstractJWTFilterTest.java | 7 +-
...lientIdAndClientSecretFederationFilterTest.java | 222 -
.../federation/JWTFederationFilterTest.java | 38 +-
.../federation/OAuthFlowsFederationFilterTest.java | 496 ++
...okenIDAsHTTPBasicCredsFederationFilterTest.java | 10 +-
.../pac4j/filter/Pac4jDispatcherFilter.java | 6 +
.../gateway/pac4j/session/KnoxSessionStore.java | 5 +-
.../pac4j/session/KnoxSessionStoreTest.java | 60 +
.../gateway/shirorealm/KnoxLdapContextFactory.java | 91 +-
.../shirorealm/KnoxLdapContextFactoryTest.java | 114 +
gateway-release-common/home/bin/knox-functions.sh | 12 -
gateway-release/home/bin/knoxcli.sh | 2 -
gateway-release/home/conf/users.ldif | 32 +
gateway-release/pom.xml | 4 +
gateway-server/pom.xml | 61 +
.../org/apache/knox/gateway/GatewayMessages.java | 19 +
.../org/apache/knox/gateway/GatewayServer.java | 60 +-
.../apache/knox/gateway/UrlEncodedFormRequest.java | 4 -
.../gateway/config/impl/GatewayConfigImpl.java | 145 +-
.../database/AbstractDataSourceFactory.java | 2 +
.../apache/knox/gateway/database/DatabaseType.java | 4 +-
.../gateway/database/MysqlDataSourceFactory.java | 2 +-
.../gateway/database/OracleDataSourceFactory.java | 17 +
.../knox/gateway/services/CLIGatewayServices.java | 5 +
.../gateway/services/DefaultGatewayServices.java | 4 +
.../factory/LDAPRolesLookupServiceFactory.java | 54 +
...ServiceFactory.java => LdapServiceFactory.java} | 40 +-
.../services/ldap/KnoxLDAPServerManager.java | 361 ++
.../gateway/services/ldap/KnoxLDAPService.java | 135 +
.../knox/gateway/services/ldap/LdapMessages.java | 175 +
.../knox/gateway/services/ldap/LdapUtils.java | 67 +
.../services/ldap/SchemaManagerFactory.java | 67 +
.../services/ldap/backend/BackendFactory.java | 56 +
.../gateway/services/ldap/backend/FileBackend.java | 173 +
.../services/ldap/backend/FileBackendFactory.java | 14 +-
.../gateway/services/ldap/backend/LdapBackend.java | 82 +
.../services/ldap/backend/LdapBackendFactory.java | 9 +-
.../services/ldap/backend/LdapProxyBackend.java | 678 +++
.../ldap/backend/LdapProxyBackendFactory.java | 14 +-
.../DuplicateUserFilteringInterceptor.java | 86 +
.../DuplicateUserFilteringInterceptorFactory.java} | 20 +-
.../ldap/interceptor/InterceptorFactory.java | 60 +
.../interceptor/KnoxLdapInterceptorFactory.java} | 51 +-
.../interceptor/LDAPRolesLookupInterceptor.java | 146 +
.../LDAPRolesLookupInterceptorFactory.java | 50 +
.../ldap/interceptor/UserSearchInterceptor.java | 201 +
.../interceptor/UserSearchInterceptorFactory.java} | 20 +-
.../ldap/roles/DefaultLDAPRolesLookupService.java | 74 +
.../ldap/roles/FileBasedLdapRolesLookup.java | 123 +
.../services/ldap/roles/LdapRolesLookup.java | 27 +-
.../ldap/roles/LdapRolesLookupFactory.java | 52 +
.../ldap/roles/LookupRolesRequest.java} | 39 +-
.../ldap/roles/LookupRolesResponse.java} | 40 +-
.../ldap/roles/RestApiLdapRolesLookup.java | 88 +
.../services/ldap/roles/RoleLookupException.java | 15 +-
.../security/impl/DefaultCryptoService.java | 8 +-
.../token/impl/DefaultTokenAuthorityService.java | 34 +-
.../token/impl/TokenAuthorityServiceMessages.java | 3 +-
.../java/org/apache/knox/gateway/util/KnoxCLI.java | 111 +-
...org.apache.knox.gateway.services.ServiceFactory | 4 +-
...ateway.services.ldap.backend.LdapBackendFactory | 5 +-
...ces.ldap.interceptor.KnoxLdapInterceptorFactory | 5 +-
.../src/main/resources/conf/gateway-site.xml | 76 +
...ql => createKnoxTokenDatabaseTablePostgres.sql} | 6 +-
...eateKnoxTokenMetadataDatabaseTablePostgres.sql} | 6 +-
.../org/apache/knox/gateway/GatewayServerTest.java | 139 +
.../knox/gateway/UrlEncodedFormRequestTest.java | 2 +-
.../gateway/config/impl/GatewayConfigImplTest.java | 83 +
.../gateway/database/DataSourceProviderTest.java | 38 +
.../services/AbstractGatewayServicesTest.java | 4 +-
.../services/ldap/KnoxLDAPServerManagerTest.java | 423 ++
.../gateway/services/ldap/KnoxLDAPServiceTest.java | 192 +
.../services/ldap/backend/BackendFactoryTest.java | 133 +
.../ldap/backend/LdapProxyBackendTest.java | 474 ++
.../DuplicateUserFilteringInterceptorTest.java | 166 +
.../LDAPRolesLookupInterceptorFactoryTest.java | 87 +
.../LDAPRolesLookupInterceptorTest.java | 93 +
.../ldap/roles/FileBasedLdapRolesLookupTest.java | 110 +
.../ldap/roles/RestApiLdapRolesLookupTest.java | 90 +
.../services/security/CryptoServiceTest.java | 39 +-
.../services/token/impl/JWKSourceBuilderTest.java | 9 +-
.../simple/SimpleDescriptorHandlerTest.java | 83 +-
.../websockets/GatewayWebsocketHandlerTest.java | 105 +-
.../test/resources/ldap-proxy-backend-test.ldif | 87 +-
.../src/test/resources/ldap-recursive-test.ldif | 95 +
.../gateway/service/auth/AbstractAuthResource.java | 32 +-
.../knox/gateway/service/auth/AuthMessages.java | 4 +
.../gateway/service/auth/ExtAuthzResourceTest.java | 38 +
.../gateway/service/auth/PreAuthResourceTest.java | 40 +
.../services/ambari/{0.2.2.0 => 3.0.0}/rewrite.xml | 0
.../services/ambari/{2.2.0 => 3.0.0}/service.xml | 2 +-
.../services/ambariui/{2.2.0 => 3.0.0}/rewrite.xml | 45 +-
.../services/ambariui/{2.2.0 => 3.0.0}/service.xml | 7 +-
.../services/ambariws/{2.2.0 => 3.0.0}/rewrite.xml | 0
.../services/ambariws/{2.2.0 => 3.0.0}/service.xml | 2 +-
.../services/iceberg-rest/0.0.1/service.xml | 5 +-
.../resources/services/ranger/2.3.0/rewrite.xml | 20 +
.../resources/services/ranger/2.3.0/service.xml | 5 +
.../services/yarn-scheduler-ui/1.0.0/rewrite.xml | 103 +
.../services/yarn-scheduler-ui/1.0.0/service.xml | 51 +
.../resources/services/yarnuiv2/3.0.0/rewrite.xml | 8 +
.../gateway/service/knoxsso/WebSSOResource.java | 6 +
.../service/knoxsso/WebSSOResourceTest.java | 7 +-
.../knoxtoken/ClientCredentialsResource.java | 20 +-
.../gateway/service/knoxtoken/TokenResource.java | 31 +-
.../service/knoxtoken/TokenServiceMessages.java | 3 +
.../knoxtoken/TokenServiceResourceTest.java | 192 +-
.../service/metadata/KnoxMetadataResource.java | 64 +-
.../gateway/service/metadata/ServiceModel.java | 36 +-
.../gateway/service/metadata/ServiceModelTest.java | 57 +
.../pom.xml | 44 +-
.../service/restcatalog/RestCatalogDispatch.java | 36 +-
.../service/restcatalog/RestCatalogHaDispatch.java | 40 +-
.../restcatalog/TokenMetadataHeaderHandler.java | 186 +
.../i18n/TokenMetadataHandlerMessages.java | 20 +-
.../restcatalog/RestCatalogDispatchTest.java | 128 +
.../restcatalog/RestCatalogDispatchTestUtils.java | 152 +
.../restcatalog/RestCatalogHaDispatchTest.java | 182 +
.../TokenMetadataHeaderHandlerTest.java | 152 +
...aDispatch.java => RMSchedulerUIHaDispatch.java} | 50 +-
.../java/org/apache/knox/gateway/shell/KnoxSh.java | 3 +-
.../org/apache/knox/gateway/GatewayTestConfig.java | 92 +
.../apache/knox/gateway/config/GatewayConfig.java | 92 +
.../config/GatewayConfigChangeListener.java | 6 +-
.../org/apache/knox/gateway/fips/FipsUtils.java | 34 +-
...oupPrincipal.java => CommonTokenConstants.java} | 17 +-
.../apache/knox/gateway/security/SubjectUtils.java | 3 +
...PrimaryPrincipal.java => TokenIdPrincipal.java} | 27 +-
.../security/principal/SimplePrincipalMapper.java | 2 -
.../apache/knox/gateway/services/ServiceType.java | 4 +-
.../LDAPRolesLookupService.java} | 17 +-
.../knox/gateway/services/ldap/RoleAssignment.java | 60 +-
.../gateway/services/security/AliasService.java | 9 +
.../services/security/token/JWTokenAttributes.java | 23 +
.../security/token/JWTokenAttributesBuilder.java | 14 +-
.../services/security/token/JWTokenAuthority.java | 8 +-
.../services/security/token/TokenMetadata.java | 8 +-
.../gateway/services/security/token/impl/JWT.java | 2 +
.../services/security/token/impl/JWTToken.java | 33 +
.../knox/gateway/util/ServletRequestUtils.java | 11 +
.../apache/knox/gateway/fips/FipsUtilsTest.java | 40 +-
.../services/security/token/TokenMetadataTest.java | 46 +
.../services/security/token/impl/JWTTokenTest.java | 12 +
.../gateway/SimpleDescriptorHandlerFuncTest.java | 5 +-
.../topology/simple/SimpleDescriptorHandler.java | 13 +-
...ionUtils.java => TruststorePasswordSetter.java} | 36 +-
.../knox/gateway/util/X509CertificateUtil.java | 23 +-
.../gateway/util/TruststorePasswordSetterTest.java | 71 +
.../knox/gateway/util/X509CertificateUtilTest.java | 129 +
.../apiservice-dialog.component.html | 4 +-
.../apiservice-dialog.component.ts | 5 +-
.../topologies/topology.information.component.html | 8 +-
.../topologies/topology.information.component.ts | 6 +-
.../uiservice-dialog.component.html | 2 +-
.../uiservice-dialog/uiservice-dialog.component.ts | 9 +-
.../assets/service-logos/yarn-scheduler-ui.png | Bin 0 -> 3813609 bytes
knox-homepage-ui/home/index.html | 4 +-
knox-homepage-ui/home/styles.css | 6 +-
knox-site/docs/book_service-details.md | 4 +-
knox-site/docs/knox_sso_logout.md | 126 +
knox-site/docs/service_ldap_server.md | 276 +
knox-site/mkdocs.yml | 2 +
.../token-generation/index.html | 5 +-
.../token-generation/styles.scss | 6 +-
knox-token-management-ui/package.json | 2 +-
.../token-management/assets/API_KEY.png | Bin 0 -> 121964 bytes
.../token-management/index.html | 7 +-
.../token-management/styles.scss | 6 +-
pom.xml | 78 +-
231 files changed, 12551 insertions(+), 7866 deletions(-)
copy
gateway-provider-rewrite-step-secure-query/src/main/resources/META-INF/services/org.apache.knox.gateway.filter.rewrite.api.UrlRewriteStepDescriptor
=> .dockerignore (71%)
delete mode 100644 .github/workflows/build/Dockerfile.local
create mode 100644 .github/workflows/docker-publish.yml
create mode 100644 .github/workflows/tests/common_utils.py
create mode 100644 .github/workflows/tests/test_knoxauth_preauth_and_paths.py
create mode 100644
.github/workflows/tests/test_remoteauth_extauthz_additional_path.py
create mode 100644
gateway-applications/src/main/resources/applications/knoxauth/app/styles/bootstrap-icons.min.css
create mode 100644
gateway-applications/src/main/resources/applications/knoxauth/app/styles/fonts/bootstrap-icons.woff
create mode 100644
gateway-applications/src/main/resources/applications/knoxauth/app/styles/fonts/bootstrap-icons.woff2
create mode 100644
gateway-applications/src/main/resources/applications/knoxauth/app/styles/themes/DEPLOYMENT.md
create mode 100644
gateway-applications/src/main/resources/applications/knoxauth/app/styles/themes/README.md
create mode 100644
gateway-applications/src/main/resources/applications/knoxauth/app/styles/themes/modern/fonts/roboto-400.ttf
create mode 100644
gateway-applications/src/main/resources/applications/knoxauth/app/styles/themes/modern/fonts/roboto-600.ttf
create mode 100644
gateway-applications/src/main/resources/applications/knoxauth/app/styles/themes/modern/images/modern-theme-logo.png
create mode 100644
gateway-applications/src/main/resources/applications/knoxauth/app/styles/themes/modern/images/[email protected]
create mode 100644
gateway-applications/src/main/resources/applications/knoxauth/app/styles/themes/modern/images/[email protected]
create mode 100644
gateway-applications/src/main/resources/applications/knoxauth/app/styles/themes/modern/theme.css
create mode 100644
gateway-applications/src/main/resources/applications/knoxauth/app/theme-config.js
create mode 100644
gateway-discovery-cm/src/main/java/org/apache/knox/gateway/topology/discovery/cm/ApiClientFactory.java
copy
gateway-discovery-ambari/src/main/java/org/apache/knox/gateway/topology/discovery/ambari/ConditionalValueHandler.java
=>
gateway-discovery-cm/src/main/java/org/apache/knox/gateway/topology/discovery/cm/ServiceDiscoveryException.java
(77%)
copy
gateway-discovery-cm/src/main/java/org/apache/knox/gateway/topology/discovery/cm/model/yarn/{ResourceManagerServiceModelGeneratorBase.java
=> YarnSchedulerUIServiceModelGenerator.java} (75%)
create mode 100644
gateway-discovery-cm/src/test/java/org/apache/knox/gateway/topology/discovery/cm/ApiClientFactoryTest.java
create mode 100644
gateway-discovery-cm/src/test/java/org/apache/knox/gateway/topology/discovery/cm/model/yarn/YarnSchedulerUIServiceModelGeneratorTest.java
delete mode 100644
gateway-provider-security-jwt/src/test/java/org/apache/knox/gateway/provider/federation/ClientIdAndClientSecretFederationFilterTest.java
create mode 100644
gateway-provider-security-jwt/src/test/java/org/apache/knox/gateway/provider/federation/OAuthFlowsFederationFilterTest.java
create mode 100644
gateway-provider-security-shiro/src/test/java/org/apache/knox/gateway/shirorealm/KnoxLdapContextFactoryTest.java
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/factory/LDAPRolesLookupServiceFactory.java
copy
gateway-server/src/main/java/org/apache/knox/gateway/services/factory/{ServiceRegistryServiceFactory.java
=> LdapServiceFactory.java} (55%)
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/KnoxLDAPServerManager.java
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/KnoxLDAPService.java
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/LdapMessages.java
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/LdapUtils.java
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/SchemaManagerFactory.java
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/backend/BackendFactory.java
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/backend/FileBackend.java
copy
gateway-performance-test/src/main/java/org/apache/knox/gateway/performance/test/reporting/ReportEngine.java
=>
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/backend/FileBackendFactory.java
(69%)
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/backend/LdapBackend.java
copy
gateway-performance-test/src/main/java/org/apache/knox/gateway/performance/test/reporting/ReportEngine.java
=>
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/backend/LdapBackendFactory.java
(80%)
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/backend/LdapProxyBackend.java
copy
gateway-performance-test/src/main/java/org/apache/knox/gateway/performance/test/reporting/ReportEngine.java
=>
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/backend/LdapProxyBackendFactory.java
(69%)
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/interceptor/DuplicateUserFilteringInterceptor.java
copy
gateway-server/src/{test/java/org/apache/knox/gateway/topology/discovery/test/extension/PropertiesFileServiceDiscoveryType.java
=>
main/java/org/apache/knox/gateway/services/ldap/interceptor/DuplicateUserFilteringInterceptorFactory.java}
(65%)
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/interceptor/InterceptorFactory.java
copy
gateway-server/src/main/java/org/apache/knox/gateway/services/{DefaultServerInfoService.java
=> ldap/interceptor/KnoxLdapInterceptorFactory.java} (53%)
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/interceptor/LDAPRolesLookupInterceptor.java
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/interceptor/LDAPRolesLookupInterceptorFactory.java
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/interceptor/UserSearchInterceptor.java
copy
gateway-server/src/{test/java/org/apache/knox/gateway/topology/discovery/test/extension/PropertiesFileServiceDiscoveryType.java
=>
main/java/org/apache/knox/gateway/services/ldap/interceptor/UserSearchInterceptorFactory.java}
(65%)
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/roles/DefaultLDAPRolesLookupService.java
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/roles/FileBasedLdapRolesLookup.java
copy
gateway-spi/src/main/java/org/apache/knox/gateway/services/GatewayServices.java
=>
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/roles/LdapRolesLookup.java
(57%)
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/roles/LdapRolesLookupFactory.java
copy
gateway-server/src/main/java/org/apache/knox/gateway/{model/ProviderConfiguration.java
=> services/ldap/roles/LookupRolesRequest.java} (57%)
copy
gateway-server/src/main/java/org/apache/knox/gateway/{model/ProviderConfiguration.java
=> services/ldap/roles/LookupRolesResponse.java} (54%)
create mode 100644
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/roles/RestApiLdapRolesLookup.java
copy
gateway-shell/src/main/java/org/apache/knox/gateway/shell/manager/ListProviderConfigurationsRequest.java
=>
gateway-server/src/main/java/org/apache/knox/gateway/services/ldap/roles/RoleLookupException.java
(73%)
copy
gateway-release/src/main/resources/META-INF/services/org.apache.knox.gateway.services.GatewayServices
=>
gateway-server/src/main/resources/META-INF/services/org.apache.knox.gateway.services.ldap.backend.LdapBackendFactory
(83%)
copy
gateway-discovery-ambari/src/main/resources/META-INF/services/org.apache.knox.gateway.topology.discovery.ServiceDiscoveryType
=>
gateway-server/src/main/resources/META-INF/services/org.apache.knox.gateway.services.ldap.interceptor.KnoxLdapInterceptorFactory
(75%)
copy gateway-server/src/main/resources/{createKnoxTokenDatabaseTable.sql =>
createKnoxTokenDatabaseTablePostgres.sql} (93%)
copy
gateway-server/src/main/resources/{createKnoxTokenMetadataDatabaseTable.sql =>
createKnoxTokenMetadataDatabaseTablePostgres.sql} (93%)
create mode 100644
gateway-server/src/test/java/org/apache/knox/gateway/GatewayServerTest.java
create mode 100644
gateway-server/src/test/java/org/apache/knox/gateway/services/ldap/KnoxLDAPServerManagerTest.java
create mode 100644
gateway-server/src/test/java/org/apache/knox/gateway/services/ldap/KnoxLDAPServiceTest.java
create mode 100644
gateway-server/src/test/java/org/apache/knox/gateway/services/ldap/backend/BackendFactoryTest.java
create mode 100644
gateway-server/src/test/java/org/apache/knox/gateway/services/ldap/backend/LdapProxyBackendTest.java
create mode 100644
gateway-server/src/test/java/org/apache/knox/gateway/services/ldap/interceptor/DuplicateUserFilteringInterceptorTest.java
create mode 100644
gateway-server/src/test/java/org/apache/knox/gateway/services/ldap/interceptor/LDAPRolesLookupInterceptorFactoryTest.java
create mode 100644
gateway-server/src/test/java/org/apache/knox/gateway/services/ldap/interceptor/LDAPRolesLookupInterceptorTest.java
create mode 100644
gateway-server/src/test/java/org/apache/knox/gateway/services/ldap/roles/FileBasedLdapRolesLookupTest.java
create mode 100644
gateway-server/src/test/java/org/apache/knox/gateway/services/ldap/roles/RestApiLdapRolesLookupTest.java
copy gateway-release/home/templates/users.ldapgroups.ldif =>
gateway-server/src/test/resources/ldap-proxy-backend-test.ldif (56%)
create mode 100644 gateway-server/src/test/resources/ldap-recursive-test.ldif
copy gateway-service-definitions/src/main/resources/services/ambari/{0.2.2.0
=> 3.0.0}/rewrite.xml (100%)
copy gateway-service-definitions/src/main/resources/services/ambari/{2.2.0 =>
3.0.0}/service.xml (98%)
copy gateway-service-definitions/src/main/resources/services/ambariui/{2.2.0
=> 3.0.0}/rewrite.xml (70%)
copy gateway-service-definitions/src/main/resources/services/ambariui/{2.2.0
=> 3.0.0}/service.xml (94%)
copy gateway-service-definitions/src/main/resources/services/ambariws/{2.2.0
=> 3.0.0}/rewrite.xml (100%)
copy gateway-service-definitions/src/main/resources/services/ambariws/{2.2.0
=> 3.0.0}/service.xml (95%)
create mode 100644
gateway-service-definitions/src/main/resources/services/yarn-scheduler-ui/1.0.0/rewrite.xml
create mode 100644
gateway-service-definitions/src/main/resources/services/yarn-scheduler-ui/1.0.0/service.xml
copy {gateway-service-webhdfs => gateway-service-restcatalog}/pom.xml (81%)
copy
gateway-service-hbase/src/main/java/org/apache/knox/gateway/hbase/HBaseUIDispatch.java
=>
gateway-service-restcatalog/src/main/java/org/apache/knox/gateway/service/restcatalog/RestCatalogDispatch.java
(52%)
copy
gateway-service-hbase/src/main/java/org/apache/knox/gateway/hbase/HBaseUIHaDispatch.java
=>
gateway-service-restcatalog/src/main/java/org/apache/knox/gateway/service/restcatalog/RestCatalogHaDispatch.java
(51%)
create mode 100644
gateway-service-restcatalog/src/main/java/org/apache/knox/gateway/service/restcatalog/TokenMetadataHeaderHandler.java
copy
gateway-service-rm/src/main/java/org/apache/knox/gateway/rm/i18n/RMMessages.java
=>
gateway-service-restcatalog/src/main/java/org/apache/knox/gateway/service/restcatalog/i18n/TokenMetadataHandlerMessages.java
(59%)
create mode 100644
gateway-service-restcatalog/src/test/java/org/apache/knox/gateway/service/restcatalog/RestCatalogDispatchTest.java
create mode 100644
gateway-service-restcatalog/src/test/java/org/apache/knox/gateway/service/restcatalog/RestCatalogDispatchTestUtils.java
create mode 100644
gateway-service-restcatalog/src/test/java/org/apache/knox/gateway/service/restcatalog/RestCatalogHaDispatchTest.java
create mode 100644
gateway-service-restcatalog/src/test/java/org/apache/knox/gateway/service/restcatalog/TokenMetadataHeaderHandlerTest.java
copy
gateway-service-rm/src/main/java/org/apache/knox/gateway/rm/dispatch/{RMUI2HaDispatch.java
=> RMSchedulerUIHaDispatch.java} (52%)
copy
gateway-util-configinjector/src/main/java/org/apache/knox/gateway/config/ConfigurationBinding.java
=>
gateway-spi/src/main/java/org/apache/knox/gateway/config/GatewayConfigChangeListener.java
(89%)
mode change 100755 => 100644
copy
gateway-spi/src/main/java/org/apache/knox/gateway/security/{GroupPrincipal.java
=> CommonTokenConstants.java} (78%)
copy
gateway-spi/src/main/java/org/apache/knox/gateway/security/{PrimaryPrincipal.java
=> TokenIdPrincipal.java} (65%)
copy
gateway-spi/src/main/java/org/apache/knox/gateway/services/{config/client/RemoteConfigurationRegistryClientService.java
=> ldap/LDAPRolesLookupService.java} (64%)
copy
gateway-server/src/main/java/org/apache/knox/gateway/model/ProviderConfiguration.java
=>
gateway-spi/src/main/java/org/apache/knox/gateway/services/ldap/RoleAssignment.java
(51%)
rename {gateway-server =>
gateway-spi}/src/main/java/org/apache/knox/gateway/util/ServletRequestUtils.java
(84%)
create mode 100644
gateway-spi/src/test/java/org/apache/knox/gateway/services/security/token/TokenMetadataTest.java
copy
gateway-util-common/src/main/java/org/apache/knox/gateway/util/{CollectionUtils.java
=> TruststorePasswordSetter.java} (56%)
create mode 100644
gateway-util-common/src/test/java/org/apache/knox/gateway/util/TruststorePasswordSetterTest.java
create mode 100644
gateway-util-common/src/test/java/org/apache/knox/gateway/util/X509CertificateUtilTest.java
create mode 100644
knox-homepage-ui/home/assets/service-logos/yarn-scheduler-ui.png
create mode 100644 knox-site/docs/knox_sso_logout.md
create mode 100644 knox-site/docs/service_ldap_server.md
create mode 100644 knox-token-management-ui/token-management/assets/API_KEY.png
