This is an automated email from the ASF dual-hosted git repository.
rzo1 pushed a change to branch TOMEE-4730
in repository https://gitbox.apache.org/repos/asf/tomee.git
discard 2d72ff24cf TOMEE-4730 apply class level security annotations of the
declaring class
omit 654a6d8896 resolve mp-jwt security constraints per resource class
add c83d537967 Update the systemd service example (#3085)
add 1f73e92c05 Register the MP-JWT filter only for the MP-JWT auth method
(#3067)
add c89dcc5da3 Resolve MP-JWT security constraints per resource class
(#3068)
add 3d61320135 Log webapp jars skipped by the scan exclusion list (#3069)
add 6dbc78217a Do not map the caller principal to a role by name in
getLogicalRoles (#3070)
add 920eaedbc5 Keep Debian package configuration read-only for the service
group (#3071)
add 686256826e Bind the LiveReload connector to loopback and check the
websocket origin (#3072)
add 5875ad780d Validate stored parameters in TomEEPbkdf2PasswordHash
(#3073)
add 41bdd0bb9b Verify Tomcat user identity store passwords with the realm
CredentialHandler (#3074)
add 6099c1a04d Make only_from authoritative for server services (#3075)
add ad159c6566 Warn that the Static3DES password cipher only obfuscates
(#3076)
add 3a728137fa Passivate stateful beans to a private directory by default
(#3077)
add 5f1dbebd64 Warn when tomee-maven-plugin sends credentials over plain
HTTP (#3078)
add 8fb8e89dee Reject archive entries escaping the target in
tomee-maven-plugin (#3079)
add 907f4bb6e4 TOMEE-4729 - Restore MP-JWT security state for asynchronous
requests (#3080)
add 3205f69fa6 Keep RAFPassivater files in a private temp directory (#3082)
add 22162c6b13 Do not return EJB exception messages from the default
JAX-RS mapper (#3083)
add 9246fa872e Clear the WS-Security caller identity after the JAX-WS
request (#3084)
add 0fb057efe6 Require a secret for stop requests on the admin port (#3087)
add da64789a3b TOMEE-4730 apply class level security annotations of the
declaring class
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (2d72ff24cf)
\
N -- N -- N refs/heads/TOMEE-4730 (da64789a3b)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.../arquillian-tomee-security-tests}/pom.xml | 19 +-
.../AbstractTomcatUserIdentityStoreTest.java | 74 ++++
.../arquillian/tests/security/CallerServlet.java} | 17 +-
.../tests/security/DigestUserDatabaseConfig.java | 10 +-
.../tests/security/PlainUserDatabaseConfig.java | 10 +-
.../security/StandaloneUserDatabaseConfig.java | 10 +-
.../TomcatUserIdentityStoreDigestTest.java | 66 ++++
.../TomcatUserIdentityStorePlainTest.java} | 37 +-
.../TomcatUserIdentityStoreStandaloneTest.java} | 28 +-
.../src/test/resources/arquillian.xml | 23 +-
.../src/test/resources/security-conf.properties | 7 +-
.../src/test/resources/security-conf/server.xml | 55 +++
.../security-conf/tomcat-users-digest.xml | 12 +-
.../security-conf/tomcat-users-standalone.xml | 10 +-
.../test/resources/security-conf}/tomcat-users.xml | 10 +-
.../src/test/tomee/server.xml | 56 +++
arquillian/arquillian-tomee-tests/pom.xml | 1 +
.../openejb/cipher/StaticDESPasswordCipher.java | 33 +-
.../apache/openejb/config/DeploymentLoader.java | 46 ++-
.../org/apache/openejb/config/RemoteServer.java | 53 ++-
.../apache/openejb/core/managed/RAFPassivater.java | 50 +--
.../openejb/core/stateful/RAFPassivater.java | 49 ++-
.../openejb/core/stateful/SimplePassivater.java | 14 +-
.../cipher/StaticDESPasswordCipherTest.java | 97 +++++
.../apache/openejb/config/NewLoaderLogicTest.java | 63 +++
.../config/RemoteServerShutdownMessageTest.java | 119 ++++++
.../openejb/core/managed/RAFPassivaterTest.java | 174 +++++++++
.../openejb/core/stateful/RAFPassivaterTest.java | 174 +++++++++
.../core/stateful/SimplePassivaterTest.java | 99 +++++
.../apache/openejb/loader/AdminShutdownSecret.java | 116 ++++++
.../openejb/loader/AdminShutdownSecretTest.java | 92 +++++
docs/admin/configuration/server.adoc | 2 +
docs/datasource-password-encryption.adoc | 7 +
docs/deamon/lin-service.adoc | 21 +-
docs/developer/tools/maven/embedded.adoc | 2 +-
docs/getting-started.adoc | 5 +
docs/startup.adoc | 10 +-
itests/openejb-itests-client/pom.xml | 7 +
.../org/apache/openejb/test/RemoteTestServer.java | 13 +-
.../apache/openejb/maven/plugins/LiveReload.java | 18 +
.../openejb/maven/plugins/TomEEEmbeddedMojo.java | 3 +-
.../openejb/maven/plugin/AbstractCommandMojo.java | 27 +-
.../openejb/maven/plugin/AbstractTomEEMojo.java | 9 +
.../org/apache/openejb/maven/plugin/ExecMojo.java | 3 +-
.../maven/plugin/AbstractCommandMojoTest.java | 97 +++++
.../org/apache/openejb/maven/plugin/UnzipTest.java | 104 +++++
.../apache/tomee/microprofile/jwt/MPJWTFilter.java | 85 +++-
.../tomee/microprofile/jwt/MPJWTInitializer.java | 2 +-
.../jwt/MPJWTFilterExitWebAppTest.java | 260 ++++++++++++-
.../microprofile/jwt/MPJWTInitializerTest.java | 84 ++++
.../openejb/server/cxf/rs/EJBExceptionMapper.java | 25 +-
.../server/cxf/rs/EJBExceptionMapperTest.java | 89 +++++
.../openejb/server/cxf/ConfigureCxfSecurity.java | 3 +
.../apache/openejb/server/cxf/CxfWsContainer.java | 31 +-
.../openejb/server/cxf/OpenEJBLoginValidator.java | 15 +
.../server/cxf/WSSLoginCleanupInterceptor.java | 161 ++++++++
.../cxf/CxfWsContainerSecurityStateTest.java | 426 +++++++++++++++++++++
.../openejb/server/ServiceAccessController.java | 22 +-
.../apache/openejb/server/admin/AdminDaemon.java | 153 ++++++++
.../java/org/apache/openejb/server/admin/Stop.java | 31 +-
.../META-INF/org.apache.openejb.cli/start.examples | 8 +-
.../META-INF/org.apache.openejb.cli/stop.examples | 8 +
.../META-INF/org.apache.openejb.cli/stop.help | 4 +
.../server/ServiceAccessControllerTest.java | 73 ++++
.../openejb/server/admin/AdminDaemonTest.java | 226 +++++++++++
.../tomee/catalina/TomcatSecurityService.java | 13 +-
.../TomcatSecurityServiceLogicalRolesTest.java | 104 +++++
.../src/main/resources/control/postinst.sh | 13 +-
.../tomee/security/TomEEPbkdf2PasswordHash.java | 115 ++++--
.../identitystore/TomEEDefaultIdentityStore.java | 95 ++++-
.../security/TomEEPbkdf2PasswordHashTest.java | 216 +++++++++++
.../TomEEDefaultIdentityStoreTest.java | 217 +++++++++++
.../org/apache/tomee/livereload/Instances.java | 9 +
.../tomee/livereload/LiveReloadEndpoint.java | 2 +-
.../tomee/livereload/LiveReloadInstaller.java | 17 +-
.../livereload/LoopbackOriginConfigurator.java | 60 +++
.../livereload/LoopbackOriginConfiguratorTest.java | 71 ++++
77 files changed, 4346 insertions(+), 244 deletions(-)
copy {tomee/tomee-util =>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests}/pom.xml (79%)
create mode 100644
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/AbstractTomcatUserIdentityStoreTest.java
copy
arquillian/arquillian-tomee-tests/{arquillian-tomee-jaxrs-tests/src/test/java/org/apache/openejb/arquillian/tests/jaxrs/servlets/Servlet.java
=>
arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/CallerServlet.java}
(65%)
copy
itests/tomee-microprofile-itests/src/main/java/org/apache/tomee/microprofile/telemetry/TelemetryApp.java
=>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/DigestUserDatabaseConfig.java
(78%)
copy
itests/tomee-microprofile-itests/src/main/java/org/apache/tomee/microprofile/telemetry/TelemetryApp.java
=>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/PlainUserDatabaseConfig.java
(79%)
copy
itests/tomee-microprofile-itests/src/main/java/org/apache/tomee/microprofile/telemetry/TelemetryApp.java
=>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/StandaloneUserDatabaseConfig.java
(78%)
create mode 100644
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/TomcatUserIdentityStoreDigestTest.java
copy
arquillian/arquillian-tomee-tests/{arquillian-tomee-webprofile-tests/src/test/java/org/apache/openejb/arquillian/tests/resenventry/ServletResourceEnvEntryInjectionTest.java
=>
arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/TomcatUserIdentityStorePlainTest.java}
(58%)
copy
arquillian/arquillian-tomee-tests/{arquillian-tomee-config-tests/src/test/java/org/apache/openejb/arquillian/tests/servlet/SimpleServletTest.java
=>
arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/TomcatUserIdentityStoreStandaloneTest.java}
(62%)
mode change 100755 => 100644
copy arquillian/arquillian-tomee-tests/{arquillian-tomee-data-tests =>
arquillian-tomee-security-tests}/src/test/resources/arquillian.xml (65%)
copy container/openejb-core/src/main/resources/groups.properties =>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/resources/security-conf.properties
(90%)
create mode 100644
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/resources/security-conf/server.xml
copy examples/ejb-examples/src/main/webapp/WEB-INF/tomcat-users.xml =>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/resources/security-conf/tomcat-users-digest.xml
(77%)
copy itests/openejb-itests-web/src/main/webapp/WEB-INF/tomcat-users.xml =>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/resources/security-conf/tomcat-users-standalone.xml
(83%)
copy {itests/openejb-itests-web/src/main/webapp/WEB-INF =>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/resources/security-conf}/tomcat-users.xml
(84%)
create mode 100644
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/tomee/server.xml
create mode 100644
container/openejb-core/src/test/java/org/apache/openejb/cipher/StaticDESPasswordCipherTest.java
create mode 100644
container/openejb-core/src/test/java/org/apache/openejb/config/RemoteServerShutdownMessageTest.java
create mode 100644
container/openejb-core/src/test/java/org/apache/openejb/core/managed/RAFPassivaterTest.java
create mode 100644
container/openejb-core/src/test/java/org/apache/openejb/core/stateful/RAFPassivaterTest.java
create mode 100644
container/openejb-core/src/test/java/org/apache/openejb/core/stateful/SimplePassivaterTest.java
create mode 100644
container/openejb-loader/src/main/java/org/apache/openejb/loader/AdminShutdownSecret.java
create mode 100644
container/openejb-loader/src/test/java/org/apache/openejb/loader/AdminShutdownSecretTest.java
create mode 100644
maven/tomee-maven-plugin/src/test/java/org/apache/openejb/maven/plugin/AbstractCommandMojoTest.java
create mode 100644
maven/tomee-maven-plugin/src/test/java/org/apache/openejb/maven/plugin/UnzipTest.java
create mode 100644
mp-jwt/src/test/java/org/apache/tomee/microprofile/jwt/MPJWTInitializerTest.java
create mode 100644
server/openejb-cxf-rs/src/test/java/org/apache/openejb/server/cxf/rs/EJBExceptionMapperTest.java
create mode 100644
server/openejb-cxf/src/main/java/org/apache/openejb/server/cxf/WSSLoginCleanupInterceptor.java
create mode 100644
server/openejb-cxf/src/test/java/org/apache/openejb/server/cxf/CxfWsContainerSecurityStateTest.java
create mode 100644
server/openejb-server/src/test/java/org/apache/openejb/server/admin/AdminDaemonTest.java
create mode 100644
tomee/tomee-catalina/src/test/java/org/apache/tomee/catalina/TomcatSecurityServiceLogicalRolesTest.java
create mode 100644
tomee/tomee-security/src/test/java/org/apache/tomee/security/TomEEPbkdf2PasswordHashTest.java
create mode 100644
tomee/tomee-security/src/test/java/org/apache/tomee/security/identitystore/TomEEDefaultIdentityStoreTest.java
create mode 100644
utils/livereload-tomee/src/main/java/org/apache/tomee/livereload/LoopbackOriginConfigurator.java
create mode 100644
utils/livereload-tomee/src/test/java/org/apache/tomee/livereload/LoopbackOriginConfiguratorTest.java
