This is an automated email from the ASF dual-hosted git repository.
sergehuber pushed a change to branch UNOMI-875-pr4-security-tenant
in repository https://gitbox.apache.org/repos/asf/unomi.git
from ecb26a017 UNOMI-938: Hash API keys at rest and harden TenantService
add 3dca9e096 UNOMI-938: Replace ApiKeyHashService with SecretHashService
and drop legacy keys
No new revisions were added by this update.
Summary of changes:
.../unomi/api/security/ApiKeyHashService.java | 61 --------
.../unomi/api/security/SecretHashService.java | 69 +++++++++
.../java/org/apache/unomi/api/tenants/ApiKey.java | 48 ++++---
.../resources/OSGI-INF/blueprint/blueprint.xml | 9 --
.../common/security/ApiKeyHashServiceImplTest.java | 96 -------------
.../services/impl/tenants/TenantServiceImpl.java | 28 ++--
.../services/security/SecretHashServiceImpl.java | 91 +++++++-----
.../resources/OSGI-INF/blueprint/blueprint.xml | 5 +-
.../unomi/services/impl/TestTenantService.java | 14 +-
.../impl/tenants/TenantServiceImplTest.java | 8 +-
.../security/SecretHashServiceImplTest.java | 154 +++++++++++++++++++++
.../migrate-3.1.0-10-tenantInitialization.groovy | 4 +-
.../migration/migrate-3.1.0-20-hashApiKeys.groovy | 126 -----------------
13 files changed, 331 insertions(+), 382 deletions(-)
delete mode 100644
api/src/main/java/org/apache/unomi/api/security/ApiKeyHashService.java
create mode 100644
api/src/main/java/org/apache/unomi/api/security/SecretHashService.java
delete mode 100644
services-common/src/test/java/org/apache/unomi/services/common/security/ApiKeyHashServiceImplTest.java
rename
services-common/src/main/java/org/apache/unomi/services/common/security/ApiKeyHashServiceImpl.java
=>
services/src/main/java/org/apache/unomi/services/security/SecretHashServiceImpl.java
(51%)
create mode 100644
services/src/test/java/org/apache/unomi/services/security/SecretHashServiceImplTest.java
delete mode 100644
tools/shell-commands/src/main/resources/META-INF/cxs/migration/migrate-3.1.0-20-hashApiKeys.groovy
