This is an automated email from the ASF dual-hosted git repository.
sergehuber pushed a change to branch
UNOMI-972-credentials-profile-binding-privileged-rest
in repository https://gitbox.apache.org/repos/asf/unomi.git
from b01ce305c Potential fix for pull request finding 'CodeQL / Insecure
randomness'
add 08b1fe638 UNOMI-972: address review findings on credentials and
profile binding
No new revisions were added by this update.
Summary of changes:
THREAT_MODEL.md | 28 +-
docker/src/main/docker/entrypoint.sh | 47 ++--
.../org/apache/unomi/itests/ContextServletIT.java | 140 ++++++++++
manual/src/main/asciidoc/configuration.adoc | 16 +-
.../asciidoc/connectors/salesforce-connector.adoc | 6 +-
manual/src/main/asciidoc/graphql-examples.adoc | 9 +-
.../main/asciidoc/how-profile-tracking-works.adoc | 4 +-
.../main/asciidoc/javascript-tracker-guide.adoc | 70 ++---
.../main/asciidoc/jsonSchema/json-schema-api.adoc | 2 +-
.../asciidoc/migrations/migrate-3.0-to-3.1.adoc | 40 ++-
.../asciidoc/migrations/v2-compatibility-mode.adoc | 6 +-
.../asciidoc/migrations/v2-v3-compatibility.adoc | 24 +-
manual/src/main/asciidoc/multitenancy.adoc | 24 +-
manual/src/main/asciidoc/privacy.adoc | 2 +-
manual/src/main/asciidoc/recipes.adoc | 2 +-
manual/src/main/asciidoc/request-examples.adoc | 6 +-
manual/src/main/asciidoc/samples/login-sample.adoc | 28 +-
manual/src/main/asciidoc/scheduler.adoc | 16 +-
manual/src/main/asciidoc/tutorial.adoc | 4 +-
package/src/main/resources/bin/setenv | 91 +++++--
package/src/main/resources/bin/setenv.bat | 40 ++-
.../actions/MergeProfilesOnPropertyAction.java | 15 +-
.../baseplugin/actions/UpdatePropertiesAction.java | 31 ++-
.../actions/MergeProfilesOnPropertyActionTest.java | 5 +-
.../actions/UpdatePropertiesActionTest.java | 5 +-
.../rest/authentication/AuthenticationFilter.java | 24 ++
.../unomi/rest/endpoints/ContextJsonEndpoint.java | 5 +-
.../rest/service/impl/RestServiceUtilsImpl.java | 55 ++--
.../apache/unomi/utils/EventsRequestContext.java | 25 ++
.../AuthenticationFilterBlankPasswordTest.java | 91 +++++++
.../config/ShippedAdminPasswordConfigTest.java | 299 ++++++++++++++++-----
.../RestServiceUtilsImplProfileBindingTest.java | 9 +-
.../apache/unomi/samples/login/LoginServlet.java | 170 +++++++++---
.../resources/static/javascript/login-example.js | 28 +-
34 files changed, 1041 insertions(+), 326 deletions(-)
create mode 100644
rest/src/test/java/org/apache/unomi/rest/authentication/AuthenticationFilterBlankPasswordTest.java
