This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a change to branch
UNOMI-975-public-profile-cookie-binding
in repository https://gitbox.apache.org/repos/asf/unomi.git
from e3741c6df UNOMI-975: Bind a public context request to the profile its
own cookie names
add c46ff2363 UNOMI-974: Require an explicit admin and health-check
password at startup (#850)
new c304f49ad Merge remote-tracking branch 'origin/master' into
UNOMI-975-public-profile-cookie-binding
new 7f92f483e UNOMI-975: Close the anonymous-session hole in the public
caller binding
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
clear-elasticsearch.sh | 2 +
clear-opensearch.sh | 2 +
docker/README.md | 18 +-
docker/src/main/docker/docker-compose-build-es.yml | 2 +
docker/src/main/docker/docker-compose-build-os.yml | 2 +
docker/src/main/docker/docker-compose-cluster.yml | 4 +
docker/src/main/docker/docker-compose-es.yml | 3 +
docker/src/main/docker/docker-compose-os.yml | 3 +
docker/src/main/docker/entrypoint.sh | 41 ++
extensions/healthcheck/README.md | 2 +-
extensions/healthcheck/pom.xml | 10 +
.../servlet/HealthCheckHttpContext.java | 67 +++-
.../HealthCheckHttpContextBlankPasswordTest.java | 308 +++++++++++++++
.../auth/GraphQLServletSecurityValidator.java | 11 +
.../auth/GraphQLServletSecurityValidatorTest.java | 35 ++
.../test/java/org/apache/unomi/itests/BaseIT.java | 6 +
.../unomi/itests/ContextEndpointBaselineIT.java | 164 +++++++-
.../org/apache/unomi/itests/ContextServletIT.java | 21 +-
.../org/apache/unomi/itests/HealthCheckIT.java | 11 +-
.../java/org/apache/unomi/itests/TenantIT.java | 8 +-
.../apache/unomi/itests/V2CompatibilityModeIT.java | 4 +-
.../apache/unomi/itests/graphql/BaseGraphQLIT.java | 2 +-
itests/src/test/resources/etc/users.properties | 4 +-
manual/src/main/asciidoc/5-min-quickstart.adoc | 38 +-
.../src/main/asciidoc/building-and-deploying.adoc | 18 +-
manual/src/main/asciidoc/builtin-event-types.adoc | 9 +-
manual/src/main/asciidoc/configuration.adoc | 66 ++--
.../asciidoc/connectors/salesforce-connector.adoc | 11 +-
manual/src/main/asciidoc/getting-started.adoc | 25 +-
manual/src/main/asciidoc/graphql-examples.adoc | 9 +-
.../main/asciidoc/how-profile-tracking-works.adoc | 6 +-
manual/src/main/asciidoc/index.adoc | 2 +-
.../main/asciidoc/jsonSchema/json-schema-api.adoc | 2 +-
.../asciidoc/migrations/migrate-3.0-to-3.1.adoc | 156 +++++++-
.../src/main/asciidoc/migrations/migrations.adoc | 2 +-
.../asciidoc/migrations/v2-compatibility-mode.adoc | 6 +-
.../asciidoc/migrations/v2-v3-compatibility.adoc | 24 +-
manual/src/main/asciidoc/recipes.adoc | 10 +-
manual/src/main/asciidoc/samples/login-sample.adoc | 2 +-
manual/src/main/asciidoc/scheduler.adoc | 16 +-
manual/src/main/asciidoc/security.adoc | 4 +-
manual/src/main/asciidoc/shell-commands.adoc | 2 +-
manual/src/main/asciidoc/tutorial.adoc | 4 +-
manual/src/main/asciidoc/useful-unomi-urls.adoc | 2 +-
manual/src/main/asciidoc/whats-new.adoc | 10 +-
package/src/main/resources/bin/setenv | 88 +++++
package/src/main/resources/bin/setenv.bat | 61 +++
.../main/resources/etc/custom.system.properties | 8 +-
package/src/main/resources/etc/users.properties | 6 +-
.../rest/authentication/AuthenticationFilter.java | 76 +++-
.../apache/unomi/rest/exception/LogSanitizer.java | 8 +-
.../rest/service/impl/RestServiceUtilsImpl.java | 88 ++++-
.../AuthenticationFilterBlankPasswordTest.java | 273 ++++++++++++++
.../config/ShippedAdminPasswordConfigTest.java | 418 +++++++++++++++++++++
.../RestServiceUtilsImplProfileBindingTest.java | 106 +++++-
setup-elasticsearch.sh | 22 +-
setup-opensearch.sh | 26 +-
setup-utils.sh | 27 ++
58 files changed, 2167 insertions(+), 194 deletions(-)
create mode 100644
extensions/healthcheck/src/test/java/org/apache/unomi/healthcheck/servlet/HealthCheckHttpContextBlankPasswordTest.java
create mode 100644
rest/src/test/java/org/apache/unomi/rest/authentication/AuthenticationFilterBlankPasswordTest.java
create mode 100644
rest/src/test/java/org/apache/unomi/rest/config/ShippedAdminPasswordConfigTest.java
