This is an automated email from the ASF dual-hosted git repository.
sergehuber pushed a change to branch UNOMI-1001-compat-peer-abilities
in repository https://gitbox.apache.org/repos/asf/unomi.git
from 8cabe44de UNOMI-1001: Restore third-party config after IT mutations
add de3a16c41 UNOMI-1001: Harden peer authentication and identity claims
No new revisions were added by this update.
Summary of changes:
.../unomi/api/security/CompatPeerPrincipal.java | 22 +--
.../api/security/InsecureTransportPrincipal.java | 34 ++--
.../apache/unomi/api/security/SecurityService.java | 31 +++-
.../auth/GraphQLServletSecurityValidator.java | 15 ++
.../auth/GraphQLServletSecurityValidatorTest.java | 4 +-
manual/src/main/asciidoc/configuration.adoc | 13 ++
.../asciidoc/migrations/v2-compatibility-mode.adoc | 12 +-
.../main/resources/etc/custom.system.properties | 2 +
.../plugins/baseplugin/actions/IdentityTrust.java | 40 ++++-
.../actions/MergeProfilesOnPropertyAction.java | 57 ++++---
.../baseplugin/actions/UpdatePropertiesAction.java | 7 +-
.../resources/OSGI-INF/blueprint/blueprint.xml | 3 +
.../resources/org.apache.unomi.plugins.base.cfg | 7 +
.../baseplugin/actions/IdentityTrustTest.java | 106 ++++++++++++
.../actions/MergeProfilesOnPropertyActionTest.java | 57 +++++++
.../actions/UpdatePropertiesActionTest.java | 37 +++++
.../rest/authentication/AuthenticationFilter.java | 28 ++++
.../authentication/V2ThirdPartyConfigService.java | 180 ++++++++++++++-------
.../V2ThirdPartyConfigServiceTest.java | 103 ++++++++++++
.../RestServiceUtilsImplProfileBindingTest.java | 29 ++++
.../common/security/IPValidationUtils.java | 18 +++
.../common/security/KarafSecurityService.java | 43 ++++-
.../services/common/security/SecurityUtils.java | 15 +-
.../common/security/KarafSecurityServiceTest.java | 78 +++++++++
.../common/security/SecurityUtilsTest.java | 2 +-
.../main/resources/org.apache.unomi.thirdparty.cfg | 20 ++-
26 files changed, 818 insertions(+), 145 deletions(-)
copy
extensions/healthcheck/src/main/java/org/apache/unomi/healthcheck/servlet/HealthCheckAuthorization.java
=>
api/src/main/java/org/apache/unomi/api/security/InsecureTransportPrincipal.java
(52%)
create mode 100644
plugins/baseplugin/src/test/java/org/apache/unomi/plugins/baseplugin/actions/IdentityTrustTest.java
