dev
Thread
Date
Earlier messages
Later messages
Messages by Thread
(unomi) branch graphql-scope-profile-events-filter updated (231aebcae -> 1b6c7f4d2)
shuber
(unomi) 01/02: Combine the profile scope with client event filters instead of replacing it
shuber
(unomi) 02/02: Cover profile event-scope with an integration test
shuber
(unomi) branch master updated: UNOMI-977: Restrict router import/export configuration to system administrators (#853)
shuber
(unomi) branch UNOMI-977-router-config-authz deleted (was 27be1e47c)
shuber
(unomi) branch UNOMI-977-router-config-authz updated (595fcb52e -> 27be1e47c)
shuber
(unomi) 01/01: UNOMI-977: Restrict router import/export configuration to system administrators
shuber
(unomi) branch master updated: Bound diagnostic type tracking and the MVEL expression cache (#879)
shuber
(unomi) branch master updated: Drop credentialed CORS on the public tracker endpoints (#878)
shuber
(unomi) branch drop-public-cors-credentials deleted (was 874bf45b8)
shuber
(unomi) branch drop-public-cors-credentials updated (28d41e301 -> 874bf45b8)
shuber
(unomi) 02/02: Validate eventcollector query session ids and honor client IPs only from configured proxies (#880)
shuber
(unomi) 01/02: Drop credentialed CORS on the public tracker endpoints.
shuber
(unomi) branch bound-diagnostic-and-script-caches updated (9a4f6b65b -> e683891d1)
shuber
(unomi) 01/01: Bound diagnostic type tracking and the MVEL expression cache.
shuber
(unomi) branch deny-mvel-public-eval-apis deleted (was f4fa6f7d9)
shuber
(unomi) branch master updated: Deny public MVEL eval APIs from the scripting class loader (#877)
shuber
[PR] Refresh list indexes on each poll in GraphQLListIT [unomi]
via GitHub
Re: [PR] Refresh list indexes on each poll in GraphQLListIT [unomi]
via GitHub
(unomi) branch fix-graphql-list-search-refresh created (now 0b795e53c)
shuber
(unomi) 01/01: Refresh the list index on each poll so membership search is not stuck on an early refresh.
shuber
(unomi) branch write-filtered-personalization-contents updated: Refresh the list index on each poll so membership search is not stuck on an early refresh.
shuber
(unomi) branch write-filtered-personalization-contents updated (741cd2c65 -> 7d17d9c70)
shuber
(unomi) branch write-filtered-personalization-contents created (now 741cd2c65)
shuber
(unomi) 01/01: Refresh the list index on each poll so membership search is not stuck on an early refresh.
shuber
(unomi) branch deny-mvel-public-eval-apis updated (2f3028ed7 -> f4fa6f7d9)
shuber
(unomi) branch drop-public-cors-credentials updated (ae27b4da8 -> 28d41e301)
shuber
(unomi) branch write-filtered-personalization-contents deleted (was 7d17d9c70)
shuber
(unomi) branch deny-mvel-public-eval-apis updated (d2d7754c7 -> 2f3028ed7)
shuber
(unomi) branch master updated (ce3eff265 -> a51bf3c9e)
shuber
(unomi) branch master updated (668a15fbf -> ce3eff265)
shuber
(unomi) branch UNOMI-978-action-identity-ownership deleted (was 34e6e5277)
shuber
(unomi) branch write-filtered-personalization-contents updated (cdf479c2e -> 7d17d9c70)
shuber
(unomi) branch drop-public-cors-credentials updated (5b9d24d24 -> ae27b4da8)
shuber
(unomi) branch deny-mvel-public-eval-apis updated (1ee5c319d -> d2d7754c7)
shuber
(unomi) branch UNOMI-978-action-identity-ownership updated: UNOMI-978: Allowlist property writes and refuse untrusted identity claims
shuber
(unomi) branch master updated: UNOMI-976: Restrict Groovy action upload to system administrators (#852)
shuber
(unomi) branch UNOMI-976-groovy-action-authz deleted (was 27416cfc2)
shuber
(unomi) branch graphql-ws-auth-review-followups deleted (was 00952f6c0)
shuber
(unomi) branch validate-public-session-and-client-ip deleted (was f3557a8af)
shuber
(unomi) branch master updated: Keep Jetty client types out of GraphQLWebSocketIT method signatures (#882)
shuber
(unomi) branch drop-public-cors-credentials updated (c0497920f -> 5b9d24d24)
shuber
(unomi) branch graphql-authenticated-role-tenant-checks updated (a56fa2ad2 -> 61ba340c0)
shuber
(unomi) branch graphql-ws-it-signatures deleted (was 9af5a7546)
shuber
(unomi) branch graphql-ws-auth-review-followups updated (d6ac273f7 -> 00952f6c0)
shuber
(unomi) 01/02: Challenge on every WebSocket 401, case-insensitive scheme, restore idle timeout
shuber
(unomi) 02/02: Grant the lowercase Basic-scheme unit test the role and system access it needs.
shuber
(unomi) branch graphql-authenticated-role-tenant-checks updated: Grant the JAAS success-path unit test the role and system access it now needs.
shuber
(unomi) branch UNOMI-982-optional-condition-parameter deleted (was 7f204028f)
jsinovassinnaik
(unomi) branch master updated: UNOMI-982: Drop a condition whose optional parameter the context does not supply (#864)
jsinovassinnaik
[PR] Bound diagnostic type tracking and the MVEL expression cache [unomi]
via GitHub
Re: [PR] Bound diagnostic type tracking and the MVEL expression cache [unomi]
via GitHub
Re: [PR] Bound diagnostic type tracking and the MVEL expression cache [unomi]
via GitHub
(unomi) branch UNOMI-977-router-config-authz updated (ad70714c4 -> eb0e5711d)
shuber
(unomi) 01/01: UNOMI-977: Restrict router import/export configuration to system administrators
shuber
(unomi) branch graphql-ws-auth-review-followups updated (7979d5279 -> d6ac273f7)
shuber
(unomi) 01/01: Challenge on every WebSocket 401, case-insensitive scheme, restore idle timeout
shuber
(unomi) branch write-filtered-personalization-contents updated (70acde153 -> cdf479c2e)
shuber
(unomi) branch graphql-scope-profile-events-filter updated (a00929ed3 -> 231aebcae)
shuber
(unomi) branch validate-public-session-and-client-ip updated (3a8b785fc -> f3557a8af)
shuber
(unomi) 01/01: Validate eventcollector query session ids and honor client IPs only from configured proxies.
shuber
(unomi) branch deny-mvel-public-eval-apis updated (1540a26af -> 1ee5c319d)
shuber
(unomi) branch bound-matchesregex-condition-evaluation updated (b0cd65b3c -> 7ec8eed1f)
shuber
(unomi) 01/04: Combine the profile scope with client event filters instead of replacing it
shuber
(unomi) 02/04: Cover profile event-scope with an integration test
shuber
(unomi) 03/04: Bound regular-expression evaluation in the matchesRegex operator
shuber
(unomi) 04/04: Cover caller-supplied condition patterns with an integration test
shuber
(unomi) branch bound-diagnostic-and-script-caches updated (7c792a7ab -> 9a4f6b65b)
shuber
(unomi) 01/04: Write filtered personalization contents back onto the request.
shuber
(unomi) 03/04: Deny public MVEL eval APIs from the scripting class loader.
shuber
(unomi) 04/04: Bound diagnostic type tracking and the MVEL expression cache.
shuber
(unomi) 02/04: Keep personalization fallback when mixed contents include a script value.
shuber
(unomi) branch UNOMI-977-router-config-authz updated (eb0e5711d -> 595fcb52e)
shuber
(unomi) 01/01: UNOMI-977: Restrict router import/export configuration to system administrators
shuber
(unomi) branch drop-public-cors-credentials updated (1068f7de2 -> c0497920f)
shuber
(unomi) 01/01: Drop credentialed CORS on the public tracker endpoints.
shuber
(unomi) branch simplify-request-id-validation-patterns updated (ee351c08c -> 203222d69)
shuber
(unomi) 01/02: Simplify identifier validation patterns to a single character class
shuber
(unomi) 02/02: Cover identifier validation with an integration test
shuber
[PR] Challenge on every WebSocket 401, compare the Basic scheme case-insensitively, restore idle timeout [unomi]
via GitHub
Re: [PR] Challenge on every WebSocket 401, compare the Basic scheme case-insensitively, restore idle timeout [unomi]
via GitHub
Re: [PR] Challenge on every WebSocket 401, compare the Basic scheme case-insensitively, restore idle timeout [unomi]
via GitHub
(unomi) branch graphql-ws-auth-review-followups created (now 7979d5279)
shuber
(unomi) 01/01: Challenge on every WebSocket 401, case-insensitive scheme, restore idle timeout
shuber
(unomi) branch drop-public-cors-credentials created (now 1068f7de2)
shuber
(unomi) 01/01: Drop credentialed CORS on the public tracker endpoints.
shuber
(unomi) branch UNOMI-978-action-identity-ownership updated (c10e68b5c -> 81504c791)
shuber
(unomi) 01/01: UNOMI-978: Gate cross-profile merge and systemProperties writes on a trusted caller
shuber
(unomi) branch UNOMI-976-groovy-action-authz updated (0cfc41702 -> 27416cfc2)
shuber
(unomi) 01/01: UNOMI-976: Restrict Groovy action upload to system administrators
shuber
(unomi) branch bound-diagnostic-and-script-caches created (now 7c792a7ab)
shuber
(unomi) 01/01: Bound diagnostic type tracking and the MVEL expression cache.
shuber
(unomi) branch graphql-ws-it-signatures created (now 9af5a7546)
shuber
(unomi) 01/01: Keep Jetty client types out of GraphQLWebSocketIT method signatures
shuber
[PR] Keep Jetty client types out of GraphQLWebSocketIT method signatures [unomi]
via GitHub
Re: [PR] Keep Jetty client types out of GraphQLWebSocketIT method signatures [unomi]
via GitHub
[PR] Validate eventcollector query session ids and honor client IPs only from configured proxies [unomi]
via GitHub
Re: [PR] Validate eventcollector query session ids and honor client IPs only from configured proxies [unomi]
via GitHub
Re: [PR] Validate eventcollector query session ids and honor client IPs only from configured proxies [unomi]
via GitHub
[PR] Drop credentialed CORS on the public tracker endpoints [unomi]
via GitHub
Re: [PR] Drop credentialed CORS on the public tracker endpoints [unomi]
via GitHub
Re: [PR] Drop credentialed CORS on the public tracker endpoints [unomi]
via GitHub
(unomi) branch validate-public-session-and-client-ip created (now 3a8b785fc)
shuber
(unomi) 01/01: Validate eventcollector query session ids and honor client IPs only from configured proxies.
shuber
(unomi) branch deny-mvel-public-eval-apis updated (7bb972c52 -> 1540a26af)
shuber
(unomi) 01/01: Deny public MVEL eval APIs from the scripting class loader.
shuber
(unomi) branch graphql-gate-processevents updated: Cover the GraphQL restricted-event-type gate with unit tests.
shuber
(unomi) branch graphql-ws-scheduler-shutdown deleted (was 07ffe7f2d)
shuber
(unomi) branch write-filtered-personalization-contents created (now 70acde153)
shuber
(unomi) 02/02: Keep personalization fallback when mixed contents include a script value.
shuber
(unomi) 01/02: Write filtered personalization contents back onto the request.
shuber
[PR] Bound regular-expression evaluation in the matchesRegex operator [unomi]
via GitHub
Re: [PR] Bound regular-expression evaluation in the matchesRegex operator [unomi]
via GitHub
Re: [PR] Bound regular-expression evaluation in the matchesRegex operator [unomi]
via GitHub
[PR] Write filtered personalization contents back onto the request [unomi]
via GitHub
Re: [PR] Write filtered personalization contents back onto the request [unomi]
via GitHub
Re: [PR] Write filtered personalization contents back onto the request [unomi]
via GitHub
[PR] Deny public MVEL eval APIs from the scripting class loader [unomi]
via GitHub
Re: [PR] Deny public MVEL eval APIs from the scripting class loader [unomi]
via GitHub
Re: [PR] Deny public MVEL eval APIs from the scripting class loader [unomi]
via GitHub
[PR] Check roles and tenant authority after a realm login [unomi]
via GitHub
Re: [PR] Check roles and tenant authority after a realm login [unomi]
via GitHub
[PR] Authorize the executed GraphQL operation, not the first definition [unomi]
via GitHub
Re: [PR] Authorize the executed GraphQL operation, not the first definition [unomi]
via GitHub
[PR] Combine the profile scope with client event filters instead of replacing it [unomi]
via GitHub
Re: [PR] Combine the profile scope with client event filters instead of replacing it [unomi]
via GitHub
Re: [PR] Combine the profile scope with client event filters instead of replacing it [unomi]
via GitHub
[PR] Apply the restricted-event-type gate to events submitted over GraphQL [unomi]
via GitHub
Re: [PR] Apply the restricted-event-type gate to events submitted over GraphQL [unomi]
via GitHub
[PR] Simplify identifier validation patterns to a single character class [unomi]
via GitHub
Re: [PR] Simplify identifier validation patterns to a single character class [unomi]
via GitHub
Re: [PR] Simplify identifier validation patterns to a single character class [unomi]
via GitHub
(unomi) branch graphql-authenticated-role-tenant-checks created (now c62897a46)
shuber
(unomi) 01/01: Check roles and tenant authority after a realm login
shuber
(unomi) branch graphql-gate-processevents created (now 437942a7a)
shuber
(unomi) 01/01: Apply the restricted-event-type gate to events submitted over GraphQL
shuber
(unomi) branch simplify-request-id-validation-patterns created (now ee351c08c)
shuber
(unomi) 02/02: Cover identifier validation with an integration test
shuber
(unomi) 01/02: Simplify identifier validation patterns to a single character class
shuber
(unomi) branch deny-mvel-public-eval-apis created (now 7bb972c52)
shuber
(unomi) 03/03: Keep MVEL enabled and rely on the class-loader deny.
shuber
(unomi) 02/03: Harden MVEL sandbox so public eval APIs stay unreachable.
shuber
(unomi) 01/03: Disable MVEL scripting by default and add an opt-in for existing rules.
shuber
(unomi) branch graphql-scope-profile-events-filter created (now a00929ed3)
shuber
(unomi) 01/02: Combine the profile scope with client event filters instead of replacing it
shuber
(unomi) 02/02: Cover profile event-scope with an integration test
shuber
(unomi) branch graphql-authorize-selected-operation created (now 4a41fd898)
shuber
(unomi) 02/02: Cover public-operation authorization with integration tests
shuber
(unomi) 01/02: Authorize the executed GraphQL operation, not the first definition
shuber
(unomi) branch bound-matchesregex-condition-evaluation created (now b0cd65b3c)
shuber
(unomi) 01/02: Bound regular-expression evaluation in the matchesRegex operator
shuber
(unomi) 02/02: Cover caller-supplied condition patterns with an integration test
shuber
(unomi) branch master updated: Stop the GraphQL WebSocket deadline scheduler when the servlet is destroyed (#858)
shuber
[jira] [Created] (UNOMI-987) The BOM does not list unomi-plugins-advanced-conditions
Jira
[jira] [Updated] (UNOMI-987) The BOM does not list unomi-plugins-advanced-conditions
Jira
[jira] [Updated] (UNOMI-987) The BOM does not list unomi-plugins-advanced-conditions
Jira
(unomi) branch master updated: UNOMI-987: List unomi-plugins-advanced-conditions in the BOM (#869)
jsinovassinnaik
[PR] UNOMI-987: List unomi-plugins-advanced-conditions in the BOM [unomi]
via GitHub
Re: [PR] UNOMI-987: List unomi-plugins-advanced-conditions in the BOM [unomi]
via GitHub
[jira] [Assigned] (UNOMI-987) The BOM does not list unomi-plugins-advanced-conditions
Jira
(unomi) branch UNOMI-987-bom-advanced-conditions created (now 93d6479b0)
jsinovassinnaik
(unomi) 01/01: UNOMI-987: List unomi-plugins-advanced-conditions in the BOM
jsinovassinnaik
[jira] [Updated] (UNOMI-983) Saving an item with no itemId overwrites a single shared document
Jira
[PR] UNOMI-985: Update Develocity and Common Custom User Data Maven extensions [unomi]
via GitHub
Re: [PR] UNOMI-985: Update Develocity and Common Custom User Data Maven extensions [unomi]
via GitHub
Re: [PR] UNOMI-985: Update Develocity and Common Custom User Data Maven extensions [unomi]
via GitHub
(unomi) branch UNOMI-983-refuse-item-without-itemid created (now 5824a0597)
jsinovassinnaik
(unomi) 01/01: UNOMI-983: Refuse to save an item that carries no itemId
jsinovassinnaik
[PR] UNOMI-983: Refuse to save an item that carries no itemId [unomi]
via GitHub
Re: [PR] UNOMI-983: Refuse to save an item that carries no itemId [unomi]
via GitHub
Re: [PR] UNOMI-983: Refuse to save an item that carries no itemId [unomi]
via GitHub
Re: [PR] UNOMI-983: Refuse to save an item that carries no itemId [unomi]
via GitHub
(unomi) branch UNOMI-982-optional-condition-parameter created (now dbc7ede33)
jsinovassinnaik
(unomi) 01/01: UNOMI-982: Drop a condition whose optional parameter the context does not supply
jsinovassinnaik
(unomi) branch UNOMI-982-optional-condition-parameter updated (dbc7ede33 -> 7f204028f)
jsinovassinnaik
[PR] UNOMI-986: Write a one-shot import CSV to the directory of its tenant [unomi]
via GitHub
Re: [PR] UNOMI-986: Write a one-shot import CSV to the directory of its tenant [unomi]
via GitHub
Re: [PR] UNOMI-986: Write a one-shot import CSV to the directory of its tenant [unomi]
via GitHub
[jira] [Assigned] (UNOMI-986) A one-shot CSV import uploaded through the REST endpoint is never processed
Jira
(unomi) branch UNOMI-986-oneshot-import-tenant-dir created (now 59a98f19e)
jsinovassinnaik
(unomi) 01/01: UNOMI-986: Write a one-shot import CSV to the directory of its tenant
jsinovassinnaik
[jira] [Created] (UNOMI-986) A one-shot CSV import uploaded through the REST endpoint is never processed
Jira
[jira] [Created] (UNOMI-984) Document the 3.1 answer to a search condition with no resolvable type
Jira
[jira] [Assigned] (UNOMI-984) Document the 3.1 answer to a search condition with no resolvable type
Jira
[jira] [Created] (UNOMI-985) Build scans lack current insight data because the Develocity build extensions are out of date
Clay Johnson (Jira)
[PR] UNOMI-984: Record how 3.1 answers a search condition with no resolvable type [unomi]
via GitHub
Re: [PR] UNOMI-984: Record how 3.1 answers a search condition with no resolvable type [unomi]
via GitHub
Re: [PR] UNOMI-984: Record how 3.1 answers a search condition with no resolvable type [unomi]
via GitHub
(unomi) branch UNOMI-984-untyped-search-condition created (now 53c436f1e)
jsinovassinnaik
(unomi) 01/01: UNOMI-984: Record how 3.1 answers a search condition with no resolvable type
jsinovassinnaik
[jira] [Assigned] (UNOMI-983) Saving an item with no itemId overwrites a single shared document
Jira
[jira] [Created] (UNOMI-983) Saving an item with no itemId overwrites a single shared document
Jira
[jira] [Updated] (UNOMI-982) A condition with an unset optional parameter never matches
Jira
[jira] [Updated] (UNOMI-982) A condition with an unset optional parameter never matches
Serge Huber (Jira)
[jira] [Assigned] (UNOMI-982) A condition with an unset optional parameter never matches
Jira
[jira] [Created] (UNOMI-982) A condition with an unset optional parameter never matches
Jira
[PR] UNOMI-982: Drop a condition whose optional parameter the context does not supply [unomi]
via GitHub
Re: [PR] UNOMI-982: Drop a condition whose optional parameter the context does not supply [unomi]
via GitHub
Re: [PR] UNOMI-982: Drop a condition whose optional parameter the context does not supply [unomi]
via GitHub
[jira] [Created] (UNOMI-981) The package module deploys nothing, so no 3.1.0-SNAPSHOT distribution has been published since June
Jira
Earlier messages
Later messages