You are viewing a plain text version of this content. The canonical link for it is here.
- (knox) branch feature/jakarta-jetty-upgrade created (now 469fcbf8e) - posted by bo...@apache.org on 2026/08/05 17:30:29 UTC, 0 replies.
- (knox) 01/49: KNOX-3238: Migrating to Jakarta EE10 using Openrewrite recipe. - posted by bo...@apache.org on 2026/08/05 17:30:30 UTC, 0 replies.
- (knox) 02/49: KNOX-3238: replacing jetty.servlet classes with jetty.ee9.servlet classes, deleting NoOpLogger (Log class removed in Jetty 12) and defining log4j2.xml configuration files for tests. - posted by bo...@apache.org on 2026/08/05 17:30:31 UTC, 0 replies.
- (knox) 03/49: KNOX-3238: updating jakarta-servlet-api to 6.0.0 and jetty ee9 to ee10. - posted by bo...@apache.org on 2026/08/05 17:30:32 UTC, 0 replies.
- (knox) 04/49: KNOX-3238: correcting TraceHandler, HSTSHandler and KnoxErrorHandler, along with jetty 12 form keys length and size. - posted by bo...@apache.org on 2026/08/05 17:30:33 UTC, 0 replies.
- (knox) 05/49: KNOX-3238: correcting AccessHandler and JWTValidatorFactory - posted by bo...@apache.org on 2026/08/05 17:30:34 UTC, 0 replies.
- (knox) 06/49: KNOX-3238: correcting CorrelationHandler (thread context will not work in Jetty 12, as Jetty will use 1...n threads for a request / response exchange). - posted by bo...@apache.org on 2026/08/05 17:30:35 UTC, 0 replies.
- (knox) 07/49: KNOX-3238: refactor RequestUpdateHandler and PortMappingHelperHandler to Jetty 12 - posted by bo...@apache.org on 2026/08/05 17:30:36 UTC, 0 replies.
- (knox) 08/49: KNOX-3238: refactor createWebAppContext - posted by bo...@apache.org on 2026/08/05 17:30:37 UTC, 0 replies.
- (knox) 09/49: KNOX-3238: refactor createConnector - posted by bo...@apache.org on 2026/08/05 17:30:38 UTC, 0 replies.
- (knox) 10/49: KNOX-3238: refactor Http404ErrorHandler - posted by bo...@apache.org on 2026/08/05 17:30:39 UTC, 0 replies.
- (knox) 11/49: KNOX-3238: refactor createWebAppContext pt2 - posted by bo...@apache.org on 2026/08/05 17:30:40 UTC, 0 replies.
- (knox) 12/49: KNOX-3238: configure jsp handling - posted by bo...@apache.org on 2026/08/05 17:30:41 UTC, 0 replies.
- (knox) 13/49: KNOX-3238: fix Jetty request log. - posted by bo...@apache.org on 2026/08/05 17:30:42 UTC, 0 replies.
- (knox) 14/49: KNOX-3238: fix Jetty lifecycle listener - posted by bo...@apache.org on 2026/08/05 17:30:43 UTC, 0 replies.
- (knox) 15/49: KNOX-3238: fix contextToHandlerMap initialization - posted by bo...@apache.org on 2026/08/05 17:30:44 UTC, 0 replies.
- (knox) 16/49: KNOX-3238: fix setVirtualHosts initialization - posted by bo...@apache.org on 2026/08/05 17:30:45 UTC, 0 replies.
- (knox) 17/49: KNOX-3238: fix Jetty handler chain. - posted by bo...@apache.org on 2026/08/05 17:30:46 UTC, 0 replies.
- (knox) 18/49: KNOX-3238: rebase and migrate gateway-service-restcatalog to use jakarta.servlet API. - posted by bo...@apache.org on 2026/08/05 17:30:47 UTC, 0 replies.
- (knox) 19/49: KNOX-3238: correct GatewayWebsocketHandler, ProxyWebSocketAdapter, WebshellWebSocketAdapter and JWTValidatorFactory. - posted by bo...@apache.org on 2026/08/05 17:30:48 UTC, 0 replies.
- (knox) 20/49: KNOX-3238: correct JWTValidatorFactory, GatewayPortMappingConfigTest, KnoxCacheManager and KnoxLdapRealm. - posted by bo...@apache.org on 2026/08/05 17:30:49 UTC, 0 replies.
- (knox) 21/49: KNOX-3238: fix websocket tests - posted by bo...@apache.org on 2026/08/05 17:30:50 UTC, 0 replies.
- (knox) 22/49: KNOX-3238: moving KnoxWebSocketCreator from GatewayWebsocketHandler to a top-level class and correcting WebsocketBackendUrlTest. - posted by bo...@apache.org on 2026/08/05 17:30:51 UTC, 0 replies.
- (knox) 23/49: KNOX-3238: correct MockConsoleFactory - posted by bo...@apache.org on 2026/08/05 17:30:52 UTC, 0 replies.
- (knox) 24/49: KNOX-3238: correcting dependencies and build errors (without HadoopAuthFilter) - posted by bo...@apache.org on 2026/08/05 17:30:53 UTC, 0 replies.
- (knox) 25/49: KNOX-3238: restore hadoop-common javax exclusions - posted by bo...@apache.org on 2026/08/05 17:30:54 UTC, 0 replies.
- (knox) 26/49: KNOX-3238: upgraded dropwizard metrics to 4.2.38 (Jetty 12 needs 4.2.x) and changed to metrics-jakarta-servlets. - posted by bo...@apache.org on 2026/08/05 17:30:55 UTC, 0 replies.
- (knox) 27/49: KNOX-3238: add jetty-ee10-servlet dependency for tests. - posted by bo...@apache.org on 2026/08/05 17:30:56 UTC, 0 replies.
- (knox) 28/49: KNOX-3238: temporarily make HadoopAuthFilter compile - posted by bo...@apache.org on 2026/08/05 17:30:57 UTC, 0 replies.
- (knox) 29/49: KNOX-3238: fix jersey-media-multipart dependency and jakarta.ws.rs-api version for EE10. - posted by bo...@apache.org on 2026/08/05 17:30:58 UTC, 0 replies.
- (knox) 30/49: KNOX-3238: fix HSTSHandlerTest - posted by bo...@apache.org on 2026/08/05 17:30:59 UTC, 0 replies.
- (knox) 31/49: KNOX-3238: fix GatewayWebsocketHandlerTest and JWTValidatorTest. - posted by bo...@apache.org on 2026/08/05 17:31:00 UTC, 0 replies.
- (knox) 32/49: KNOX-3238: fix some websocket tests. - posted by bo...@apache.org on 2026/08/05 17:31:01 UTC, 0 replies.
- (knox) 33/49: KNOX-3238: fix unused imports in JWTValidatorTest. - posted by bo...@apache.org on 2026/08/05 17:31:02 UTC, 0 replies.
- (knox) 34/49: KNOX-3238: fix some websocket tests. - posted by bo...@apache.org on 2026/08/05 17:31:03 UTC, 0 replies.
- (knox) 35/49: KNOX-3238: fix WebsocketServerInitiatedPingTest and WebsocketEchoHTTPServiceRoleTest.testGatewayRewriteHttpEcho - posted by bo...@apache.org on 2026/08/05 17:31:04 UTC, 0 replies.
- (knox) 36/49: KNOX-3238: fix GatewayForwardingServletTest. - posted by bo...@apache.org on 2026/08/05 17:31:05 UTC, 0 replies.
- (knox) 37/49: KNOX-3238: fix used undeclared dependency for org.eclipse.jetty.websocket.core.OpCode. - posted by bo...@apache.org on 2026/08/05 17:31:06 UTC, 0 replies.
- (knox) 38/49: KNOX-3238: Fix replacing persistence configuration in KnoxCacheManager. (xmlConfiguration.getServiceCreationConfigurations() is unmodifiable in ehcache-3.10.9-jakarta). - posted by bo...@apache.org on 2026/08/05 17:31:07 UTC, 0 replies.
- (knox) 39/49: KNOX-3238: Fix SimpleDescriptorHandlerFuncTest.testSimpleDescriptorHandlerQueryStringCredentialAliasCreation. - posted by bo...@apache.org on 2026/08/05 17:31:08 UTC, 0 replies.
- (knox) 40/49: KNOX-3238: ignoring testEncodedForwardSlash as it is not allowed when using Servlet 6. - posted by bo...@apache.org on 2026/08/05 17:31:09 UTC, 0 replies.
- (knox) 41/49: KNOX-3238: ignoring tests because of Hadoop Jetty 9 and javax.servlet dependencies. - posted by bo...@apache.org on 2026/08/05 17:31:10 UTC, 0 replies.
- (knox) 42/49: KNOX-3238: fix testPutDescriptorWithValidEncodedName. - posted by bo...@apache.org on 2026/08/05 17:31:11 UTC, 0 replies.
- (knox) 43/49: KNOX-3238: upgrade asm to 9.9.1 (Jetty 12 has 9.9.1 and net.minidev:accessors-smart would use 9.7.1). JDK 17 would need 9.1+. - posted by bo...@apache.org on 2026/08/05 17:31:12 UTC, 0 replies.
- (knox) 44/49: KNOX-3238: replace javax.servlet with jakarta.servlet in gateway-provider-security-k8s, correct incorrect rebase in HadoopGroupProviderFilterTest, replace javax.servlet with jakarta.servlet. - posted by bo...@apache.org on 2026/08/05 17:31:13 UTC, 0 replies.
- (knox) 45/49: KNOX-3238: KNOX-3309: Fix Knox HadoopAuthFilter dependency on hadoop AuthenticationFilter. - posted by bo...@apache.org on 2026/08/05 17:31:14 UTC, 0 replies.
- (knox) 46/49: KNOX-3238: exclude jetty 9 dependencies from hadoop-common. - posted by bo...@apache.org on 2026/08/05 17:31:15 UTC, 0 replies.
- (knox) 47/49: KNOX-3238: replace javax.servlet with jakarta.servlet in TokenExchangeHandler, TokenExchangeHandlerTest and JWTFederationFilterTokenExchangeRoutingTest. - posted by bo...@apache.org on 2026/08/05 17:31:16 UTC, 0 replies.
- (knox) 48/49: KNOX-3238: cleanup some comments. - posted by bo...@apache.org on 2026/08/05 17:31:17 UTC, 0 replies.
- (knox) 49/49: KNOX-3238: added TODO comments on websocket issues still present. - posted by bo...@apache.org on 2026/08/05 17:31:18 UTC, 0 replies.
- (knox) branch master updated: KNOX-3407: Support for WebSocket mTLS (#1338) - posted by mo...@apache.org on 2026/08/06 13:43:40 UTC, 0 replies.
- (knox) branch knox_idf updated: KNOX-3368 - Switch KNOXIDF_ADMIN to single-role pattern with PathAclsAuthz (#1337) - posted by pz...@apache.org on 2026/08/06 17:50:15 UTC, 0 replies.
- (knox) branch knox_idf updated: KNOX-3408 - Allow no actor token in JWTFederationFilter.handleTokenExchange (#1339) - posted by pz...@apache.org on 2026/08/06 17:50:28 UTC, 0 replies.
- (knox) branch knox_idf updated (e9c2ab00b -> 5066017a8) - posted by sm...@apache.org on 2026/08/10 14:23:20 UTC, 0 replies.
- (knox) 01/11: Knox as OIDC Provider (#1215) - posted by sm...@apache.org on 2026/08/10 14:23:21 UTC, 0 replies.
- (knox) 02/11: KnoxIDF - Fixed pylint and test issues in Docker-based tests - posted by sm...@apache.org on 2026/08/10 14:23:22 UTC, 0 replies.
- (knox) 03/11: KNOX-3355 - Add TrustedOidcIssuerService schema and interface (#1311) - posted by sm...@apache.org on 2026/08/10 14:23:23 UTC, 0 replies.
- (knox) 04/11: KNOX-3355 - Add OIDCDiscoveryHelper, JdbcTrustedOidcIssuerService, and TrustedOidcIssuerServiceFactory (#1315) - posted by sm...@apache.org on 2026/08/10 14:23:24 UTC, 0 replies.
- (knox) 05/11: KNOX-3390 - Address comments in PR 1315 (#1320) - posted by sm...@apache.org on 2026/08/10 14:23:25 UTC, 0 replies.
- (knox) 06/11: KNOX-3390: Moved gateway-level config to GatewayConfig and implemented the missing methods (#1322) - posted by sm...@apache.org on 2026/08/10 14:23:26 UTC, 0 replies.
- (knox) 07/11: KNOX-3368 - Trusted OIDC Issuer admin API for Knox IDF (#1327) - posted by sm...@apache.org on 2026/08/10 14:23:27 UTC, 0 replies.
- (knox) 08/11: KNOX-3390: Corrected JUnit test coverage for max issuers (#1326) - posted by sm...@apache.org on 2026/08/10 14:23:28 UTC, 0 replies.
- (knox) 09/11: KNOX-3396: Return 4xx for type-mismatched register bodies and issuer-limit-reached instead of 500 (#1328) - posted by sm...@apache.org on 2026/08/10 14:23:29 UTC, 0 replies.
- (knox) 10/11: KNOX-3368 - Switch KNOXIDF_ADMIN to single-role pattern with PathAclsAuthz (#1337) - posted by sm...@apache.org on 2026/08/10 14:23:30 UTC, 0 replies.
- (knox) 11/11: KNOX-3408 - Allow no actor token in JWTFederationFilter.handleTokenExchange (#1339) - posted by sm...@apache.org on 2026/08/10 14:23:31 UTC, 0 replies.
- (knox) branch knox_idf updated: KnoxIDF: remove unused import (caused by the previous master rebase) - posted by sm...@apache.org on 2026/08/10 14:26:03 UTC, 0 replies.
- (knox) branch knox_idf updated: KNOX-3408 - Move act-claim/ActorChainPrincipal coverage into TokenExchangeHandlerTest; drop redundant JWTFederationFilterHandleTokenExchangeTest - posted by sm...@apache.org on 2026/08/10 14:58:37 UTC, 0 replies.
- (knox) branch master updated: KNOX-3409: Validate knoxauth theme name to Harden Branding Support (Reported by Quinn Nguyen) (#1341) - posted by lm...@apache.org on 2026/08/11 04:14:36 UTC, 0 replies.
- (knox) branch master updated: KNOX-3410: KnoxToken enable/disable endpoints perform no caller autho… (#1343) - posted by ha...@apache.org on 2026/08/11 14:44:21 UTC, 0 replies.
- (knox) branch master updated: KNOX-3411: KnoxToken getUserTokens returns every user's token metadat… (#1344) - posted by ha...@apache.org on 2026/08/11 14:46:05 UTC, 0 replies.
- (knox) branch v3.0.0 updated (7f9b68670 -> cc04bd01d) - posted by ha...@apache.org on 2026/08/11 14:48:19 UTC, 0 replies.
- (knox) 01/02: KNOX-3410: KnoxToken enable/disable endpoints perform no caller autho… (#1343) - posted by ha...@apache.org on 2026/08/11 14:48:20 UTC, 0 replies.
- (knox) 02/02: KNOX-3411: KnoxToken getUserTokens returns every user's token metadat… (#1344) - posted by ha...@apache.org on 2026/08/11 14:48:21 UTC, 0 replies.
- (knox) branch knox_idf updated: KNOX-3405 - Extend JWTFederationFilter for dynamic JWKS and iss attribute on token-exchange (#1342) - posted by sm...@apache.org on 2026/08/12 09:09:58 UTC, 0 replies.
- (knox) branch master updated: KNOX-3413: KnoxToken passcode verification accepts a valid passcode for a different token (#1345) - posted by ha...@apache.org on 2026/08/12 13:26:27 UTC, 0 replies.
- (knox) branch master updated: KNOX-3416: KnoxSSO redirects to untrusted site (#1346) - posted by ha...@apache.org on 2026/08/12 13:26:40 UTC, 0 replies.
- (knox) branch v3.0.0 updated (cc04bd01d -> f4ce36819) - posted by ha...@apache.org on 2026/08/12 13:27:58 UTC, 0 replies.
- (knox) 01/02: KNOX-3413: KnoxToken passcode verification accepts a valid passcode for a different token (#1345) - posted by ha...@apache.org on 2026/08/12 13:27:59 UTC, 0 replies.
- (knox) 02/02: KNOX-3416: KnoxSSO redirects to untrusted site (#1346) - posted by ha...@apache.org on 2026/08/12 13:28:00 UTC, 0 replies.
- (knox) branch dependabot/maven/org.apache.httpcomponents.core5-httpcore5-5.4.3 created (now 7282eaaec) - posted by gi...@apache.org on 2026/08/12 19:29:31 UTC, 0 replies.
- (knox) branch knox_idf updated (705d27e9f -> e43cd2e52) - posted by sm...@apache.org on 2026/08/13 16:03:29 UTC, 0 replies.
- (knox) 01/37: Knox as OIDC Provider (#1215) - posted by sm...@apache.org on 2026/08/13 16:03:30 UTC, 0 replies.
- (knox) 02/37: KnoxIDF - Fixed pylint and test issues in Docker-based tests - posted by sm...@apache.org on 2026/08/13 16:03:31 UTC, 0 replies.
- (knox) 03/37: KNOX-3355 - Add TrustedOidcIssuerService schema and interface (#1311) - posted by sm...@apache.org on 2026/08/13 16:03:32 UTC, 0 replies.
- (knox) 04/37: KNOX-3355 - Add OIDCDiscoveryHelper, JdbcTrustedOidcIssuerService, and TrustedOidcIssuerServiceFactory (#1315) - posted by sm...@apache.org on 2026/08/13 16:03:33 UTC, 0 replies.
- (knox) 05/37: KNOX-3390 - Address comments in PR 1315 (#1320) - posted by sm...@apache.org on 2026/08/13 16:03:34 UTC, 0 replies.
- (knox) 06/37: KNOX-3390: Moved gateway-level config to GatewayConfig and implemented the missing methods (#1322) - posted by sm...@apache.org on 2026/08/13 16:03:35 UTC, 0 replies.
- (knox) 07/37: KNOX-3368 - Trusted OIDC Issuer admin API for Knox IDF (#1327) - posted by sm...@apache.org on 2026/08/13 16:03:36 UTC, 0 replies.
- (knox) 08/37: KNOX-3390: Corrected JUnit test coverage for max issuers (#1326) - posted by sm...@apache.org on 2026/08/13 16:03:37 UTC, 0 replies.
- (knox) 09/37: KNOX-3396: Return 4xx for type-mismatched register bodies and issuer-limit-reached instead of 500 (#1328) - posted by sm...@apache.org on 2026/08/13 16:03:38 UTC, 0 replies.
- (knox) 10/37: KNOX-3368 - Switch KNOXIDF_ADMIN to single-role pattern with PathAclsAuthz (#1337) - posted by sm...@apache.org on 2026/08/13 16:03:39 UTC, 0 replies.
- (knox) 11/37: KNOX-3408 - Allow no actor token in JWTFederationFilter.handleTokenExchange (#1339) - posted by sm...@apache.org on 2026/08/13 16:03:40 UTC, 0 replies.
- (knox) 12/37: KnoxIDF: remove unused import (caused by the previous master rebase) - posted by sm...@apache.org on 2026/08/13 16:03:41 UTC, 0 replies.
- (knox) 13/37: KNOX-3408 - Move act-claim/ActorChainPrincipal coverage into TokenExchangeHandlerTest; drop redundant JWTFederationFilterHandleTokenExchangeTest - posted by sm...@apache.org on 2026/08/13 16:03:42 UTC, 0 replies.
- (knox) 14/37: KNOX-3405 - Extend JWTFederationFilter for dynamic JWKS and iss attribute on token-exchange (#1342) - posted by sm...@apache.org on 2026/08/13 16:03:43 UTC, 0 replies.
- (knox) 15/37: KNOX-3414: security hardening for the OIDC provider (Tier 1 + Tier 2) - posted by sm...@apache.org on 2026/08/13 16:03:44 UTC, 0 replies.
- (knox) 16/37: KNOX-3414: harden secrets-at-rest, auth-code single-use, and persistence (1.5, 2.4, 2.11) - posted by sm...@apache.org on 2026/08/13 16:03:45 UTC, 0 replies.
- (knox) 17/37: KNOX-3414: Tier 3 hardening + Tier 4 polish for the OIDC provider - posted by sm...@apache.org on 2026/08/13 16:03:46 UTC, 0 replies.
- (knox) 18/37: KNOX-3414: E2E tests now adjusted to cover the previous Tier 1/2/3 bug fixes and changes - posted by sm...@apache.org on 2026/08/13 16:03:47 UTC, 0 replies.
- (knox) 19/37: KNOX-3414: add opt-in Keycloak federation E2E test and activate federated-identity persistence - posted by sm...@apache.org on 2026/08/13 16:03:48 UTC, 0 replies.
- (knox) 20/37: KNOX-3414: authenticate the client on the refresh_token grant (review finding H1) - posted by sm...@apache.org on 2026/08/13 16:03:49 UTC, 0 replies.
- (knox) 21/37: KNOX-3414: bind federated id_token to the request via OIDC nonce (review finding H2) - posted by sm...@apache.org on 2026/08/13 16:03:50 UTC, 0 replies.
- (knox) 22/37: KNOX-3414: atomically consume the refresh token before rotation (review finding M1) - posted by sm...@apache.org on 2026/08/13 16:03:51 UTC, 0 replies.
- (knox) 23/37: KNOX-3414: reject federated id_token missing sub with 4xx, not 500 (review finding M2) - posted by sm...@apache.org on 2026/08/13 16:03:52 UTC, 0 replies.
- (knox) 24/37: KNOX-3414: normalize redirect_uri path before wildcard match (review finding M3) - posted by sm...@apache.org on 2026/08/13 16:03:53 UTC, 0 replies.
- (knox) 25/37: KNOX-3414: fail closed when a federated-OP client-secret alias is unresolvable (review finding M4) - posted by sm...@apache.org on 2026/08/13 16:03:54 UTC, 0 replies.
- (knox) 26/37: KNOX-3414: fix broken double-checked locking in JdbcTrustedOidcIssuerService.init (review finding M5) - posted by sm...@apache.org on 2026/08/13 16:03:55 UTC, 0 replies.
- (knox) 27/37: KNOX-3414: /userinfo returns 401 invalid_token, not 500, for a bad bearer token (review finding M6) - posted by sm...@apache.org on 2026/08/13 16:03:56 UTC, 0 replies.
- (knox) 28/37: KNOX-3414: build a well-formed success redirect when redirect_uri has a query (review finding M7) - posted by sm...@apache.org on 2026/08/13 16:03:57 UTC, 0 replies.
- (knox) 29/37: KNOX-3414: advertise only S256 in discovery code_challenge_methods_supported (review finding M8) - posted by sm...@apache.org on 2026/08/13 16:03:58 UTC, 0 replies.
- (knox) 30/37: KNOX-3414: emit structured audit records across OAuth2/OIDC endpoints (J2) - posted by sm...@apache.org on 2026/08/13 16:03:59 UTC, 0 replies.
- (knox) 31/37: KNOX-3414: publish multiple JWKs and select verification key by kid - posted by sm...@apache.org on 2026/08/13 16:04:00 UTC, 0 replies.
- (knox) 32/37: KNOX-3414: complete OIDC discovery metadata for OAuth/MCP client integration - posted by sm...@apache.org on 2026/08/13 16:04:01 UTC, 0 replies.
- (knox) 33/37: KNOX-3414: document the UUIDv5 namespace used for federated subject derivation - posted by sm...@apache.org on 2026/08/13 16:04:02 UTC, 0 replies.
- (knox) 34/37: KNOX-3414: add Identity Federation (OIDC Provider) documentation book - posted by sm...@apache.org on 2026/08/13 16:04:03 UTC, 0 replies.
- (knox) 35/37: KNOX-3414: run KnoxIDF federation E2E tests optionally in PRs - posted by sm...@apache.org on 2026/08/13 16:04:04 UTC, 0 replies.
- (knox) 36/37: KNOX-3414: fix embedded-Derby table-exists check and add DerbyDB TrustedOidcIssuerService default - posted by sm...@apache.org on 2026/08/13 16:04:05 UTC, 0 replies.
- (knox) 37/37: KNOX-3414: support Authorization Code + PKCE for public clients - posted by sm...@apache.org on 2026/08/13 16:04:06 UTC, 0 replies.
- (knox) branch knox_idf updated: KNOX-3414: fix refresh-token rotation dropping the rotated refresh_token - posted by sm...@apache.org on 2026/08/13 16:55:42 UTC, 0 replies.
- (knox) branch knox_idf updated (3a4239c6d -> e445ca53c) - posted by sm...@apache.org on 2026/08/13 17:35:20 UTC, 0 replies.
- (knox) 01/02: KNOX-3414: update audit test for grant delegation to the knoxtoken base - posted by sm...@apache.org on 2026/08/13 17:35:21 UTC, 0 replies.
- (knox) 02/02: KNOX-3414: satisfy PMD JUnitUseExpected in client-secret resolution test - posted by sm...@apache.org on 2026/08/13 17:35:22 UTC, 0 replies.
- (knox) branch dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.3 created (now 69068433d) - posted by gi...@apache.org on 2026/08/13 18:56:02 UTC, 0 replies.
- (knox) branch master updated: KNOX-3417: KnoxLdapRealm builds the LDAP search filter from the client username without RFC-4515 escaping (#1348) - posted by ha...@apache.org on 2026/08/14 06:10:37 UTC, 0 replies.
- (knox) branch v3.0.0 updated (f4ce36819 -> cc6b674e3) - posted by ha...@apache.org on 2026/08/14 06:12:50 UTC, 0 replies.
- (knox) 01/02: KNOX-3409: Validate knoxauth theme name to Harden Branding Support (Reported by Quinn Nguyen) (#1341) - posted by ha...@apache.org on 2026/08/14 06:12:51 UTC, 0 replies.
- (knox) 02/02: KNOX-3417: KnoxLdapRealm builds the LDAP search filter from the client username without RFC-4515 escaping (#1348) - posted by ha...@apache.org on 2026/08/14 06:12:52 UTC, 0 replies.
- (knox) branch knox_idf updated (e445ca53c -> 75f6efcc7) - posted by sm...@apache.org on 2026/08/14 08:48:27 UTC, 0 replies.
- (knox) branch master updated: KNOX-3418: Path traversal → arbitrary file write/overwrite in the Apache Knox Admin API (#1349) - posted by ha...@apache.org on 2026/08/14 11:03:05 UTC, 0 replies.
- (knox) branch v3.0.0 updated: KNOX-3418: Path traversal → arbitrary file write/overwrite in the Apache Knox Admin API (#1349) - posted by ha...@apache.org on 2026/08/14 11:04:16 UTC, 0 replies.
- (knox) branch knox_idf updated (75f6efcc7 -> f0d6b44f3) - posted by sm...@apache.org on 2026/08/14 13:10:35 UTC, 0 replies.
- (knox) branch knox_idf updated (f0d6b44f3 -> d34a447bf) - posted by sm...@apache.org on 2026/08/14 14:02:04 UTC, 0 replies.
- (knox) branch master updated: Knox as an OAuth 2.0 / OpenID Connect Provider (KnoxIDF) (#1351) - posted by sm...@apache.org on 2026/08/14 18:36:39 UTC, 0 replies.
- (knox) branch master updated: Bump org.apache.httpcomponents.core5:httpcore5 from 5.3.6 to 5.4.3 (#1347) - posted by sm...@apache.org on 2026/08/17 06:29:54 UTC, 0 replies.
- (knox) branch dependabot/maven/org.apache.httpcomponents.core5-httpcore5-5.4.3 deleted (was 7282eaaec) - posted by sm...@apache.org on 2026/08/17 06:29:58 UTC, 0 replies.
- (knox) branch master updated: Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.6.3 (#1350) - posted by sm...@apache.org on 2026/08/17 06:30:20 UTC, 0 replies.
- (knox) branch dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.3 deleted (was 69068433d) - posted by sm...@apache.org on 2026/08/17 06:30:27 UTC, 0 replies.
- (knox) branch master updated: KNOX-3394: Correct outdated unittest documentation in Docker Compose integration test README (#1324) - posted by sm...@apache.org on 2026/08/17 06:35:28 UTC, 0 replies.
- (knox) branch v3.0.0 updated: KNOX-3407: Support for WebSocket mTLS (#1338) - posted by ha...@apache.org on 2026/08/17 07:32:29 UTC, 0 replies.
- (knox) branch v3.0.0 updated: Preparing Apache Knox v3.0.0 Release - posted by ha...@apache.org on 2026/08/17 07:50:34 UTC, 1 replies.
- (knox) tag v3.0.0-RC1 created (now 85c9881c1) - posted by ha...@apache.org on 2026/08/17 08:40:56 UTC, 0 replies.
- (knox) branch v2.1.x updated: Knox security picks into v2.1.x (#1352) - posted by ha...@apache.org on 2026/08/17 10:12:01 UTC, 0 replies.
- svn commit: r86826 - release/knox - posted by sm...@apache.org on 2026/08/17 11:29:37 UTC, 0 replies.
- svn commit: r86827 - release/knox - posted by sm...@apache.org on 2026/08/17 11:43:04 UTC, 0 replies.
- svn commit: r86828 - release/knox - posted by ha...@apache.org on 2026/08/17 12:13:58 UTC, 0 replies.
- (knox) branch v3.0.0 updated: Update github docs to 3.0.0 - posted by ha...@apache.org on 2026/08/18 06:48:29 UTC, 1 replies.
- (knox) tag v3.0.0-RC1 deleted (was 85c9881c1) - posted by ha...@apache.org on 2026/08/18 06:53:46 UTC, 0 replies.
- (knox) tag v3.0.0-RC1 created (now ffb0f996e) - posted by ha...@apache.org on 2026/08/18 07:15:33 UTC, 0 replies.
- svn commit: r86840 - dev/knox/knox-3.0.0 - posted by ha...@apache.org on 2026/08/18 07:38:21 UTC, 0 replies.
- (knox) tag v3.0.0-RC1 deleted (was ffb0f996e) - posted by ha...@apache.org on 2026/08/18 07:50:54 UTC, 0 replies.
- (knox) tag v3.0.0-RC1 created (now 9797d73f8) - posted by ha...@apache.org on 2026/08/18 07:51:12 UTC, 0 replies.
- svn commit: r86841 - dev/knox/knox-3.0.0 - posted by ha...@apache.org on 2026/08/18 07:56:31 UTC, 0 replies.
- svn commit: r86842 - dev/knox/knox-3.0.0 - posted by ha...@apache.org on 2026/08/18 07:57:25 UTC, 0 replies.
- (knox) branch master updated: KNOX-3278: Update JLine to 3.30.6 (#1181) - posted by bo...@apache.org on 2026/08/19 14:39:49 UTC, 0 replies.
- (knox) branch dependabot/maven/org.apache.shiro-shiro-core-2.2.1 deleted (was 2569fb227) - posted by gi...@apache.org on 2026/08/21 10:26:27 UTC, 0 replies.
- (knox) branch dependabot/maven/org.apache.shiro-shiro-web-2.2.0 deleted (was b46e05ec5) - posted by gi...@apache.org on 2026/08/21 10:26:36 UTC, 0 replies.
- (knox) branch master updated: KNOX-3421 - Upgrade Shiro to 2.2.1 (#1353) - posted by mo...@apache.org on 2026/08/21 19:50:21 UTC, 0 replies.
- (knox) branch feature/jakarta-jetty-upgrade updated (469fcbf8e -> 506e1f6e8) - posted by bo...@apache.org on 2026/08/24 11:32:37 UTC, 0 replies.
- (knox) 01/04: KNOX-3238: Correct tracing request and response headers and body. - posted by bo...@apache.org on 2026/08/24 11:32:38 UTC, 0 replies.
- (knox) 02/04: KNOX-3238: Removed the handle() override and bodyFilter/setTracedBodyFilter from KnoxErrorHandler. - posted by bo...@apache.org on 2026/08/24 11:32:39 UTC, 0 replies.
- (knox) 03/04: KNOX-3238: TraceHandler integration tests. - posted by bo...@apache.org on 2026/08/24 11:32:40 UTC, 0 replies.
- (knox) 04/04: KNOX-3238: PortMappingHelperHandlerTest - posted by bo...@apache.org on 2026/08/24 11:32:41 UTC, 0 replies.
- (knox) branch feature/jakarta-jetty-upgrade updated (506e1f6e8 -> 2d13335ba) - posted by bo...@apache.org on 2026/08/24 14:18:55 UTC, 0 replies.
- (knox) branch v2.1.1 created (now 379e86138) - posted by ha...@apache.org on 2026/08/25 08:50:31 UTC, 0 replies.
- (knox) 01/01: Preparing Apache Knox v2.1.1 Release - posted by ha...@apache.org on 2026/08/25 08:50:32 UTC, 0 replies.
- (knox) tag v2.1.1-RC1 created (now 379e86138) - posted by ha...@apache.org on 2026/08/25 08:51:16 UTC, 0 replies.
- svn commit: r86972 - dev/knox/knox-2.1.1 - posted by ha...@apache.org on 2026/08/25 09:13:06 UTC, 0 replies.
- (knox) branch feature/jakarta-jetty-upgrade updated: KNOX-3238: correct TraceHandlerTest and ProxyWebSocketAdapter ssl setup - posted by bo...@apache.org on 2026/08/26 16:18:02 UTC, 0 replies.
- (knox) branch master updated: KNOX-3425: LDAP Proxy disallows anonymous binds to remote backends (#1358) - posted by ha...@apache.org on 2026/08/27 09:10:31 UTC, 0 replies.
- (knox) branch v3.0.0 updated: KNOX-3425: LDAP Proxy disallows anonymous binds to remote backends (#1358) - posted by ha...@apache.org on 2026/08/27 15:11:50 UTC, 0 replies.
- (knox) branch KNOX-2 created (now 1cfef0d53) - posted by mo...@apache.org on 2026/08/27 15:13:45 UTC, 0 replies.
- (knox) branch KNOX-3420 created (now fbe70972e) - posted by mo...@apache.org on 2026/08/27 16:17:54 UTC, 0 replies.
- (knox) 01/01: KNOX-3420 - Upgrade Jetty from 9.x 12.x - posted by mo...@apache.org on 2026/08/27 16:17:55 UTC, 1 replies.
- (knox) branch KNOX-3420 updated (fbe70972e -> 96a5f1e9e) - posted by mo...@apache.org on 2026/08/27 17:07:28 UTC, 0 replies.
- (knox) branch master updated: KNOX-3406: LDAP Proxy backend improve error handling (#1355) - posted by ha...@apache.org on 2026/08/28 07:43:17 UTC, 0 replies.
- (knox) branch master updated: KNOX-3422: Ldap Proxy used in-memory bind user (#1357) - posted by ha...@apache.org on 2026/08/28 07:43:51 UTC, 0 replies.
- (knox) branch master updated: KNOX-3420 - Upgrade Jetty from 9.x 12.x (#1360) - posted by mo...@apache.org on 2026/08/28 11:22:27 UTC, 0 replies.
- (knox) branch v3.0.0 updated: KNOX-3278: Update JLine to 3.30.6 (#1181) (#1362) - posted by bo...@apache.org on 2026/08/28 13:44:56 UTC, 0 replies.
- (knox) branch dependabot/maven/org.mariadb.jdbc-mariadb-java-client-3.3.5 created (now df6a80256) - posted by gi...@apache.org on 2026/08/28 22:47:59 UTC, 0 replies.
- (knox) branch master updated: Bump org.mariadb.jdbc:mariadb-java-client from 3.3.0 to 3.3.5 (#1363) - posted by ha...@apache.org on 2026/08/31 09:29:52 UTC, 0 replies.
- (knox) branch dependabot/maven/org.mariadb.jdbc-mariadb-java-client-3.3.5 deleted (was df6a80256) - posted by gi...@apache.org on 2026/08/31 09:30:03 UTC, 0 replies.
- (knox) branch master updated: KNOX-3395: Add KNOXTOKEN issuance and JWTProvider federation integration tests (#1325) - posted by ha...@apache.org on 2026/08/31 09:31:47 UTC, 0 replies.
- (knox) branch master updated: KNOX-3423: Switch to JSON error messages in Knox token validation paths (#1354) - posted by ha...@apache.org on 2026/08/31 11:13:51 UTC, 0 replies.
- (knox) branch v3.0.0 updated (7cb3a90a1 -> e8bd7864d) - posted by mo...@apache.org on 2026/08/31 11:21:12 UTC, 0 replies.
- (knox) 01/02: KNOX-3421 - Upgrade Shiro to 2.2.1 (#1353) - posted by mo...@apache.org on 2026/08/31 11:21:13 UTC, 0 replies.
- (knox) 02/02: KNOX-3420 - Upgrade Jetty from 9.x 12.x (#1360) - posted by mo...@apache.org on 2026/08/31 11:21:14 UTC, 0 replies.
- (knox) branch v3.0.0 updated (e8bd7864d -> 46eae622b) - posted by sm...@apache.org on 2026/08/31 11:38:22 UTC, 0 replies.
- (knox) 01/02: KNOX-3406: LDAP Proxy backend improve error handling (#1355) - posted by sm...@apache.org on 2026/08/31 11:38:23 UTC, 0 replies.
- (knox) 02/02: KNOX-3422: Ldap Proxy used in-memory bind user (#1357) - posted by sm...@apache.org on 2026/08/31 11:38:24 UTC, 0 replies.
- (knox) tag v3.0.0-RC2 created (now 8ceb31275) - posted by ha...@apache.org on 2026/08/31 12:50:08 UTC, 0 replies.
- svn commit: r87092 - dev/knox/knox-3.0.0 - posted by ha...@apache.org on 2026/08/31 12:54:40 UTC, 0 replies.
- (knox) branch master updated: KNOX-3427: Bump Netty to 1.137.Final due to CVEs (#1366) - posted by sm...@apache.org on 2026/08/31 14:31:49 UTC, 0 replies.
- (knox) branch master updated: KNOX-3428: Bump Spring to 6.2.19 and add HashiCorp Vault alias service integration tests (#1367) - posted by sm...@apache.org on 2026/08/31 19:43:38 UTC, 0 replies.