You are viewing a plain text version of this content. The canonical link for it is here.
- [jira] [Updated] (KNOX-3498) OIDC issuer discovery url with IP breaks when FIPS enabled. - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/01 06:48:00 UTC, 2 replies.
- [jira] [Assigned] (KNOX-3499) Issuers named in `jwt.expected.issuer` never reach the trusted issuer registry - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/01 06:48:00 UTC, 0 replies.
- [jira] [Work started] (KNOX-3499) Issuers named in `jwt.expected.issuer` never reach the trusted issuer registry - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/01 06:48:00 UTC, 0 replies.
- Re: [PR] KNOX-3498 - In cases of failures with OIDC issuer discovery url containing IP addresses log a proper error and warn message. [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/10/01 07:35:15 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3498) OIDC issuer discovery url with IP breaks when FIPS enabled. - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/01 07:36:00 UTC, 6 replies.
- [jira] [Commented] (KNOX-3498) OIDC issuer discovery url with IP breaks when FIPS enabled. - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/01 07:54:00 UTC, 1 replies.
- [PR] KNOX-3498: Reject IP-literal OIDC issuer registration via topology-configurable flag [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/10/01 08:22:22 UTC, 3 replies.
- [jira] [Resolved] (KNOX-3499) Issuers named in `jwt.expected.issuer` never reach the trusted issuer registry - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/01 13:03:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3501) JWT cookie tokens fail validation when knox.token.exp.server-managed=true - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/10/01 14:18:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3502) AliasService#isAlias should recognize both ${ALIAS= and S{ALIAS= prefixes - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/02 07:45:00 UTC, 0 replies.
- [PR] KNOX-3502: AliasService.isAlias recognizes the canonical ${ALIAS=} prefix in addition to the Shiro-escaped S{ALIAS=} form [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/10/02 07:54:22 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3502) AliasService#isAlias should recognize both ${ALIAS= and S{ALIAS= prefixes - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/02 07:55:00 UTC, 2 replies.
- [jira] [Updated] (KNOX-3502) AliasService#isAlias should recognize both ${ALIAS= and S{ALIAS= prefixes - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/02 07:55:00 UTC, 1 replies.
- [jira] [Commented] (KNOX-3502) AliasService#isAlias should recognize both ${ALIAS= and S{ALIAS= prefixes - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/02 08:36:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3490) LDAPRolesLookupInterceptor resolves the wrong username when the LDAP client does not request the uid attribute, causing incorrect role lookups - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/02 09:06:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3480) Support user-supplied clientId in the Client Credentials endpoint - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/02 09:07:00 UTC, 0 replies.
- Re: [PR] KNOX-3488: Harden original-url cookie validation [knox] - posted by "bonampak (via GitHub)" <gi...@apache.org> on 2026/10/02 09:42:58 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3488) Harden original-url cookie validation - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/02 09:43:00 UTC, 1 replies.
- [jira] [Commented] (KNOX-3488) Harden original-url cookie validation - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/02 10:00:00 UTC, 1 replies.
- [jira] [Resolved] (KNOX-3488) Harden original-url cookie validation - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/02 10:00:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3503) Update knox home page with new 3.0.0 release info - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/10/02 14:49:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3504) MagicLink Provider for Passwordless Authentication - posted by "Larry McCay (Jira)" <ji...@apache.org> on 2026/10/04 20:11:00 UTC, 0 replies.
- [PR] Backporting improvements from 3.1.x [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/10/05 06:46:44 UTC, 1 replies.
- [jira] [Commented] (KNOX-3430) Deprecate AccessTokenFederationFilter - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/05 07:31:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3447) Harden ServiceDefinitionUnmarshaller - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/05 07:31:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3450) Add Transfer-Encoding to set of excluded headers in PassAllHeadersDispatch - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/05 07:31:00 UTC, 0 replies.
- Re: [PR] Bump org.bouncycastle:bcprov-jdk18on from 1.84 to 1.85 [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/10/05 07:55:47 UTC, 0 replies.
- [jira] [Updated] (KNOX-3447) Harden ServiceDefinitionUnmarshaller - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/05 08:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3430) Deprecate AccessTokenFederationFilter - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/05 08:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3450) Add Transfer-Encoding to set of excluded headers in PassAllHeadersDispatch - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/05 08:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3488) Harden original-url cookie validation - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/05 08:14:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3450) Add Transfer-Encoding to set of excluded headers in PassAllHeadersDispatch - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/05 08:14:00 UTC, 0 replies.
- [PR] KNOX-3501 - JWT cookie tokens fail validation when knox.token.exp.server-managed=true [knox] - posted by "moresandeep (via GitHub)" <gi...@apache.org> on 2026/10/05 12:35:55 UTC, 4 replies.
- [jira] [Work logged] (KNOX-3501) JWT cookie tokens fail validation when knox.token.exp.server-managed=true - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/05 12:36:00 UTC, 4 replies.
- [jira] [Created] (KNOX-3505) Support themes for logout.jsp - posted by "Philip Zampino (Jira)" <ji...@apache.org> on 2026/10/05 18:45:00 UTC, 0 replies.
- [PR] KNOX-3505 - Extend auth page themes to logout session page [knox] - posted by "arsrivastava-cloudera (via GitHub)" <gi...@apache.org> on 2026/10/06 01:53:14 UTC, 5 replies.
- [jira] [Work logged] (KNOX-3505) Support themes for logout.jsp - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/06 01:54:00 UTC, 5 replies.
- [jira] [Created] (KNOX-3506) Knox default login page flashes before modern login page displayed - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/06 06:30:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3501) JWT cookie tokens fail validation when knox.token.exp.server-managed=true - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/06 13:38:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3501) JWT cookie tokens fail validation when knox.token.exp.server-managed=true - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/10/06 13:38:00 UTC, 0 replies.
- [PR] Wire LivyHaDispatch for Livy, Livy for Spark 3, and Livy for Spark 4 [knox] - posted by "samuhasavak5 (via GitHub)" <gi...@apache.org> on 2026/10/06 15:17:06 UTC, 0 replies.
- [jira] [Created] (KNOX-3507) Wire LivyHaDispatch for LIVYSERVER, LIVY_FOR_SPARK3, and LIVY_FOR_SPARK4 - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/10/06 19:06:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3507) Wire LivyHaDispatch for LIVYSERVER, LIVY_FOR_SPARK3, and LIVY_FOR_SPARK4 - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/10/06 21:23:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3508) Knox UIs load Material Icons/Roboto fonts from the internet (fonts.googleapis.com/gstatic.com), breaking icons in air-gapped environments - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/07 07:33:00 UTC, 0 replies.
- [jira] [Work started] (KNOX-3508) Knox UIs load Material Icons/Roboto fonts from the internet (fonts.googleapis.com/gstatic.com), breaking icons in air-gapped environments - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/07 07:35:00 UTC, 0 replies.
- [PR] KNOX-3508: Bundle UI icons locally so they render in air-gapped networks [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/10/07 08:51:18 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3508) Knox UIs load Material Icons/Roboto fonts from the internet (fonts.googleapis.com/gstatic.com), breaking icons in air-gapped environments - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/07 08:52:00 UTC, 2 replies.
- [jira] [Updated] (KNOX-3508) Knox UIs load Material Icons/Roboto fonts from the internet (fonts.googleapis.com/gstatic.com), breaking icons in air-gapped environments - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/07 08:53:00 UTC, 1 replies.
- [PR] KNOX-3506: Knox's default login page flashes before modern login page… [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/10/07 09:04:16 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3506) Knox default login page flashes before modern login page displayed - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/07 09:05:00 UTC, 2 replies.
- [jira] [Commented] (KNOX-3508) Knox UIs load Material Icons/Roboto fonts from the internet (fonts.googleapis.com/gstatic.com), breaking icons in air-gapped environments - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/07 10:11:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-1731) Gateway Admin UI should not include external js/css - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/07 10:11:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3234) Upgrade Admin UI libraries/frameworks - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/07 10:11:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3506) Knox default login page flashes before modern login page displayed - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/07 11:29:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3506) Knox default login page flashes before modern login page displayed - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/07 11:29:00 UTC, 0 replies.
- [PR] fix CVE-2026-13506 [knox] - posted by "pranitatiwari-per (via GitHub)" <gi...@apache.org> on 2026/10/07 19:29:15 UTC, 2 replies.
- [PR] fix CVE-2026-8763 [knox] - posted by "pranitatiwari-per (via GitHub)" <gi...@apache.org> on 2026/10/07 19:31:43 UTC, 3 replies.
- [jira] [Created] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation - posted by "Harrison Sheinblatt (Jira)" <ji...@apache.org> on 2026/10/07 23:54:00 UTC, 0 replies.
- [PR] KNOX-3509 - Add k8s service DNS audience form, non-delegation audience validation, any-path matching, and actor-subject binding to the k8s destination audience validator [knox] - posted by "hsheinblatt (via GitHub)" <gi...@apache.org> on 2026/10/08 00:04:18 UTC, 14 replies.
- [jira] [Work logged] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/08 00:05:00 UTC, 14 replies.
- Re: [PR] [KNOX-3507] Wire LivyHaDispatch for Livy, Livy for Spark 3, and Livy for Spark 4 [knox] - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/10/09 15:03:23 UTC, 0 replies.
- [jira] [Work logged] (KNOX-3507) Wire LivyHaDispatch for LIVYSERVER, LIVY_FOR_SPARK3, and LIVY_FOR_SPARK4 - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/09 15:04:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3283) Login Page Branding and Themes - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/10 15:13:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3505) Support themes for logout.jsp - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/10 15:13:00 UTC, 0 replies.
- [jira] [Assigned] (KNOX-3505) Support themes for logout.jsp - posted by "Philip Zampino (Jira)" <ji...@apache.org> on 2026/10/10 15:15:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3505) Support themes for logout.jsp - posted by "Philip Zampino (Jira)" <ji...@apache.org> on 2026/10/10 15:16:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3510) Add path normalization to URLDecodingDispatch - posted by "Philip Zampino (Jira)" <ji...@apache.org> on 2026/10/10 18:24:00 UTC, 0 replies.
- [PR] KNOX-3510 - Normalize decoded dispatch URLs and reject path traversal [knox] - posted by "pzampino (via GitHub)" <gi...@apache.org> on 2026/10/10 18:55:59 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3510) Add path normalization to URLDecodingDispatch - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/10 18:57:00 UTC, 4 replies.
- [jira] [Updated] (KNOX-3510) Add path normalization to URLDecodingDispatch - posted by "Philip Zampino (Jira)" <ji...@apache.org> on 2026/10/10 19:19:00 UTC, 5 replies.
- [jira] [Work started] (KNOX-3510) Add path normalization to URLDecodingDispatch - posted by "Philip Zampino (Jira)" <ji...@apache.org> on 2026/10/10 19:19:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3511) Gateway ignores gateway-reloadable.xml if the file did not exist at startup - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/12 10:44:00 UTC, 0 replies.
- [PR] KNOX-3511: Gateway ignores gateway-reloadable.xml if the file did not… [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/10/12 11:42:16 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3511) Gateway ignores gateway-reloadable.xml if the file did not exist at startup - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/12 11:43:00 UTC, 2 replies.
- [jira] [Commented] (KNOX-3511) Gateway ignores gateway-reloadable.xml if the file did not exist at startup - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/12 14:03:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3511) Gateway ignores gateway-reloadable.xml if the file did not exist at startup - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/12 14:48:00 UTC, 1 replies.
- [jira] [Resolved] (KNOX-3511) Gateway ignores gateway-reloadable.xml if the file did not exist at startup - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/12 14:48:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3510) Add path normalization to URLDecodingDispatch - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/12 15:30:00 UTC, 1 replies.
- [jira] [Created] (KNOX-3512) KnoxIDF: per-issuer CA bundle (jwksCa) for trusted OIDC issuer discovery and JWKS fetches - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/13 07:47:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3512) KnoxIDF: per-issuer CA bundle (jwksCa) for trusted OIDC issuer discovery and JWKS fetches - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/13 08:07:00 UTC, 1 replies.
- [jira] [Created] (KNOX-3513) Retry unresolved credential-store aliases for LDAP proxy backend passwords - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/13 10:20:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3514) Make favicon and page title theme bound as well - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/13 11:10:00 UTC, 0 replies.
- [PR] KNOX-3512: Per-issuer CA bundle (jwksCa) for trusted OIDC issuers [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/10/13 12:36:35 UTC, 7 replies.
- [jira] [Work logged] (KNOX-3512) KnoxIDF: per-issuer CA bundle (jwksCa) for trusted OIDC issuer discovery and JWKS fetches - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/13 12:37:00 UTC, 7 replies.
- [PR] KNOX-3510 - Normalize decoded dispatch URLs and reject path traversal (#1449) [knox] - posted by "pzampino (via GitHub)" <gi...@apache.org> on 2026/10/13 17:04:51 UTC, 1 replies.
- [PR] KNOX-3513 - Add capped retry for resolving LDAP backend password aliases [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/10/13 18:16:51 UTC, 3 replies.
- [jira] [Work logged] (KNOX-3513) Retry unresolved credential-store aliases for LDAP proxy backend passwords - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/13 18:17:00 UTC, 3 replies.
- [jira] [Updated] (KNOX-3513) Retry unresolved credential-store aliases for LDAP proxy backend passwords - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/13 18:27:00 UTC, 1 replies.
- [jira] [Created] (KNOX-3515) Add trusted oidc issuer cache TTL/eventual consistency for HA configurations - posted by "Harrison Sheinblatt (Jira)" <ji...@apache.org> on 2026/10/14 03:14:00 UTC, 0 replies.
- [jira] [Work started] (KNOX-3487) LDAP Proxy find all members of a role - posted by "David Han (Jira)" <ji...@apache.org> on 2026/10/14 04:41:00 UTC, 0 replies.
- [PR] KNOX-3487, KNOX-3486: LDAP Proxy supports reverse role lookups and role listing [knox] - posted by "handavid (via GitHub)" <gi...@apache.org> on 2026/10/14 04:54:15 UTC, 11 replies.
- [jira] [Work logged] (KNOX-3487) LDAP Proxy find all members of a role - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/14 04:55:00 UTC, 11 replies.
- [jira] [Work started] (KNOX-3486) LDAP Proxy role lookup should return all roles on wildcard search - posted by "David Han (Jira)" <ji...@apache.org> on 2026/10/14 04:56:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3486) LDAP Proxy role lookup should return all roles on wildcard search - posted by "David Han (Jira)" <ji...@apache.org> on 2026/10/14 04:58:00 UTC, 1 replies.
- [PR] KNOX-3514: Login and logout faviocn and title branding [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/10/14 06:21:46 UTC, 0 replies.
- [jira] [Work logged] (KNOX-3514) Make favicon and page title theme bound as well - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/14 06:22:00 UTC, 2 replies.
- [jira] [Commented] (KNOX-3513) Retry unresolved credential-store aliases for LDAP proxy backend passwords - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/14 08:36:00 UTC, 0 replies.
- [jira] [Assigned] (KNOX-3515) Add trusted oidc issuer cache TTL/eventual consistency for HA configurations - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/14 09:23:00 UTC, 0 replies.
- Re: [PR] KNOX-3514: Login and logout favicon and title branding [knox] - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/10/14 09:34:01 UTC, 1 replies.
- [PR] KNOX-3515 - Add trusted oidc issuer cache TTL/eventual consistency for HA configurations [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/10/14 11:56:39 UTC, 12 replies.
- [jira] [Work logged] (KNOX-3515) Add trusted oidc issuer cache TTL/eventual consistency for HA configurations - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/14 11:57:00 UTC, 12 replies.
- [jira] [Commented] (KNOX-3512) KnoxIDF: per-issuer CA bundle (jwksCa) for trusted OIDC issuer discovery and JWKS fetches - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/14 12:00:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3444) Optimize CM discovery memory usage by only caching role configurations that ServiceModelGenerators actually use - posted by "Tamás Marcinkovics (Jira)" <ji...@apache.org> on 2026/10/14 13:14:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3509) Extend RequestAudienceValidator for non-delegation, dns form, service-only matching, and for act source validation - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/14 13:26:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3514) Make favicon and page title theme bound as well - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/14 14:01:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3514) Make favicon and page title theme bound as well - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/14 14:02:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3514) Make favicon and page title theme bound as well - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/14 14:02:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3516) AbstractJWTFilter rejects an untrusted token issuer with no log output, making 401s undiagnosable - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/15 07:46:00 UTC, 0 replies.
- [PR] KNOX-3516: Log and describe JWT rejections caused by an untrusted issuer [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/10/15 08:09:16 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3516) AbstractJWTFilter rejects an untrusted token issuer with no log output, making 401s undiagnosable - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/15 08:10:00 UTC, 1 replies.
- [jira] [Commented] (KNOX-3516) AbstractJWTFilter rejects an untrusted token issuer with no log output, making 401s undiagnosable - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/15 08:58:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3516) AbstractJWTFilter rejects an untrusted token issuer with no log output, making 401s undiagnosable - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/15 09:00:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3517) Add a delegation policy admin api endpoint to get by authority and actorid - posted by "Harrison Sheinblatt (Jira)" <ji...@apache.org> on 2026/10/15 16:20:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3518) UI module builds fail with npm "Cannot read properties of null (reading 'edgesOut')" - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/15 17:42:00 UTC, 0 replies.
- [PR] KNOX-3518: Pin vitest to 4.1.11 to work around npm peer-resolution crash in UI builds [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/10/15 18:22:18 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3518) UI module builds fail with npm "Cannot read properties of null (reading 'edgesOut')" - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/15 18:23:00 UTC, 1 replies.
- [jira] [Updated] (KNOX-3518) UI module builds fail with npm "Cannot read properties of null (reading 'edgesOut')" - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/15 18:24:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3518) UI module builds fail with npm "Cannot read properties of null (reading 'edgesOut')" - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/15 19:46:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3519) Fix an issue where BC-FIPS HostnameUtil.checkHostname refuses IP literals - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/10/19 23:46:00 UTC, 0 replies.
- [jira] [Work started] (KNOX-3519) Fix an issue where BC-FIPS HostnameUtil.checkHostname refuses IP literals - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/10/19 23:47:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3519) Set the JWKS host on the TLS socket so HTTPS endpoint identification works under BC-FIPS - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/10/20 02:50:00 UTC, 0 replies.
- [PR] KNOX-3519 - Set the JWKS host on the TLS socket so HTTPS endpoint identification works under BC-FIPS [knox] - posted by "moresandeep (via GitHub)" <gi...@apache.org> on 2026/10/20 02:52:47 UTC, 12 replies.
- [jira] [Work logged] (KNOX-3519) Set the JWKS host on the TLS socket so HTTPS endpoint identification works under BC-FIPS - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/20 02:53:00 UTC, 11 replies.
- [jira] [Created] (KNOX-3520) Token exchange: support multi-hop RFC 8693 delegation by binding re-exchanged subject tokens to the actor (delegation policy subjectAudiences) - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/20 08:08:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3520) Token exchange: support multi-hop RFC 8693 delegation by binding re-exchanged subject tokens to the actor (delegation policy subjectAudiences) - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/20 08:20:00 UTC, 0 replies.
- [PR] KNOX-3520: Support multi-hop RFC 8693 delegation via policy-bound subject audiences [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/10/20 10:11:45 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3520) Token exchange: support multi-hop RFC 8693 delegation by binding re-exchanged subject tokens to the actor (delegation policy subjectAudiences) - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/20 10:12:00 UTC, 1 replies.
- Re: [PR] KNOX-2900: KNOX-2899 followup - reenable service based discovery filter [knox] - posted by "bonampak (via GitHub)" <gi...@apache.org> on 2026/10/20 17:16:46 UTC, 2 replies.
- [jira] [Work logged] (KNOX-2900) KNOX-2899 followup - reenable service based discovery filter - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/20 17:17:00 UTC, 2 replies.
- [jira] [Commented] (KNOX-3520) Token exchange: support multi-hop RFC 8693 delegation by binding re-exchanged subject tokens to the actor (delegation policy subjectAudiences) - posted by "Harrison Sheinblatt (Jira)" <ji...@apache.org> on 2026/10/21 07:11:00 UTC, 0 replies.
- [jira] [Comment Edited] (KNOX-3520) Token exchange: support multi-hop RFC 8693 delegation by binding re-exchanged subject tokens to the actor (delegation policy subjectAudiences) - posted by "Harrison Sheinblatt (Jira)" <ji...@apache.org> on 2026/10/21 07:17:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3521) Existing database tables are not upgraded when new columns are added - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/21 12:14:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3522) upgrade log4j2 to 2.26.1 due to CVE-2026-49844 - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/21 15:16:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3522) Upgrade log4j2 to 2.26.1 due to CVE-2026-49844 - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/21 15:33:00 UTC, 1 replies.
- [jira] [Created] (KNOX-3523) Upgrade jackson to 2.18.12 due to CVEs - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/21 15:33:00 UTC, 0 replies.
- [PR] KNOX-3522: Upgrade log4j to 2.26.1 [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/10/21 15:36:29 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3522) Upgrade log4j2 to 2.26.1 due to CVE-2026-49844 - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/21 15:37:00 UTC, 2 replies.
- [PR] KNOX-3519 - Routing the JWKS retriever through CloseableHttpClient [knox] - posted by "moresandeep (via GitHub)" <gi...@apache.org> on 2026/10/21 15:38:34 UTC, 9 replies.
- [PR] KNOX-3523: Upgrade jackson to 2.18.12 [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/10/21 15:48:57 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3523) Upgrade jackson to 2.18.12 due to CVEs - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/21 15:49:00 UTC, 2 replies.
- [jira] [Updated] (KNOX-3519) Calls to JWKS enndpoints with ip address are failing - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/10/21 16:03:00 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3519) Calls to JWKS enndpoints with ip address are failing - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/21 16:05:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3519) Calls to JWKS endpoints with ip address are failing - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/10/21 16:07:00 UTC, 0 replies.
- [jira] [Work logged] (KNOX-3519) Calls to JWKS endpoints with ip address are failing - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/21 16:08:00 UTC, 9 replies.
- [jira] [Created] (KNOX-3524) Cleanup logging for midiagnosed KNOX-3498 - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/10/21 16:26:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3519) Calls to JWKS endpoints with ip address are failing - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/21 18:38:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3519) Calls to JWKS endpoints with ip address are failing - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/10/21 18:40:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3487) LDAP Proxy find all members of a role - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/21 19:56:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3487) LDAP Proxy find all members of a role - posted by "David Han (Jira)" <ji...@apache.org> on 2026/10/21 21:32:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3486) LDAP Proxy role lookup should return all roles on wildcard search - posted by "David Han (Jira)" <ji...@apache.org> on 2026/10/21 21:32:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3522) Upgrade log4j2 to 2.26.1 due to CVE-2026-49844 - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/22 06:17:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3522) Upgrade log4j2 to 2.26.1 due to CVE-2026-49844 - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/22 06:17:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3523) Upgrade jackson to 2.18.12 due to CVEs - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/22 06:23:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3523) Upgrade jackson to 2.18.12 due to CVEs - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/22 06:23:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3525) Upgrade jLine to 3.30.17 - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/22 07:33:00 UTC, 0 replies.
- [PR] KNOX-3525: Upgrade JLine to 3.30.17 [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/10/22 07:38:20 UTC, 2 replies.
- Re: [PR] Bump org.jline:jline-reader from 3.30.6 to 3.30.15 [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/10/22 07:38:54 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3525) Upgrade jLine to 3.30.17 - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/22 07:39:00 UTC, 0 replies.
- Re: [PR] Bump org.jline:jline-builtins from 3.30.6 to 3.30.15 [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/10/22 07:39:01 UTC, 2 replies.
- [jira] [Updated] (KNOX-3525) Upgrade JLine to 3.30.17 - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/22 07:40:00 UTC, 0 replies.
- [PR] Fix for CVE-2026-77420 [knox] - posted by "pranitatiwari-per (via GitHub)" <gi...@apache.org> on 2026/10/22 08:03:21 UTC, 3 replies.
- [jira] [Created] (KNOX-3526) Redeploy topologies on gateway-reloadable configuration changes via reloadableListener topology attribute - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/22 09:57:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3527) Auto-deploy topologies are not redeployed at startup because the redeploy happens before the topology monitor starts - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/22 11:00:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-3527) Auto-deploy topologies are not redeployed at startup because the redeploy happens before the topology monitor starts - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/22 11:01:00 UTC, 2 replies.
- [jira] [Created] (KNOX-3528) DeploymentFactory mutates the cached Topology, so topologies without an identity-assertion provider are marked UPDATED on every reload - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/22 11:02:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3528) DeploymentFactory mutates the cached Topology, so topologies without an identity-assertion provider are marked UPDATED on every reload - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/22 11:04:00 UTC, 0 replies.
- [PR] KNOX-3526: Redeploy topologies with reloadableListener on gateway-rel… [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/10/22 11:23:06 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3526) Redeploy topologies on gateway-reloadable configuration changes via reloadableListener topology attribute - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/22 11:24:00 UTC, 1 replies.
- [jira] [Created] (KNOX-3529) Count the per-user token limit separately for each token type - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/22 12:47:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3529) Count the per-user token limit separately for each token type - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/10/22 13:21:00 UTC, 0 replies.
- [PR] KNOX-3529: Count the per-user token limit per token type [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/10/22 13:41:36 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3529) Count the per-user token limit separately for each token type - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/22 13:42:00 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3525) Upgrade JLine to 3.30.17 - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/10/22 18:48:00 UTC, 1 replies.
- [jira] [Commented] (KNOX-3526) Redeploy topologies on gateway-reloadable configuration changes via reloadableListener topology attribute - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/22 20:35:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3529) Count the per-user token limit separately for each token type - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/22 20:35:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3525) Upgrade JLine to 3.30.17 - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/10/23 05:31:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3526) Redeploy topologies on gateway-reloadable configuration changes via reloadableListener topology attribute - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/23 10:24:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3525) Upgrade JLine to 3.30.17 - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/10/23 12:01:00 UTC, 0 replies.