You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@fineract.apache.org by ad...@apache.org on 2026/06/10 15:08:21 UTC

(fineract) branch develop updated (5a81c992f4 -> 6a17677c9c)

This is an automated email from the ASF dual-hosted git repository.

adamsaghy pushed a change to branch develop
in repository https://gitbox.apache.org/repos/asf/fineract.git


    from 5a81c992f4 Merge pull request #5965
     add 719c5dbaf9 FINERACT-2616: OIDC Federation support for IdP
     new 6a17677c9c Merge pull request #5883

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 .../core/config/FineractProperties.java            |  50 ++
 ...{FineractContext.java => TenantOidcConfig.java} |  38 +-
 .../security/domain/OidcFederationType.java        |   8 +-
 .../core/config/FineractPropertiesOidcTest.java    |  62 ++
 .../modules/ROOT/images/oidc/architecture.png      | Bin 0 -> 67372 bytes
 fineract-doc/modules/ROOT/nav.adoc                 |   4 +
 .../modules/ROOT/pages/oidc-federation-google.adoc | 623 ++++++++++++++++++
 .../modules/ROOT/pages/oidc-federation.adoc        | 725 +++++++++++++++++++++
 ...OwnerLoanProductAttributesWriteServiceImpl.java |   2 +-
 ...InterestScheduleModelRepositoryWrapperImpl.java |   2 +-
 fineract-provider/dependencies.gradle              |   1 +
 .../loan/BuyDownFeeAmortizationBusinessStep.java   |   2 +-
 .../CapitalizedIncomeAmortizationBusinessStep.java |   2 +-
 .../core/config/FineractCorsConfiguration.java}    |  28 +-
 .../infrastructure/core/config/SecurityConfig.java |  17 -
 .../security/config/AuthorizationServerConfig.java |  18 -
 ...amicJwtIssuerAuthenticationManagerResolver.java | 143 ++++
 .../config/OidcFederationSecurityConfig.java       | 240 +++++++
 .../service/OidcAppUserResolutionServiceImpl.java  | 125 ++++
 .../src/main/resources/application.properties      |  14 +
 .../tenant-store/changelog-tenant-store.xml        |   1 +
 .../parts/0012_m_tenant_oidc_config.xml}           |  57 +-
 ...JwtIssuerAuthenticationManagerResolverTest.java | 262 ++++++++
 ...idcFederationSecurityConfigConditionalTest.java |  54 ++
 .../OidcAppUserResolutionServiceImplTest.java      | 169 +++++
 .../security/api/TenantOidcConfigApiResource.java  | 153 +++++
 .../FineractOidcJwtAuthenticationConverter.java    |  70 ++
 .../security/data/FineractOidcUser.java            |  53 ++
 .../security/data/TenantOidcConfigData.java        |  50 ++
 .../exception/OidcUserNotFoundException.java       |  31 +-
 .../security/filter/OidcTenantAwareFilter.java     | 145 +++++
 .../handler/OidcAuthenticationSuccessHandler.java  |  55 ++
 .../security/handler/OidcLogoutSuccessHandler.java | 109 ++++
 .../security/service/FineractOidcUserService.java  | 105 +++
 .../service/OidcAppUserResolutionService.java      |  30 +-
 .../service/TenantOidcConfigRepository.java        |  13 +-
 .../service/TenantOidcConfigRepositoryJdbc.java    | 146 +++++
 .../security/service/TenantOidcConfigService.java  |  95 +++
 ...FineractOidcJwtAuthenticationConverterTest.java | 111 ++++
 .../exception/OidcUserNotFoundExceptionTest.java   |  38 +-
 .../security/filter/OidcTenantAwareFilterTest.java | 274 ++++++++
 .../handler/OidcLogoutSuccessHandlerTest.java      | 152 +++++
 .../TenantOidcConfigRepositoryJdbcTest.java        | 132 ++++
 .../service/TenantOidcConfigServiceTest.java       | 232 +++++++
 44 files changed, 4478 insertions(+), 163 deletions(-)
 copy fineract-core/src/main/java/org/apache/fineract/infrastructure/core/domain/{FineractContext.java => TenantOidcConfig.java} (52%)
 copy fineract-loan/src/main/java/org/apache/fineract/portfolio/loanaccount/domain/AmortizationType.java => fineract-core/src/main/java/org/apache/fineract/infrastructure/security/domain/OidcFederationType.java (75%)
 create mode 100644 fineract-core/src/test/java/org/apache/fineract/infrastructure/core/config/FineractPropertiesOidcTest.java
 create mode 100644 fineract-doc/modules/ROOT/images/oidc/architecture.png
 create mode 100644 fineract-doc/modules/ROOT/pages/oidc-federation-google.adoc
 create mode 100644 fineract-doc/modules/ROOT/pages/oidc-federation.adoc
 copy fineract-provider/src/main/java/org/apache/fineract/{cob/loan/LoanLockingConfiguration.java => infrastructure/core/config/FineractCorsConfiguration.java} (50%)
 create mode 100644 fineract-provider/src/main/java/org/apache/fineract/infrastructure/security/config/DynamicJwtIssuerAuthenticationManagerResolver.java
 create mode 100644 fineract-provider/src/main/java/org/apache/fineract/infrastructure/security/config/OidcFederationSecurityConfig.java
 create mode 100644 fineract-provider/src/main/java/org/apache/fineract/infrastructure/security/service/OidcAppUserResolutionServiceImpl.java
 copy fineract-provider/src/main/resources/db/changelog/{tenant/parts/0043_add_external_event_table.xml => tenant-store/parts/0012_m_tenant_oidc_config.xml} (50%)
 create mode 100644 fineract-provider/src/test/java/org/apache/fineract/infrastructure/security/config/DynamicJwtIssuerAuthenticationManagerResolverTest.java
 create mode 100644 fineract-provider/src/test/java/org/apache/fineract/infrastructure/security/config/OidcFederationSecurityConfigConditionalTest.java
 create mode 100644 fineract-provider/src/test/java/org/apache/fineract/infrastructure/security/service/OidcAppUserResolutionServiceImplTest.java
 create mode 100644 fineract-security/src/main/java/org/apache/fineract/infrastructure/security/api/TenantOidcConfigApiResource.java
 create mode 100644 fineract-security/src/main/java/org/apache/fineract/infrastructure/security/converter/FineractOidcJwtAuthenticationConverter.java
 create mode 100644 fineract-security/src/main/java/org/apache/fineract/infrastructure/security/data/FineractOidcUser.java
 create mode 100644 fineract-security/src/main/java/org/apache/fineract/infrastructure/security/data/TenantOidcConfigData.java
 copy fineract-provider/src/main/java/org/apache/fineract/infrastructure/core/domain/EmailDetail.java => fineract-security/src/main/java/org/apache/fineract/infrastructure/security/exception/OidcUserNotFoundException.java (61%)
 create mode 100644 fineract-security/src/main/java/org/apache/fineract/infrastructure/security/filter/OidcTenantAwareFilter.java
 create mode 100644 fineract-security/src/main/java/org/apache/fineract/infrastructure/security/handler/OidcAuthenticationSuccessHandler.java
 create mode 100644 fineract-security/src/main/java/org/apache/fineract/infrastructure/security/handler/OidcLogoutSuccessHandler.java
 create mode 100644 fineract-security/src/main/java/org/apache/fineract/infrastructure/security/service/FineractOidcUserService.java
 copy fineract-core/src/main/java/org/apache/fineract/infrastructure/security/service/PlatformSecurityContext.java => fineract-security/src/main/java/org/apache/fineract/infrastructure/security/service/OidcAppUserResolutionService.java (53%)
 copy fineract-core/src/main/java/org/apache/fineract/infrastructure/security/service/SqlValidator.java => fineract-security/src/main/java/org/apache/fineract/infrastructure/security/service/TenantOidcConfigRepository.java (69%)
 create mode 100644 fineract-security/src/main/java/org/apache/fineract/infrastructure/security/service/TenantOidcConfigRepositoryJdbc.java
 create mode 100644 fineract-security/src/main/java/org/apache/fineract/infrastructure/security/service/TenantOidcConfigService.java
 create mode 100644 fineract-security/src/test/java/org/apache/fineract/infrastructure/security/converter/FineractOidcJwtAuthenticationConverterTest.java
 copy fineract-client/src/test/java/org/apache/fineract/client/util/PartsTest.java => fineract-security/src/test/java/org/apache/fineract/infrastructure/security/exception/OidcUserNotFoundExceptionTest.java (53%)
 create mode 100644 fineract-security/src/test/java/org/apache/fineract/infrastructure/security/filter/OidcTenantAwareFilterTest.java
 create mode 100644 fineract-security/src/test/java/org/apache/fineract/infrastructure/security/handler/OidcLogoutSuccessHandlerTest.java
 create mode 100644 fineract-security/src/test/java/org/apache/fineract/infrastructure/security/service/TenantOidcConfigRepositoryJdbcTest.java
 create mode 100644 fineract-security/src/test/java/org/apache/fineract/infrastructure/security/service/TenantOidcConfigServiceTest.java


(fineract) 01/01: Merge pull request #5883

Posted by ad...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

adamsaghy pushed a commit to branch develop
in repository https://gitbox.apache.org/repos/asf/fineract.git

commit 6a17677c9cf45a81a8dcb21f1c66fd1cb21273ff
Merge: 5a81c992f4 719c5dbaf9
Author: Adam Saghy <ad...@gmail.com>
AuthorDate: Wed Jun 10 16:08:14 2026 +0100

    Merge pull request #5883
    
    FINERACT-2616: OIDC Federation support for IdP

 .../core/config/FineractProperties.java            |  50 ++
 .../core/domain/TenantOidcConfig.java              |  50 ++
 .../security/domain/OidcFederationType.java        |  34 +
 .../core/config/FineractPropertiesOidcTest.java    |  62 ++
 .../modules/ROOT/images/oidc/architecture.png      | Bin 0 -> 67372 bytes
 fineract-doc/modules/ROOT/nav.adoc                 |   4 +
 .../modules/ROOT/pages/oidc-federation-google.adoc | 623 ++++++++++++++++++
 .../modules/ROOT/pages/oidc-federation.adoc        | 725 +++++++++++++++++++++
 ...OwnerLoanProductAttributesWriteServiceImpl.java |   2 +-
 ...InterestScheduleModelRepositoryWrapperImpl.java |   2 +-
 fineract-provider/dependencies.gradle              |   1 +
 .../loan/BuyDownFeeAmortizationBusinessStep.java   |   2 +-
 .../CapitalizedIncomeAmortizationBusinessStep.java |   2 +-
 .../core/config/FineractCorsConfiguration.java     |  50 ++
 .../infrastructure/core/config/SecurityConfig.java |  17 -
 .../security/config/AuthorizationServerConfig.java |  18 -
 ...amicJwtIssuerAuthenticationManagerResolver.java | 143 ++++
 .../config/OidcFederationSecurityConfig.java       | 240 +++++++
 .../service/OidcAppUserResolutionServiceImpl.java  | 125 ++++
 .../src/main/resources/application.properties      |  14 +
 .../tenant-store/changelog-tenant-store.xml        |   1 +
 .../parts/0012_m_tenant_oidc_config.xml            |  78 +++
 ...JwtIssuerAuthenticationManagerResolverTest.java | 262 ++++++++
 ...idcFederationSecurityConfigConditionalTest.java |  54 ++
 .../OidcAppUserResolutionServiceImplTest.java      | 169 +++++
 .../security/api/TenantOidcConfigApiResource.java  | 153 +++++
 .../FineractOidcJwtAuthenticationConverter.java    |  70 ++
 .../security/data/FineractOidcUser.java            |  53 ++
 .../security/data/TenantOidcConfigData.java        |  50 ++
 .../exception/OidcUserNotFoundException.java       |  39 ++
 .../security/filter/OidcTenantAwareFilter.java     | 145 +++++
 .../handler/OidcAuthenticationSuccessHandler.java  |  55 ++
 .../security/handler/OidcLogoutSuccessHandler.java | 109 ++++
 .../security/service/FineractOidcUserService.java  | 105 +++
 .../service/OidcAppUserResolutionService.java      |  37 ++
 .../service/TenantOidcConfigRepository.java        |  33 +
 .../service/TenantOidcConfigRepositoryJdbc.java    | 146 +++++
 .../security/service/TenantOidcConfigService.java  |  95 +++
 ...FineractOidcJwtAuthenticationConverterTest.java | 111 ++++
 .../exception/OidcUserNotFoundExceptionTest.java   |  50 ++
 .../security/filter/OidcTenantAwareFilterTest.java | 274 ++++++++
 .../handler/OidcLogoutSuccessHandlerTest.java      | 152 +++++
 .../TenantOidcConfigRepositoryJdbcTest.java        | 132 ++++
 .../service/TenantOidcConfigServiceTest.java       | 232 +++++++
 44 files changed, 4730 insertions(+), 39 deletions(-)