You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@superset.apache.org by ru...@apache.org on 2026/06/10 22:03:07 UTC
(superset) branch feat/guest-token-revocation updated (506c70eb428 -> 538580e728b)
This is an automated email from the ASF dual-hosted git repository.
rusackas pushed a change to branch feat/guest-token-revocation
in repository https://gitbox.apache.org/repos/asf/superset.git
omit 506c70eb428 test(security): cover revoke_guest_token_access
omit 6f07238acfa fix(security): harden guest-token revocation for missing iat and sub-second cutoff
omit 153c4ece3dc fix(security): honor guest-token revocation for legacy dashboard-id resources
omit e9146650c0d feat(security): support guest-token revocation per embedded dashboard [DRAFT]
add 0a1e51f542a fix(schemas): tighten guest dataset fields, external_url protocols, ssh creds, prophet bounds (#40640)
add 08b8bdecbd4 fix(charts): tighten chart schema input validation (query_context JSON, prophet/rolling bounds) (#40634)
add 2b584113919 chore(deps): bump ag-grid-react from 35.3.0 to 35.3.1 in /superset-frontend (#40928)
add 3d1253c9925 build(major,dev-deps): upgrade Storybook from v8 to v10 (#40713)
add 5a0e3f15ca7 feat(embedded): add guest token revocation support (#40671)
add f27424d72e3 fix(embedded): show filter bar controls on embedded dashboards with tabs (#39417)
add cc5a3ddd05d test(dashboard-filter): RTL coverage for horizontal filter bar (#40782)
add 248ccadecd8 fix(extensions): load extensions async to avoid blocking initial page render (#40915)
add 3380496e9fb feat(i18n): add Romanian (ro) translations (#36712)
add 4f69949c101 chore(deps-dev): bump eslint-plugin-storybook from 10.4.1 to 10.4.2 in /superset-frontend (#40949)
add c3df60c12b1 chore(deps): bump selenium from 4.32.0 to 4.44.0 (#40945)
add 320965612d6 chore(deps-dev): update clickhouse-connect requirement from <2.0,>=0.13.0 to >=1.1.1,<2.0 (#40944)
add 0f597058067 chore(deps): bump wtforms from 3.2.1 to 3.2.2 (#40943)
add c9c05d8d0a8 chore(deps-dev): update thrift requirement from <1.0.0,>=0.14.1 to >=0.23.0,<1.0.0 (#40942)
add 11af932099e chore(deps): bump dompurify from 3.4.7 to 3.4.8 in /superset-frontend/plugins/legacy-preset-chart-nvd3 (#40937)
add 5f06e66cf1c chore(deps): bump @deck.gl/mapbox from 9.3.2 to 9.3.3 in /superset-frontend (#40927)
add ef574092094 chore(deps): bump ag-grid-community from 35.3.0 to 35.3.1 in /superset-frontend/packages/superset-ui-core (#40923)
add 97058d2cf09 chore(deps): bump fuse.js from 7.3.0 to 7.4.1 in /superset-frontend (#40922)
add a8a1d9c17d6 chore(deps): bump morgan from 1.10.1 to 1.11.0 in /superset-websocket/utils/client-ws-app (#40921)
add 6cd9bdee0bf chore(deps-dev): bump @formatjs/intl-durationformat from 0.10.3 to 0.10.13 in /superset-frontend (#40925)
add b2c5a1ecb33 chore(deps): bump jsonpath-ng from 1.7.0 to 1.8.0 (#40940)
add aa872cd0a14 chore(deps): bump dompurify from 3.4.9 to 3.4.8 in /superset-frontend/packages/superset-ui-core (#40938)
add 7d046340dc1 chore(deps): bump ag-grid-react from 35.3.0 to 35.3.1 in /superset-frontend/packages/superset-ui-core (#40924)
add b1d965932d7 chore(deps-dev): bump @typescript-eslint/eslint-plugin from 8.60.0 to 8.60.1 in /superset-websocket (#40888)
add 42adb473875 feat(security): support guest-token revocation per embedded dashboard [DRAFT]
add 083c128fe66 fix(security): honor guest-token revocation for legacy dashboard-id resources
add 9b4a7d60440 fix(security): harden guest-token revocation for missing iat and sub-second cutoff
add 538580e728b test(security): cover revoke_guest_token_access
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (506c70eb428)
\
N -- N -- N refs/heads/feat/guest-token-revocation (538580e728b)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.github/dependabot.yml | 28 -
UPDATING.md | 12 +
pyproject.toml | 12 +-
requirements/base.txt | 12 +-
requirements/development.txt | 14 +-
superset-frontend/.storybook/{main.js => main.mjs} | 38 +-
superset-frontend/.storybook/preview.jsx | 6 +-
.../.storybook/shared/ResizableChartDemo.tsx | 2 +-
superset-frontend/babel.config.js | 1 +
superset-frontend/jest.config.js | 2 +-
superset-frontend/package-lock.json | 34639 ++++++++-----------
superset-frontend/package.json | 29 +-
.../packages/superset-core/src/menus/index.ts | 36 +-
.../packages/superset-core/src/views/index.ts | 32 +-
.../packages/superset-ui-core/package.json | 6 +-
.../AutoComplete/AutoComplete.stories.tsx | 2 +-
.../components/Breadcrumb/Breadcrumb.stories.tsx | 2 +-
.../components/CachedLabel/CachedLabel.stories.tsx | 4 +-
.../src/components/Checkbox/Checkbox.stories.tsx | 2 +-
.../components/EmptyState/EmptyState.stories.tsx | 2 +-
.../src/components/FaveStar/FaveStar.stories.tsx | 2 +-
.../src/components/Grid/Grid.stories.tsx | 2 +-
.../components/IconButton/IconButton.stories.tsx | 2 +-
.../src/components/Input/Input.stories.tsx | 2 +-
.../src/components/Label/Label.stories.tsx | 4 +-
.../src/components/Layout/Layout.stories.tsx | 2 +-
.../ListViewCard/ListViewCard.stories.tsx | 2 +-
.../src/components/Radio/Radio.stories.tsx | 2 +-
.../SafeMarkdown/SafeMarkdown.stories.tsx | 2 +-
.../src/components/Skeleton/Skeleton.stories.tsx | 2 +-
.../src/components/Switch/Switch.stories.tsx | 2 +-
.../src/components/Table/Table.stories.tsx | 4 +-
.../ActionCell/ActionCell.stories.tsx | 2 +-
.../Table/cell-renderers/ActionCell/fixtures.ts | 2 +-
.../BooleanCell/BooleanCell.stories.tsx | 2 +-
.../ButtonCell/ButtonCell.stories.tsx | 4 +-
.../cell-renderers/NullCell/NullCell.stories.tsx | 2 +-
.../NumericCell/NumericCell.stories.tsx | 2 +-
.../cell-renderers/TimeCell/TimeCell.stories.tsx | 2 +-
.../TableCollection/TableCollection.stories.tsx | 2 +-
.../TimezoneSelector/TimezoneSelector.stories.tsx | 2 +-
.../src/components/Tree/Tree.stories.tsx | 2 +-
.../components/TreeSelect/TreeSelect.stories.tsx | 2 +-
.../components/Typography/Typography.stories.tsx | 2 +-
.../src/components/Upload/Upload.stories.tsx | 2 +-
.../factories/createDurationFormatter.test.ts | 2 +-
.../plugins/legacy-preset-chart-nvd3/package.json | 2 +-
.../plugins/preset-chart-deckgl/package.json | 2 +-
.../spec/fixtures/mockNativeFilters.ts | 20 +
.../src/SqlLab/components/AppLayout/index.tsx | 4 +-
.../src/SqlLab/components/SouthPane/index.tsx | 4 +-
.../src/SqlLab/components/StatusBar/index.tsx | 4 +-
.../components/ErrorMessage/ErrorAlert.stories.tsx | 2 +-
.../src/components/PanelToolbar/index.tsx | 5 +-
.../RowCountLabel/RowCountLabel.stories.tsx | 4 +-
.../src/components/Tag/Tag.stories.tsx | 2 +-
.../src/components/TagsList/TagsList.stories.tsx | 2 +-
.../src/core/editors/EditorHost.test.tsx | 3 +-
superset-frontend/src/core/editors/EditorHost.tsx | 53 +-
.../src/core/editors/EditorProviders.ts | 14 +
superset-frontend/src/core/editors/index.ts | 18 +
superset-frontend/src/core/menus/index.ts | 53 +
superset-frontend/src/core/views/index.ts | 55 +-
.../nativeFilters/FilterBar/FilterBar.test.tsx | 89 +
.../FilterControls.overflow.test.tsx | 305 +
.../FilterBar/HorizontalFilterBar.test.tsx | 155 +-
.../components/nativeFilters/state.test.ts | 504 +-
.../dashboard/components/nativeFilters/state.ts | 76 +-
.../explore/components/ControlHeader.stories.tsx | 4 +-
.../src/extensions/ExtensionsStartup.tsx | 29 +-
.../DatasetPanel/DatasetPanel.stories.tsx | 2 +-
.../components/Range/RangeFilterPlugin.stories.tsx | 2 +-
.../Select/SelectFilterPlugin.stories.tsx | 2 +-
superset-websocket/package-lock.json | 2 +-
superset-websocket/package.json | 2 +-
.../utils/client-ws-app/package-lock.json | 118 +-
.../utils/client-ws-app/package.json | 2 +-
superset/charts/schemas.py | 66 +-
superset/cli/guest_token.py | 54 +
superset/config.py | 18 +
superset/dashboards/schemas.py | 81 +-
superset/databases/schemas.py | 9 +-
superset/key_value/shared_entries.py | 13 +
superset/key_value/types.py | 3 +
superset/security/guest_token.py | 60 +
superset/security/manager.py | 59 +-
superset/translations/ar/LC_MESSAGES/messages.po | 4 +
superset/translations/ca/LC_MESSAGES/messages.po | 4 +
superset/translations/cs/LC_MESSAGES/messages.po | 4 +
superset/translations/de/LC_MESSAGES/messages.po | 4 +
superset/translations/en/LC_MESSAGES/messages.po | 4 +
superset/translations/es/LC_MESSAGES/messages.po | 4 +
superset/translations/fa/LC_MESSAGES/messages.po | 4 +
superset/translations/fi/LC_MESSAGES/messages.po | 4 +
superset/translations/fr/LC_MESSAGES/messages.po | 4 +
superset/translations/it/LC_MESSAGES/messages.po | 4 +
superset/translations/ja/LC_MESSAGES/messages.po | 4 +
superset/translations/ko/LC_MESSAGES/messages.po | 4 +
superset/translations/lv/LC_MESSAGES/messages.po | 4 +
superset/translations/messages.pot | 4 +
superset/translations/mi/LC_MESSAGES/messages.po | 4 +
superset/translations/nl/LC_MESSAGES/messages.po | 4 +
superset/translations/pl/LC_MESSAGES/messages.po | 4 +
superset/translations/pt/LC_MESSAGES/messages.po | 4 +
.../translations/pt_BR/LC_MESSAGES/messages.po | 4 +
superset/translations/ro/LC_MESSAGES/messages.po | 16267 +++++++++
superset/translations/ru/LC_MESSAGES/messages.po | 4 +
superset/translations/sk/LC_MESSAGES/messages.po | 4 +
superset/translations/sl/LC_MESSAGES/messages.po | 4 +
superset/translations/th/LC_MESSAGES/messages.po | 4 +
superset/translations/tr/LC_MESSAGES/messages.po | 4 +
superset/translations/uk/LC_MESSAGES/messages.po | 4 +
superset/translations/zh/LC_MESSAGES/messages.po | 4 +
.../translations/zh_TW/LC_MESSAGES/messages.po | 4 +
superset/utils/json.py | 31 +-
superset/utils/schema.py | 34 +-
tests/unit_tests/charts/test_schemas.py | 221 +
.../common => tests/unit_tests/cli}/__init__.py | 0
tests/unit_tests/cli/guest_token_test.py | 58 +
tests/unit_tests/dashboards/schema_tests.py | 164 +
tests/unit_tests/databases/schema_tests.py | 31 +
.../key_value/test_shared_entries_migration.py | 47 +
.../security/guest_token_revocation_test.py | 242 +
123 files changed, 33946 insertions(+), 20098 deletions(-)
rename superset-frontend/.storybook/{main.js => main.mjs} (83%)
create mode 100644 superset-frontend/src/dashboard/components/nativeFilters/FilterBar/FilterControls/FilterControls.overflow.test.tsx
create mode 100644 superset/cli/guest_token.py
create mode 100644 superset/translations/ro/LC_MESSAGES/messages.po
copy {superset-core/src/superset_core/common => tests/unit_tests/cli}/__init__.py (100%)
create mode 100644 tests/unit_tests/cli/guest_token_test.py
create mode 100644 tests/unit_tests/dashboards/schema_tests.py
create mode 100644 tests/unit_tests/security/guest_token_revocation_test.py