You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@knox.apache.org by sm...@apache.org on 2026/08/14 13:10:35 UTC

(knox) branch knox_idf updated (75f6efcc7 -> f0d6b44f3)

This is an automated email from the ASF dual-hosted git repository.

smolnar82 pushed a change to branch knox_idf
in repository https://gitbox.apache.org/repos/asf/knox.git


    from 75f6efcc7 KNOX-3414: cleanup knoxidf-token test topology and make RegistrationResource implement getPrefix()
     add f0d6b44f3 KNOX-3414: KnoxIDF hardening fixes from review

No new revisions were added by this update.

Summary of changes:
 .../provider/federation/jwt/JWTMessages.java       |   3 +
 .../federation/jwt/filter/JWTFederationFilter.java |  40 +++++-
 .../JWTFederationFilterTokenExchangeTest.java      | 150 ++++++++++++++++++++-
 .../gateway/config/impl/GatewayConfigImpl.java     |  10 ++
 .../federation/EmptyFederatedIdentityService.java  |   3 +-
 .../federation/JdbcFederatedIdentityService.java   |  10 +-
 .../DerbyDBFederatedIdentityServiceTest.java       |  33 +++++
 .../service/knoxidf/AuthConsentServlet.java        |   5 +-
 .../gateway/service/knoxidf/AuthorizeResource.java |  35 ++++-
 .../knoxidf/userparams/LdapUserParamsProvider.java | 101 ++++++++------
 .../org/apache/knox/gateway/GatewayTestConfig.java |  10 ++
 .../apache/knox/gateway/config/GatewayConfig.java  |  12 ++
 .../federation/FederatedIdentityService.java       |   7 +-
 knox-site/docs/knoxidf/configuration.md            |  21 ++-
 knox-site/docs/knoxidf/operations.md               |   1 +
 knox-site/docs/knoxidf/security.md                 |   7 +
 16 files changed, 390 insertions(+), 58 deletions(-)