You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "slachiewicz (via GitHub)" <gi...@apache.org> on 2026/09/04 18:34:35 UTC
[PR] Authenticate IPC connections and validate Redisson YAML addresses [maven-resolver]
slachiewicz opened a new pull request, #2120:
URL: https://github.com/apache/maven-resolver/pull/2120
Replaces #2117 with the same two commits.
**IPC connection token.** `IpcClient` writes the daemon address into the user-scoped lock file together with a random token, tab-separated as `address\ttoken`. A client presents that token as its first message after connecting, and `IpcServer` closes any connection that does not present it before reading a command. Filesystem permissions already cover the Unix domain socket case; this covers Windows and any inet socket, which have none.
**Redisson address validation.** Addresses loaded through `Config.fromYAML` are checked against `aether.syncContext.named.redisson.allowInsecureAddress`. A plaintext non-loopback address is refused with an `IllegalStateException` unless that property opts in, in which case it is logged as a warning instead. Single-server, cluster, replicated, sentinel and master-slave shapes are all read.
Verified: `mvn clean install` -> BUILD SUCCESS, 1826 tests, 0 failures, 0 errors; `spotless:check` clean.
*This change was created with AI assistance.*
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Present the IPC token when attaching to a running daemon, and validate Redisson YAML addresses [maven-resolver]
Posted by "slachiewicz (via GitHub)" <gi...@apache.org>.
slachiewicz closed pull request #2120: Present the IPC token when attaching to a running daemon, and validate Redisson YAML addresses
URL: https://github.com/apache/maven-resolver/pull/2120
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org