[java-identity-provider] branch dev/JPAR-234 updated (6785766cb -> 745788de4)
Ian Young
ian at iay.org.uk
Thu Apr 17 14:03:18 UTC 2025
This is an automated email from the git hooks/post-receive script.
iay pushed a change to branch dev/JPAR-234
in repository java-identity-provider.
discard 6785766cb JPAR-234 - Track Spring Framework 7.0
add 4ade35a2b IDP-2339 - CSRF failure from Edge on iOS
add 83728c223 Lower logging on unmapped Attributes.
add f07b66708 IDP-2351 - Allow per-AuthenticationResult lifetime/timeout policies
add e0d914f04 Fix inverted Constraint on new flowId setter.
add b05d766f3 OSJ-427: Simple signature verification fails to detect parameter ...
add 77934ab2a OSJ-427: Simple signature verification fails to detect parameter ...
add 14766dcf3 Fix toString to handle both id and flowId.
add 628da5f00 IDP-2365 - Support multiple definitions of a given login flow
add 7a0eba2dd Fix tests with invalid login flow IDs.
add 7be156054 OSJ-427: Simple signature verification fails to detect parameter ...
add 11dec9bf2 OSJ-427: Simple signature verification fails to detect parameter ...
add efcbddc6e Remove SAML2HTTPPostSimpleSignSecurityHandler from SAML AuthN flow.
add fab73dcf2 Update wiring and properties for SAML HTTP request validators.
add bbd713344 OSJ-427: Simple signature verification fails to detect parameter ...
add 4768808a3 IDP-2257 - Missing async logout error mapping
add 670c3cb69 IDP-2347 - HTPasswordCredentialValidator reload isn't seeing changes
add 246fb6fea IDP-2338 - Improve wiring of Spring MVC's CORS-handling feature
add 11d92c77a IDP-2275 - Remediate use of UriComponentsBuilder in CAS implementation
add 296a93b36 Add disabled test for semicolon in URL.
add fb4aebcad IDP-2286 - Add equivalent of PasswordlessCookieManager from Duo plugin
add 01d388b89 IDP-2367 - Upgrade breaks use of attributes.properties via idp.searchForProperties
add 53b8a03d9 IDP-2295 - Make LDAP authenticator immutable
add 0ff071bee IDP-2272 Expose LDAP metrics
add bfa9945b4 IDP-2372 - Upgrade to latest SNAPSHOT on legacy system cannot find bean
add 032a158ec IDP-2372 - Upgrade to latest SNAPSHOT on legacy system cannot find bean
add 477bb319a Fix Build
add 0dc02b600 Javadoc nit.
add 22bcc452d Fix more Javadoc issues.
add e45902f8b Add SimpleSign response validator bean for SP.
add c12be6184 Fix up Response-only POST-SimpleSign parameter rules.
add 923e0f5c3 OSJ-430 - Make InResponseTo validation optional
add a37da503f Staged memcache storage bean.
add 89d1f6b59 Port tests to Jetty 12.
add d96e28ead Override the more complete addCookie method in base class.
add cc1bb44b8 IDP-2374 - Implement support for SameSite directly when possible
add 947340d39 Override the "right" methods on the base class for hooking operations.
add fe6634614 IDP-2369 - encode control chars in LDAP exception messages
new 745788de4 JPAR-234 - Track Spring Framework 7.0
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (6785766cb)
\
N -- N -- N refs/heads/dev/JPAR-234 (745788de4)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../shibboleth/idp/admin/impl/OutputConfig.java | 4 +
.../idp/authn/AbstractValidationAction.java | 3 +
.../idp/authn/AuthenticationFlowDescriptor.java | 115 ++++++++-
.../SubjectCanonicalizationFlowDescriptor.java | 11 +-
.../config/LDAPAuthenticationFactoryBean.java | 1 +
.../context/MultiFactorAuthenticationContext.java | 37 ++-
.../authn/AuthenticationFlowDescriptorTest.java | 2 +
.../config/LDAPAuthenticationFactoryBeanTest.java | 15 ++
.../authn/impl/HTPasswdCredentialValidator.java | 39 +--
.../idp/authn/impl/LDAPCredentialValidator.java | 11 +-
.../PopulateMultiFactorAuthenticationContext.java | 2 +-
.../idp/authn/impl/PrePopulateUsername.java | 57 +----
.../idp/authn/impl/SelectAuthenticationFlow.java | 6 +-
.../impl/TransitionMultiFactorAuthentication.java | 26 +-
.../idp/authn/impl/ValidateCredentials.java | 70 +----
.../DefaultAuthenticationResultSerializerTest.java | 2 +
.../authn/impl/LDAPCredentialValidatorTest.java | 44 ++++
...pulateMultiFactorAuthenticationContextTest.java | 4 +
...PopulateSubjectCanonicalizationContextTest.java | 3 +-
.../authn/impl/SelectAuthenticationFlowTest.java | 26 +-
.../testing/BaseAuthenticationContextTest.java | 3 +
.../idp/cas/protocol/ServiceTicketResponse.java | 20 +-
idp-cas-impl/pom.xml | 6 +-
.../proxy/impl/HttpClientProxyValidatorTest.java | 27 +-
.../net/shibboleth/idp/conf/admin-system.xml | 124 ---------
.../net/shibboleth/idp/conf/authn-system.xml | 61 ++++-
.../resources/net/shibboleth/idp/conf/filters.xml | 1 +
.../net/shibboleth/idp/conf/global-system.xml | 23 ++
.../net/shibboleth/idp/conf/metrics-system.xml | 139 ++++++++++
.../net/shibboleth/idp/conf/mvc-beans.xml | 15 +-
.../shibboleth/idp/conf/relying-party-mddriven.xml | 8 +
.../shibboleth/idp/conf/saml-binding-config.xml | 285 +++++++++++++++++++++
.../shibboleth/idp/conf/subject-c14n-system.xml | 18 +-
.../net/shibboleth/idp/conf/webflow-config.xml | 1 +
.../net/shibboleth/idp/flows/authn/authn-beans.xml | 2 +-
.../net/shibboleth/idp/flows/authn/authn-flow.xml | 4 +-
.../shibboleth/idp/flows/authn/mfa-authn-flow.xml | 4 +-
.../idp/flows/authn/password-authn-beans.xml | 8 +-
.../idp/flows/authn/saml-authn-beans.xml | 14 +-
.../idp/flows/saml/saml-abstract-beans.xml | 4 +
.../idp/flows/saml/saml-abstract-flow.xml | 1 +
.../flows/saml/saml1/artifact-resolution-beans.xml | 2 +
.../idp/flows/saml/saml1/attribute-query-beans.xml | 2 +
.../idp/flows/saml/saml1/sso-unsolicited-beans.xml | 2 +
.../flows/saml/saml2/artifact-resolution-beans.xml | 2 +
.../idp/flows/saml/saml2/attribute-query-beans.xml | 2 +
.../idp/flows/saml/saml2/slo-artifact-beans.xml | 2 +
.../idp/flows/saml/saml2/slo-back-beans.xml | 2 +
.../idp/flows/saml/saml2/slo-post-beans.xml | 2 +
.../flows/saml/saml2/slo-post-simplesign-beans.xml | 2 +
.../idp/flows/saml/saml2/slo-redirect-beans.xml | 2 +
.../idp/flows/saml/saml2/sso-artifact-beans.xml | 2 +
.../idp/flows/saml/saml2/sso-ecp-beans.xml | 2 +
.../idp/flows/saml/saml2/sso-post-beans.xml | 2 +
.../flows/saml/saml2/sso-post-simplesign-beans.xml | 2 +
.../idp/flows/saml/saml2/sso-redirect-beans.xml | 2 +
.../idp/flows/saml/saml2/sso-unsolicited-beans.xml | 2 +
.../shibboleth/idp/messages/messages.properties | 6 +
.../idp/module/conf/authn/authn.properties | 2 +-
.../net/shibboleth/idp/module/conf/idp.properties | 8 +-
.../idp/test/flows/cas/LoginFlowTest.java | 60 ++++-
.../idp/module/conf/authn/authn.properties | 5 +
.../net/shibboleth/idp/module/conf/global.xml | 33 +++
.../net/shibboleth/idp/module/conf/idp.properties | 6 +-
...IdPPropertiesApplicationContextInitializer.java | 19 ++
.../installer/impl/InstallerPropertiesImpl.java | 7 +-
.../profile/support/StorageAwareCookieManager.java | 12 +-
.../NameIDCanonicalizationFlowDescriptor.java | 7 +-
.../saml/nameid/impl/BaseTransformingDecoder.java | 17 +-
.../impl/BrowserSSOProfileConfiguration.java | 33 +++
.../saml2/profile/impl/SAMLAuthnController.java | 49 ++++
.../profile/impl/ValidateSAMLAuthentication.java | 4 +-
.../AddAuthenticationStatementToAssertionTest.java | 1 +
.../impl/AddAuthnStatementToAssertionTest.java | 1 +
.../impl/StorageBackedSessionManagerTest.java | 2 +
.../UpdateSessionWithAuthenticationResultTest.java | 1 +
.../csrf/impl/CSRFTokenFlowExecutionListener.java | 61 ++++-
.../impl/CSRFTokenFlowExecutionListenerTest.java | 252 +++++++++++-------
idp-war/src/main/webapp/WEB-INF/web.xml | 11 +-
79 files changed, 1380 insertions(+), 495 deletions(-)
create mode 100644 idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/metrics-system.xml
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list