This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a change to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
from e02817dbcd6 Fix
JAXRS20ClientServerBookTest.testGetGenericBookManyClientsInParallel test case
new 3211010d6e6 Restrict valid URL protocols in TLSParameterJaxBUtils and
URIResolver (#3091)
new 0da3a358e2c Marking SQLPrintVisitor as deprecated for removal
new 214de18b053 Marking HTTPSPStateManager as deprecated
new 105d9ed7866 Make sure that users can't revoke other users tokens
(#3099)
new 98dbc6d8f44 Wire the STSClient through to URIResolver (#3106)
new 382e6e369cb Fixup
new 5ecd17dbcd0 Tighten up where we can download resources for Jose from
(#3108)
new b19608caf83 Add vfs to URIResolver (#3113)
new 33fae1bc959 Properly throw exception in introspection service (#3121)
new a8154b1d5c7 Validate expiry, nbg + audience for the
JwtAccessTokenValidator (#3126)
new b35765daa46 Fix the OAuth2 client ip address check and add a test
(#3127)
new 81b1e59c27b Marking OAuthServiceExceptionMapper as deprecated for
removal
new be03d326b84 CXF-9216 - Switch default OAuth2 code verifier to Digest
(#3132)
new fec8792c9bc Changing last commit to preserve old code verifier on 4.1
new 239549beebb Synchronize access token refresh when refresh tokens
aren't recycled (#3133)
new ca12d097396 Removing control characters from OAuth2 realm and logs
(#3136)
new 61f708eb16f Handle NaN or infinite times in JSON/JWT (#3137)
new 79913b66d83 Fix bug in JSON parsing relating to escaped backslashes
(#3140)
new 9c12b66f2f8 Improve JSON key parsing (#3141)
new 5d7fe67e4a6 Support unicode characters in the json parser (#3142)
new e740e1580ea Escape JSON control characters (#3145)
new 31eb1f90d41 More JNDI validation (#3150)
new 6ec95d7eabf Add a depth limit for JSON parsing mirroring what Jettison
does (#3149)
new 4fdc4a20697 Apply the JSON depth limit to writes as well (#3152)
new dccc58167df Harden JNDI for integration/jca (#3169)
new 005ec01d28e Properly handle nested arrays in json parsing (#3168)
new 279e6dfedac Get the headers from the validated signature entry (#3171)
new 85861765477 Add default constraints on the number of JSON
objects/array entries that can be parsed (#3172)
new 0b58eaa87a0 Make JCacheCodeDataProvider#removeCodeGrant atomic (#3224)
new 40f2f7b6768 Require c_hash for the hybrid case (#3230)
new 8c4601681e1 Updating Jettison to 1.5.6 (#3231)
new 550366567f7 Recording .gitmergeinfo Changes
new 0ef4ac91fe7 More SchemaFactory hardenings (#3157)
new 61bf31ed29f Fixing up backport
The 34 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.gitmergeinfo | 19 ++
.../configuration/jsse/TLSParameterJaxBUtils.java | 23 +-
.../java/org/apache/cxf/resource/URIResolver.java | 40 +++
.../validation/W3CMultiSchemaFactory.java | 22 +-
.../cxf/ws/addressing/EndpointReferenceUtils.java | 21 ++
.../jsse/TLSParameterJaxBUtilsTest.java | 93 +++++++
.../org/apache/cxf/resource/URIResolverTest.java | 72 +++++
.../apache/cxf/resource/protocol/vfs}/Handler.java | 36 ++-
.../core/resourceadapter/JndiNameValidator.java} | 23 +-
.../inbound/DispatchMDBMessageListenerImpl.java | 2 +
.../org/apache/cxf/jca/servant/EJBEndpoint.java | 2 +
.../resourceadapter/JndiNameValidatorTest.java | 48 ++++
parent/pom.xml | 2 +-
.../org/apache/cxf/aegis/type/XMLTypeCreator.java | 1 +
.../json/basic/JsonMapObjectReaderWriter.java | 278 ++++++++++++++++---
.../json/basic/JsonMapObjectReaderWriterTest.java | 301 +++++++++++++++++++++
.../jaxrs/ext/search/sql/SQLPrinterVisitor.java | 1 +
.../httpsignature/utils/KeyManagementUtils.java | 22 +-
.../jose/jaxrs/AbstractJwsJsonReaderProvider.java | 15 +
.../jose/jaxrs/JwsJsonClientResponseFilter.java | 3 +-
.../jose/jaxrs/JwsJsonContainerRequestFilter.java | 3 +-
.../jaxrs/JwsJsonContainerRequestFilterTest.java | 158 +++++++++++
.../cxf/rs/security/jose/common/JoseUtils.java | 21 +-
.../apache/cxf/rs/security/jose/jwt/JwtUtils.java | 37 ++-
.../cxf/rs/security/jose/jwk/JwkUtilsTest.java | 14 +
.../cxf/rs/security/jose/jwt/JwtUtilsTest.java | 40 +++
.../filters/JwsJwksJwtAccessTokenValidator.java | 18 +-
.../oauth2/filters/JwtAccessTokenValidator.java | 18 ++
.../oauth2/filters/OAuthRequestFilter.java | 2 +-
.../grants/code/AuthorizationCodeGrantHandler.java | 20 +-
.../oauth2/grants/code/JCacheCodeDataProvider.java | 6 +-
.../oauth2/provider/AbstractOAuthDataProvider.java | 41 ++-
.../oauth2/provider/OAuthDataProvider.java | 21 ++
.../provider/OAuthServiceExceptionMapper.java | 1 +
.../oauth2/services/AbstractTokenService.java | 9 +-
.../oauth2/services/AuthorizationMetadata.java | 11 +-
.../oauth2/services/TokenIntrospectionService.java | 4 +-
.../oauth2/services/TokenRevocationService.java | 38 ++-
.../security/oauth2/utils/AuthorizationUtils.java | 6 +-
.../JwsJwksJwtAccessTokenValidatorTest.java | 5 +
.../filters/JwtAccessTokenValidatorTest.java | 200 ++++++++++++++
.../provider/AbstractOAuthDataProviderTest.java | 56 ++++
.../oauth2/services/AbstractTokenServiceTest.java | 130 +++++++++
.../oauth2/utils/AuthorizationUtilsTest.java | 88 ++++++
.../oauth2}/src/test/resources/logging.properties | 0
.../security/oidc/idp/IdTokenResponseFilter.java | 3 +
.../cxf/rs/security/oidc/rp/IdTokenReader.java | 14 +-
.../cxf/rs/security/oidc/rp/IdTokenReaderTest.java | 70 +++++
.../saml/sso/state/HTTPSPStateManager.java | 1 +
.../apache/cxf/transport/jms/JMSConfigFactory.java | 1 +
.../apache/cxf/transport/jms/util/JndiHelper.java | 45 +++
.../cxf/transport/jms/JMSConfigFactoryTest.java | 23 +-
.../cxf/transport/jms/util/JndiHelperTest.java | 138 ++++++++++
.../main/java/org/apache/cxf/ws/rm/RMEndpoint.java | 1 +
.../cxf/ws/security/trust/AbstractSTSClient.java | 6 +-
.../ws/security/trust/AbstractSTSClientTest.java | 23 ++
.../cxf/wsdl11/AbstractWrapperWSDLLocator.java | 13 +-
.../oauth2/common/JCacheOAuthDataProviderImpl.java | 54 ++--
.../oauth2/filters/OAuth2JwtFiltersTest.java | 59 +++-
.../oauth2/grants/IntrospectionServiceTest.java | 38 +++
.../security/oauth2/grants/PublicClientTest.java | 126 ++++-----
.../systest/jaxrs/security/oidc/OIDCFlowTest.java | 2 +
...n.xml => grants-server-public-session-fips.xml} | 54 +++-
.../oauth2/grants/grants-server-public-session.xml | 36 +++
.../oauth2/grants/grants-server-public.xml | 35 +++
...introspection-server-jcache-jwt-non-persist.xml | 18 ++
.../grants/introspection-server-jcache-jwt.xml | 20 +-
.../oauth2/grants/introspection-server-jcache.xml | 10 +-
.../oauth2/grants/introspection-server-jpa.xml | 8 +
.../jaxrs/security/oauth2/tls/serverTls.xml | 4 +-
.../tools/common/dom/ExtendedDocumentBuilder.java | 21 ++
.../wsdlto/databinding/jaxb/JAXBDataBinding.java | 8 +
72 files changed, 2577 insertions(+), 225 deletions(-)
create mode 100644
core/src/test/java/org/apache/cxf/configuration/jsse/TLSParameterJaxBUtilsTest.java
copy {integration/jca/src/main/java/org/apache/cxf/jca/core/classloader =>
core/src/test/java/org/apache/cxf/resource/protocol/vfs}/Handler.java (59%)
copy
integration/jca/src/{test/java/org/apache/cxf/jca/core/resourceadapter/ResourceBeanTest.java
=> main/java/org/apache/cxf/jca/core/resourceadapter/JndiNameValidator.java}
(69%)
create mode 100644
integration/jca/src/test/java/org/apache/cxf/jca/core/resourceadapter/JndiNameValidatorTest.java
create mode 100644
rt/rs/security/jose-parent/jose-jaxrs/src/test/java/org/apache/cxf/rs/security/jose/jaxrs/JwsJsonContainerRequestFilterTest.java
create mode 100644
rt/rs/security/oauth-parent/oauth2/src/test/java/org/apache/cxf/rs/security/oauth2/filters/JwtAccessTokenValidatorTest.java
create mode 100644
rt/rs/security/oauth-parent/oauth2/src/test/java/org/apache/cxf/rs/security/oauth2/services/AbstractTokenServiceTest.java
copy rt/{ws/security =>
rs/security/oauth-parent/oauth2}/src/test/resources/logging.properties (100%)
create mode 100644
rt/rs/security/sso/oidc/src/test/java/org/apache/cxf/rs/security/oidc/rp/IdTokenReaderTest.java
create mode 100644
rt/transports/jms/src/test/java/org/apache/cxf/transport/jms/util/JndiHelperTest.java
copy
systests/rs-security/src/test/resources/org/apache/cxf/systest/jaxrs/security/oauth2/grants/{grants-server-public-session.xml
=> grants-server-public-session-fips.xml} (77%)
