This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a change to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
from 9a1d94af8ef reject WEB-INF and META-INF paths in AbstractHTTPServlet
(#3626)
new 49c0ecafcd5 ignore x5c and x5t key headers in JWTTokenValidator (#3636)
new 157af2a1675 validate claims on jwe-only tokens in JoseJwtConsumer
(#3639)
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../jose/jaxrs/JwtAuthenticationFilterTest.java | 43 +++++++++++
.../cxf/rs/security/jose/jwt/JoseJwtConsumer.java | 4 +-
.../sts/token/validator/jwt/JWTTokenValidator.java | 26 ++++++-
.../sts/token/validator/JWTTokenValidatorTest.java | 84 ++++++++++++++++++++++
4 files changed, 154 insertions(+), 3 deletions(-)
