This is an automated email from the ASF dual-hosted git repository.
adamsaghy pushed a change to branch develop
in repository https://gitbox.apache.org/repos/asf/fineract.git
from 5a81c992f4 Merge pull request #5965
add 719c5dbaf9 FINERACT-2616: OIDC Federation support for IdP
new 6a17677c9c Merge pull request #5883
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../core/config/FineractProperties.java | 50 ++
...{FineractContext.java => TenantOidcConfig.java} | 38 +-
.../security/domain/OidcFederationType.java | 8 +-
.../core/config/FineractPropertiesOidcTest.java | 62 ++
.../modules/ROOT/images/oidc/architecture.png | Bin 0 -> 67372 bytes
fineract-doc/modules/ROOT/nav.adoc | 4 +
.../modules/ROOT/pages/oidc-federation-google.adoc | 623 ++++++++++++++++++
.../modules/ROOT/pages/oidc-federation.adoc | 725 +++++++++++++++++++++
...OwnerLoanProductAttributesWriteServiceImpl.java | 2 +-
...InterestScheduleModelRepositoryWrapperImpl.java | 2 +-
fineract-provider/dependencies.gradle | 1 +
.../loan/BuyDownFeeAmortizationBusinessStep.java | 2 +-
.../CapitalizedIncomeAmortizationBusinessStep.java | 2 +-
.../core/config/FineractCorsConfiguration.java} | 28 +-
.../infrastructure/core/config/SecurityConfig.java | 17 -
.../security/config/AuthorizationServerConfig.java | 18 -
...amicJwtIssuerAuthenticationManagerResolver.java | 143 ++++
.../config/OidcFederationSecurityConfig.java | 240 +++++++
.../service/OidcAppUserResolutionServiceImpl.java | 125 ++++
.../src/main/resources/application.properties | 14 +
.../tenant-store/changelog-tenant-store.xml | 1 +
.../parts/0012_m_tenant_oidc_config.xml} | 57 +-
...JwtIssuerAuthenticationManagerResolverTest.java | 262 ++++++++
...idcFederationSecurityConfigConditionalTest.java | 54 ++
.../OidcAppUserResolutionServiceImplTest.java | 169 +++++
.../security/api/TenantOidcConfigApiResource.java | 153 +++++
.../FineractOidcJwtAuthenticationConverter.java | 70 ++
.../security/data/FineractOidcUser.java | 53 ++
.../security/data/TenantOidcConfigData.java | 50 ++
.../exception/OidcUserNotFoundException.java | 31 +-
.../security/filter/OidcTenantAwareFilter.java | 145 +++++
.../handler/OidcAuthenticationSuccessHandler.java | 55 ++
.../security/handler/OidcLogoutSuccessHandler.java | 109 ++++
.../security/service/FineractOidcUserService.java | 105 +++
.../service/OidcAppUserResolutionService.java | 30 +-
.../service/TenantOidcConfigRepository.java | 13 +-
.../service/TenantOidcConfigRepositoryJdbc.java | 146 +++++
.../security/service/TenantOidcConfigService.java | 95 +++
...FineractOidcJwtAuthenticationConverterTest.java | 111 ++++
.../exception/OidcUserNotFoundExceptionTest.java | 38 +-
.../security/filter/OidcTenantAwareFilterTest.java | 274 ++++++++
.../handler/OidcLogoutSuccessHandlerTest.java | 152 +++++
.../TenantOidcConfigRepositoryJdbcTest.java | 132 ++++
.../service/TenantOidcConfigServiceTest.java | 232 +++++++
44 files changed, 4478 insertions(+), 163 deletions(-)
copy
fineract-core/src/main/java/org/apache/fineract/infrastructure/core/domain/{FineractContext.java
=> TenantOidcConfig.java} (52%)
copy
fineract-loan/src/main/java/org/apache/fineract/portfolio/loanaccount/domain/AmortizationType.java
=>
fineract-core/src/main/java/org/apache/fineract/infrastructure/security/domain/OidcFederationType.java
(75%)
create mode 100644
fineract-core/src/test/java/org/apache/fineract/infrastructure/core/config/FineractPropertiesOidcTest.java
create mode 100644 fineract-doc/modules/ROOT/images/oidc/architecture.png
create mode 100644 fineract-doc/modules/ROOT/pages/oidc-federation-google.adoc
create mode 100644 fineract-doc/modules/ROOT/pages/oidc-federation.adoc
copy
fineract-provider/src/main/java/org/apache/fineract/{cob/loan/LoanLockingConfiguration.java
=> infrastructure/core/config/FineractCorsConfiguration.java} (50%)
create mode 100644
fineract-provider/src/main/java/org/apache/fineract/infrastructure/security/config/DynamicJwtIssuerAuthenticationManagerResolver.java
create mode 100644
fineract-provider/src/main/java/org/apache/fineract/infrastructure/security/config/OidcFederationSecurityConfig.java
create mode 100644
fineract-provider/src/main/java/org/apache/fineract/infrastructure/security/service/OidcAppUserResolutionServiceImpl.java
copy
fineract-provider/src/main/resources/db/changelog/{tenant/parts/0043_add_external_event_table.xml
=> tenant-store/parts/0012_m_tenant_oidc_config.xml} (50%)
create mode 100644
fineract-provider/src/test/java/org/apache/fineract/infrastructure/security/config/DynamicJwtIssuerAuthenticationManagerResolverTest.java
create mode 100644
fineract-provider/src/test/java/org/apache/fineract/infrastructure/security/config/OidcFederationSecurityConfigConditionalTest.java
create mode 100644
fineract-provider/src/test/java/org/apache/fineract/infrastructure/security/service/OidcAppUserResolutionServiceImplTest.java
create mode 100644
fineract-security/src/main/java/org/apache/fineract/infrastructure/security/api/TenantOidcConfigApiResource.java
create mode 100644
fineract-security/src/main/java/org/apache/fineract/infrastructure/security/converter/FineractOidcJwtAuthenticationConverter.java
create mode 100644
fineract-security/src/main/java/org/apache/fineract/infrastructure/security/data/FineractOidcUser.java
create mode 100644
fineract-security/src/main/java/org/apache/fineract/infrastructure/security/data/TenantOidcConfigData.java
copy
fineract-provider/src/main/java/org/apache/fineract/infrastructure/core/domain/EmailDetail.java
=>
fineract-security/src/main/java/org/apache/fineract/infrastructure/security/exception/OidcUserNotFoundException.java
(61%)
create mode 100644
fineract-security/src/main/java/org/apache/fineract/infrastructure/security/filter/OidcTenantAwareFilter.java
create mode 100644
fineract-security/src/main/java/org/apache/fineract/infrastructure/security/handler/OidcAuthenticationSuccessHandler.java
create mode 100644
fineract-security/src/main/java/org/apache/fineract/infrastructure/security/handler/OidcLogoutSuccessHandler.java
create mode 100644
fineract-security/src/main/java/org/apache/fineract/infrastructure/security/service/FineractOidcUserService.java
copy
fineract-core/src/main/java/org/apache/fineract/infrastructure/security/service/PlatformSecurityContext.java
=>
fineract-security/src/main/java/org/apache/fineract/infrastructure/security/service/OidcAppUserResolutionService.java
(53%)
copy
fineract-core/src/main/java/org/apache/fineract/infrastructure/security/service/SqlValidator.java
=>
fineract-security/src/main/java/org/apache/fineract/infrastructure/security/service/TenantOidcConfigRepository.java
(69%)
create mode 100644
fineract-security/src/main/java/org/apache/fineract/infrastructure/security/service/TenantOidcConfigRepositoryJdbc.java
create mode 100644
fineract-security/src/main/java/org/apache/fineract/infrastructure/security/service/TenantOidcConfigService.java
create mode 100644
fineract-security/src/test/java/org/apache/fineract/infrastructure/security/converter/FineractOidcJwtAuthenticationConverterTest.java
copy
fineract-client/src/test/java/org/apache/fineract/client/util/PartsTest.java =>
fineract-security/src/test/java/org/apache/fineract/infrastructure/security/exception/OidcUserNotFoundExceptionTest.java
(53%)
create mode 100644
fineract-security/src/test/java/org/apache/fineract/infrastructure/security/filter/OidcTenantAwareFilterTest.java
create mode 100644
fineract-security/src/test/java/org/apache/fineract/infrastructure/security/handler/OidcLogoutSuccessHandlerTest.java
create mode 100644
fineract-security/src/test/java/org/apache/fineract/infrastructure/security/service/TenantOidcConfigRepositoryJdbcTest.java
create mode 100644
fineract-security/src/test/java/org/apache/fineract/infrastructure/security/service/TenantOidcConfigServiceTest.java
