This is an automated email from the ASF dual-hosted git repository.
rzo1 pushed a change to branch tomee-10.x
in repository https://gitbox.apache.org/repos/asf/tomee.git
from 782da332a0 evaluate ejb method permissions through the installed
policy on all jdks
new ab950bd537 Prevent StackOverflowError from static get() in
PolicyConfigurationFactory overriding outer class method (in new auth api)
new 078a4d2f12 Unwrap InternalApplication before passing to CXF
new 22a311ba34 fix FailOverRouterErrorHandlerTest and others
new 4c873b86b7 failover integration test needs to wait for servers to take
action
new 49c721dde2 Speed up annotation processing during WAR deploy
new f1151e98be TOMEE-4655 - roll back a failed deployment's registered ids
(#2850)
new d067de9e76 TOMEE-4642 - Don't fail deployment when a
servlet/filter/listener class is missing (#2848)
new 32e370b1cf TOMEE-4651 - register the jakarta.tags.* TLD URIs (#2844)
new e164336624 unified failure handling
new 62b7604244 align embedded http request body handling with Tomcat
new 5869a49f77 improve ejb passivation
new 8f98094436 improve EJB keys
new 536bf33693 always apply the internal beans role check
new 0f2c0f8dc6 validate zip extraction
new 1a4c70bbd2 improve maven metadata and settings parsing
new 7dfbcd40fa keep client failover and redirect locations on the
configured transport scheme
new 54223860e4 verify peer hostname on ejbds client connections
new bdf5c74d1f honor bind property
new 2018a82227 make anonymous GET handling on basic auth http listeners
configurable
new d3685b6126 reject unsupported deployment configs in openejb-hessian
new e66896d79b reject unenforceable auth settings in the tomcat hessian
registry
new 9f7f6f6853 apply the hessian basic auth valve relative to the context
path
new 556f723e4c improve openejb-http resource lookup
new e460ef4242 properly handle pooled threads
new 30ea765214 fully change session id in openejb-http
new 69235dff13 dont emit stacktrace on error
new 490355cd13 refuse deployment of unsupported jaxws/jaxrs configurations
new eab9972abf RouterValve don't blindly forward
new a56644aee1 flip quickSession default
new 53e0357d11 fix rememberMe cleanup
new caca29f2a2 require a non-empty password for LDAP caller binds
new 37fd9e0abc escape caller name when building ldap search filters and dns
new 6792dc184c disable remote datasource lookup by default
new b12d24c6ce use secure random for OIDC nonce/state
The 34 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../arquillian/remote/RemoteTomEEContainer.java | 6 +-
.../openejb/assembler/classic/Assembler.java | 20 +-
.../apache/openejb/config/AnnotationDeployer.java | 53 ++-
.../java/org/apache/openejb/config/WsDeployer.java | 16 +-
.../openejb/core/managed/ManagedContainer.java | 4 +-
.../openejb/core/managed/SimplePassivater.java | 18 +-
.../apache/openejb/core/security/JaccProvider.java | 6 +-
.../core/security/jaas/PropertiesLoginModule.java | 11 +-
.../openejb/core/security/jaas/SQLLoginModule.java | 12 +-
.../core/singleton/SingletonInstanceManager.java | 7 +
.../openejb/core/stateful/SimplePassivater.java | 18 +-
.../openejb/core/stateful/StatefulContainer.java | 10 +-
.../openejb/resource/jdbc/RoutedDataSource.java | 4 +-
.../internal/InternalSecurityInterceptor.java | 2 +-
.../openejb/web/LightweightWebAppBuilder.java | 11 +-
.../classic/FailedDeploymentIdCleanupTest.java | 194 +++++++++
.../openejb/config/AnnotationDeployerTest.java | 81 ++++
.../core/stateful/StatefulContainerTest.java | 21 +
.../internal/InternalSecurityInterceptorTest.java | 140 +++++++
.../main/java/org/apache/openejb/loader/Zips.java | 9 +
.../openejb/loader/provisining/MavenResolver.java | 19 +
.../java/org/apache/openejb/loader/ZipsTest.java | 84 ++++
.../loader/provisining/MavenResolverTest.java | 21 +
docs/admin/configuration/server.adoc | 1 +
docs/advanced/tomee-embedded/index.adoc | 2 +-
docs/developer/tools/maven/embedded.adoc | 2 +-
docs/developer/tools/maven/tomee.adoc | 2 +-
docs/ejbd-transport.adoc | 26 ++
docs/maven/build-mojo.adoc | 2 +-
docs/maven/configtest-mojo.adoc | 2 +-
docs/maven/debug-mojo.adoc | 2 +-
docs/maven/exec-mojo.adoc | 2 +-
docs/maven/run-mojo.adoc | 2 +-
docs/maven/start-mojo.adoc | 2 +-
docs/maven/stop-mojo.adoc | 2 +-
docs/properties-listing.adoc | 10 +
docs/tomee-embedded-maven-plugin.adoc | 2 +-
.../tomee/gradle/embedded/TomEEEmbeddedTask.java | 2 +-
.../failover/StickyConnectionStrategyTest.java | 5 +
.../openejb/maven/plugins/TomEEEmbeddedMojo.java | 2 +-
.../openejb/maven/plugin/AbstractTomEEMojo.java | 2 +-
.../openejb/maven/plugin/UpdatableTomEEMojo.java | 1 +
.../java/org/apache/openejb/client/Client.java | 24 +-
.../org/apache/openejb/client/JNDIContext.java | 8 +-
.../org/apache/openejb/client/ServerMetaData.java | 6 +-
.../openejb/client/SocketConnectionFactory.java | 25 +-
.../openejb/client/TransportSecurityPolicy.java | 81 ++++
.../client/SocketConnectionFactoryTest.java | 56 +++
.../client/TransportSecurityPolicyTest.java | 81 ++++
.../apache/openejb/server/cli/command/Deploy.java | 4 +-
.../openejb/server/cli/command/Undeploy.java | 4 +-
.../openejb/server/cxf/rs/CxfRsHttpListener.java | 10 +-
.../server/derbynet/DerbyNetworkService.java | 2 +-
.../server/derbynet/DerbyNetworkServiceTest.java | 16 +
.../openejb/server/ejbd/JndiRequestHandler.java | 6 +
.../apache/openejb/server/ejbd/AppClientTest.java | 99 +++--
.../server/ejbd/RemoteDataSourceLookupTest.java | 157 +++++++
.../server/hessian/HessianRegistryImpl.java | 8 +
.../server/hessian/TomcatHessianRegistry.java | 30 +-
.../server/hessian/HessianRegistryImplTest.java | 32 +-
.../server/hessian/LimitedBasicValveTest.java | 93 +++++
.../server/httpd/BasicAuthHttpListenerWrapper.java | 19 +-
.../openejb/server/httpd/HttpListenerRegistry.java | 26 +-
.../openejb/server/httpd/HttpRequestImpl.java | 55 ++-
.../openejb/server/httpd/HttpResponseImpl.java | 46 +--
.../openejb/server/httpd/HttpSessionImpl.java | 6 +
.../openejb/server/httpd/OpenEJBHttpServer.java | 10 +-
.../server/httpd/session/SessionManager.java | 7 +
.../httpd/BasicAuthHttpListenerWrapperTest.java | 71 ++++
.../openejb/server/httpd/HttpRequestImplTest.java | 56 +++
.../server/httpd/OpenEJBHttpServerTest.java | 119 ++++++
.../apache/openejb/server/httpd/ResourcesTest.java | 20 +
.../apache/openejb/server/rest/RsRegistryImpl.java | 5 +-
.../server/rest/RsRegistryImplAuthTest.java} | 30 +-
.../server/webservices/OpenEJBHttpWsRegistry.java | 5 +-
.../webservices/OpenEJBHttpWsRegistryAuthTest.java | 43 ++
.../org/apache/tomee/RemoteTomEEEJBContainer.java | 3 +-
tomee/tomee-catalina/pom.xml | 6 +
.../catalina/startup/OpenEJBContextConfig.java | 65 ++-
.../apache/tomee/catalina/TomcatWebAppBuilder.java | 24 +-
.../catalina/cluster/TomEEClusterListener.java | 18 +-
.../apache/tomee/catalina/routing/RouterValve.java | 162 ++++++++
.../org/apache/tomee/jasper/TomEETldScanner.java | 124 +++++-
.../routing/RouterValveDestinationTest.java | 70 ++++
.../jasper/TomEETldScannerJakartaTagsTest.java | 460 +++++++++++++++++++++
.../org/apache/tomee/embedded/Configuration.java | 2 +-
.../apache/tomee/embedded/ConfigurationTest.java | 5 +
.../cdi/OpenIdAuthenticationMechanism.java | 5 +-
.../tomee/security/cdi/RememberMeInterceptor.java | 6 +-
.../cdi/openid/storage/OpenIdStorageHandler.java | 15 +-
.../identitystore/TomEELDAPIdentityStore.java | 51 ++-
.../cdi/RememberMeInterceptorCleanSubjectTest.java | 99 +++++
.../storage/OpenIdStorageHandlerTokenTest.java} | 27 +-
.../identitystore/TomEELDAPIdentityStoreTest.java | 150 +++++++
94 files changed, 3091 insertions(+), 299 deletions(-)
create mode 100644
container/openejb-core/src/test/java/org/apache/openejb/assembler/classic/FailedDeploymentIdCleanupTest.java
create mode 100644
container/openejb-core/src/test/java/org/apache/openejb/security/internal/InternalSecurityInterceptorTest.java
create mode 100644
container/openejb-loader/src/test/java/org/apache/openejb/loader/ZipsTest.java
create mode 100644
server/openejb-client/src/main/java/org/apache/openejb/client/TransportSecurityPolicy.java
create mode 100644
server/openejb-client/src/test/java/org/apache/openejb/client/SocketConnectionFactoryTest.java
create mode 100644
server/openejb-client/src/test/java/org/apache/openejb/client/TransportSecurityPolicyTest.java
create mode 100644
server/openejb-ejbd/src/test/java/org/apache/openejb/server/ejbd/RemoteDataSourceLookupTest.java
copy
container/openejb-core/src/test/java/org/apache/openejb/testing/AddInnerTest.java
=>
server/openejb-hessian/src/test/java/org/apache/openejb/server/hessian/HessianRegistryImplTest.java
(58%)
create mode 100644
server/openejb-hessian/src/test/java/org/apache/openejb/server/hessian/LimitedBasicValveTest.java
create mode 100644
server/openejb-http/src/test/java/org/apache/openejb/server/httpd/BasicAuthHttpListenerWrapperTest.java
create mode 100644
server/openejb-http/src/test/java/org/apache/openejb/server/httpd/OpenEJBHttpServerTest.java
copy
server/openejb-rest/src/{main/java/org/apache/openejb/server/rest/RsRegistry.java
=> test/java/org/apache/openejb/server/rest/RsRegistryImplAuthTest.java} (53%)
create mode 100644
server/openejb-webservices/src/test/java/org/apache/openejb/server/webservices/OpenEJBHttpWsRegistryAuthTest.java
create mode 100644
tomee/tomee-catalina/src/test/java/org/apache/tomee/catalina/routing/RouterValveDestinationTest.java
create mode 100644
tomee/tomee-catalina/src/test/java/org/apache/tomee/jasper/TomEETldScannerJakartaTagsTest.java
create mode 100644
tomee/tomee-security/src/test/java/org/apache/tomee/security/cdi/RememberMeInterceptorCleanSubjectTest.java
copy
tomee/tomee-security/src/test/java/org/apache/tomee/security/{http/SavedAuthenticationTest.java
=> cdi/openid/storage/OpenIdStorageHandlerTokenTest.java} (61%)
create mode 100644
tomee/tomee-security/src/test/java/org/apache/tomee/security/identitystore/TomEELDAPIdentityStoreTest.java