This is an automated email from the ASF dual-hosted git repository.
rzo1 pushed a change to branch tomee-10.x
in repository https://gitbox.apache.org/repos/asf/tomee.git
from 8137b0c13e [tomee-10.x] Update the systemd service example (#3086)
new b8a0aa613e Register the MP-JWT filter only for the MP-JWT auth method
(#3067)
new dccb325d3b Resolve MP-JWT security constraints per resource class
(#3068)
new 07c28448ea Log webapp jars skipped by the scan exclusion list (#3069)
new f785576083 Do not map the caller principal to a role by name in
getLogicalRoles (#3070)
new 54d403c109 Keep Debian package configuration read-only for the service
group (#3071)
new bae0d6097a Bind the LiveReload connector to loopback and check the
websocket origin (#3072)
new 7b937d6684 Validate stored parameters in TomEEPbkdf2PasswordHash
(#3073)
new 186322a85f Make only_from authoritative for server services (#3075)
new c5a998f919 Warn that the Static3DES password cipher only obfuscates
(#3076)
new 38b2dc4ccd Passivate stateful beans to a private directory by default
(#3077)
new 5323aefd02 Warn when tomee-maven-plugin sends credentials over plain
HTTP (#3078)
new 7b9ed6ba3e Reject archive entries escaping the target in
tomee-maven-plugin (#3079)
new 8875e36260 TOMEE-4729 - Restore MP-JWT security state for asynchronous
requests (#3080)
new b2dbb1236a Keep RAFPassivater files in a private temp directory (#3082)
new 68ab3f5ea8 Do not return EJB exception messages from the default
JAX-RS mapper (#3083)
new 72306c04be Clear the WS-Security caller identity after the JAX-WS
request (#3084)
new 3e834f4954 Require a secret for stop requests on the admin port (#3087)
new 41af418e3b Verify Tomcat user identity store passwords with the realm
CredentialHandler (#3074)
The 18 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../arquillian-tomee-security-tests}/pom.xml | 19 +-
.../AbstractTomcatUserIdentityStoreTest.java | 74 ++++
.../arquillian/tests/security/CallerServlet.java} | 17 +-
.../tests/security/DigestUserDatabaseConfig.java | 16 +-
.../tests/security/PlainUserDatabaseConfig.java | 16 +-
.../security/StandaloneUserDatabaseConfig.java | 16 +-
.../TomcatUserIdentityStoreDigestTest.java | 66 ++++
.../TomcatUserIdentityStorePlainTest.java} | 37 +-
.../TomcatUserIdentityStoreStandaloneTest.java} | 28 +-
.../src/test/resources/arquillian.xml | 26 +-
.../src/test/resources/security-conf.properties | 7 +-
.../src/test/resources/security-conf/server.xml | 55 +++
.../security-conf/tomcat-users-digest.xml | 12 +-
.../security-conf/tomcat-users-standalone.xml | 10 +-
.../test/resources/security-conf}/tomcat-users.xml | 10 +-
.../src/test/tomee/server.xml | 56 +++
arquillian/arquillian-tomee-tests/pom.xml | 1 +
.../openejb/cipher/StaticDESPasswordCipher.java | 33 +-
.../apache/openejb/config/DeploymentLoader.java | 46 ++-
.../org/apache/openejb/config/RemoteServer.java | 53 ++-
.../apache/openejb/core/managed/RAFPassivater.java | 50 +--
.../openejb/core/stateful/RAFPassivater.java | 49 ++-
.../openejb/core/stateful/SimplePassivater.java | 14 +-
.../cipher/StaticDESPasswordCipherTest.java | 97 +++++
.../apache/openejb/config/NewLoaderLogicTest.java | 63 +++
.../config/RemoteServerShutdownMessageTest.java | 119 ++++++
.../openejb/core/managed/RAFPassivaterTest.java | 174 +++++++++
.../openejb/core/stateful/RAFPassivaterTest.java | 174 +++++++++
.../core/stateful/SimplePassivaterTest.java | 99 +++++
.../apache/openejb/loader/AdminShutdownSecret.java | 116 ++++++
.../openejb/loader/AdminShutdownSecretTest.java | 92 +++++
docs/admin/configuration/server.adoc | 2 +
docs/datasource-password-encryption.adoc | 7 +
docs/developer/tools/maven/embedded.adoc | 2 +-
docs/getting-started.adoc | 5 +
docs/startup.adoc | 10 +-
itests/openejb-itests-client/pom.xml | 7 +
.../org/apache/openejb/test/RemoteTestServer.java | 13 +-
.../apache/openejb/maven/plugins/LiveReload.java | 18 +
.../openejb/maven/plugins/TomEEEmbeddedMojo.java | 3 +-
.../openejb/maven/plugin/AbstractCommandMojo.java | 27 +-
.../openejb/maven/plugin/AbstractTomEEMojo.java | 9 +
.../org/apache/openejb/maven/plugin/ExecMojo.java | 3 +-
.../maven/plugin/AbstractCommandMojoTest.java | 97 +++++
.../org/apache/openejb/maven/plugin/UnzipTest.java | 104 +++++
.../apache/tomee/microprofile/jwt/MPJWTFilter.java | 85 +++-
.../tomee/microprofile/jwt/MPJWTInitializer.java | 2 +-
.../jaxrs/MPJWTSecurityAnnotationsInterceptor.java | 40 +-
...PJWTSecurityAnnotationsInterceptorsFeature.java | 74 +---
.../jwt/MPJWTFilterExitWebAppTest.java | 260 ++++++++++++-
.../microprofile/jwt/MPJWTInitializerTest.java | 84 ++++
...SecurityAnnotationsInterceptorsFeatureTest.java | 237 ++++++++++++
.../openejb/server/cxf/rs/EJBExceptionMapper.java | 25 +-
.../server/cxf/rs/EJBExceptionMapperTest.java | 89 +++++
.../openejb/server/cxf/ConfigureCxfSecurity.java | 3 +
.../apache/openejb/server/cxf/CxfWsContainer.java | 31 +-
.../openejb/server/cxf/OpenEJBLoginValidator.java | 15 +
.../server/cxf/WSSLoginCleanupInterceptor.java | 161 ++++++++
.../cxf/CxfWsContainerSecurityStateTest.java | 426 +++++++++++++++++++++
.../openejb/server/ServiceAccessController.java | 22 +-
.../apache/openejb/server/admin/AdminDaemon.java | 153 ++++++++
.../java/org/apache/openejb/server/admin/Stop.java | 31 +-
.../META-INF/org.apache.openejb.cli/start.examples | 8 +-
.../META-INF/org.apache.openejb.cli/stop.examples | 8 +
.../META-INF/org.apache.openejb.cli/stop.help | 4 +
.../server/ServiceAccessControllerTest.java | 73 ++++
.../openejb/server/admin/AdminDaemonTest.java | 226 +++++++++++
.../tomee/catalina/TomcatSecurityService.java | 13 +-
.../TomcatSecurityServiceLogicalRolesTest.java | 104 +++++
.../src/main/resources/control/postinst.sh | 13 +-
.../tomee/security/TomEEPbkdf2PasswordHash.java | 115 ++++--
.../identitystore/TomEEDefaultIdentityStore.java | 95 ++++-
.../security/TomEEPbkdf2PasswordHashTest.java | 216 +++++++++++
.../TomEEDefaultIdentityStoreTest.java | 217 +++++++++++
.../org/apache/tomee/livereload/Instances.java | 9 +
.../tomee/livereload/LiveReloadEndpoint.java | 2 +-
.../tomee/livereload/LiveReloadInstaller.java | 17 +-
.../livereload/LoopbackOriginConfigurator.java | 60 +++
.../livereload/LoopbackOriginConfiguratorTest.java | 71 ++++
79 files changed, 4627 insertions(+), 314 deletions(-)
copy {tomee/tomee-util =>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests}/pom.xml (79%)
create mode 100644
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/AbstractTomcatUserIdentityStoreTest.java
copy
arquillian/arquillian-tomee-tests/{arquillian-tomee-jaxrs-tests/src/test/java/org/apache/openejb/arquillian/tests/jaxrs/servlets/Servlet.java
=>
arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/CallerServlet.java}
(65%)
copy
itests/openejb-itests-optional-classes/lib_with_optional_dep/src/main/java/org/apache/tomee/itests/optional/optlib/SomeBean.java
=>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/DigestUserDatabaseConfig.java
(74%)
copy
itests/openejb-itests-optional-classes/lib_with_optional_dep/src/main/java/org/apache/tomee/itests/optional/optlib/SomeBean.java
=>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/PlainUserDatabaseConfig.java
(74%)
copy
itests/openejb-itests-optional-classes/lib_with_optional_dep/src/main/java/org/apache/tomee/itests/optional/optlib/SomeBean.java
=>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/StandaloneUserDatabaseConfig.java
(73%)
create mode 100644
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/TomcatUserIdentityStoreDigestTest.java
copy
arquillian/arquillian-tomee-tests/{arquillian-tomee-webprofile-tests/src/test/java/org/apache/openejb/arquillian/tests/resenventry/ServletResourceEnvEntryInjectionTest.java
=>
arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/TomcatUserIdentityStorePlainTest.java}
(58%)
copy
arquillian/arquillian-tomee-tests/{arquillian-tomee-config-tests/src/test/java/org/apache/openejb/arquillian/tests/servlet/SimpleServletTest.java
=>
arquillian-tomee-security-tests/src/test/java/org/apache/openejb/arquillian/tests/security/TomcatUserIdentityStoreStandaloneTest.java}
(62%)
mode change 100755 => 100644
copy arquillian/{functional-tests/spring-cxf-tomee-4332 =>
arquillian-tomee-tests/arquillian-tomee-security-tests}/src/test/resources/arquillian.xml
(54%)
copy container/openejb-core/src/main/resources/groups.properties =>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/resources/security-conf.properties
(90%)
create mode 100644
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/resources/security-conf/server.xml
copy examples/ejb-examples/src/main/webapp/WEB-INF/tomcat-users.xml =>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/resources/security-conf/tomcat-users-digest.xml
(77%)
copy itests/openejb-itests-web/src/main/webapp/WEB-INF/tomcat-users.xml =>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/resources/security-conf/tomcat-users-standalone.xml
(83%)
copy {itests/openejb-itests-web/src/main/webapp/WEB-INF =>
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/resources/security-conf}/tomcat-users.xml
(84%)
create mode 100644
arquillian/arquillian-tomee-tests/arquillian-tomee-security-tests/src/test/tomee/server.xml
create mode 100644
container/openejb-core/src/test/java/org/apache/openejb/cipher/StaticDESPasswordCipherTest.java
create mode 100644
container/openejb-core/src/test/java/org/apache/openejb/config/RemoteServerShutdownMessageTest.java
create mode 100644
container/openejb-core/src/test/java/org/apache/openejb/core/managed/RAFPassivaterTest.java
create mode 100644
container/openejb-core/src/test/java/org/apache/openejb/core/stateful/RAFPassivaterTest.java
create mode 100644
container/openejb-core/src/test/java/org/apache/openejb/core/stateful/SimplePassivaterTest.java
create mode 100644
container/openejb-loader/src/main/java/org/apache/openejb/loader/AdminShutdownSecret.java
create mode 100644
container/openejb-loader/src/test/java/org/apache/openejb/loader/AdminShutdownSecretTest.java
create mode 100644
maven/tomee-maven-plugin/src/test/java/org/apache/openejb/maven/plugin/AbstractCommandMojoTest.java
create mode 100644
maven/tomee-maven-plugin/src/test/java/org/apache/openejb/maven/plugin/UnzipTest.java
create mode 100644
mp-jwt/src/test/java/org/apache/tomee/microprofile/jwt/MPJWTInitializerTest.java
create mode 100644
mp-jwt/src/test/java/org/apache/tomee/microprofile/jwt/jaxrs/MPJWTSecurityAnnotationsInterceptorsFeatureTest.java
create mode 100644
server/openejb-cxf-rs/src/test/java/org/apache/openejb/server/cxf/rs/EJBExceptionMapperTest.java
create mode 100644
server/openejb-cxf/src/main/java/org/apache/openejb/server/cxf/WSSLoginCleanupInterceptor.java
create mode 100644
server/openejb-cxf/src/test/java/org/apache/openejb/server/cxf/CxfWsContainerSecurityStateTest.java
create mode 100644
server/openejb-server/src/test/java/org/apache/openejb/server/admin/AdminDaemonTest.java
create mode 100644
tomee/tomee-catalina/src/test/java/org/apache/tomee/catalina/TomcatSecurityServiceLogicalRolesTest.java
create mode 100644
tomee/tomee-security/src/test/java/org/apache/tomee/security/TomEEPbkdf2PasswordHashTest.java
create mode 100644
tomee/tomee-security/src/test/java/org/apache/tomee/security/identitystore/TomEEDefaultIdentityStoreTest.java
create mode 100644
utils/livereload-tomee/src/main/java/org/apache/tomee/livereload/LoopbackOriginConfigurator.java
create mode 100644
utils/livereload-tomee/src/test/java/org/apache/tomee/livereload/LoopbackOriginConfiguratorTest.java
