[ 
https://issues.apache.org/jira/browse/KNOX-3419?focusedWorklogId=1039067&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1039067
 ]

ASF GitHub Bot logged work on KNOX-3419:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 01/Sep/26 12:16
            Start Date: 01/Sep/26 12:16
    Worklog Time Spent: 10m 
      Work Description: hanicz opened a new pull request, #1369:
URL: https://github.com/apache/knox/pull/1369

   [KNOX-3419](https://issues.apache.org/jira/browse/KNOX-3419) - Add docker 
based tests for recent improvements
   
   ## What changes were proposed in this pull request?
   
   New tests:
   
   - `test_knox_token_passcode` (KNOX-3413) — passcode bound to its own token; 
a verified guest passcode replayed against an admin token id → 401, never 
asserted as admin.
   - `test_knox_admin_path_traversal` (KNOX-3418) — Admin API rejects traversal 
names (..%2f…, ..%252f…) → 400.
   - `test_knox_ldap_filter_injection` (KNOX-3417) — search-filter injection 
escaped; metacharacter usernames → 401.
   - `test_knoxsso_redirect` — KnoxSSO rejects originalUrl with embedded 
userinfo → 400.
   - Extended `test_knoxtoken_jwt` with 5 non-owner/non-whitelist authz tests 
(disable + getUserTokens → 403).
   
   ## How was this patch tested?
   
   Ran the tests
   
   ## Integration Tests
   See in changes
   
   




Issue Time Tracking
-------------------

            Worklog Id:     (was: 1039067)
    Remaining Estimate: 0h
            Time Spent: 10m

> Add docker based tests for recent improvements
> ----------------------------------------------
>
>                 Key: KNOX-3419
>                 URL: https://issues.apache.org/jira/browse/KNOX-3419
>             Project: Apache Knox
>          Issue Type: Test
>          Components: Tests
>    Affects Versions: 3.1.0
>            Reporter: Tamás Hanicz
>            Assignee: Tamás Hanicz
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to