Messages by Thread
-
-
[PR] KNOX-3461: authorize same-subject requested audience against the subject token's aud via delegation.same.subject.requested.audience.enabled [knox]
via GitHub
-
[PR] Backport v3.0.0 docs changes to master and changing version to 3.1.0 [knox]
via GitHub
-
[jira] [Created] (KNOX-3464) Document delegation policy and trusted OIDC features in KnoxIDF
Sandor Molnar (Jira)
-
[jira] [Created] (KNOX-3463) Backport v3.0.0 docs changes to master
Jira
-
[jira] [Resolved] (KNOX-2967) Invalid characters in Knox SSO section of dev guide
Jira
-
[jira] [Resolved] (KNOX-2874) Typos in JDBC token state service config docs
Jira
-
[jira] [Work started] (KNOX-3461) Same subject validation for requested audience
Sandor Molnar (Jira)
-
[jira] [Created] (KNOX-3462) Fix github docs links
Jira
-
[jira] [Commented] (KNOX-3462) Fix github docs links
ASF subversion and git services (Jira)
-
[jira] [Updated] (KNOX-3458) Enforce a maximum actor-chain (act claim) depth in token exchange
Sandor Molnar (Jira)
-
[jira] [Assigned] (KNOX-3461) Same subject validation for requested audience
Sandor Molnar (Jira)
-
[jira] [Resolved] (KNOX-3459) Honor delegation policy tokenTtlSec override when minting exchanged tokens
Sandor Molnar (Jira)
-
[jira] [Commented] (KNOX-3459) Honor delegation policy tokenTtlSec override when minting exchanged tokens
ASF subversion and git services (Jira)
-
[jira] [Resolved] (KNOX-3456) Enforce canActFor.groups in delegation policy via Knox LDAP group lookup
Sandor Molnar (Jira)
-
[jira] [Resolved] (KNOX-3462) Fix github docs links
Jira
-
Re: [PR] KNOX-3238: Migrate from javax.servlet to jakarta.servlet servlet-api [knox]
via GitHub
-
[jira] [Work logged] (KNOX-3462) Fix github docs links
ASF GitHub Bot (Jira)
-
[PR] KNOX-3462: Fix github docs links [knox]
via GitHub
-
[jira] [Commented] (KNOX-3456) Enforce canActFor.groups in delegation policy via Knox LDAP group lookup
ASF subversion and git services (Jira)
-
[jira] [Commented] (KNOX-3458) Enforce a maximum actor-chain (act claim) depth in token exchange
Harrison Sheinblatt (Jira)
-
[jira] [Created] (KNOX-3461) Same subject validation for requested audience
Harrison Sheinblatt (Jira)
-
[jira] [Resolved] (KNOX-3457) Remove unused delegation.requested.scope.enabled provider parameter
Sandor Molnar (Jira)
-
[PR] KNOX-3458: enforce a configurable maximum actor-chain depth in token exchange [knox]
via GitHub
-
[jira] [Commented] (KNOX-3457) Remove unused delegation.requested.scope.enabled provider parameter
ASF subversion and git services (Jira)
-
[jira] [Work logged] (KNOX-3456) Enforce canActFor.groups in delegation policy via Knox LDAP group lookup
ASF GitHub Bot (Jira)
-
[PR] KNOX-3456: resolve canActFor.groups via KnoxLDAPService group lookup, failing with server_error when LDAP is unavailable [knox]
via GitHub
-
[jira] [Work logged] (KNOX-3459) Honor delegation policy tokenTtlSec override when minting exchanged tokens
ASF GitHub Bot (Jira)
-
[PR] KNOX-3459: honor delegation policy tokenTtlSec as the minted token's expiry basis [knox]
via GitHub
-
[jira] [Work logged] (KNOX-3458) Enforce a maximum actor-chain (act claim) depth in token exchange
ASF GitHub Bot (Jira)
-
[jira] [Created] (KNOX-3460) Audit all token-exchange flows including minted token fields
Sandor Molnar (Jira)
-
[PR] KNOX-3457: Remove unused delegation.requested.scope.enabled provider parameter [knox]
via GitHub
-
[jira] [Work logged] (KNOX-3457) Remove unused delegation.requested.scope.enabled provider parameter
ASF GitHub Bot (Jira)
-
[jira] [Commented] (KNOX-3441) Delegation policy enforcement in token RFC 8693 token exchange
ASF subversion and git services (Jira)
-
[jira] [Created] (KNOX-3459) Honor delegation policy tokenTtlSec override when minting exchanged tokens
Sandor Molnar (Jira)
-
[jira] [Created] (KNOX-3458) Enforce a maximum actor-chain (act claim) depth in token exchange
Sandor Molnar (Jira)
-
[jira] [Created] (KNOX-3457) Remove unused delegation.requested.scope.enabled provider parameter
Sandor Molnar (Jira)
-
[jira] [Created] (KNOX-3456) Enforce canActFor.groups in delegation policy via Knox LDAP group lookup
Sandor Molnar (Jira)
-
[jira] [Created] (KNOX-3455) CI Gate - Same-Subject Token Exchange End-to-End Tests Pass in Default CI Run
Sandor Molnar (Jira)
-
[jira] [Work logged] (KNOX-3441) Delegation policy enforcement in token RFC 8693 token exchange
ASF GitHub Bot (Jira)
-
[PR] KNOX-3441 - Add delegated token exchange (actor-token and headless) with policy enforcement and audit [knox]
via GitHub
-
[jira] [Created] (KNOX-3454) Add integration-test coverage that exercises the ClientCert authentication provider (X.509 principal extraction) behind inbound mTLS
Sandor Molnar (Jira)
-
[jira] [Work logged] (KNOX-3453) Ignore runtime-generated gateway-server/data/security directory in git
ASF GitHub Bot (Jira)
-
[jira] [Resolved] (KNOX-3445) KnoxIDF admin service stays disabled (Empty stub) when KNOXIDF_ADMIN topology is hot-deployed after gateway startup
Jira
-
[jira] [Resolved] (KNOX-3453) Ignore runtime-generated gateway-server/data/security directory in git
Sandor Molnar (Jira)
-
[jira] [Commented] (KNOX-3453) Ignore runtime-generated gateway-server/data/security directory in git
ASF subversion and git services (Jira)
-
[PR] KNOX-3453: Ignore runtime-generated gateway-server/data/security directory in git [knox]
via GitHub
-
[jira] [Resolved] (KNOX-3449) k8s delegation E2E: CI harness + same-subject exchange, TrustedOIDCIssuers admin API, and negative-path coverage
Sandor Molnar (Jira)
-
[jira] [Created] (KNOX-3453) Ignore runtime-generated gateway-server/data/security directory in git
Sandor Molnar (Jira)
-
[jira] [Commented] (KNOX-3449) k8s delegation E2E: CI harness + same-subject exchange, TrustedOIDCIssuers admin API, and negative-path coverage
ASF subversion and git services (Jira)
-
[jira] [Resolved] (KNOX-3443) Add unit test coverage for MimeTypes
Jira
-
[PR] KNOX-3449: Prove Knox accepts Kubernetes ServiceAccount tokens on the RFC 8693 token-exchange path [knox]
via GitHub
-
[jira] [Work logged] (KNOX-3445) KnoxIDF admin service stays disabled (Empty stub) when KNOXIDF_ADMIN topology is hot-deployed after gateway startup
ASF GitHub Bot (Jira)
-
[jira] [Commented] (KNOX-3446) Update NOTICE, CHANGES and version for 3.1.0
ASF subversion and git services (Jira)
-
[jira] [Work logged] (KNOX-3449) k8s delegation E2E: CI harness + same-subject exchange, TrustedOIDCIssuers admin API, and negative-path coverage
ASF GitHub Bot (Jira)
-
[jira] [Resolved] (KNOX-3446) Update NOTICE, CHANGES and version for 3.1.0
Jira
-
[jira] [Commented] (KNOX-3410) Improve KnoxToken enable/disable methods
ASF subversion and git services (Jira)
-
[PR] Knox 3445 [knox]
via GitHub
-
[jira] [Work logged] (KNOX-2900) KNOX-2899 followup - reenable service based discovery filter
ASF GitHub Bot (Jira)
-
[PR] KNOX-2900: KNOX-2899 followup - reenable service based discovery filter [knox]
via GitHub
-
[jira] [Created] (KNOX-3452) Add comprehensive unit tests for MimeTypes
Raghav Maheshwari (Jira)
-
[jira] [Commented] (KNOX-3444) Optimize CM discovery memory usage by only caching role configurations that ServiceModelGenerators actually use
ASF subversion and git services (Jira)
-
[jira] [Work logged] (KNOX-3452) Add comprehensive unit tests for MimeTypes
ASF GitHub Bot (Jira)
-
[PR] KNOX-3452: Add comprehensive unit tests for MimeTypes [knox]
via GitHub
-
[jira] [Work logged] (KNOX-3444) Optimize CM discovery memory usage by only caching role configurations that ServiceModelGenerators actually use
ASF GitHub Bot (Jira)
-
[PR] KNOX-3444: Optimize CM discovery memory usage by only caching role configurations that ServiceModelGenerators actually use [knox]
via GitHub
-
[jira] [Updated] (KNOX-3450) Add Transfer-Encoding to set of excluded headers in PassAllHeadersDispatch
Philip Zampino (Jira)
-
[jira] [Commented] (KNOX-3450) Add Transfer-Encoding to set of excluded headers in PassAllHeadersDispatch
ASF subversion and git services (Jira)
-
[jira] [Created] (KNOX-3449) k8s delegation E2E: CI harness + same-subject exchange, TrustedOIDCIssuers admin API, and negative-path coverage
Sandor Molnar (Jira)
-
[jira] [Work logged] (KNOX-3410) Improve KnoxToken enable/disable methods
ASF GitHub Bot (Jira)
-
[PR] KNOX-3410: Add unit tests for XForwardedHeaderRequestWrapper [knox]
via GitHub
-
[jira] [Work logged] (KNOX-3451) Add unit tests for XForwardedHeaderRequestWrapper
ASF GitHub Bot (Jira)
-
[PR] KNOX-3451: Add unit tests for XForwardedHeaderRequestWrapper [knox]
via GitHub
-
[jira] [Created] (KNOX-3451) Add unit tests for XForwardedHeaderRequestWrapper
Raghav Maheshwari (Jira)