This is an automated email from the ASF dual-hosted git repository.
rmaucher pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git
from c2b1c9dab0 Explicitly state virtual host and SNI matching are separate
new cc591a12b9 Stop SSO session listeners accumulating on sessions by
re-keying the SSO entry on session ID change without registering an additional
listener
new 34315ac046 Guard SpnegoAuthenticator against missing JAAS/Kerberos
config files, handle the unchecked SecurityException they would cause and log
GSS ticket failures with the correct message
new 148faa4e1e Load statically configured ServerAuthModule classes via the
thread context (web application) class loader first, matching the pattern used
for AuthConfigProvider classes, so modules packaged in WEB-INF/lib are found
new a4be3f223e Document that a failure to create a persistent JASPIC
provider registration is deliberately fatal rather than silently skipped, since
skipping an authentication provider would fail open
new 3db6f341ed Initialize the ServerAuthModule before caching the
SingleModuleServerAuthContext so a failed initialization is not cached
permanently and can be re-attempted on next use
new 87ed9d47d4 Update the JASPIC client Subject only when password
validation succeeded (or was not requested), failing closed rather than adding
a principal derived from untrusted caller-supplied data when validation failed
new c817143f15 Store the JASPIC isMandatory MessageInfo property as a
Boolean as the specification requires rather than a String, and throw
IllegalArgumentException rather than NullPointerException when null is passed
to the MessageInfoImpl request/response message setters
The 7 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../catalina/authenticator/SingleSignOn.java | 9 +++++---
.../catalina/authenticator/SingleSignOnEntry.java | 14 ++++++++++++
.../authenticator/SpnegoAuthenticator.java | 26 +++++++++++++++++-----
.../jaspic/AuthConfigFactoryImpl.java | 11 ++++++++-
.../authenticator/jaspic/CallbackHandlerImpl.java | 14 ++++++++++--
.../authenticator/jaspic/MessageInfoImpl.java | 10 ++++-----
.../jaspic/SimpleServerAuthConfig.java | 11 ++++++++-
7 files changed, 77 insertions(+), 18 deletions(-)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
