This is an automated email from the ASF dual-hosted git repository.
rmaucher pushed a change to branch 11.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
from 5e9a552f97 Explicitly state virtual host and SNI matching are separate
new 14e23625a6 Stop SSO session listeners accumulating on sessions by
re-keying the SSO entry on session ID change without registering an additional
listener
new d0a0db635c Guard SpnegoAuthenticator against missing JAAS/Kerberos
config files, handle the unchecked SecurityException they would cause and log
GSS ticket failures with the correct message
new 0109e76b8d Load statically configured ServerAuthModule classes via the
thread context (web application) class loader first, matching the pattern used
for AuthConfigProvider classes, so modules packaged in WEB-INF/lib are found
new 39d7f9f221 Document that a failure to create a persistent JASPIC
provider registration is deliberately fatal rather than silently skipped, since
skipping an authentication provider would fail open
new 459545016e Initialize the ServerAuthModule before caching the
SingleModuleServerAuthContext so a failed initialization is not cached
permanently and can be re-attempted on next use
new 2809b1d8c2 Update the JASPIC client Subject only when password
validation succeeded (or was not requested), failing closed rather than adding
a principal derived from untrusted caller-supplied data when validation failed
new 4c55e09d78 Store the JASPIC isMandatory MessageInfo property as a
Boolean as the specification requires rather than a String, and throw
IllegalArgumentException rather than NullPointerException when null is passed
to the MessageInfoImpl request/response message setters
The 7 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../catalina/authenticator/SingleSignOn.java | 9 +++++---
.../catalina/authenticator/SingleSignOnEntry.java | 14 ++++++++++++
.../authenticator/SpnegoAuthenticator.java | 26 +++++++++++++++++-----
.../jaspic/AuthConfigFactoryImpl.java | 11 ++++++++-
.../authenticator/jaspic/CallbackHandlerImpl.java | 14 ++++++++++--
.../authenticator/jaspic/MessageInfoImpl.java | 10 ++++-----
.../jaspic/SimpleServerAuthConfig.java | 11 ++++++++-
7 files changed, 77 insertions(+), 18 deletions(-)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
