This is an automated email from the ASF dual-hosted git repository.
rmaucher pushed a change to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
from 4cb3350640 Explicitly state virtual host and SNI matching are separate
new bddc438852 Stop SSO session listeners accumulating on sessions by
re-keying the SSO entry on session ID change without registering an additional
listener
new 0cfcb70054 Guard SpnegoAuthenticator against missing JAAS/Kerberos
config files, handle the unchecked SecurityException they would cause and log
GSS ticket failures with the correct message
new 37874803ac Load statically configured ServerAuthModule classes via the
thread context (web application) class loader first, matching the pattern used
for AuthConfigProvider classes, so modules packaged in WEB-INF/lib are found
new 03ccbe29bd Document that a failure to create a persistent JASPIC
provider registration is deliberately fatal rather than silently skipped, since
skipping an authentication provider would fail open
new 0cfb0ebd97 Initialize the ServerAuthModule before caching the
SingleModuleServerAuthContext so a failed initialization is not cached
permanently and can be re-attempted on next use
new 573a4697a7 Update the JASPIC client Subject only when password
validation succeeded (or was not requested), failing closed rather than adding
a principal derived from untrusted caller-supplied data when validation failed
new d852152140 Store the JASPIC isMandatory MessageInfo property as a
Boolean as the specification requires rather than a String, and throw
IllegalArgumentException rather than NullPointerException when null is passed
to the MessageInfoImpl request/response message setters
The 7 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../catalina/authenticator/SingleSignOn.java | 9 +++++---
.../catalina/authenticator/SingleSignOnEntry.java | 14 ++++++++++++
.../authenticator/SpnegoAuthenticator.java | 26 +++++++++++++++++-----
.../jaspic/AuthConfigFactoryImpl.java | 11 ++++++++-
.../authenticator/jaspic/CallbackHandlerImpl.java | 14 ++++++++++--
.../authenticator/jaspic/MessageInfoImpl.java | 10 ++++-----
.../jaspic/SimpleServerAuthConfig.java | 11 ++++++++-
7 files changed, 77 insertions(+), 18 deletions(-)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
