[Geoserver-devel] GeoServer/GeoTools PMC Meeting at 18:30 CET / 9:30 PST tomorrow

2023-06-19 Thread Torben Barsballe 
Reminder that the next PMC meeting is scheduled for tomorrow, June 20, at
18:30

 CET.


Cheers,

Torben
___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

[Geoserver-devel] [JIRA] (GEOS-11037) Missing dependencies when assembling GeoServer

2023-06-19 Thread Samo Dadela (JIRA) via Geoserver-devel 
Samo Dadela ( 
https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=712020%3Ac5ea42fd-4c28-4c3e-afee-02bd7c5c8c5f
 ) *created* an issue

GeoServer ( 
https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiNzk5N2JmMzBlNGQ5NDAxYjg0Y2I3NTBhYmYzOTU2MDciLCJwIjoiaiJ9
 ) / Bug ( 
https://osgeo-org.atlassian.net/browse/GEOS-11037?atlOrigin=eyJpIjoiNzk5N2JmMzBlNGQ5NDAxYjg0Y2I3NTBhYmYzOTU2MDciLCJwIjoiaiJ9
 ) GEOS-11037 ( 
https://osgeo-org.atlassian.net/browse/GEOS-11037?atlOrigin=eyJpIjoiNzk5N2JmMzBlNGQ5NDAxYjg0Y2I3NTBhYmYzOTU2MDciLCJwIjoiaiJ9
 ) Missing dependencies when assembling GeoServer ( 
https://osgeo-org.atlassian.net/browse/GEOS-11037?atlOrigin=eyJpIjoiNzk5N2JmMzBlNGQ5NDAxYjg0Y2I3NTBhYmYzOTU2MDciLCJwIjoiaiJ9
 )

Issue Type: Bug Assignee: Unassigned Components: Community modules Created: 
19/Jun/23 5:18 PM Priority: Medium Reporter: Samo Dadela ( 
https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=712020%3Ac5ea42fd-4c28-4c3e-afee-02bd7c5c8c5f
 )

While investigating an issue with cog-plugin, it was found that GeoServer was 
missng google-cloud-storage as a dependency.

More details in the original issue: 
https://github.com/geosolutions-it/imageio-ext/issues/284#issuecomment-1597305185

( 
https://osgeo-org.atlassian.net/browse/GEOS-11037#add-comment?atlOrigin=eyJpIjoiNzk5N2JmMzBlNGQ5NDAxYjg0Y2I3NTBhYmYzOTU2MDciLCJwIjoiaiJ9
 ) Add Comment ( 
https://osgeo-org.atlassian.net/browse/GEOS-11037#add-comment?atlOrigin=eyJpIjoiNzk5N2JmMzBlNGQ5NDAxYjg0Y2I3NTBhYmYzOTU2MDciLCJwIjoiaiJ9
 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( 
https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail
 ) or iOS ( 
https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8
 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100227- 
sha1:8ffa416 )___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

[Geoserver-devel] [JIRA] (GEOS-11036) The OAuth2*/OIDC security filters do not work as expected anymore after the spring-security-core depencency update to 5.7.8

2023-06-19 Thread Alessio Fabiani (JIRA) via Geoserver-devel 
Alessio Fabiani ( 
https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A0027cfac-890c-48e1-8af0-974f12f7b9dc
 ) *created* an issue

GeoServer ( 
https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiOTlkN2MyMGM2MmE3NGZjNTgwZDMxZWRiYmM0MWYwMjgiLCJwIjoiaiJ9
 ) / Bug ( 
https://osgeo-org.atlassian.net/browse/GEOS-11036?atlOrigin=eyJpIjoiOTlkN2MyMGM2MmE3NGZjNTgwZDMxZWRiYmM0MWYwMjgiLCJwIjoiaiJ9
 ) GEOS-11036 ( 
https://osgeo-org.atlassian.net/browse/GEOS-11036?atlOrigin=eyJpIjoiOTlkN2MyMGM2MmE3NGZjNTgwZDMxZWRiYmM0MWYwMjgiLCJwIjoiaiJ9
 ) The OAuth2*/OIDC security filters do not work as expected anymore after the 
spring-security-core depencency update to 5.7.8 ( 
https://osgeo-org.atlassian.net/browse/GEOS-11036?atlOrigin=eyJpIjoiOTlkN2MyMGM2MmE3NGZjNTgwZDMxZWRiYmM0MWYwMjgiLCJwIjoiaiJ9
 )

Issue Type: Bug Assignee: Unassigned Created: 19/Jun/23 2:56 PM Priority: 
Medium Reporter: Alessio Fabiani ( 
https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A0027cfac-890c-48e1-8af0-974f12f7b9dc
 )

Recenty the sprinc-security-core dependency on GeoServer has been upgraded due 
to a security fix as per https://github.com/geoserver/geoserver/pull/6830

The upgrade introduced some issues into the Oauth2 security filter logic mainly 
due to the anonymous session token, which now is correctly valorized.

The filter assumes that an anoymous user is always associated to a null 
security context authority, which is wrong. Now an anonymous user will be 
associated to an AnonymousAuthortyToken, which will be also recognized by the 
spring-oauth2 plugin in order to perform additional checks on the oauth2 
resources.

A simple change into the logic checks can allow us to easily fix this behavior 
and benefit of the new spring security core improvement.

( 
https://osgeo-org.atlassian.net/browse/GEOS-11036#add-comment?atlOrigin=eyJpIjoiOTlkN2MyMGM2MmE3NGZjNTgwZDMxZWRiYmM0MWYwMjgiLCJwIjoiaiJ9
 ) Add Comment ( 
https://osgeo-org.atlassian.net/browse/GEOS-11036#add-comment?atlOrigin=eyJpIjoiOTlkN2MyMGM2MmE3NGZjNTgwZDMxZWRiYmM0MWYwMjgiLCJwIjoiaiJ9
 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( 
https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail
 ) or iOS ( 
https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8
 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100227- 
sha1:8ffa416 )___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Re: [Geoserver-devel] GeoServer 2.22.4 preflight testing

2023-06-19 Thread Jody Garnett 
 Peter:

Nice working with you yesterday, the blog post was reviewed and published,
and then edited a little bit afterwords also :)​

The last step is to email the user list and publish the geoserver blog.

I no longer have access to twitter GeoServerO account, if you would like to
do a personal announcement the GeoServerO account can pick it up and
retweet.
--
Jody Garnett


On Jun 18, 2023 at 5:20:22 PM, Jody Garnett  wrote:

> Release notes are ready for review:
> https://github.com/geoserver/geoserver.github.io/pull/153
>
> This is an unusual maintenance release in that it contains a new feature;
> please review wording etc
>
> These were generated with a new script; sadly the script did not link
> correctly to the jira tickets so there was some hand editing required :)
> --
> Jody Garnett
>
>
> On Jun 18, 2023 at 1:57:38 PM, Peter Smythe  wrote:
>
>> Tested successfully and we will now proceed to publishing the build.
>>
>> Peter
>>
>> On Sun, 18 Jun 2023 at 13:30, Peter Smythe  wrote:
>>
>>> Jody and I are busy with the 2.22.4 release.
>>>
>>> Artifacts are available for preflight testing:
>>> https://build.geoserver.org/view/release/job/geoserver-release-java8/1/artifact/distribution/2.22.4/
>>> 
>>>
>>> Peter
>>>
>> ___
>> Geoserver-devel mailing list
>> Geoserver-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>>
>
___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel