[jira] [Work logged] (KNOX-3039) IP Address Exposure in HTTP 500 Error Message

2024-06-06 Thread ASF GitHub Bot (Jira)
[ https://issues.apache.org/jira/browse/KNOX-3039?focusedWorklogId=922367&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-922367 ] ASF GitHub Bot logged work on KNOX-3039: Author: ASF GitHub Bot

Re: [PR] KNOX-3039 Add error message sanitization to GatewayServlet [knox]

2024-06-06 Thread via GitHub
kardolus commented on PR #914: URL: https://github.com/apache/knox/pull/914#issuecomment-2152733663 @moresandeep I think that is a great idea! I will start a discussion on the Apache mailing list to explore implementing custom 4xx and 5xx error pages. -- This is an automated message from

[jira] [Work logged] (KNOX-3039) IP Address Exposure in HTTP 500 Error Message

2024-06-06 Thread ASF GitHub Bot (Jira)
[ https://issues.apache.org/jira/browse/KNOX-3039?focusedWorklogId=922354&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-922354 ] ASF GitHub Bot logged work on KNOX-3039: Author: ASF GitHub Bot

Re: [PR] KNOX-3039 Add error message sanitization to GatewayServlet [knox]

2024-06-06 Thread via GitHub
moresandeep commented on PR #914: URL: https://github.com/apache/knox/pull/914#issuecomment-2152660341 It would be nice to have a 4xx and 5xx page for errors. So instead of showing the ugly page with an exception we can show a custom page with a UUID corresponding the the error. This UUID w

[jira] [Work logged] (KNOX-3039) IP Address Exposure in HTTP 500 Error Message

2024-06-06 Thread ASF GitHub Bot (Jira)
[ https://issues.apache.org/jira/browse/KNOX-3039?focusedWorklogId=922351&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-922351 ] ASF GitHub Bot logged work on KNOX-3039: Author: ASF GitHub Bot

Re: [PR] KNOX-3039 Add error message sanitization to GatewayServlet [knox]

2024-06-06 Thread via GitHub
kardolus commented on PR #914: URL: https://github.com/apache/knox/pull/914#issuecomment-2152623061 @moresandeep @pzampino Now that we made the pattern configurable, I am wondering if it should be an array. I mean, now that you can create patterns for [IP addresses](https://github.com/kard

[jira] [Work logged] (KNOX-3040) Support multiple ways to verify JWT tokens

2024-06-06 Thread ASF GitHub Bot (Jira)
[ https://issues.apache.org/jira/browse/KNOX-3040?focusedWorklogId=922350&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-922350 ] ASF GitHub Bot logged work on KNOX-3040: Author: ASF GitHub Bot

[PR] KNOX-3040 - Support multiple ways to verify JWT tokens [knox]

2024-06-06 Thread via GitHub
moresandeep opened a new pull request, #915: URL: https://github.com/apache/knox/pull/915 ## What changes were proposed in this pull request? This PR adds the ability to validate a JWT token using multiple ways at the same time. Previously, we could only authenticate JWT token using **eit

[jira] [Work logged] (KNOX-3039) IP Address Exposure in HTTP 500 Error Message

2024-06-06 Thread ASF GitHub Bot (Jira)
[ https://issues.apache.org/jira/browse/KNOX-3039?focusedWorklogId=922348&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-922348 ] ASF GitHub Bot logged work on KNOX-3039: Author: ASF GitHub Bot

Re: [PR] KNOX-3039 Add error message sanitization to GatewayServlet [knox]

2024-06-06 Thread via GitHub
kardolus commented on code in PR #914: URL: https://github.com/apache/knox/pull/914#discussion_r1629596054 ## gateway-server/src/main/java/org/apache/knox/gateway/GatewayServlet.java: ## @@ -277,4 +278,34 @@ public Enumeration getInitParameterNames() { return config.getIn