Re: [Geoserver-devel] Status Update OAuth2 migration

Geobeyond Srl accepts no liability for any damage caused by > any virus* > *transmitted by this email.* > *Geobeyond Srl may regularly and randomly monitor outgoing and incoming > emails* > *(including the content of them) and other telecommunications on its email* > *and t

Re: [Geoserver-devel] Status Update OAuth2 migration

- I also decided to implement the OAuth2 Resource Server role, following Alessio’s response. This is working as well. However, after grepping through the codebase, I found the JWT Headers community module, which I believe has significant functional overlap with the OAuth2 Resource Server role. I as

Re: [Geoserver-devel] Milestone 2.26-M0 available for wicket9 testing

Hi, Jody, I tried this and both work (2.26-M0 and the 2.25.3). I also see the CSP errors, but they are being reported instead of actually being refused (confusing wording in the console errors). Dave On Tue, Aug 27, 2024 at 9:04 PM Jody Garnett wrote: > Download artifacts are available: > >

[Geoserver-devel] Wicket and JS (and content-security-policy)

Hi, I was recently reviewing one of the PR (#7154 - "Wicket 9 upgrade"). This looks like its brought in some changes WRT content-security-policy - which has some implications for wicket-with-javascript. I loaded the GS homepage, and I got a content-security-policy issue about some javascript. T

Re: [Geoserver-devel] "ADMIN" vs "ROLE_ADMINISTRATOR"

b.com/geoserver/geoserver/blob/fb441eefa631a2f66b31b62c6811e44517493b2c/src/main/src/main/java/org/geoserver/security/GeoServerSecurityManager.java#L2047 Thanks, Dave On Mon, May 6, 2024 at 5:23 PM David Blasby wrote: > Hi, > > I was doing some testing for the JWT Headers SSO module, and noti

[Geoserver-devel] "ADMIN" vs "ROLE_ADMINISTRATOR"

Hi, I was doing some testing for the JWT Headers SSO module, and noticed a problem when accessing the REST API. I've tracked this down to the roles "ADMIN" vs role "ROLE_ADMINISTRATOR". I believe (could be wrong) that the WEB uses the role "ROLE_ADMINISTRATOR", but the REST API uses the role "AD

Re: [Geoserver-devel] Error handling in Geoserver

Hi, This looks like you are using the OIDC security module(s) and it’s having some issues. How did you add them? Thanks, Dave Sent from my iPhone > On Apr 24, 2024, at 1:47 PM, Roar Brænden wrote: > > Hi, > > I've started to look at the user interface of Geoserver, and wonder about the

Re: [Geoserver-devel] New Community Module - JWT Headers (security)

nned; so > the community module will need to be rewritten before becoming an > extension; or did you just stick to spring-security core? > > I would like to get your PR in promptly so the docs are picked up in > mkdocs migration. > -- > Jody Garnett > > > On Feb 22, 2024 at

Re: [Geoserver-devel] New Community Module - JWT Headers (security)

PR - https://github.com/geoserver/geoserver/pull/7440 On Thu, Feb 22, 2024 at 7:29 PM David Blasby wrote: > It doesn't really depend on spring - just mostly via other GS classes like > GeoServerPreAuthenticatedUserNameFilter. It uses a little spring to do > some JWT-parsing/manip

[Geoserver-devel] New Community Module - JWT Headers (security)

Hi, This is a request to create a new community module. This is a fairly simple security module for header-based OAUTH2/OIDC type authentication - for example Apache mod_auth_openid and robot-base-access with JWT Access Tokens. New functionality: 1. Extract user name from a JSON header (includi

[Geoserver-devel] [JIRA] (GEOS-10792) acceptVersions negotiation isn't working with WCS

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiODBkMmI0M2U3NjkzNDg3NGI5NjliNTBlZjAyNzMzYTciLCJwIjoiaiJ9 ) / Sub-task ( https://osgeo

[Geoserver-devel] [JIRA] (GEOS-10788) CITE WCS 1.1.1 - More Specific Exception for RangeSubset - FieldSubset/InterpolationMethod

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiNmM0ZGU2OGIxMDRmNDQ0NGFiY2FkMDczMDkxYmZiYjciLCJwIjoiaiJ9 ) / Sub-task ( https://osgeo

[Geoserver-devel] [JIRA] (GEOS-10787) CITE WCS 1.1.1 - Throw exception on bad 'store' parameter

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiNWQ0MGI2ZDRhMWVjNDBmM2E4NzU4OTY1NjBkYzAxZDgiLCJwIjoiaiJ9 ) / Sub-task ( https://osgeo

[Geoserver-devel] [JIRA] (GEOS-10786) Cannot lock Customized FeatureTypes

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiOTI2YzA5ZTU1MzUwNDFmZjkwYzdhMWIwMTIzMTBhYzYiLCJwIjoiaiJ9 ) / Bug ( https://osgeo

[Geoserver-devel] [JIRA] (GEOS-10785) CITE WFS 1.1 - Data Dir - allow anonymous users to modify data

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiYjA2ZjA5MjVhMjc4NDdiZGEzOGRmZTc1Y2Y1YWQ4M2MiLCJwIjoiaiJ9 ) / Sub-task ( https://osgeo

[Geoserver-devel] [JIRA] (GEOS-10784) CITE WFS 1.1 - don't do illegal geometry conversions

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiOWI2YTg1MTE1NTM2NGVhODhkYjg5NzdlYmYxMWM5ZDciLCJwIjoiaiJ9 ) / Sub-task ( https://osgeo

[Geoserver-devel] [JIRA] (GEOS-10783) CITE WFS 1.1 - unable to lock features

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiNGZlOTNlMDAxOTcwNDA3ZmFlMGU2ZTJkMWI5OWJjYjkiLCJwIjoiaiJ9 ) / Sub-task ( https://osgeo

[Geoserver-devel] [JIRA] (GEOS-10782) CITE WFS 1.1 - HITS mimetype is incorrect

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiYjFmZWJmZTBkNTJkNDE5NDhlOTBjNDc1YmY2YzQ3YTAiLCJwIjoiaiJ9 ) / Sub-task ( https://osgeo

[Geoserver-devel] [JIRA] (GEOS-10764) CITE tests do not run

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiOTk0MGZjNGUxMGYyNDg3YjlkYzgyMTIwZGEzMDU4ZGYiLCJwIjoiaiJ9 ) / Bug ( https://osgeo

[Geoserver-devel] [JIRA] (GEOS-10757) CITE: WMS

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiODFiNTRjNzAxYTA2NDg0OTgwOWQwNTQyMTczNmJhMTgiLCJwIjoiaiJ9 ) / Bug ( https://osgeo

Re: [Geoserver-devel] GeoServer 2.22.0 release artifacts ready for testing

styles page as well as the logging. Thanks, Dave https://www.geocat.net David Blasby  Mobile:  E-mail: david.bla...@geocat.net https://www.geocat.net Veenderweg 13 6721 WD Bennekom The Netherlands Tel: +31318416664 # On Thu, 17 Nov 2022 10:29:23

[Geoserver-devel] [JIRA] (GEOS-10738) Better logging for OIDC

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiNjFkMGNiYTJkNjM5NDk2MmIwMGI0M2U4ZWQzYzk0Y2MiLCJwIjoiaiJ9 ) / Improvement ( https://osgeo

[Geoserver-devel] [JIRA] (GEOS-10715) Workspace Filter for PublishedInfo doesn't work for LayerGroups

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiNjE1OWQ0ZDk0ODMwNDk1MWI0YTg0OWU2ZDY0YmM3ZGMiLCJwIjoiaiJ9 ) / Bug ( https://osgeo

Re: [Geoserver-devel] Welcome page workspace/layer selection not working?

ge.png] > > [image: image.png] > > Alessandro > > On Fri, Sep 30, 2022 at 4:29 AM David Blasby > wrote: > >> Hi, >> >> I setup apache (localhost:8111) with this; >> >> ProxyPass "/dave/" "http://localhost:8080/geoserver/"

Re: [Geoserver-devel] Welcome page workspace/layer selection not working?

I think it would be better to be "ProxyPassReverseCookiePath /geoserver /dave", but the above works. End result - now you can make config changes in GS and you're not logged out. Will look at the welcome page issue - thanks for the help! Dave On Mon, Oct 3, 2022 at 9:22 AM Davi

Re: [Geoserver-devel] Welcome page workspace/layer selection not working?

l honestly.. we're using >> Nginx with an explicitly set PROXY_BASE_URL: >> >> [image: image.png] >> >> And we are passing the X-Forwarded-** headers from Nginx to GeoServer. >> That info should be used by GeoServer to understand >> what protocol

[Geoserver-devel] [JIRA] (GEOS-10678) "cd web/app; mvn jetty:run" doesn't work

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiMWQzMjFiOGI1MWEwNDI4YjgxNmI0OWU4NjY0MDgzMTUiLCJwIjoiaiJ9 ) / Bug ( https://osgeo

Re: [Geoserver-devel] Welcome page workspace/layer selection not working?

Andrea, I tried to reproduce this and found some more issues; a) I couldn't "cd web/app; mvn jetty:run" * I get a nullpointerexception - likely because there's no settings in global.xml * i used data/release and it worked fine b) When I proxied geoserver, I couldn't save most configur

[Geoserver-devel] [JIRA] (GEOS-10646) Community OAuth2 OpenID Connect - improvements for bearer tokens

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiNTA0YzFhNzA2MzE0NDg0OWJmYjQyYjZkYzdmMGNhOTQiLCJwIjoiaiJ9 ) / Improvement ( https://osgeo

[Geoserver-devel] [JIRA] (GEOS-10536) OAUTH2 Open ID Connect Community module - doesn't support keycloak

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiNzAzNWMyOGRhNmM5NGY3YzlkOTZlOWQyMTA3ZDdlOGMiLCJwIjoiaiJ9 ) / Improvement ( https://osgeo

Re: [Geoserver-devel] [JIRA] (GEOS-10351) [GSIP 206] Promote GeoPackage WFS and WMS output formats to an extension

Andreas, The fix for GEOT-7011 is here; https://github.com/geotools/geotools/pull/3740 If you have the time, please review. Thanks, David On Tue, Jan 11, 2022 at 11:05 PM Andreas Matheus / Secure Dimensions < a...@secure-dimensions.de> wrote: > Hi Jody, > > > > That is great! Could you please

[Geoserver-devel] [JIRA] (GEOS-9980) MA

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiNzc0Y2NlYmNlNTY5NDRmZjg2ODA2M2E0NzlmNDMyMzYiLCJwIjoiaiJ9 ) / Bug ( https://osgeo

Re: [Geoserver-devel] GeoServer 2.17.1 release planning

Jody, Please include; https://github.com/geoserver/geoserver/pull/4257 Thanks, David On Fri, May 22, 2020 at 11:51 AM Jody Garnett wrote: > I would like to start, the release process over the weekend. > > The oracle jdoc driver upgrade > came

[Geoserver-devel] [JIRA] (GEOS-9627) vector tiles - buffer around tile is too small

David Blasby ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5850b0e7724a0e726439a4 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiYzVkNGEwNDZkZmY5NGNmYjk5NDRjMTQ4ZjFlNjE0ZmIiLCJwIjoiaiJ9 ) / Bug ( https://osgeo

[Geoserver-devel] [JIRA] (GEOS-8236) VT: When a Style has no active rules, incorrect query is sent to the data source

Title: Message Title David Blasby created

[Geoserver-devel] [JIRA] (GEOS-8071) CapabilitiesCacheHeadersCallback - caches getcap inappropriately (Time Series)

Title: Message Title David Blasby created

[Geoserver-devel] [JIRA] (GEOS-7844) importer - use the DS high-level API

Title: Message Title David Blasby created

[Geoserver-devel] [JIRA] (GEOS-7840) VT: incorrect version of java-vector-tiles is being pulled in (1.0.8 vs 1.0.9)

Title: Message Title David Blasby created

[Geoserver-devel] [JIRA] (GEOS-7608) ModuleStatus: ModuleStatusImpl doesn't record state for isEnabled or isAvailable

Title: Message Title David Blasby created

[Geoserver-devel] [JIRA] (GEOS-7567) Improvements to module status

Title: Message Title David Blasby created

[Geoserver-devel] [JIRA] (GEOS-7560) LibJPEGTurbo on OS X: library loading issue

Title: Message Title David Blasby created

[Geoserver-devel] [JIRA] (GEOS-7557) VectorTiles: Clipping produces degenerative geometries

Title: Message Title David Blasby created

[Geoserver-devel] [JIRA] (GEOS-7522) VectorTiles: MVP external library is doing improper clipping.

Title: Message Title David Blasby created

[Geoserver-devel] [JIRA] (GEOS-7502) Login issues: get 404 when not logging in from main page

Title: Message Title David Blasby created

[Geoserver-devel] [JIRA] (GEOS-7282) Script-Core: test cases are not passing

Title: Message Title David Blasby created an issue

[Geoserver-devel] [JIRA] (GEOS-7281) WPS - No Argument Process doesn't enter RUNNING state

Title: Message Title David Blasby created an issue