Re: [Geoserver-devel] Serious unit testing issue: all modules with GUI run exactly 0 tests

2024-10-08 Thread David Blasby via Geoserver-devel
Hi, Andrea, Since there's only 4 pages that are having issues (3% test fails), I think it would be better to try to fix the test case than back-out the changes. I'll see if I can come to the GS meeting this morning. Dave On Tue, Oct 8, 2024 at 6:02 AM Andrea Aime < andrea.a...@geosolutionsgroup

Re: [Geoserver-devel] Status Update OAuth2 migration

2024-09-25 Thread David Blasby via Geoserver-devel
Geobeyond Srl accepts no liability for any damage caused by > any virus* > *transmitted by this email.* > *Geobeyond Srl may regularly and randomly monitor outgoing and incoming > emails* > *(including the content of them) and other telecommunications on its email* > *and t

Re: [Geoserver-devel] Status Update OAuth2 migration

2024-09-25 Thread David Blasby via Geoserver-devel
- I also decided to implement the OAuth2 Resource Server role, following Alessio’s response. This is working as well. However, after grepping through the codebase, I found the JWT Headers community module, which I believe has significant functional overlap with the OAuth2 Resource Server role. I as

Re: [Geoserver-devel] Milestone 2.26-M0 available for wicket9 testing

2024-08-27 Thread David Blasby via Geoserver-devel
Hi, Jody, I tried this and both work (2.26-M0 and the 2.25.3). I also see the CSP errors, but they are being reported instead of actually being refused (confusing wording in the console errors). Dave On Tue, Aug 27, 2024 at 9:04 PM Jody Garnett wrote: > Download artifacts are available: > >

Re: [Geoserver-devel] "ADMIN" vs "ROLE_ADMINISTRATOR"

2024-05-07 Thread David Blasby via Geoserver-devel
Hi, Here are my notes after the PMC meeting. After talking in the PMC meeting, a full-admin should have two roles; * ROLE_ADMINISTRATOR * ADMIN This is how the standard geoserver "admin" user is configured ("release" data dir). See the PMC meeting notes as well. No action for a while because

[Geoserver-devel] "ADMIN" vs "ROLE_ADMINISTRATOR"

2024-05-06 Thread David Blasby via Geoserver-devel
Hi, I was doing some testing for the JWT Headers SSO module, and noticed a problem when accessing the REST API. I've tracked this down to the roles "ADMIN" vs role "ROLE_ADMINISTRATOR". I believe (could be wrong) that the WEB uses the role "ROLE_ADMINISTRATOR", but the REST API uses the role "AD

Re: [Geoserver-devel] Error handling in Geoserver

2024-04-24 Thread David Blasby via Geoserver-devel
Hi, This looks like you are using the OIDC security module(s) and it’s having some issues. How did you add them? Thanks, Dave Sent from my iPhone > On Apr 24, 2024, at 1:47 PM, Roar Brænden wrote: > > Hi, > > I've started to look at the user interface of Geoserver, and wonder about the

Re: [Geoserver-devel] New Community Module - JWT Headers (security)

2024-02-22 Thread David Blasby via Geoserver-devel
It doesn't really depend on spring - just mostly via other GS classes like GeoServerPreAuthenticatedUserNameFilter. It uses a little spring to do some JWT-parsing/manipulation, so it would be easy to move to another library if the new spring doesn't support it. So, it shouldn't be an issue to mov

Re: [Geoserver-devel] New Community Module - JWT Headers (security)

2024-02-22 Thread David Blasby via Geoserver-devel
PR - https://github.com/geoserver/geoserver/pull/7440 On Thu, Feb 22, 2024 at 7:29 PM David Blasby wrote: > It doesn't really depend on spring - just mostly via other GS classes like > GeoServerPreAuthenticatedUserNameFilter. It uses a little spring to do > some JWT-parsing/manipulation, so it

Re: [Geoserver-devel] GeoServer 2.22.0 release artifacts ready for testing

2022-11-17 Thread David Blasby via Geoserver-devel
Hi, Andrea, Thanks for the release - I did some quick tests. a) I tried the bin release with both java 8 and java 11 on OSX with apple silicon (M1) b) I didnt see any issues I did some quick checks of the new base-map (World), and the new welcome page. I also note the changes to the sty

Re: [Geoserver-devel] Welcome page workspace/layer selection not working?

2022-10-03 Thread David Blasby via Geoserver-devel
Hi, I used -DGEOSERVER_CSRF_WHITELIST=localhost (NOTE: no port #. If you put a port# in - localhost:8111 - it will give you errors) This puts me in the same situation as before (i.e. when you save a configuration change it does save but then logs you out). Looking at the headers... REQUEST:

Re: [Geoserver-devel] Welcome page workspace/layer selection not working?

2022-10-03 Thread David Blasby via Geoserver-devel
Ok, in order to get apache to properly forward the session cookies to geoserver I needed to; ProxyPass "/dave/" "http://localhost:8080/geoserver/"; ProxyPassReverse "/dave/" "http://localhost:8080/geoserver/"; ProxyPassReverseCookiePath /geoserver / i.e. a cookie is send from geoserver (with path

Re: [Geoserver-devel] Welcome page workspace/layer selection not working?

2022-09-29 Thread David Blasby via Geoserver-devel
Hi, I setup apache (localhost:8111) with this; ProxyPass "/dave/" "http://localhost:8080/geoserver/"; ProxyPassReverse "/dave/" "http://localhost:8080/geoserver/"; This means that "localhost:8111/dave/web" takes me to the geoserver homepage (running on localhost:8080). Inside geoserver, I set t

Re: [Geoserver-devel] Welcome page workspace/layer selection not working?

2022-09-28 Thread David Blasby via Geoserver-devel
Andrea, I tried to reproduce this and found some more issues; a) I couldn't "cd web/app; mvn jetty:run" * I get a nullpointerexception - likely because there's no settings in global.xml * i used data/release and it worked fine b) When I proxied geoserver, I couldn't save most configur

Re: [Geoserver-devel] [JIRA] (GEOS-10351) [GSIP 206] Promote GeoPackage WFS and WMS output formats to an extension

2022-01-14 Thread David Blasby via Geoserver-devel
Andreas, The fix for GEOT-7011 is here; https://github.com/geotools/geotools/pull/3740 If you have the time, please review. Thanks, David On Tue, Jan 11, 2022 at 11:05 PM Andreas Matheus / Secure Dimensions < a...@secure-dimensions.de> wrote: > Hi Jody, > > > > That is great! Could you please