Google Git Google Git
Sign in
apache/axis-axis2-java-rampart/HEAD
  1. 8a8e804 RAMPART-459: also record Error failures from OpenSAML init by Robert Lazarski · 6 days ago master
  2. 29d7754 RAMPART-459: record a failed OpenSAML init instead of retrying per message by Robert Lazarski · 6 days ago
  3. dbee750 bump bouncy castle to latest by Robert Lazarski · 9 days ago
  4. eb824bd RAMPART-460: allow a custom UsernameToken validator via RampartConfig by Robert Lazarski · 9 days ago
  5. 27344d9 Test that RahasData takes no identity from a bare BinarySecurityToken by Robert Lazarski · 13 days ago
  6. 37dd4b3 Fail rampart and rahas module init clearly when guava is missing by Robert Lazarski · 14 days ago
  7. 7267527 Ship guava in rampart-dist now that Axis2 2.0.2 no longer bundles it by Robert Lazarski · 14 days ago
  8. 6d19d99 RAMPART-459: initialise OpenSAML once instead of on every message by Robert Lazarski · 14 days ago
  9. d0d8ff8 Compare plaintext UsernameToken passwords and stop trusting bare BSTs by Robert Lazarski · 7 weeks ago
  10. 29a4863 Pin the sample ant builds to a Java 17 release by Robert Lazarski · 7 weeks ago
  11. b2cce44 RAMPART-44 / RAMPART-252: add a dedicated algorithm-downgrade test by Robert Lazarski · 4 months ago
  12. 0770108 RAMPART-44 / RAMPART-252: enforce the policy algorithm suite on inbound messages by Robert Lazarski · 4 months ago
  13. 205ae0c RAMPART-431: skip signing SignedParts headers that are absent from the message by Robert Lazarski · 4 months ago
  14. e9ccb68 RAMPART-411: add regression test for signing the BinarySecurityToken by Robert Lazarski · 4 months ago
  15. c8071ba Address RAMPART-427 review: document init trade-off, guard config parsing by Robert Lazarski · 4 months ago
  16. 8ce0aeb RAMPART-427: add the CLIENT_SIDE marker parameter race-free by Robert Lazarski · 4 months ago
  17. 977e51f RAMPART-428: harden the test XML parser against XXE by Robert Lazarski · 4 months ago
  18. 5346d2f RAMPART-428: apply the signed-element identity check to headers too by Robert Lazarski · 4 months ago
  19. 9d0abc1 RAMPART-428: validate the signed SOAP Body by identity, not by name by Robert Lazarski · 4 months ago
  20. e73ba38 RAMPART-371: cover the null-QName assertion case in RahasModuleTest by Robert Lazarski · 4 months ago
  21. 1c36bd0 RAMPART-371: rahas must report support for WS-SecurityPolicy assertions by Robert Lazarski · 4 months ago
  22. 8a43eb5 RAMPART-337: also retire expired tokens on SimpleTokenStore.update() by Robert Lazarski · 4 months ago
  23. 9b92fcd Add .claude to .gitignore by Robert Lazarski · 4 months ago
  24. cb60b2e CI: skip snapshot Deploy step when Nexus credentials are absent by Robert Lazarski · 4 months ago
  25. da0ff64 RAMPART-337: retire expired tokens from SimpleTokenStore to bound memory by Robert Lazarski · 4 months ago
  26. 62ffbcd Reconcile legal/ license files with the actual binary distribution by Robert Lazarski · 4 months ago
  27. c34fe61 Remove unused OWASP ESAPI dependency from rampart-trust by Robert Lazarski · 4 months ago
  28. eb70efe Release prep: refresh 2.0.0 release notes and NOTICE copyright year by Robert Lazarski · 4 months ago
  29. c2db725 Address Gemini review nits: enforcer comment + failIfNoTests safety net by Robert Lazarski · 4 months ago
  30. 08fd2e3 Use released Axis2 2.0.1, fix JDK 25 build, bump dependencies by Robert Lazarski · 4 months ago
  31. 772da3f Remove unverified WSS4J CVE IDs from history section by Robert Lazarski · 5 months ago
  32. b6065af Fix incorrect path for RampartUsernameTokenValidator by Robert Lazarski · 5 months ago
  33. f09f237 Address Gemini review findings for Glasswing threat model by Robert Lazarski · 5 months ago
  34. ffe2ef2 Add security threat model and AGENTS.md for Glasswing scan by Robert Lazarski · 5 months ago
  35. 4a54f02 Merge pull request #26 from apache/infrastructure-ruleset-bot/default-branch-protection by robertlazarski · 5 months ago
  36. 7280acc Set up default protection ruleset for default and release branches by The Apache Software Foundation · 5 months ago infrastructure-ruleset-bot/default-branch-protection
  37. 9164fac RAMPART-454 Document security / maintenance assumptions flagged by review by Robert Lazarski · 6 months ago
  38. 2f9f8a5 RAMPART-454 Align GitHub Actions CI with axis2-java-core by Robert Lazarski · 6 months ago
  39. d24a319 RAMPART-454 Refresh stale POM comment about OpenSAML xacml-saml pin by Robert Lazarski · 6 months ago
  40. bfe8f04 RAMPART-454 Refresh site docs for the 2.0.0 release by Robert Lazarski · 6 months ago
  41. 353ec6e RAMPART-454 Put servlet-api on the aggregator Javadoc classpath by Robert Lazarski · 6 months ago
  42. 50c80d3 RAMPART-454 Fix rampart-dist lib/ layout for OpenSAML 5 by Robert Lazarski · 6 months ago
  43. 8e4a0ca RAMPART-454 Bump build to JDK 17 baseline; refresh plugin and library versions by Robert Lazarski · 6 months ago
  44. 55f3274 RAMPART-454 Finish OpenSAML 5 / Axis2 2.0.x API migration in trust/integration by Robert Lazarski · 6 months ago
  45. aceacfe RAMPART-454 Upgrade OpenSAML from 4.3.2 to 5.2.1 by Robert Lazarski · 6 months ago
  46. 34f6918 RAMPART-454 Upgrade to Axis2 2.0.1-SNAPSHOT + Axiom 2.0.0 (Jakarta) by Robert Lazarski · 6 months ago
  47. 93e0883 Merge pull request #23 from apache/cortlepp/unify-log4j-deps by Christian Ortlepp · 7 months ago
  48. 8f5b196 chore: unify log4j deps and update them by Christian Ortlepp · 7 months ago cortlepp/unify-log4j-deps
  49. bf158ea Merge remote-tracking branch 'origin/dependabot/maven/modules/distribution/org.apache.logging.log4j-log4j-core-2.25.3' into cortlepp/unify-log4j-deps by Christian Ortlepp · 7 months ago
  50. 771370d Merge remote-tracking branch 'origin/dependabot/maven/org.apache.logging.log4j-log4j-core-2.25.3' into cortlepp/unify-log4j-deps by Christian Ortlepp · 7 months ago
  51. 43d0528 Merge pull request #22 from apupier/patch-1 by Christian Ortlepp · 7 months ago
  52. 91d0fcc Use new shibboleth Maven repository URL by Aurélien Pupier · 7 months ago
  53. 47c186f Bump org.apache.logging.log4j:log4j-core from 2.18.0 to 2.25.3 by dependabot[bot] · 10 months ago
  54. 24370d4 Bump org.apache.logging.log4j:log4j-core in /modules/distribution by dependabot[bot] · 10 months ago
  55. ec1727a Fix github actions by Robert Lazarski · 12 months ago
  56. 89f9758 Merge pull request #19 from apache/dependabot/maven/commons-fileupload-commons-fileupload-1.6.0 by robertlazarski · 12 months ago
  57. 47a984d Big update to fix samples 1 thru 9. Also fix or remove a bunch of old http links by Robert Lazarski · 12 months ago
  58. 74b1038 Add release notes for 2.0.0 by Robert Lazarski · 1 year ago
  59. 6b137e2 Bump commons-fileupload:commons-fileupload from 1.5 to 1.6.0 by dependabot[bot] · 1 year, 4 months ago
  60. c69ea97 release doc updates by Robert Lazarski · 1 year, 8 months ago
  61. 77a6e2a Release documentation updates by Robert Lazarski · 1 year, 11 months ago
  62. 7add69c [maven-release-plugin] prepare for next development iteration by Robert Lazarski · 1 year, 11 months ago
  63. d0546ce [maven-release-plugin] prepare release v1.8.0 by Robert Lazarski · 1 year, 11 months ago v1.8.0
  64. f7c31c7 dev guide updates by Robert Lazarski · 1 year, 11 months ago
  65. 69449bc Update legal dir by Robert Lazarski · 1 year, 11 months ago
  66. fea0391 Update legal dir, and some dev guide updates by Robert Lazarski · 1 year, 11 months ago
  67. 35297c2 Update legal dir, and some dev guide updates by Robert Lazarski · 1 year, 11 months ago
  68. 463f7b2 Release prep by Robert Lazarski · 1 year, 11 months ago
  69. 1ded480 site-deploy is not finding our JavaDoc, so fix that with some maven-resources-plugin config by Robert Lazarski · 2 years ago
  70. 5ff658f More release cleanup by Robert Lazarski · 2 years ago
  71. 5ffdf8b Release cleanup and docs, link to JavaDoc via apidocs needs to be fixed still by Robert Lazarski · 2 years ago
  72. 50b0f02 Release cleanup and docs, link to JavaDoc via apidocs needs to be fixed still by Robert Lazarski · 2 years ago
  73. 3348434 Update Ant to latest by Robert Lazarski · 2 years ago
  74. 3a74327 RampartEngine fixes by Robert Lazarski · 2 years ago
  75. add45b8 Release notes update by Robert Lazarski · 2 years ago
  76. 32f00ce RAMPART-234 Allow custom https listeners to populate the client certificate chain in the message context by Robert Lazarski · 2 years ago
  77. f8dcc74 RAMPART-234 Allow custom https listeners to populate the client certificate chain in the message context by Robert Lazarski · 2 years ago
  78. b0f0096 RAMPART-335 X509V3 KeyIdentifier cannot be set dynmaically by Robert Lazarski · 2 years ago
  79. 1d69f56 RAMPART-261 Ability to Toggle mustUnderstand flag in security header by Robert Lazarski · 2 years ago
  80. 7cc7075 RAMPART-396 NullPointerException using STS, Trust and entropy by Robert Lazarski · 2 years ago
  81. 01a401c RAMPART-396 NullPointerException using STS, Trust and entropy by Robert Lazarski · 2 years ago
  82. 5bef642 RAMPART-420 Allow WS-Security timestamps to be spoofed and BSP checking disabled by Robert Lazarski · 2 years ago
  83. f7d0025 RAMPART-420 Allow WS-Security timestamps to be spoofed and BSP checking disabled by Robert Lazarski · 2 years ago
  84. fef676d RAMPART-420 Allow WS-Security timestamps to be spoofed and BSP checking disabled by Robert Lazarski · 2 years ago
  85. 6d85d98 RAMPART-437 SHA256 not supported for DigestAlgorithm for TransportBinding when specified correctly in policy.xml by Robert Lazarski · 2 years ago
  86. 5136d7b RAMPART-205, RAMPART-361, RAMPART-432, RAMPART-435 Add some customization to WSS4J RequestData via optional parameters in Options and RampartConfig by Robert Lazarski · 2 years ago
  87. a41a08e RAMPART-205, RAMPART-361, RAMPART-432, RAMPART-435 Add some customization to WSS4J RequestData via optional parameters in Options and RampartConfig by Robert Lazarski · 2 years ago
  88. 206965a RAMPART-448 NullPointerException in RampartUtil.setKeyIdentifierType() when signing response by Robert Lazarski · 2 years ago
  89. 0c00063 RAMPART-448 NullPointerException in RampartUtil.setKeyIdentifierType() when signing response by Robert Lazarski · 2 years ago
  90. c6d3aa3 RAMPART-325 NullPointerException with UsernameToken Policy and MTOM Policy without Rampart Config in WSDL by Robert Lazarski · 2 years ago
  91. c1f7692 RAMPART-425 Links not found by Robert Lazarski · 2 years ago
  92. 3f457fe RAMPART-432 Add disableBSPEnforcement to RampartConfig docs by Robert Lazarski · 2 years ago
  93. c4371bf RAMPART-432 Add a client and server way to set the WSS4J param disableBSPEnforcement. I need community help on a unit test, or more time to figure out one in a subsequent release by Robert Lazarski · 2 years ago
  94. 36e84d7 Fix pom.xml scm and distributionManagement tags by Robert Lazarski · 2 years ago
  95. a8f4591 Dep updates by Robert Lazarski · 2 years ago
  96. 4d779c5 Dep updates by Robert Lazarski · 2 years ago
  97. 4bf1c82 RAMPART-441 community patch on docs by Robert Lazarski · 2 years ago
  98. d53fe1b Test code cleanup by Robert Lazarski · 2 years ago
  99. 373ffca Sample typos by Robert Lazarski · 2 years ago
  100. fa2cae1 Fix source control links in developer-guide.xml by Robert Lazarski · 2 years ago