Google Git
Sign in
apache/cxf/HEAD
  1. 396096f Add a lock when revoking tokens (#3348) by Colm O hEigeartaigh · 22 hours ago main
  2. 61ca70f Fixing security versions by Colm O hEigeartaigh · 26 hours ago
  3. c95fb63 Make sure the refresh token client matches that of the authenticated client (#3346) by Colm O hEigeartaigh · 27 hours ago
  4. df57957 Check if tokens have been revoked first in DefaultEncryptingOAuthDataProvider (#3347) by Colm O hEigeartaigh · 27 hours ago
  5. e18116b Make sure LazyAttachmentCollection respects max attachment count in all cases (#3344) by Andriy Redko · 2 days ago
  6. 3df6120 Honor the set-remove boolean in DefaultEncryptingCodeDataProvider (#3345) by Colm O hEigeartaigh · 2 days ago
  7. dd9af5c match saml sso issuer exactly instead of by prefix (#3281) by Javid Khan · 2 days ago
  8. 7f4cb4e Disable JMS ObjectMessage deserialization by default (#3337) by Colm O hEigeartaigh · 3 days ago
  9. c040fef Bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3 (#3340) by dependabot[bot] · 3 days ago
  10. bd9f34a Bump github/codeql-action/init from 4.37.0 to 4.37.3 (#3339) by dependabot[bot] · 3 days ago
  11. 6db9f73 Bump actions/checkout from 7.0.0 to 7.0.1 (#3338) by dependabot[bot] · 3 days ago
  12. 1695c05 Default to sending binary JMS messages as BytesMessages from now on, make it configurable (#3325) by Colm O hEigeartaigh · 6 days ago
  13. 4aee04c Update Neethi to 3.2.3 (#3336) by Colm O hEigeartaigh · 6 days ago
  14. 4a3901b Update Jettison to 1.5.7 (#3335) by Colm O hEigeartaigh · 6 days ago
  15. 5ec1123 Fix ExecutorService leak in WS-RM oneway tests (#2963) by Guillaume Nodet · 6 days ago
  16. 26dc065 CXF-9223 - Disable audienceIsEndpointAddress on main only (#3332) by Colm O hEigeartaigh · 7 days ago
  17. 71ec1d3 CXF-9223 - Improve prefix matching for OAuth audience URIs (#3331) by Colm O hEigeartaigh · 7 days ago
  18. 10a34cb Bump com.puppycrawl.tools:checkstyle from 13.7.0 to 13.8.0 (#3329) by dependabot[bot] · 7 days ago
  19. 62623da Perform validation for OIDC self-issued tokens (#3327) by Colm O hEigeartaigh · 7 days ago
  20. faf40ba CXF-9225 - Enforce nonce for the hybrid case (#3328) by Colm O hEigeartaigh · 7 days ago
  21. eca4abb Bump org.graalvm.buildtools:native-maven-plugin from 1.1.4 to 1.1.5 (#3326) by dependabot[bot] · 8 days ago
  22. 4a2ec34 Validate redirect URIs according to OpenID Connect Dynamic Client Registration 1.0 specification (#3318) by Andriy Redko · 9 days ago
  23. ef597b0 Read WSDL imports through CXF's StaxUtils instead of WSDL4J (#3323) by Colm O hEigeartaigh · 9 days ago
  24. c1d7602 Bump org.graalvm.buildtools:native-maven-plugin from 1.1.3 to 1.1.4 (#3324) by dependabot[bot] · 9 days ago
  25. 0008935 For SAML, require that the TLS client certificate subject matches that of the SAML Assertion (#3322) by Colm O hEigeartaigh · 9 days ago
  26. 6061f35 Bump actions/setup-java from 5.5.0 to 5.6.0 (#3319) by dependabot[bot] · 10 days ago
  27. 924de91 Bump cxf.junit6.version from 6.1.1 to 6.1.2 (#3320) by dependabot[bot] · 10 days ago
  28. fd3cc5f Don't perpetuate security sensitive values from the JWT (#3317) by Colm O hEigeartaigh · 10 days ago
  29. 413d75e Enforce TLS client certificate and store the application certificates for dynamic registration (#3316) by Colm O hEigeartaigh · 10 days ago
  30. 0607af8 Make sure MessageContextImpl respects the limit to the maximum number of attachments to be collected (#3311) by Andriy Redko · 13 days ago
  31. c409f44 Filter claims by granted scopes for the IdToken case (#3304) by Colm O hEigeartaigh · 13 days ago
  32. 89e1fa8 Bump cxf.jackson.version from 3.2.0 to 3.2.1 (#3315) by dependabot[bot] · 13 days ago
  33. 1d6be7f Bump cxf.opentelemetry.version from 1.63.0 to 1.64.0 (#3314) by dependabot[bot] · 2 weeks ago
  34. 45685c0 Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38 (#3313) by dependabot[bot] · 2 weeks ago
  35. dad4249 Bump io.opentelemetry.semconv:opentelemetry-semconv (#3312) by dependabot[bot] · 2 weeks ago
  36. 7564c70 Bump github/codeql-action/analyze from 4.36.2 to 4.37.0 (#3308) by dependabot[bot] · 2 weeks ago
  37. 9ade17c Bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 (#3305) by dependabot[bot] · 2 weeks ago
  38. 29759b7 Bump actions/setup-java from 5.4.0 to 5.5.0 (#3309) by dependabot[bot] · 2 weeks ago
  39. 3682dd9 Bump org.hibernate.validator:hibernate-validator (#3306) by dependabot[bot] · 2 weeks ago
  40. da5edcc Add maxSize to BinaryDataProvider so the payload size could be constrained (to 1Gb by default) (#3301) by Andriy Redko · 3 weeks ago
  41. 16ac0e4 [CXF-9229] Add PQC TLS 1.3 support via X25519MLKEM768 hybrid KEM (#3299) by Freeman(Yue) Fang · 3 weeks ago
  42. 7a12ad6 Bump cxf.hibernate.em.version from 7.4.3.Final to 7.4.4.Final (#3302) by dependabot[bot] · 3 weeks ago
  43. 3fa2ffd Disallow a dynamic registration client from requesting scopes without validation (#3297) by Colm O hEigeartaigh · 3 weeks ago
  44. 2a508d5 Plug URIResolver into EndpointReferenceUtils (#3296) by Colm O hEigeartaigh · 3 weeks ago
  45. 8ab0d8b Fix bug with SAML clientAddress (#3298) by Colm O hEigeartaigh · 3 weeks ago
  46. 42fafe5 Put log messages and SOAP Fault messages to a resource bundle so that downstream intergations of CXF can hint about their own configuration parameters (#3300) by Peter Palaga · 3 weeks ago
  47. 40bbcd8 Update Jetty to 12.1.11 by Andriy Redko · 3 weeks ago
  48. db94503 Bump org.apache.camel.springboot:camel-spring-boot-dependencies (#3285) by dependabot[bot] · 3 weeks ago
  49. a364904 CXF-9230: Update to Spring Boot 4.1 release line (#3040) by Andriy Redko · 3 weeks ago
  50. 0cc2bca Bump cxf.tomcat.version from 11.0.23 to 11.0.24 (#3295) by dependabot[bot] · 3 weeks ago
  51. 6af78b8 Enforce that Access tokens only are accepted in JwtAccessTokenValidator (#3294) by Colm O hEigeartaigh · 3 weeks ago
  52. 2f715e9 Plug URIResolver into StaxUtils (#3293) by Colm O hEigeartaigh · 3 weeks ago
  53. ff845cc Bump org.eclipse.persistence:org.eclipse.persistence.moxy (#3286) by dependabot[bot] · 3 weeks ago
  54. d8009cd Set setReuseAddress on the test socket to try to reduce port conflicts (#3290) by Colm O hEigeartaigh · 3 weeks ago
  55. 64f8929 Switch AbstractJwtHandler to require that the subject = the client Id by default (#3291) by Colm O hEigeartaigh · 3 weeks ago
  56. c2c5619 Encode LDAP query parameter names as well (#3288) by Colm O hEigeartaigh · 3 weeks ago
  57. 5091883 Plug URIResolver into AttachmentUtil (#3289) by Colm O hEigeartaigh · 3 weeks ago
  58. 0b1e3f5 Update Netty to 4.2.16.Final by Andriy Redko · 3 weeks ago
  59. 12607f1 Bump com.puppycrawl.tools:checkstyle from 13.6.0 to 13.7.0 (#3287) by dependabot[bot] · 3 weeks ago
  60. f7275f8 Switch XML Security CryptoLoader to use URIResolver (#3280) by Colm O hEigeartaigh · 3 weeks ago
  61. 4d64e04 CXF-9226: AsyncHTTPConduit throws ISE instead of HTTPException(407) o… (#3255) by Freeman(Yue) Fang · 3 weeks ago
  62. 71a342c Bump org.apache.groovy:groovy from 5.0.6 to 5.0.7 (#3284) by dependabot[bot] · 3 weeks ago
  63. 280d014 Bump net.sourceforge.pmd:pmd-core from 7.25.0 to 7.26.0 (#3283) by dependabot[bot] · 3 weeks ago
  64. c9493ac Bump cxf.junit6.version from 6.1.0 to 6.1.1 (#3282) by dependabot[bot] · 3 weeks ago
  65. 93165c2 CXF-9161: Some of the OIDCFlowTest fail with timeout (JPA only) when HttpClient instance is shared (#3109) by Andriy Redko · 4 weeks ago
  66. 0ac9b4c Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.1 to 5.6.2 (#3275) by dependabot[bot] · 4 weeks ago
  67. 24a45ef Disable decoupled destinations by default for WS-Addressing (#3279) by Colm O hEigeartaigh · 4 weeks ago
  68. 07ed95f Bump io.github.littleproxy:littleproxy from 2.7.0 to 2.8.0 (#3276) by dependabot[bot] · 4 weeks ago
  69. 55ae305 Bump cxf.hibernate.em.version from 7.4.2.Final to 7.4.3.Final (#3278) by dependabot[bot] · 4 weeks ago
  70. 148c232 Bump io.undertow:undertow-core from 2.4.1.Final to 2.4.2.Final (#3273) by dependabot[bot] · 4 weeks ago
  71. 5f0655f Bump io.undertow.ee:undertow-servlet from 2.0.0.Final to 2.0.1.Final (#3271) by dependabot[bot] · 4 weeks ago
  72. 545e179 Bump ch.qos.logback:logback-classic from 1.5.36 to 1.5.37 (#3270) by dependabot[bot] · 4 weeks ago
  73. 2d192ac Enforce scheme checks for decoupled destinations (#3266) by Colm O hEigeartaigh · 4 weeks ago
  74. d36cff4 validate redirect origin in oidc rp sign-in completion (#3241) by Javid Khan · 4 weeks ago
  75. cc64851 Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.36 (#3268) by dependabot[bot] · 4 weeks ago
  76. b6df51f Bump org.graalvm.buildtools:native-maven-plugin from 1.1.2 to 1.1.3 (#3269) by dependabot[bot] · 4 weeks ago
  77. d41a915 Bump cxf.lucene.version from 10.4.0 to 10.5.0 (#3267) by dependabot[bot] · 4 weeks ago
  78. 62e6397 Bump org.hibernate.validator:hibernate-validator (#3263) by dependabot[bot] · 4 weeks ago
  79. ad1094b Bump cxf.activemq.artemis.version from 2.54.0 to 2.55.0 (#3264) by dependabot[bot] · 4 weeks ago
  80. de097db Bump org.apache.commons:commons-jexl3 from 3.6.3 to 3.6.4 (#3265) by dependabot[bot] · 4 weeks ago
  81. 68703ab Bump org.apache.httpcomponents.core5:httpcore5 from 5.4.2 to 5.4.3 (#3257) by dependabot[bot] · 4 weeks ago
  82. 6f8224e Respect the AsyncRequestProducer contract by properly implementing available() method (#3235) by Andriy Redko · 4 weeks ago
  83. 316973a [CXF-9227] Fix SecurityManager permission regressions introduced in 4.1.7 (#3256) by Freeman(Yue) Fang · 4 weeks ago
  84. a90163c Bump actions/setup-java from 5.3.0 to 5.4.0 (#3261) by dependabot[bot] · 4 weeks ago
  85. de02fdf Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.35 (#3259) by dependabot[bot] · 4 weeks ago
  86. 5ff8fcf Bump actions/cache from 5.0.5 to 6.1.0 (#3262) by dependabot[bot] · 4 weeks ago
  87. 99c2a32 Bump org.webjars:swagger-ui from 5.32.6 to 5.32.8 (#3258) by dependabot[bot] · 4 weeks ago
  88. d60925c CXF-9222 - Remove partialMatchScopeValidation for OAuth (#3254) by Colm O hEigeartaigh · 5 weeks ago
  89. da91116 Bump org.apache.commons:commons-jexl3 from 3.6.2 to 3.6.3 (#3253) by dependabot[bot] · 5 weeks ago
  90. a78daae Bump cxf.hibernate.em.version from 7.4.1.Final to 7.4.2.Final (#3252) by dependabot[bot] · 5 weeks ago
  91. 323c90f Bump org.apache.kerby:kerb-simplekdc from 2.1.1 to 2.1.2 (#3251) by dependabot[bot] · 5 weeks ago
  92. b2c370c Update cyclonedx-maven-plugin to 2.9.2 by Andriy Redko · 5 weeks ago
  93. ef1684d Update Swagger Core to 2.2.52 by Andriy Redko · 5 weeks ago
  94. d462fe0 CXF-9221: JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted (#3240) by Andriy Redko · 5 weeks ago
  95. c43be0c Removing 3.6.x from security support by Colm O hEigeartaigh · 5 weeks ago
  96. c82d4af Bump io.opentelemetry.semconv:opentelemetry-semconv (#3249) by dependabot[bot] · 5 weeks ago
  97. 97a0e42 Bump cxf.tomcat.version from 11.0.22 to 11.0.23 (#3248) by dependabot[bot] · 5 weeks ago
  98. 896b738 Bump actions/setup-java from 5.2.0 to 5.3.0 (#3242) by dependabot[bot] · 5 weeks ago
  99. d90b18e Bump actions/checkout from 6.0.3 to 7.0.0 (#3243) by dependabot[bot] · 5 weeks ago
  100. e0a357e Bump com.puppycrawl.tools:checkstyle from 13.5.0 to 13.6.0 (#3244) by dependabot[bot] · 5 weeks ago