Google Git
Sign in
apache/knox/HEAD
  1. 9522a5b KNOX-3421 - Upgrade Shiro to 2.2.1 (#1353) by Sandeep Moré · 7 hours ago master
  2. 114af08 KNOX-3278: Update JLine to 3.30.6 (#1181) by bonampak · 2 days ago
  3. d036056 KNOX-3394: Correct outdated unittest documentation in Docker Compose integration test README (#1324) by Raghav Maheshwari · 5 days ago
  4. 3c3f3b5 Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.6.3 (#1350) by dependabot[bot] · 5 days ago
  5. b4b657f Bump org.apache.httpcomponents.core5:httpcore5 from 5.3.6 to 5.4.3 (#1347) by dependabot[bot] · 5 days ago
  6. f0a5c94 Knox as an OAuth 2.0 / OpenID Connect Provider (KnoxIDF) (#1351) by Sandor Molnar · 7 days ago
  7. de71a60 KNOX-3418: Path traversal → arbitrary file write/overwrite in the Apache Knox Admin API (#1349) by hanicz · 8 days ago
  8. 3cb8ef7 KNOX-3417: KnoxLdapRealm builds the LDAP search filter from the client username without RFC-4515 escaping (#1348) by hanicz · 8 days ago
  9. c3dee56 KNOX-3416: KnoxSSO redirects to untrusted site (#1346) by hanicz · 10 days ago
  10. 5342483 KNOX-3413: KnoxToken passcode verification accepts a valid passcode for a different token (#1345) by hanicz · 10 days ago
  11. 049dc0c KNOX-3411: KnoxToken getUserTokens returns every user's token metadat… (#1344) by hanicz · 10 days ago
  12. f212600 KNOX-3410: KnoxToken enable/disable endpoints perform no caller autho… (#1343) by hanicz · 10 days ago
  13. e511635 KNOX-3409: Validate knoxauth theme name to Harden Branding Support (Reported by Quinn Nguyen) (#1341) by lmccay · 11 days ago
  14. eb14d8b KNOX-3407: Support for WebSocket mTLS (#1338) by Sandeep Moré · 2 weeks ago
  15. e713c58 KNOX-3386: LDAP Proxy pages backends (#1331) by David Han · 3 weeks ago
  16. da08af1 KNOX-3403: RFC 8693 token exchange: use the impersonated subject as the token sub on non-server-managed topologies (#1336) by Sandor Molnar · 3 weeks ago
  17. 66575ba KNOX-3399 - Make RFC 8693 token exchange work for form-encoded requests and align it with the spec (#1334) by Sandor Molnar · 3 weeks ago
  18. e63e2b0 KNOX-3398: Enable Iceberg REST catalog SSL only when ENCRYPT_ALL_PORTS is set (#1330) by Sandor Molnar · 4 weeks ago
  19. 204d97b KNOX-3397: Add preauth.auth.header.actor.groups to set actor groups header name explicitly (#1329) by Sandor Molnar · 4 weeks ago
  20. 6bdf64c Bump org.postgresql:postgresql from 42.7.11 to 42.7.12 (#1323) by dependabot[bot] · 4 weeks ago
  21. 2beb45b KNOX-3041: Eliminate load-balancing race condition in HA dispatch (#1317) by hanicz · 4 weeks ago
  22. aea0def KNOX-3333 - Update Letsencrypt staging certs (#1244) by Sandeep Moré · 4 weeks ago
  23. 76fa85b KNOX-3389: Embedded LDAP getUserGroups drops roles-lookup roles that have no backing group (#1318) by Sandor Molnar · 4 weeks ago
  24. 9f4b8e7 KNOX-3388: Improve alias creation during EKU mode testing (#1316) by Sandor Molnar · 4 weeks ago
  25. fcab7e2 KNOX-3385: Ldap Proxy accepts search using either proxy or remote base dn (#1314) by David Han · 4 weeks ago
  26. b438768 KNOX-3381: Fix HaDispatch unnecessary failover due to IOException during writeOutboundResponse (#1308) by hanicz · 5 weeks ago
  27. 94f394a Add Project Security Threat Model Document (#1312) by lmccay · 5 weeks ago
  28. a5dfbca KNOX-3382: Bump Netty to 1.135.Final due to CVEs (#1309) by Sandor Molnar · 5 weeks ago
  29. 08b1f90 KNOX-3383: Bump Jackson to 2.18.9 due to CVEs (#1310) by Sandor Molnar · 5 weeks ago
  30. 34ba127 KNOX-3361: Route OpenSAML off BouncyCastle in FIPS mode (#1299) by hanicz · 5 weeks ago
  31. 8d70ff4 KNOX-3380: hive_metastore_enable_ssl config should be used to determin if SSL is enabled on HMS (#1307) by Sandor Molnar · 5 weeks ago
  32. 6110aea KNOX-3374: Skip redundant roles lookup in PreAuth/ExtAuthz when the identity-assertion layer already resolved roles (#1306) by Sandor Molnar · 5 weeks ago
  33. ad6c159 KNOX-3377: KNOX-3378: KNOX-3379: Support secure LDAP (LDAPS) for the Knox embedded LDAP service (#1305) by Sandor Molnar · 5 weeks ago
  34. c24781a KNOX-3376: Use DeafultAliasService in Knox OOTB (#1304) by Sandor Molnar · 6 weeks ago
  35. 3f2ed2e KNOX-3375: Wire in gatewayservices for LDAPRolesLookupInterceptorFactory so KnoxCLI is able to load it (#1303) by hanicz · 6 weeks ago
  36. 6dbdc94 KNOX-3359 - Support Single-Purpose EKU Certificates (#1291) by Sandeep Moré · 6 weeks ago
  37. 7b34b7c KNOX-3374: Fix inherited roles missing from auth headers when LDAP roles-lookup interceptor is active (#1300) by hanicz · 6 weeks ago
  38. 1427c88 KNOX-3344: Upgrade pac4j to 6.5.3 (#1278) by bonampak · 7 weeks ago
  39. bea0469 KNOX-3372: Add gateway-reloadable documentation (#1297) by hanicz · 7 weeks ago
  40. 9c000de KNOX-3316: Change downloaded keystore format based on FIPS (#1292) by hanicz · 7 weeks ago
  41. 39a168a KNOX-3371: Fix broken error message on login page (#1290) by hanicz · 7 weeks ago
  42. 67fb077 KNOX-1608: Remove gateway-adapter module (#1263) by Arun · 7 weeks ago
  43. 8f65731 KNOX-3370: Eliminate deprecated TokenStateService implementations (#1289) by Sandor Molnar · 7 weeks ago
  44. de9d91c KNOX-3366 - Upgrade Mina-core to 2.2.8 (#1285) via devaspati.krishnatri by Devaspati · 7 weeks ago
  45. 51f40e7 KNOX-3367: Update Token State Service DB documentation (#1287) by hanicz · 7 weeks ago
  46. 3da2d97 KNOX-3369: Bump requests from 2.32.4 to 2.33.0 and pytest from 8.3.4 to 9.0.3 in /.github/workflows/tests (#1288) by Sandor Molnar · 7 weeks ago
  47. 1e25778 KNOX-3341: LDAP proxy general search - review fixes and hardening (#1284) by Sandor Molnar · 7 weeks ago
  48. d9283aa KNOX-3365: New docs for k8s ServiceAccount validator (#1283) by hanicz · 8 weeks ago
  49. 2fdbda0 KNOX-3364: New loadAliasesFromK8sSecrets method in entrypoint.sh to load aliases from k8s secrets. Install jq in the container as well. (#1282) by hanicz · 8 weeks ago
  50. 51a168f KNOX-3363: Document create-k8s-alias, create-list-aliases and update export-cert and list-alias KnoxCLI commands (#1281) by hanicz · 8 weeks ago
  51. f6c9adf KNOX-3360: create-k8s-alias command to save aliases from k8s secrets (#1279) by hanicz · 8 weeks ago
  52. 8a1332b KNOX-3341: LDAP proxy backend handles general searches (#1274) by David Han · 8 weeks ago
  53. d997844 KNOX-3357: Upgrade Webshell UI frameworks/libraries (#1276) by hanicz · 9 weeks ago
  54. aca611f KNOX-3234: Upgrade Admin UI Angular to 21+, bootstrap to 5+ (#1249) by hanicz · 9 weeks ago
  55. 9f945f8 KNOX-3358: Support configurable bind credentials for the embedded Knox LDAP service (#1275) by Sandor Molnar · 9 weeks ago
  56. 24dccd7 KNOX:3353: Add Docker-based integration tests for k8s ServiceAccountValidator (#1271) by Sandor Molnar · 9 weeks ago
  57. c3f5524 KNOX-3356: Allow Cloudera Manager service discovery over cleartext HTTP (#1272) by Sandor Molnar · 9 weeks ago
  58. 01fbedc KNOX-3353: Eliminate K8sPreAuthFederationFilter and consolidate logic in ServiceAccountValidator (#1269) by Sandor Molnar · 9 weeks ago
  59. 755c4bc KNOX-3352: k8s pre-auth validator for service account annotation (#1268) by hanicz · 9 weeks ago
  60. f5fce55 KNOX-3354: Remove index suffix from actor groups header for roles in AbstractAuthResource (#1267) by Sandor Molnar · 9 weeks ago
  61. 5d41089 KNOX-3347 - Introduce TokenExchangePrincipal for extending Act claim … (#1262) by lmccay · 9 weeks ago
  62. 9812cec KNOX-3351: Resolve LDAP roles for users with no groups (#1266) by Sandor Molnar · 10 weeks ago
  63. 13d2f1f KNOX-3352: Set scheme for Iceberg REST catalog based on ssl enabled c… (#1265) by hanicz · 10 weeks ago
  64. 644246b KNOX-3340: Add Control for LDAPRolesLookupInterceptor (#1258) by David Han · 10 weeks ago
  65. 0c88385 KNOX-3334 - Introduce ActorChainPrincipal for RFC 8693 instead of ImpersonatedPrincipal (#1257) by lmccay · 2 months ago
  66. 10eedcc KNOX-3335: Add pylint pre-push linting for .github/workflows/tests Python integration tests (#1260) by Raghav Maheshwari · 2 months ago
  67. fe0786d KNOX-3348: Upgrade BouncyCastle to 1.84 (#1261) by hanicz · 2 months ago
  68. 7e74d43 Bump org.apache.commons:commons-configuration2 from 2.10.1 to 2.15.0 (#1238) by dependabot[bot] · 2 months ago
  69. 7c94926 KNOX-3345: Fix intermittent testRefreshGatewayConfig test issue (#1259) by hanicz · 2 months ago
  70. ccdb3fc KNOX-3345: ignore GatewayServerTest.testRefreshGatewayConfig temporarily (#1255) by Sandor Molnar · 2 months ago
  71. aae8f98 KNOX-3294: Upgrade bootstrap to 5+ on login,logout and redirecting pages (#1252) by hanicz · 2 months ago
  72. 344c393 KNOX-3343: Fix NPE when cacheKeyHeader is not found in the request (#1254) by Sandor Molnar · 2 months ago
  73. 8342af3 KNOX-3342: Fixed NPE in HadoopGroupFilter when hadoopGroups instance wasn't set (#1253) by Sandor Molnar · 2 months ago
  74. 9c6647e KNOX-3337: Add optional LDAP role lookup support (#1247) by Sandor Molnar · 2 months ago
  75. fc2987e KNOX-3330: Handle interceptor name collisions (#1251) by David Han · 2 months ago
  76. fafd793 KNOX-3336: New LDAP Service Factory (#1250) by hanicz · 2 months ago
  77. 33df7d5 KNOX-3330: Refactor LDAP Proxy configuration to support multiple backends (#1240) by David Han · 2 months ago
  78. d1c3046 KNOX-3318: document LDAP service (#1227) by Sandor Molnar · 3 months ago
  79. ea3a6e0 KNOX-3339: Upgrade log4j2 to 2.26.0 (#1248) by hanicz · 3 months ago
  80. edbe024 KNOX-3328: Implement recursive group resolution for LDAP proxy (#1236) by Sandor Molnar · 3 months ago
  81. 810abcd KNOX-3329: New database truststore type config (#1246) by hanicz · 3 months ago
  82. be8679c KNOX-3332: Add listeners on gateway config changes (#1243) by hanicz · 3 months ago
  83. e5ff300 KNOX-3331: Add Maven option to skip Angular UI modules (#1241) by Sandor Molnar · 3 months ago
  84. e738c08 KNOX-3328: Add Docker-based integration tests for Knox LDAP service (#1242) by Sandor Molnar · 3 months ago
  85. 6549f4e KNOX-3256: Refactor Docker build to use local Maven artifacts and unify CI/Dev workflows (#1239) by Sandor Molnar · 3 months ago
  86. 488e94a KNOX-3326: Add TCPS support for Oracle DB (#1237) by hanicz · 3 months ago
  87. d4eecad KNOX-3327: Support periodic refresh of gateway configuration (#1235) by Sandor Molnar · 3 months ago
  88. 8d59c6c KNOX-3325 - Bump maven enforcer version (#1234) by Sandeep Moré · 3 months ago
  89. 0cc10cb KNOX-3320: Document logout flows in Knox (#1228) by Sandor Molnar · 3 months ago
  90. 0610fd9 KNOX-3322: Upgrade Postgresql to 42.7.11 to Fix CVE's (#1231) by Keshav Katkar · 3 months ago
  91. cb41141 Bump org.apache.mina:mina-core from 2.2.4 to 2.2.7 (#1226) by dependabot[bot] · 3 months ago
  92. f79717b KNOX-3323 - Upgrade dompurify version (#1232) by Sandeep Moré · 3 months ago
  93. 96cd8f6 KNOX-3319 : Ranger REST API not fully implemented in cdp-proxy-api (Dineshkumar Yadav <dineshkumar.yadav@outlook.com>) (#1230) by Sandeep Moré · 3 months ago
  94. f546084 KNOX-3321 - KnoxToken Support for RFC 8693 Token Exchange act Claim (#1229) by lmccay · 3 months ago
  95. 7b5e518 KNOX-3317: Fixed NPE when no token-metadata-headers are declared for ICEBERG-REST (#1225) by Sandor Molnar · 4 months ago
  96. fb70788 KNOX-3312 - Client Credentials Flow with HTTP Basic needs Unwrapped S… (#1219) by lmccay · 4 months ago
  97. df17516 KNOX-3315: Adds BCFKS as an option cert export (#1221) by hanicz · 4 months ago
  98. 37fbbde KNOX-3314: Ensure secure length for encryptQueryString generated by descriptors (#1220) by hanicz · 4 months ago
  99. 4f94d95 KNOX-3311: Fix X509CertificateUtil.fetchPublicCertsFromServer issue w… (#1217) by hanicz · 4 months ago
  100. 762593a KNOX-3310: Fix redundant ALIAS_PASSPHRASE assignment and improve logging (#1216) by Sandor Molnar · 4 months ago