1. fb70788 KNOX-3312 - Client Credentials Flow with HTTP Basic needs Unwrapped S… (#1219) by lmccay · 6 hours ago master
  2. df17516 KNOX-3315: Adds BCFKS as an option cert export (#1221) by hanicz · 8 hours ago
  3. 37fbbde KNOX-3314: Ensure secure length for encryptQueryString generated by descriptors (#1220) by hanicz · 30 hours ago
  4. 4f94d95 KNOX-3311: Fix X509CertificateUtil.fetchPublicCertsFromServer issue w… (#1217) by hanicz · 7 days ago
  5. 762593a KNOX-3310: Fix redundant ALIAS_PASSPHRASE assignment and improve logging (#1216) by Sandor Molnar · 8 days ago
  6. a8d2016 KNOX-3303: Subject created during identity assertion should include TokenIdPrincipal, if any (#1214) by Sandor Molnar · 12 days ago knox_idf
  7. e39a318 KNOX-3308 - Token Exchange Flow using wrong param name (#1211) by lmccay · 12 days ago
  8. dced037 KNOX-3304 - Support for Openshift/SCC + Make docker entrypoint idempotent (#1209) + Docker build issue fix (contributed by @sneethiraj) by Sandeep Moré · 13 days ago
  9. 4988a16 KNOX-3303: Support configurable 'sub' claim reconciliation and client_id claim in Client Credentials flow (#1208) by Sandor Molnar · 13 days ago
  10. bad8a3e KNOX-3306: Make server startup fail if a forbidden security algorithm… (#1212) by hanicz · 13 days ago
  11. 7646fea KNOX-3307: Upgrade jackson-core to 2.18.6 (#1210) by Phil Zampino · 2 weeks ago
  12. 5e87302 KNOX-3302: Falling back to gateway-level credential store while looking up LDAP system password (#1207) by Sandor Molnar · 2 weeks ago
  13. 72cc4ce KNOX-3301: Added missing API_KEY icon on Token Management page (#1206) by Sandor Molnar · 2 weeks ago
  14. dd021c3 KNOX-3299: adding inline documentation for usage of env. var: TRUSTSTORE_IMPORTS (#1201) by Selvamohan Neethiraj · 3 weeks ago
  15. 16fc47b KNOX-3298: Change ApiClientFactory password check to isNotBlank (#1200) by hanicz · 3 weeks ago
  16. a38c9f6 KNOX-3297: Docker entrypoint script has issues that prevents this image being run as docker container and as a pod in k8s (#1197) by Selvamohan Neethiraj · 3 weeks ago
  17. e52a169 KNOX-3296: Expand CI integration tests: health metrics, HSTS, and KnoxLDAP auth paths (#1196) by Raghav Maheshwari · 4 weeks ago
  18. 3bca5f1 KNOX-3293: Add integration tests: health metrics JSON, KnoxLDAP preauth/extauthz paths, RemoteAuth extauthz (#1194) by Raghav Maheshwari · 4 weeks ago
  19. fa75d21 KNOX-3295: Set default type to JWT in issued knox token headers (#1195) by hanicz · 4 weeks ago
  20. 2fed77b KNOX-3292 - Fix github workflow that pushes knox docker image to apache docker hub (#1193) by Sandeep Moré · 5 weeks ago
  21. 72a4845 KNOX-3287: RAP truststore password alias improvements (#1190) by Sandor Molnar · 5 weeks ago
  22. 47e8e7a KNOX-3286: update rewrite rule to put behind knox-proxy when navigate to scheduler-ui (#1185) by Hean Chhinling · 5 weeks ago
  23. 0c1415f KNOX-3286: update rewrite rule to put behind knox-proxy when navigate to scheduler-ui (#1185) by Hean Chhinling · 5 weeks ago
  24. 811e7ed KNOX-3291 - Fix modern theme 'Sign In' button style (#1192) by hanicz · 5 weeks ago
  25. d26c155 KNOX-3291 - Fix modern theme 'Sign In' button style (#1192) by hanicz · 5 weeks ago
  26. e228820 Reapply "KNOX-3279 - REST Catalog dispatch implementation for including configurable metadata as outbound request headers (#1182)" (#1188) (#1191) by Phil Zampino · 6 weeks ago
  27. a695134 Revert "KNOX-3279 - REST Catalog dispatch implementation for including configurable metadata as outbound request headers (#1182)" (#1188) by Phil Zampino · 6 weeks ago
  28. 6042c71 KNOX-3289: Fix failing GatewayWebsocketHandlerTest tests (#1189) by hanicz · 6 weeks ago
  29. 7c09444 KNOX-3288: Support for gateway database aliases in Docker entrypoint script (#1187) by Sandor Molnar · 6 weeks ago
  30. 6b351f9 KNOX-3249: Integrate new yarn scheduler-ui into KNOX homepage (#1178) by Hean Chhinling · 6 weeks ago
  31. be2b9a4 KNOX-3279 - REST Catalog dispatch implementation for including configurable metadata as outbound request headers (#1182) by Phil Zampino · 6 weeks ago
  32. f81a5b8 KNOX-3284 - knox.token.hash.key will be available in Knox Docker image (#1184) by Sandor Molnar · 6 weeks ago
  33. b68a2bc KNOX-3283 - Login Page Branding and Themes Support (#1180) by lmccay · 7 weeks ago
  34. 18ab6c5 KNOX-3277 : LDAP Proxy improvements for working with AD backend (#1177) by David Han · 7 weeks ago
  35. da88e24 KNOX-3282: Add certain CM service discovery error stack traces in the log at INFO level (#1179) by Sandor Molnar · 7 weeks ago
  36. 532c436 KNOX-3243 : Added Ambari 3.0.0 support (#1140) by HARSHITH GANDHE · 7 weeks ago
  37. a5552e1 KNOX-3276: Fix TLS version settings bug (#1176) by Sandor Molnar · 8 weeks ago
  38. 9a03604 Bump org.apache.zookeeper:zookeeper from 3.8.4 to 3.8.6 (#1172) by dependabot[bot] · 8 weeks ago
  39. 996bf14 KNOX-3273 - Short Lived Tokens as Client Credentials (#1171) by lmccay · 8 weeks ago
  40. 5a42c04 KNOX-3276: New configuration added to control CM Client SSL setup (#1175) by Sandor Molnar · 8 weeks ago
  41. 74c0a84 KNOX-3275: Option to group/separate UI services on the HomepageUI. Fi… (#1174) by hanicz · 8 weeks ago
  42. c0f1438 KNOX-3274: Unifid banner for TokenManagement, TokenGeneration and Homepage UIs. Removed unnecessary closing div tags on TokenManagement and TokenGeneration index.html (#1173) by hanicz · 8 weeks ago
  43. 10ac9f6 KNOX-3272: Improved OAuth flow checks and return 401 in case of missing client ID or invalid client secret (#1170) by Sandor Molnar · 9 weeks ago
  44. 13a3656 KNOX-3271: Upgrade bouncycastle to 1.79 (#1169) by hanicz · 9 weeks ago
  45. 716ed15 KNOX-3266: Support JWKS verification in SSOCookieProvider (#1168) by Sandor Molnar · 9 weeks ago
  46. feb7dd1 KNOX-3269 - Support APIKEY and CLIENTID as services without URLs or params in topology generation (#1167) by Phil Zampino · 9 weeks ago
  47. 1578c8c KNOX-3264 - Update knox push repo from apache/knox/knox-gateway -> apache/knox (#1166) by Sandeep Moré · 10 weeks ago
  48. b2cd902 KNOX-3264 - One more go at fixing docker (#1164) by Sandeep Moré · 10 weeks ago
  49. ca145f6 KNOX-3264 - Updated default green certs URL to https (#1163) by Sandeep Moré · 10 weeks ago
  50. 4b7ae26 KNOX-3264 - Fix issues with docker workflow (#1162) by Sandeep Moré · 10 weeks ago
  51. 04c91f5 KNOX-3264 - Add workflow to push docker image on every master push and new release & use docker hardened image (#1160) by Sandeep Moré · 10 weeks ago
  52. f2d07eb KNOX-3262 Remove Java 17 message on Knox start-up (#1158) by Phil Zampino · 10 weeks ago
  53. 59a8fe9 KNOX-3263: Setting JVM's default truststore password as a System property when creating CM service discovery ApiClient, if needed (#1159) by Sandor Molnar · 10 weeks ago
  54. 5961ac2 KNOX-3253: Add advisory lock to the postgres table creation to avoid catalog race condition when multiple Knox instance start up simultaneously (#1157) by hanicz · 2 months ago
  55. 5d2b153 KNOX-3261 - Refactored JWTProvider and OAuthFlows tests to avoid code duplication (#1156) by Sandor Molnar · 2 months ago
  56. 71a72e5 KNOX-3259 - Implement OAuth Refresh Token and Exchange Token Grant Types (#1155) by lmccay · 2 months ago
  57. 84a0f3e KNOX-3260 - Extend Client Credentials Support to include the client_id and client_secret as HTTP Basic (#1154) by lmccay · 2 months ago
  58. 4024486 KNOX-3257 - Update knox image creatation so that we do not need escalated privileges in helm install (#1151) by Sandeep Moré · 3 months ago
  59. 882fe7f Fix image name collisions during Docker-based integration tests (#1150) by Sandor Molnar · 3 months ago
  60. 79f0deb KNOX-3254 - Allow control the Secure flag in pac4j session cookies (#1148) by Sandor Molnar · 3 months ago
  61. 6441322 KNOX-3255 - Allow fetching Knox public cert when SSL is disabled (#1149) by Sandor Molnar · 3 months ago
  62. d3654d8 KNOX-3251: Add fragment to Spark streaming page rewrite rule (#1147) by hanicz · 3 months ago
  63. 098ad0d KNOX-3252: Handle duplicate object exception during postgres table creation race condition (#1146) by hanicz · 3 months ago
  64. 3f1cf23 KNOX-3247 - Knox LDAP Server with Pluggable Backend (#1144) by lmccay · 3 months ago
  65. 2499922 [KNOX-3248] Knox Gateway + Livy HA mode gzip exception results in duplicated requests and unneeded failovers (#1143) by nileshrathi345 · 3 months ago
  66. 420b65b KNOX-3245: Add new separators for SSL ciphers and protocols (#1142) by hanicz · 3 months ago
  67. 60b021c KNOX-3246 - Make Java discovery deterministic and support JDK 11/17 (#1141) by Sandor Molnar · 3 months ago
  68. 0f5cdd2 KNOX-3240: Remove jakarta.xml.bind-api version duplicate (#1139) by hanicz · 4 months ago
  69. 39ab5f9 KNOX-3240: Remove POM duplicates (#1138) by hanicz · 4 months ago
  70. 5324ccd KNOX-3239: Fix for GatewayMessages error message typo (#1137) by Raghav-Mah3shwari · 4 months ago
  71. 8d5cbdd KNOX-3235: Renamed DB factory classes. Fixed PMD suppress for switch-case (#1136) by hanicz · 4 months ago
  72. 42715c2 KNOX-3236 - Bump Maven PMD plugin to 3.28.0 (#1135) by Sandor Molnar · 4 months ago
  73. 5cdf8e6 KNOX-3202: Oracle DB support for TokeStateService, Refactored JDBCUti… (#1134) by hanicz · 5 months ago
  74. eb4c2c7 KNOX-3224: Upgrade Token Management and Token Generation UI (#1118) by hanicz · 5 months ago
  75. 319f6ca KNOX-3223: Suppress cleanup, removed deprecations (#1133) by hanicz · 5 months ago
  76. 63f78bd KNOX-3232: Handle pac4j cookies with "null" value (#1132) by bonampak · 5 months ago
  77. d99996a KNOX-3222: Integrate OpenSearch REST API in Knox (#462) (#1131) by Tamas Payer · 5 months ago
  78. 1e230d0 KNOX-3226 - Add RemoteAuthProivder Integration Test (#1125) by Sandeep Moré · 5 months ago
  79. 73ddf02 KNOX-3226 - Report integration results to PR (#1122) by Sandeep Moré · 5 months ago
  80. 5f9f749 KNOX-3227: Remove package-lock.json as well (#1121) by hanicz · 5 months ago
  81. 0496f48 KNOX-2957 - Update groovy version to 4.0.29 (#1117) by Sandor Molnar · 5 months ago
  82. 0559262 KNOX-3214 Fix README for integration tests (#1120) by Sandeep Moré · 5 months ago
  83. da35cf1 KNOX-3225: New integration test for global HSTS header (#1119) by hanicz · 5 months ago
  84. 721ff51 KNOX-3214 - Add integration tests (#1116) by Sandeep Moré · 5 months ago
  85. b5bab48 Remove trailing slash for yarn proxy rewrite (#1066) by Adam Binford · 5 months ago
  86. 6e52400 KNOX-3217: Upgrade pac4j to 6.3.0 for JDK17 (#1110) by bonampak · 5 months ago
  87. f7815da KNOX-3197: Upgrade homepage UI to node 22, angular 20+ ang bootstrap … (#1104) by hanicz · 5 months ago
  88. 2752fdd KNOX-3221: Remove JDK9+ checks from BCInterceptingSocket (#1115) by hanicz · 5 months ago
  89. c9e3266 KNOX-3219 - New function in Virtual Group mapper to test request parameters (#1112) by Sandor Molnar · 5 months ago
  90. a0073c9 KNOX-3162 - Build support for JDK 17 (#1114) by Sandor Molnar · 5 months ago
  91. 074c960 KNOX-3215 - Revert KNOX-2647 (#1107) by Sandor Molnar · 6 months ago
  92. e47e58b KNOX-3199: Topology level async support (#1105) by hanicz · 6 months ago
  93. 2f3a11a KNOX-3211: Upgrade mina-core from maintenance release to latest 2.2.4 (#1103) by hanicz · 6 months ago
  94. fad4c0f KNOX-3210 - Use a common function to set JDK17 properties across all scripts (#1102) by Sandor Molnar · 6 months ago
  95. 7ecd609 KNOX-3035 - Limit response group header contents by size. (#1101) by Sandor Molnar · 7 months ago
  96. eb474ad KNOX-3189: Update slf4j version to 2.0.13. (also log4j2 to 2.20.0) (#1100) by bonampak · 7 months ago
  97. bcd24ba KNOX-3192: Check for HttpsURLConnection before cast (#1099) by hanicz · 7 months ago
  98. 6fbf503 KNOX-3209 - Revert KNOX-3206: Include io.netty in Knox's final deliverable (#1097) by Sandor Molnar · 7 months ago
  99. 364f914 KNOX-3208: Add JIRA link to PR descriptions (#1096) by hanicz · 7 months ago
  100. c63b865 KNOX-3198: Check for async support on SSE request (#1095) by hanicz · 7 months ago