Google Git
Sign in
apache/knox/HEAD
  1. 0a3a794 KNOX-3450: Add Transfer-Encoding to set of excluded headers in PassAllHeadersDispatch (#1389) by Phil Zampino · 12 hours ago master
  2. b2d2843 KNOX-3447: Harden ServiceDefinitonUnmarshaller (#1387) by hanicz · 18 hours ago
  3. 38cc0f4 KNOX-3442: Reject INIT/RUNSCRIPT/ALIAS in H2 database name to prevent JDBC-URL code execution (#1383) by Sandor Molnar · 2 days ago
  4. 8872f98 KNOX-3438: Address review comments from delegation policy admin API (#1381) by Sandor Molnar · 3 days ago
  5. 6e02570 KNOX-3440: Remove HSQLDB completely from Knox (#1382) by Sandor Molnar · 3 days ago
  6. a919d15 KNOX-3401: Replace Derby with H2 (#1380) by Sandor Molnar · 3 days ago
  7. 6fce042 KNOX-3432: Advertise RFC 8693 token-exchange and client_credentials grant types in KnoxIDF discovery metadata (#1376) by Sandor Molnar · 3 days ago
  8. 7b90d0d KNOX-3439: Add tests for NoClassNameMultiLineToStringStyle (#1378) by Raghav Maheshwari · 3 days ago
  9. a8a43ae KNOX-3438: Add delegation policy admin API with upsert support for RFC 8693 token exchange (#1379) by hsheinblatt · 4 days ago
  10. e70fe0f KNOX-3434 - Allow missing typ when validating JWTs from TrustedOidcIssuers for token exchange. (#1377) by hsheinblatt · 7 days ago
  11. 3cb11c6 KNOX-3424: Complete RFC 8707/8693 dynamic resource/audience handling in KNOXTOKEN and token exchange (#1373) by Sandor Molnar · 8 days ago
  12. 6f94600 KNOX-3433: set issued_token_type in KnoxIDF token responses (RFC 8693 §2.2.1) (#1375) by Sandor Molnar · 8 days ago
  13. af3b298 KNOX-3426: Embedded-Derby delegation policy service (#1374) by Sandor Molnar · 8 days ago
  14. 683841b KNOX-3426 - Add DelegationPolicyService schema, interface, and JDBC implementation (#1361) by hsheinblatt · 8 days ago
  15. 8ac5a45 KNOX-3431: UserSearchInterceptor throws exceptions on failed search (#1372) by David Han · 9 days ago
  16. f77ffb2 KNOX-3424: Dynamic audience handling in the KNOXTOKEN service (#1356) by hanicz · 9 days ago
  17. a5fb4e7 KNOX-3419: Tests for the recent improvements (#1369) by hanicz · 9 days ago
  18. 7d719ca KNOX-3430: Deprecate AccessTokenFederationFilter, also added UnsupportedOperatorException (#1370) by hanicz · 9 days ago
  19. 31419b7 KNOX-3422: Update service_ldap_server.md (#1371) by David Han · 9 days ago
  20. 1f5d5c0 KNOX-3429: Harden source assembly to exclude build caches, runtime state, and staging dirs (#1368) by Sandor Molnar · 10 days ago
  21. c40480e KNOX-3428: Bump Spring to 6.2.19 and add HashiCorp Vault alias service integration tests (#1367) by Sandor Molnar · 10 days ago
  22. c213bba KNOX-3427: Bump Netty to 1.137.Final due to CVEs (#1366) by Sandor Molnar · 11 days ago
  23. 1832299 KNOX-3423: Switch to JSON error messages in Knox token validation paths (#1354) by hanicz · 11 days ago
  24. 2a909a7 KNOX-3395: Add KNOXTOKEN issuance and JWTProvider federation integration tests (#1325) by Raghav Maheshwari · 11 days ago
  25. 1e25461 Bump org.mariadb.jdbc:mariadb-java-client from 3.3.0 to 3.3.5 (#1363) by dependabot[bot] · 11 days ago
  26. 95e3b66 KNOX-3420 - Upgrade Jetty from 9.x 12.x (#1360) by Sandeep Moré · 14 days ago
  27. c776132 KNOX-3422: Ldap Proxy used in-memory bind user (#1357) by David Han · 14 days ago
  28. d910510 KNOX-3406: LDAP Proxy backend improve error handling (#1355) by David Han · 14 days ago
  29. 1cfef0d KNOX-3425: LDAP Proxy disallows anonymous binds to remote backends (#1358) by David Han · 2 weeks ago KNOX-2
  30. 9522a5b KNOX-3421 - Upgrade Shiro to 2.2.1 (#1353) by Sandeep Moré · 3 weeks ago
  31. 114af08 KNOX-3278: Update JLine to 3.30.6 (#1181) by bonampak · 3 weeks ago
  32. d036056 KNOX-3394: Correct outdated unittest documentation in Docker Compose integration test README (#1324) by Raghav Maheshwari · 4 weeks ago
  33. 3c3f3b5 Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.6.3 (#1350) by dependabot[bot] · 4 weeks ago
  34. b4b657f Bump org.apache.httpcomponents.core5:httpcore5 from 5.3.6 to 5.4.3 (#1347) by dependabot[bot] · 4 weeks ago
  35. f0a5c94 Knox as an OAuth 2.0 / OpenID Connect Provider (KnoxIDF) (#1351) by Sandor Molnar · 4 weeks ago
  36. de71a60 KNOX-3418: Path traversal → arbitrary file write/overwrite in the Apache Knox Admin API (#1349) by hanicz · 4 weeks ago
  37. 3cb8ef7 KNOX-3417: KnoxLdapRealm builds the LDAP search filter from the client username without RFC-4515 escaping (#1348) by hanicz · 4 weeks ago
  38. c3dee56 KNOX-3416: KnoxSSO redirects to untrusted site (#1346) by hanicz · 4 weeks ago
  39. 5342483 KNOX-3413: KnoxToken passcode verification accepts a valid passcode for a different token (#1345) by hanicz · 4 weeks ago
  40. 049dc0c KNOX-3411: KnoxToken getUserTokens returns every user's token metadat… (#1344) by hanicz · 4 weeks ago
  41. f212600 KNOX-3410: KnoxToken enable/disable endpoints perform no caller autho… (#1343) by hanicz · 4 weeks ago
  42. e511635 KNOX-3409: Validate knoxauth theme name to Harden Branding Support (Reported by Quinn Nguyen) (#1341) by lmccay · 4 weeks ago
  43. eb14d8b KNOX-3407: Support for WebSocket mTLS (#1338) by Sandeep Moré · 5 weeks ago
  44. e713c58 KNOX-3386: LDAP Proxy pages backends (#1331) by David Han · 6 weeks ago
  45. da08af1 KNOX-3403: RFC 8693 token exchange: use the impersonated subject as the token sub on non-server-managed topologies (#1336) by Sandor Molnar · 6 weeks ago
  46. 66575ba KNOX-3399 - Make RFC 8693 token exchange work for form-encoded requests and align it with the spec (#1334) by Sandor Molnar · 6 weeks ago
  47. e63e2b0 KNOX-3398: Enable Iceberg REST catalog SSL only when ENCRYPT_ALL_PORTS is set (#1330) by Sandor Molnar · 6 weeks ago
  48. 204d97b KNOX-3397: Add preauth.auth.header.actor.groups to set actor groups header name explicitly (#1329) by Sandor Molnar · 7 weeks ago
  49. 6bdf64c Bump org.postgresql:postgresql from 42.7.11 to 42.7.12 (#1323) by dependabot[bot] · 7 weeks ago
  50. 2beb45b KNOX-3041: Eliminate load-balancing race condition in HA dispatch (#1317) by hanicz · 7 weeks ago
  51. aea0def KNOX-3333 - Update Letsencrypt staging certs (#1244) by Sandeep Moré · 7 weeks ago
  52. 76fa85b KNOX-3389: Embedded LDAP getUserGroups drops roles-lookup roles that have no backing group (#1318) by Sandor Molnar · 7 weeks ago
  53. 9f4b8e7 KNOX-3388: Improve alias creation during EKU mode testing (#1316) by Sandor Molnar · 7 weeks ago
  54. fcab7e2 KNOX-3385: Ldap Proxy accepts search using either proxy or remote base dn (#1314) by David Han · 7 weeks ago
  55. b438768 KNOX-3381: Fix HaDispatch unnecessary failover due to IOException during writeOutboundResponse (#1308) by hanicz · 8 weeks ago
  56. 94f394a Add Project Security Threat Model Document (#1312) by lmccay · 8 weeks ago
  57. a5dfbca KNOX-3382: Bump Netty to 1.135.Final due to CVEs (#1309) by Sandor Molnar · 8 weeks ago
  58. 08b1f90 KNOX-3383: Bump Jackson to 2.18.9 due to CVEs (#1310) by Sandor Molnar · 8 weeks ago
  59. 34ba127 KNOX-3361: Route OpenSAML off BouncyCastle in FIPS mode (#1299) by hanicz · 8 weeks ago
  60. 8d70ff4 KNOX-3380: hive_metastore_enable_ssl config should be used to determin if SSL is enabled on HMS (#1307) by Sandor Molnar · 8 weeks ago
  61. 6110aea KNOX-3374: Skip redundant roles lookup in PreAuth/ExtAuthz when the identity-assertion layer already resolved roles (#1306) by Sandor Molnar · 8 weeks ago
  62. ad6c159 KNOX-3377: KNOX-3378: KNOX-3379: Support secure LDAP (LDAPS) for the Knox embedded LDAP service (#1305) by Sandor Molnar · 8 weeks ago
  63. c24781a KNOX-3376: Use DeafultAliasService in Knox OOTB (#1304) by Sandor Molnar · 9 weeks ago
  64. 3f2ed2e KNOX-3375: Wire in gatewayservices for LDAPRolesLookupInterceptorFactory so KnoxCLI is able to load it (#1303) by hanicz · 9 weeks ago
  65. 6dbdc94 KNOX-3359 - Support Single-Purpose EKU Certificates (#1291) by Sandeep Moré · 9 weeks ago
  66. 7b34b7c KNOX-3374: Fix inherited roles missing from auth headers when LDAP roles-lookup interceptor is active (#1300) by hanicz · 9 weeks ago
  67. 1427c88 KNOX-3344: Upgrade pac4j to 6.5.3 (#1278) by bonampak · 10 weeks ago
  68. bea0469 KNOX-3372: Add gateway-reloadable documentation (#1297) by hanicz · 10 weeks ago
  69. 9c000de KNOX-3316: Change downloaded keystore format based on FIPS (#1292) by hanicz · 2 months ago
  70. 39a168a KNOX-3371: Fix broken error message on login page (#1290) by hanicz · 2 months ago
  71. 67fb077 KNOX-1608: Remove gateway-adapter module (#1263) by Arun · 2 months ago
  72. 8f65731 KNOX-3370: Eliminate deprecated TokenStateService implementations (#1289) by Sandor Molnar · 2 months ago
  73. de9d91c KNOX-3366 - Upgrade Mina-core to 2.2.8 (#1285) via devaspati.krishnatri by Devaspati · 2 months ago
  74. 51f40e7 KNOX-3367: Update Token State Service DB documentation (#1287) by hanicz · 2 months ago
  75. 3da2d97 KNOX-3369: Bump requests from 2.32.4 to 2.33.0 and pytest from 8.3.4 to 9.0.3 in /.github/workflows/tests (#1288) by Sandor Molnar · 2 months ago
  76. 1e25778 KNOX-3341: LDAP proxy general search - review fixes and hardening (#1284) by Sandor Molnar · 2 months ago
  77. d9283aa KNOX-3365: New docs for k8s ServiceAccount validator (#1283) by hanicz · 2 months ago
  78. 2fdbda0 KNOX-3364: New loadAliasesFromK8sSecrets method in entrypoint.sh to load aliases from k8s secrets. Install jq in the container as well. (#1282) by hanicz · 2 months ago
  79. 51a168f KNOX-3363: Document create-k8s-alias, create-list-aliases and update export-cert and list-alias KnoxCLI commands (#1281) by hanicz · 3 months ago
  80. f6c9adf KNOX-3360: create-k8s-alias command to save aliases from k8s secrets (#1279) by hanicz · 3 months ago
  81. 8a1332b KNOX-3341: LDAP proxy backend handles general searches (#1274) by David Han · 3 months ago
  82. d997844 KNOX-3357: Upgrade Webshell UI frameworks/libraries (#1276) by hanicz · 3 months ago
  83. aca611f KNOX-3234: Upgrade Admin UI Angular to 21+, bootstrap to 5+ (#1249) by hanicz · 3 months ago
  84. 9f945f8 KNOX-3358: Support configurable bind credentials for the embedded Knox LDAP service (#1275) by Sandor Molnar · 3 months ago
  85. 24dccd7 KNOX:3353: Add Docker-based integration tests for k8s ServiceAccountValidator (#1271) by Sandor Molnar · 3 months ago
  86. c3f5524 KNOX-3356: Allow Cloudera Manager service discovery over cleartext HTTP (#1272) by Sandor Molnar · 3 months ago
  87. 01fbedc KNOX-3353: Eliminate K8sPreAuthFederationFilter and consolidate logic in ServiceAccountValidator (#1269) by Sandor Molnar · 3 months ago
  88. 755c4bc KNOX-3352: k8s pre-auth validator for service account annotation (#1268) by hanicz · 3 months ago
  89. f5fce55 KNOX-3354: Remove index suffix from actor groups header for roles in AbstractAuthResource (#1267) by Sandor Molnar · 3 months ago
  90. 5d41089 KNOX-3347 - Introduce TokenExchangePrincipal for extending Act claim … (#1262) by lmccay · 3 months ago
  91. 9812cec KNOX-3351: Resolve LDAP roles for users with no groups (#1266) by Sandor Molnar · 3 months ago
  92. 13d2f1f KNOX-3352: Set scheme for Iceberg REST catalog based on ssl enabled c… (#1265) by hanicz · 3 months ago
  93. 644246b KNOX-3340: Add Control for LDAPRolesLookupInterceptor (#1258) by David Han · 3 months ago
  94. 0c88385 KNOX-3334 - Introduce ActorChainPrincipal for RFC 8693 instead of ImpersonatedPrincipal (#1257) by lmccay · 3 months ago
  95. 10eedcc KNOX-3335: Add pylint pre-push linting for .github/workflows/tests Python integration tests (#1260) by Raghav Maheshwari · 3 months ago
  96. fe0786d KNOX-3348: Upgrade BouncyCastle to 1.84 (#1261) by hanicz · 3 months ago
  97. 7e74d43 Bump org.apache.commons:commons-configuration2 from 2.10.1 to 2.15.0 (#1238) by dependabot[bot] · 3 months ago
  98. 7c94926 KNOX-3345: Fix intermittent testRefreshGatewayConfig test issue (#1259) by hanicz · 3 months ago
  99. ccdb3fc KNOX-3345: ignore GatewayServerTest.testRefreshGatewayConfig temporarily (#1255) by Sandor Molnar · 3 months ago
  100. aae8f98 KNOX-3294: Upgrade bootstrap to 5+ on login,logout and redirecting pages (#1252) by hanicz · 3 months ago