(jans-fido2): major FIDO2 / Passkeys upgrade ProjectPasskeys #10078
Commits on Nov 7, 2024
-
-
-
-
-
-
-
fix: jans-auth-server/pom.xml to reduce vulnerabilities (#2466)
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSJETTISON-3033152
-
fix: jans-eleven/pom.xml to reduce vulnerabilities (#2471)
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSJETTISON-3033152 Co-authored-by: snyk-bot <[email protected]>
-
build(deps): bump commons-text from 1.9 to 1.10.0 in /jans-bom (#2679)
Bumps commons-text from 1.9 to 1.10.0. --- updated-dependencies: - dependency-name: org.apache.commons:commons-text dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-
fix: jans-eleven/pom.xml to reduce vulnerabilities (#2676)
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSJETTISON-3033152 - https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSJETTISON-3037311
-
fix: jans-config-api/plugins/sample/helloworld/pom.xml to reduce vuln…
…erabilities (#972) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGJBOSSRESTEASY-1009963 - https://snyk.io/vuln/SNYK-JAVA-ORGJBOSSRESTEASY-1058913 - https://snyk.io/vuln/SNYK-JAVA-ORGJBOSSRESTEASY-1085989 - https://snyk.io/vuln/SNYK-JAVA-ORGJBOSSRESTEASY-1303102 Co-authored-by: pujavs <[email protected]>
-
fix: jans-config-api/pom.xml to reduce vulnerabilities (#1746)
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGECLIPSEJETTY-2945452 Co-authored-by: pujavs <[email protected]>
-
-
-
-
-
-
-
-
-
-
build(deps): bump postgresql from 42.5.0 to 42.5.1 in /jans-bom (#3068)
Bumps [postgresql](https://github.com/pgjdbc/pgjdbc) from 42.5.0 to 42.5.1. - [Release notes](https://github.com/pgjdbc/pgjdbc/releases) - [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md) - [Commits](pgjdbc/pgjdbc@REL42.5.0...REL42.5.1) --- updated-dependencies: - dependency-name: org.postgresql:postgresql dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-
fix: jans-eleven/pom.xml to reduce vulnerabilities (#3315)
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSJETTISON-3168084 - https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSJETTISON-3168085 Co-authored-by: snyk-bot <[email protected]>
-
fix: jans-auth-server/pom.xml to reduce vulnerabilities (#3314)
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSJETTISON-3168084 - https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSJETTISON-3168085 Co-authored-by: snyk-bot <[email protected]>
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
fix: jans-auth-server/pom.xml to reduce vulnerabilities (#4271)
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSJETTISON-3367610
-
chore(deps): bump jettison from 1.5.2 to 1.5.4 in /jans-auth-server (#…
…4275) Bumps [jettison](https://github.com/jettison-json/jettison) from 1.5.2 to 1.5.4. - [Release notes](https://github.com/jettison-json/jettison/releases) - [Commits](jettison-json/jettison@jettison-1.5.2...jettison-1.5.4) --- updated-dependencies: - dependency-name: org.codehaus.jettison:jettison dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-
-
-
-
-
-
-
-
-
docs: write topic overview pages for properties, feature flags and en…
…dpoint sections (#5147) * docs(scripts): endpoint section README.md Signed-off-by: ossdhaval <[email protected]> * docs(scripts): property section readme Signed-off-by: ossdhaval <[email protected]> * docs(scripts): add how to set properties Signed-off-by: ossdhaval <[email protected]> * docs(scripts): add details to feature flag readme Signed-off-by: ossdhaval <[email protected]> --------- Signed-off-by: ossdhaval <[email protected]>
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
fix(jans-keycloak-integration): security bugfixes #8954 (#8962)
* fix(jans-linux-setup): improper scim configuration for jans kc #8210 * updated the keycloak configuration file to reflect the configuration for the storage-spi Signed-off-by: Rolain Djeumen <[email protected]> * chore(jans-keycloak-integration): bump kc version to 24.0.0 #8315 Signed-off-by: Rolain Djeumen <[email protected]> * fix(jans-keycloak-integration): security bugfixes #8954 * bumped nimbus oidc sdk version Signed-off-by: Rolain Djeumen <[email protected]> * fix(jans-keycloak-integration): security bugfixes #8954 * removed old metadata parser and entityidhandler from `jans-core-saml` Signed-off-by: Rolain Djeumen <[email protected]> * fix(jans-keycloak-integration): security bugfixes #8954 * further removed old saml related code Signed-off-by: Rolain Djeumen <[email protected]> * fix(jans-keycloak-integration): security bugfixes #8654 * removed unused dependencies in jans-core-saml Signed-off-by: Rolain Djeumen <[email protected]> --------- Signed-off-by: Rolain Djeumen <[email protected]> Co-authored-by: Mohammad Abudayyeh <[email protected]>
-
feat: Minimum support ES256, RS1, RS256, ED25519 (#9086)
* feat: Minimum support ES256, RS1, RS256, ED25519 Signed-off-by: Arnab Dutta <[email protected]> * feat: minimum support ES256, RS1, RS256, ED25519 Signed-off-by: Arnab Dutta <[email protected]> * feat: minimum support ES256, RS1, RS256, ED25519 Signed-off-by: Arnab Dutta <[email protected]> * feat: using SHA512 for Ed25519 Signed-off-by: Arnab Dutta <[email protected]> --------- Signed-off-by: Arnab Dutta <[email protected]>
-
feat: refactor Assertion/Attestation to Jackson ObjectMapper (#9023)
* feat: refactor Assertion/Attestation to Jackson ObjectMapper Signed-off-by: Arnab Dutta <[email protected]> * feat: fixing sonar issues Signed-off-by: Arnab Dutta <[email protected]> * feat: fixing sonar issues Signed-off-by: Arnab Dutta <[email protected]> * feat: fixing sonar issues Signed-off-by: Arnab Dutta <[email protected]> * feat: addressing PR reviews Signed-off-by: Arnab Dutta <[email protected]> * feat: addressing PR reviews Signed-off-by: Arnab Dutta <[email protected]> --------- Signed-off-by: Arnab Dutta <[email protected]>
-
-
feat: add support for BS / BE flags in AuthData #8903 (#8968)
* feat: add support for BS / BE flags in AuthData #8903 Signed-off-by: Arnab Dutta <[email protected]> * feat: adding comments Signed-off-by: Arnab Dutta <[email protected]> * feat: adding comments Signed-off-by: Arnab Dutta <[email protected]> --------- Signed-off-by: Arnab Dutta <[email protected]> Co-authored-by: Ackermann Yuriy <[email protected]>
-
fix(jans-fido2): #8906, Basic simplification and refactoring of Attes…
…tation and Assertion Response
-
* feat(jans-fido): #8908 add support for webauthn hints Signed-off-by: shekhar16 <[email protected]> * feat(jans-fido): #8908 add support for webauthn hints Signed-off-by: shekhar16 <[email protected]> * feat(jans-fido): #8908 delete unused file Signed-off-by: shekhar16 <[email protected]> --------- Signed-off-by: shekhar16 <[email protected]>
-
-
* feat(jans-fido): refactor mds3 codebase and server config Signed-off-by: shekhar16 <[email protected]> * feat(jans-fido): revert rename from docker file #9111 Signed-off-by: shekhar16 <[email protected]> * feat(jans-fido): add metadatarefreshinterval #9111 Signed-off-by: shekhar16 <[email protected]> * feat(jans-fido): changes to refactor metadataservers #9111 Signed-off-by: shekhar16 <[email protected]> --------- Signed-off-by: shekhar16 <[email protected]>
-
feat(jans-fido): changes to refactor requestedParties #9111 (#9329)
Signed-off-by: shekhar16 <[email protected]>
-
fix(jans-fido2): resolve failing test case in `FetchMdsProviderServic…
…eTest` (#9299) fix(jans-fido2): resolve failing test case in FetchMdsProviderServiceTest Co-authored-by: Mohammad Abudayyeh <[email protected]>
-
docs(customization): updates to customization document to align with …
…custom assets feature (#9106) * docs(customize): add intro and management sections Signed-off-by: ossdhaval <[email protected]> * docs(customization): add location details Signed-off-by: ossdhaval <[email protected]> * docs(customization): add web customization instructions Signed-off-by: ossdhaval <[email protected]> * docs(customization): fix proofreading issues Signed-off-by: ossdhaval <[email protected]> --------- Signed-off-by: ossdhaval <[email protected]>
-
fix(jans-fido2): removed legacy SuperGluu support #9453 (#9468)
Signed-off-by: Madhumita <[email protected]>
-
feat(jans-fido2): add support for isEnterpriseAttestation in local me… (
#9521) * feat(jans-fido2): add support for isEnterpriseAttestation in local metadata retrieval Signed-off-by: imran-ishaq <[email protected]> * feat(jans-fido2): add new unit test for isEnterpriseAttestation Signed-off-by: imran-ishaq <[email protected]> --------- Signed-off-by: imran-ishaq <[email protected]>
-
Jans fido2 attestation mode 9332 (#9463)
* docs(jans-fido2): replaced skipValidateMdsInAttestationEnabled && skipAttestation with attestationMode Signed-off-by: imran-ishaq <[email protected]> * feat(jans-fido2): replaced skipValidateMdsInAttestationEnabled && skipAttestation with attestation mode Signed-off-by: imran-ishaq <[email protected]> * feat(jans-fido2): update the full flow unit test with monitor attestation mode Signed-off-by: imran-ishaq <[email protected]> --------- Signed-off-by: imran-ishaq <[email protected]>
-
feat(jans-fido2): adding missing imports
Signed-off-by: imran-ishaq <[email protected]>
-
fix(jans-fido2): #9248 Renaming domain to origin and application id t…
…o RpId Signed-off-by: Madhumita <[email protected]>
-
-
fix(jans-fido2): resolved build failure issues
Signed-off-by: imran-ishaq <[email protected]>
-
Jans fido2 replace requested parties 9248 (#9586)
* feat(jans-fido2): changed function type to be accessible and replaced requestParties name and domain with id and origins Signed-off-by: imran-ishaq <[email protected]> * feat(jans-fido2): add test cases for createRpDomain function in AttestationServiceTest Class Signed-off-by: imran-ishaq <[email protected]> --------- Signed-off-by: imran-ishaq <[email protected]>
-
-
fix(jans-fido2): convert attestationMode from enum to sting
Signed-off-by: imran-ishaq <[email protected]>
-
feat(jans-fido): move fidoconfig folder properties to db #9369 (#9611)
* feat(jans-fido): move fidoconfig folder properties to db #9369 Signed-off-by: shekhar16 [email protected] * feat(jans-fido): added specialized exception #9369 Signed-off-by: shekhar16 [email protected] --------- Signed-off-by: shekhar16 [email protected] Co-authored-by: Yuriy Movchan <[email protected]>
-
Signed-off-by: Madhumita Subramaniam <[email protected]>
-
Reflect Authenicator Name with Passkeys (#9716)
* feat(jans-fido2): reflect authenticator name with passkeys Signed-off-by: imran-ishaq <[email protected]> * fix(jans-fido2): handle test cases for authenticator name Signed-off-by: imran-ishaq <[email protected]> --------- Signed-off-by: imran-ishaq <[email protected]> Co-authored-by: Mohammad Abudayyeh <[email protected]>
-
fix(jans-fido2): remove superGluu-related endpoints from FIDO2 Swagge… (
#9624) fix(jans-fido2): remove superGluu-related endpoints from FIDO2 Swagger and ConfigurationControllerTest Signed-off-by: imran-ishaq <[email protected]> Co-authored-by: Mohammad Abudayyeh <[email protected]>
-
chore(deps): bump org.apache.maven.plugins:maven-site-plugin from 4.0…
….0-M12 to 4.0.0-M16 in /jans-scim (#9010) chore(deps): bump org.apache.maven.plugins:maven-site-plugin Bumps [org.apache.maven.plugins:maven-site-plugin](https://github.com/apache/maven-site-plugin) from 4.0.0-M12 to 4.0.0-M16. - [Commits](apache/maven-site-plugin@maven-site-plugin-4.0.0-M12...maven-site-plugin-4.0.0-M16) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-site-plugin dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jose Gonzalez <[email protected]>
-
fix(jans-casa): fix issue caused by refactoring (#9838)
Signed-off-by: shekhar16 <[email protected]>
-
fix(jans-fido2): fix document refactoring issue (#9918)
Signed-off-by: shekhar16 <[email protected]>
-
Add origin parameter in Fido2ExternalAuthenticator script for attesta…
…tion and assertion API calls #9248 (#9974) * feat(jans-fido2): add origin parameter in Fido2ExternalAuthenticator script for attestation and assertion API calls Signed-off-by: imran-ishaq <[email protected]> * refactor(docs): add origin parameter in Fido2ExternalAuthenticator script for attestation and assertion API calls #9248 Signed-off-by: imran-ishaq <[email protected]> * fix(jans-fido2): handle origin if http or https is missing #9248 Signed-off-by: imran-ishaq <[email protected]> --------- Signed-off-by: imran-ishaq <[email protected]>
-
Signed-off-by: imran-ishaq <[email protected]>
-
feat(jans-linux-setup): move fidoconfig folder properties to db
Signed-off-by: Mustafa Baser <[email protected]>
-
fix(jans-fido2): fix issues due unused injects (#10035)
Signed-off-by: shekhar16 <[email protected]>
