KNOX-3395: Add KNOXTOKEN issuance and JWTProvider federation integration tests - #1325

Open

Raghav-Mah3shwari wants to merge 22 commits into

apache:masterfrom

Raghav-Mah3shwari:KNOX-3395

Commits on Jul 24, 2026

KNOX-3395: Add KNOXTOKEN issuance and JWTProvider federation integration tests

Raghav
authored and
Raghav
committed
e228bf0

Commits on Aug 9, 2026

added more tests and logic around revoke and renew

Raghav
authored and
Raghav
committed
804d921

Commits on Aug 11, 2026

Fixed code as per Sandor review
Raghav-maheshwari-08
committed
c4a0458

Commits on Aug 23, 2026

KNOX-3397: Add preauth.auth.header.actor.groups to set actor groups header name explicitly (#1329)

smolnar82
authored and
Raghav-maheshwari-08
committed
2570963
KNOX-3398: Enable Iceberg REST catalog SSL only when ENCRYPT_ALL_PORTS is set (#1330)

smolnar82
authored and
Raghav-maheshwari-08
committed
a68f59c
KNOX-3399 - Make RFC 8693 token exchange work for form-encoded requests and align it with the spec (#1334)

smolnar82
authored and
Raghav-maheshwari-08
committed
2c9e014
KNOX-3403: RFC 8693 token exchange: use the impersonated subject as the token sub on non-server-managed topologies (#1336)

smolnar82
authored and
Raghav-maheshwari-08
committed
dbe876d
KNOX-3386: LDAP Proxy pages backends (#1331)

handavid
authored and
Raghav-maheshwari-08
committed
0c8b243
KNOX-3407: Support for WebSocket mTLS (#1338)

moresandeep
authored and
Raghav-maheshwari-08
committed
5e6b457
KNOX-3409: Validate knoxauth theme name to Harden Branding Support (Reported by Quinn Nguyen) (#1341)

authored and
Raghav-maheshwari-08
committed
ca28c3c
KNOX-3410: KnoxToken enable/disable endpoints perform no caller autho… (#1343)

hanicz
authored and
Raghav-maheshwari-08
committed
97c946e
KNOX-3411: KnoxToken getUserTokens returns every user's token metadat… (#1344)

hanicz
authored and
Raghav-maheshwari-08
committed
7738d50
KNOX-3413: KnoxToken passcode verification accepts a valid passcode for a different token (#1345)

hanicz
authored and
Raghav-maheshwari-08
committed
367f71e
KNOX-3416: KnoxSSO redirects to untrusted site (#1346)

hanicz
authored and
Raghav-maheshwari-08
committed
3868838
KNOX-3417: KnoxLdapRealm builds the LDAP search filter from the client username without RFC-4515 escaping (#1348)

hanicz
authored and
Raghav-maheshwari-08
committed
67faccf
KNOX-3418: Path traversal → arbitrary file write/overwrite in the Apache Knox Admin API (#1349)

hanicz
authored and
Raghav-maheshwari-08
committed
92f030e
Knox as an OAuth 2.0 / OpenID Connect Provider (KnoxIDF) (#1351)

authored and
Raghav-maheshwari-08
committed
55402a1
Bump org.apache.httpcomponents.core5:httpcore5 from 5.3.6 to 5.4.3 (#1347)

dependabot[bot]
authored and
Raghav-maheshwari-08
committed
b74e066
Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.6.3 (#1350)

dependabot[bot]
authored and
Raghav-maheshwari-08
committed
648dc7f
KNOX-3394: Correct outdated unittest documentation in Docker Compose integration test README (#1324)

authored and
Raghav-maheshwari-08
committed
d172e61
KNOX-3278: Update JLine to 3.30.6 (#1181)

bonampak
authored and
Raghav-maheshwari-08
committed
98cc4e8
KNOX-3421 - Upgrade Shiro to 2.2.1 (#1353)

moresandeep
authored and
Raghav-maheshwari-08
committed
29f176b