Skip to content

2.6.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 22 Jul 09:14
· 37 commits to master since this release
v2.6.0
2266fe5

What's Changed

  • Drop Oracle JDK7 from travis as it is not available anymore by @Gnafu in #162
  • Fixes #166: LDAP groups and roles are not recursively searched by @mbarto in #167
  • Fix #168. Created custom provider for pure text request body by @offtherailz in #169
  • Fix #171. Add fixed CacheControl interceptor by @offtherailz in #172
  • Fixes #173: transactional resource insert by @mbarto in #174
  • #175: Increase groupname size by @tdipisa in #177
  • Fix #180. Filter properly user rules in RESTServiceImpl by @offtherailz in #181
  • Nested groups support for LDAP based authentication by @mbarto in #184
  • fix #185 Login fail on first attempt using LDAP by @offtherailz in #186
  • Remove winbuild build status by @Gnafu in #189
  • Headers based security and external authentication improvements by @mbarto in #192
  • Implement support to manage permissions for external authentication by @mbarto in #194
  • #195: Initial implementation of read-only LDAP User and UserGroup DAOs by @mbarto in #197
  • Add compliant attribute update REST API by @offtherailz in #198
  • Ldap fixes and migration scripts by @mbarto in #201
  • #202: always assign everyone group to guest user by @mbarto in #203
  • Allow to remove header group prefix by @offtherailz in #207
  • Updated geostore versions to 1.6 by @offtherailz in #211
  • Sort resources by name by @offtherailz in #214
  • #216 added users=true/false parameter to "all usergroups" rest API to… by @mbarto in #217
  • Update 1.7-SNAPSHOT by @offtherailz in #218
  • #219: improvements to the LDAP compatible DAOs to fully replace the standard ones in a MapStore standard security configuration by @mbarto in #220
  • #223: h2 to pgsql cli utility by @mbarto in #226
  • #6825: fixes password change for MapStore by @mbarto in #228
  • #229: unescape quotes inside other quotes (with a double escape) when… by @mbarto in #230
  • Add test workflow for maven by @offtherailz in #234
  • Upgrade of Spring dependency to a more recent version by @mbarto in #233
  • #239: remove jsr311, conflicting with the same api imported by cxf in… by @mbarto in #240
  • #237: upgrade PostgreSQL driver to 42.2.23, to enable latest PostgreS… by @mbarto in #238
  • Improving geostore datasource connection properties by @tdipisa in #241
  • Upgrading log4j to a version that does not support RCEs by @aaime in #243
  • Corporate proxy issue prevents connections between MS and GN by @shad-git in #250
  • Update master to 1.9.x by @dromagnoli in #254
  • bump spring version by @taba90 in #262
  • change hibernate and google genric-dao versions by @taba90 in #270
  • Backport ldap fix by @taba90 in #273
  • Add open id support by @taba90 in #277
  • Add keycloak support by @taba90 in #282
  • add redirect uri configuration by @taba90 in #283
  • remove unused repositories by @taba90 in #284
  • use https in maven2 repo by @taba90 in #285
  • another maven2 repo fix by @taba90 in #286
  • Update geostore-ovr.properties by @offtherailz in #287
  • avoid startup failures on missing keycloak json config by @taba90 in #291
  • fix jsessionid by @taba90 in #289
  • authorize anonymous on refresh token endpoint by @taba90 in #293
  • set provider keycloak on refresh token anonymous requestes by @taba90 in #294
  • (#290) LDAP UserDAO avoid loading groups' nested users by @taba90 in #292
  • Direct integration, Keycloak by @taba90 in #288
  • remove xom depedencies by @taba90 in #299
  • [#8440] Problem with expired / invalid sessions by @taba90 in #300
  • remove keycloak post logout redirect by @taba90 in #301
  • remove comment line from pom.xml by @taba90 in #302
  • Google openid - look up chache bean by name by @taba90 in #303
  • get username by session id openid + keycloak by @taba90 in #304
  • synch groups with keycloak by @taba90 in #307
  • Add user group attributes by @taba90 in #278
  • Update to log4j2 by @taba90 in #316
  • [github-action] Bump version to 2.1 by @github-actions[bot] in #320
  • Create release.yml by @offtherailz in #321
  • Cleared out redundant dom4j dependency by @Mike7311 in #331
  • [Fixes #9583] Unadvertised resources by @afabiani in #332
  • [Fixes #9550] Show creator/editor in 'Edit properties' by @afabiani in #333
  • [ISSUE #9550] Show creator/editor in 'Edit properties' by @afabiani in #335
  • Update postgresql-migration-from-v.2.0.0-to-v2.1.0.sql by @offtherailz in #337
  • [github-action] Bump version to 2.2 by @github-actions[bot] in #339
  • Dependency updates by @tdipisa in #340
  • Fix #344. Remove NVD check by default by @offtherailz in #345
  • OIDC provider by @afabiani in #330
  • refreshed token is ignored by @gertux in #323
  • Bump org.codehaus.jettison:jettison from 1.5.2 to 1.5.4 in /src by @dependabot[bot] in #351
  • Bump org.springframework.security:spring-security-core from 5.6.12 to 5.7.12 in /src by @dependabot[bot] in #350
  • Bump com.h2database:h2 from 1.3.175 to 2.2.220 in /src by @dependabot[bot] in #348
  • Bump org.mortbay.jetty:jetty from 6.1.14 to 6.1.23 in /src by @dependabot[bot] in #347
  • Bump org.mortbay.jetty:jetty from 6.1.14 to 6.1.23 in /src by @afabiani in #346
  • Revert "Bump com.h2database:h2 from 1.3.175 to 2.2.220 in /src" by @afabiani in #352
  • [FIXES #2408] Refresh Token and Logout OIDC requests by @afabiani in #354
  • [FIXES #2971] MapStore - SSO keycloak kerberos by @afabiani in #356
  • Support for OIDC scopes by @afabiani in #357
  • Bump commons-io from 2.1 to 2.7 in /src by @dependabot[bot] in #222
  • [github-action] Bump version to 2.3 by @github-actions[bot] in #364
  • Fix versions for 2.3-SNAPSHOT by @offtherailz in #367
  • Fix modules by @offtherailz in #366
  • #369 Clean up maven profiles by @offtherailz in #370
  • Bump commons-io:commons-io from 2.7 to 2.14.0 in /src by @dependabot[bot] in #371
  • Bump org.springframework.security:spring-security-web from 5.7.12 to 5.7.13 in /src by @tdipisa in #387
  • [QA] pom cleanup and organization by @afabiani in #388
  • Update mvn compiler plugin in root pom.xml to run with java 11 by @tdipisa in #390
  • Improve the way how we check the OIDC Access Token Expiration and Val… by @afabiani in #391
  • Review of endpoint to return all resources by @axl8713 in #392
  • Review of endpoints to return a single resource by @axl8713 in #393
  • Review of usergroup endpoint by @axl8713 in #394
  • Fixed group filter parsing in boolean filters. by @axl8713 in #395
  • Added count in get all usergroups operation result. by @axl8713 in #397
  • [FIXES #398] Session Refresh method should update the access_token too and not only the refresh one by @afabiani in #399
  • Restored resource entity XML serialization. by @axl8713 in #400
  • Revised unadvertised resources filtering. by @axl8713 in #405
  • Support for Tag backend. by @axl8713 in #396
  • Support for user favorites. by @axl8713 in #402
  • Optimized user permission checks on resource. by @axl8713 in #406
  • Fixed missing favorites fetch in full resource loading. by @axl8713 in #407
  • [FIXES #413] REST login createSession overrides both obtained access_token and expiring by @afabiani in #414
  • Optimized admin permission checks on resource. by @axl8713 in #408
  • Prevented duplicated tags by @axl8713 in #416
  • Fixed full resource serialization by @axl8713 in #417
  • [github-action] Bump version to 2.4 by @github-actions[bot] in #419
  • Updating actions version in CI.yml by @tdipisa in #424
  • GeoStoreInit - shunt password encoding (#420) by @pmauduit in #421
  • Improved logging on authentication by @offtherailz in #427
  • Fix missing PWEncoder set by @offtherailz in #428
  • [FIXES #426] Support for direct integration on security settings by @afabiani in #429
  • upgrade spring framework to version 5.3.39 by @afabiani in #423
  • [FIXES #426] Support for direct integration on security settings (#429) by @afabiani in #431
  • [FIXES #409] Add Username Remapping & Uppercase Group Names Support in OAuth2 Authentication Filter by @afabiani in #410
  • Update of oracle *ddl.xml and *dml.xml files in geoserver/role and geoserver/usergroup by @humpy125 in #328
  • Removed editor overwrite at resource permission update. by @axl8713 in #433
  • Align geostore dependencies with the MapStore ones by @afabiani in #436
  • Remove any apache.commons.lang version 2 import from source code by @afabiani in #438
  • Fixed tag update bug. by @axl8713 in #439
  • Adding ID_TOKEN log info ad Debug level by @afabiani in #442
  • Making OAuth2GeoStoreAuthenticationFilter resilient to possible group name duplication by @afabiani in #444
  • Grant access to MapStore resources by IP by @axl8713 in #447
  • Added canCopy attribute to ShortResource representation. by @axl8713 in #448
  • Revised resource permission check based on IP addresses. by @axl8713 in #451
  • Added conditional case insensitivity to LDAP usernames. by @axl8713 in #454
  • Handled user remote groups update. by @axl8713 in #455
  • LazyInitializationException error on group attribute assignment by @afabiani in #458
  • Setup mvn with SFTP by @offtherailz in #460
  • Enhance release workflow with SSH setup by @offtherailz in #463
  • [github-action] Bump version to 2.5 by @github-actions[bot] in #462
  • Fixed NPE in UserDAO findFavoritedBy default implementation. by @axl8713 in #466
  • Revised user favorites handling. by @axl8713 in #469
  • Updated DB create schema scripts to latest changes. by @axl8713 in #472
  • Fixed admin roles checking when adding favorites with external security. by @axl8713 in #475
  • [github-action] Bump version to 2.6 by @github-actions[bot] in #482
  • Create backport.yml by @offtherailz in #492
  • Applied user and groups namelike filter sql normalization only for db searches (#483). by @axl8713 in #490
  • Updated ExternalSecurityDAO to handle also security rule IP ranges (#481). by @axl8713 in #486
  • Fixed group permissions checking to include security rule groupname. by @axl8713 in #484
  • Made group filter match also security rule groupname. (#480) by @axl8713 in #491
  • Fix token refresh failure and cache expiration (#465) by @afabiani in #485
  • Fixed resource permission check for guest user. ( #502) by @axl8713 in #503
  • Fixed canwrite check based on dummy ids. by @axl8713 in #507
  • Fix user group listing when in LDAP direct mode. by @axl8713 in #514
  • Made LDAP usergroup dao return only roles/groups for the user. by @axl8713 in #517
  • Fix ldap group listing by @axl8713 in #520
  • Set canCopy to false if user is a guest. by @axl8713 in #523
  • Unified OIDC security layer and documentation site by @afabiani in #471
  • [2.6.x] Fix OIDC logout, stale token reuse, sensitive logging and mapping escaping by @afabiani in #546
  • [2.6.x] Surface the real OIDC failure cause on the login callback response by @afabiani in #547
  • [2.6.x] Fix OIDC session loss on token refresh despite regular client polling by @afabiani in #550
  • [2.6.x] Add defaultGroups: groups always assigned on IdP login by @afabiani in #551
  • [Backport 2.6.x] Support cascadeResourceDelete on user deletion by @offtherailz in #564
  • Set HeaderWriterFilter's shouldWriteHeadersEagerly to true. by @axl8713 in #562
  • OAuth timeouts for IdP token requests by @axl8713 in #569
  • Revised timeouts and added close connection header for token request. by @axl8713 in #572
  • Added close connection header for all oauth2 requests. by @axl8713 in #573
  • Added timeouts for all oauth2 requests. by @axl8713 in #574
  • Fixed token revoking call to IdP. by @axl8713 in #575

New Contributors

Full Changelog: v1.4.1...v2.6.0

Contributors

aaime, pmauduit, and 13 other contributors
Assets 2
Loading