nifi/nifi-commons
Bryan Bende dcc4fb00a5
NIFI-7888 Added support for authenticating via SAML
- Add dependency on spring-security-saml2-core
- Updated AccessResource with new SAML end-points
- Updated Login/Logout filters to handle SAML scenario
- Updated logout process to track a logout request using a cookie
- Added database storage for cached SAML credential and user groups
- Updated proxied requests when clustered to send IDP groups in a header
- Updated X509 filter to process the IDP groups from the header if present
- Updated admin guide
- Fixed logout action on error page

- Updated UserGroupProvider with a default method for getGroupByName
- Updated StandardManagedAuthorizer to combine groups from request with groups from lookup
- Updated UserGroupProvider implementations with more efficient impl of getGroupByName
- Added/updated unit tests

- Ensure signing algorithm is applied to all signatures and not just metadata signatures
- Added property to specify signature digest algorithm

- Added option to specify whether JDK truststore or NiFi's truststore should be used when connecting to IDP over https
- Added properties to configure connect and read timeouts for http client

- Added URL encoding of issuer when generating JWT to prevent potential issue with the frontend performing base64 decoding

- Made atomic replace methods for storing groups and saml credential in database

- Added properties to control AuthnRequestsSigned and WantAssertionsSigned in the generated service provider metadata

- Dynamically determine the private key alias from the keystore and remove the property for specifying the signing key alias

- Fixed unit test

- Added property to specify an optional identity attribute which would be used instead of NameID

- Cleaned up logging

- Fallback to keystore password when key password is blank

- Make signature and digest default to SHA-256 when no value provided in nifi.properties

This closes #4614
2020-11-18 12:44:02 -05:00
..
nifi-data-provenance-utils NIFI-7692 updating for next dev release 1.13.0 2020-08-18 14:48:02 -07:00
nifi-expression-language NIFI-7844 - substring should return empty instead of throwing IndexOutOfBoundsException 2020-10-01 19:45:26 -04:00
nifi-flowfile-packager NIFI-7692 updating for next dev release 1.13.0 2020-08-18 14:48:02 -07:00
nifi-hl7-query-language NIFI-7692 updating for next dev release 1.13.0 2020-08-18 14:48:02 -07:00
nifi-json-utils NIFI-7692 updating for next dev release 1.13.0 2020-08-18 14:48:02 -07:00
nifi-logging-utils NIFI-7692 updating for next dev release 1.13.0 2020-08-18 14:48:02 -07:00
nifi-metrics NIFI-7692 updating for next dev release 1.13.0 2020-08-18 14:48:02 -07:00
nifi-parameter NIFI-7692 updating for next dev release 1.13.0 2020-08-18 14:48:02 -07:00
nifi-properties NIFI-7888 Added support for authenticating via SAML 2020-11-18 12:44:02 -05:00
nifi-record NIFI-7981 - add support for enum type in avro schema 2020-11-05 18:19:55 -05:00
nifi-record-path NIFI-7692 updating for next dev release 1.13.0 2020-08-18 14:48:02 -07:00
nifi-rocksdb-utils NIFI-7692 updating for next dev release 1.13.0 2020-08-18 14:48:02 -07:00
nifi-schema-utils NIFI-7557: uses a canonical representation of strings when recovering data from FlowFile Repository in order to avoid using huge amounts of heap when not necessary 2020-09-03 10:21:50 -04:00
nifi-security-utils NIFI-7719 Initial refactoring to NiFiClient in CLI to support additional authentication mechanisms 2020-10-27 13:44:42 +01:00
nifi-security-utils-api NIFI-7804 Split nifi-security-utils into sub-module for nifi-security… (#4533) 2020-09-17 12:52:22 -04:00
nifi-site-to-site-client NIFI-7804 Split nifi-security-utils into sub-module for nifi-security… (#4533) 2020-09-17 12:52:22 -04:00
nifi-socket-utils NIFI-7804 Split nifi-security-utils into sub-module for nifi-security… (#4533) 2020-09-17 12:52:22 -04:00
nifi-utils NIFI-7804 Split nifi-security-utils into sub-module for nifi-security… (#4533) 2020-09-17 12:52:22 -04:00
nifi-web-utils NIFI-7692 updating for next dev release 1.13.0 2020-08-18 14:48:02 -07:00
nifi-write-ahead-log NIFI-7557: uses a canonical representation of strings when recovering data from FlowFile Repository in order to avoid using huge amounts of heap when not necessary 2020-09-03 10:21:50 -04:00
pom.xml NIFI-7401 Add ZooKeeper client TLS to CuratorLeaderElectionManager 2020-10-20 11:20:43 -04:00