Commit Graph

24866 Commits

Author SHA1 Message Date
Joakim Erdfelt 2b5c671d67
Merge pull request #9695 from eclipse/dependabot/maven/jetty-10.0.x/org.testcontainers-testcontainers-bom-1.18.0
Bump testcontainers-bom from 1.17.6 to 1.18.0
2023-05-01 06:15:20 -05:00
Joakim Erdfelt 872b39931e
Merge pull request #9694 from eclipse/dependabot/maven/jetty-10.0.x/org.asciidoctor-asciidoctorj-diagram-2.2.7
Bump asciidoctorj-diagram from 2.2.4 to 2.2.7
2023-05-01 06:15:08 -05:00
Lachlan Roberts c2d2c1eadb Issue #9554 - changes from review
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2023-05-01 19:23:57 +10:00
Lachlan Roberts d0294fc10c Issue #9554 - changes from review
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2023-05-01 18:05:55 +10:00
Lachlan Roberts 2463f8c9f4 deprecate PushSessionCacheFilter
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2023-05-01 14:31:14 +10:00
Lachlan Roberts 1ee79f548c Issue #9554 - additional cleanups and testing
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2023-05-01 12:12:15 +10:00
dependabot[bot] c60e2f1d91
Bump maven-checkstyle-plugin from 3.2.1 to 3.2.2
Bumps [maven-checkstyle-plugin](https://github.com/apache/maven-checkstyle-plugin) from 3.2.1 to 3.2.2.
- [Release notes](https://github.com/apache/maven-checkstyle-plugin/releases)
- [Commits](https://github.com/apache/maven-checkstyle-plugin/compare/maven-checkstyle-plugin-3.2.1...maven-checkstyle-plugin-3.2.2)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-checkstyle-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-05-01 01:11:26 +00:00
dependabot[bot] b3663f3a45
Bump maven-enforcer-plugin from 3.2.1 to 3.3.0
Bumps [maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.2.1 to 3.3.0.
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.2.1...enforcer-3.3.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-05-01 01:08:22 +00:00
dependabot[bot] 7df9fb1256
Bump maven-plugin-plugin from 3.8.1 to 3.8.2
Bumps [maven-plugin-plugin](https://github.com/apache/maven-plugin-tools) from 3.8.1 to 3.8.2.
- [Release notes](https://github.com/apache/maven-plugin-tools/releases)
- [Commits](https://github.com/apache/maven-plugin-tools/compare/maven-plugin-tools-3.8.1...maven-plugin-tools-3.8.2)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-plugin-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-05-01 01:03:04 +00:00
dependabot[bot] 1913841985
Bump testcontainers-bom from 1.17.6 to 1.18.0
Bumps [testcontainers-bom](https://github.com/testcontainers/testcontainers-java) from 1.17.6 to 1.18.0.
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testcontainers/testcontainers-java/compare/1.17.6...1.18.0)

---
updated-dependencies:
- dependency-name: org.testcontainers:testcontainers-bom
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-05-01 01:02:38 +00:00
dependabot[bot] 53bfbcb6f2
Bump asciidoctorj-diagram from 2.2.4 to 2.2.7
Bumps [asciidoctorj-diagram](https://github.com/asciidoctor/asciidoctorj-diagram) from 2.2.4 to 2.2.7.
- [Release notes](https://github.com/asciidoctor/asciidoctorj-diagram/releases)
- [Commits](https://github.com/asciidoctor/asciidoctorj-diagram/commits)

---
updated-dependencies:
- dependency-name: org.asciidoctor:asciidoctorj-diagram
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-05-01 01:02:22 +00:00
dependabot[bot] b8621b1431
Bump maven.resolver.version from 1.9.7 to 1.9.8
Bumps `maven.resolver.version` from 1.9.7 to 1.9.8.

Updates `maven-resolver-api` from 1.9.7 to 1.9.8
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.7...maven-resolver-1.9.8)

Updates `maven-resolver-util` from 1.9.7 to 1.9.8
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.7...maven-resolver-1.9.8)

Updates `maven-resolver-spi` from 1.9.7 to 1.9.8
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.7...maven-resolver-1.9.8)

Updates `maven-resolver-impl` from 1.9.7 to 1.9.8
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.7...maven-resolver-1.9.8)

Updates `maven-resolver-connector-basic` from 1.9.7 to 1.9.8
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.7...maven-resolver-1.9.8)

Updates `maven-resolver-transport-file` from 1.9.7 to 1.9.8
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.7...maven-resolver-1.9.8)

Updates `maven-resolver-transport-http` from 1.9.7 to 1.9.8
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.7...maven-resolver-1.9.8)

---
updated-dependencies:
- dependency-name: org.apache.maven.resolver:maven-resolver-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-util
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-spi
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-impl
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-connector-basic
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-file
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-http
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-05-01 01:00:18 +00:00
dependabot[bot] 2f8d7aa9d7
Bump logback-core from 1.3.6 to 1.3.7
Bumps [logback-core](https://github.com/qos-ch/logback) from 1.3.6 to 1.3.7.
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.3.6...v_1.3.7)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-05-01 00:58:50 +00:00
dependabot[bot] 0caeb0ade5
Bump apache.directory.api.version from 2.1.2 to 2.1.3
Bumps `apache.directory.api.version` from 2.1.2 to 2.1.3.

Updates `api-ldap-schema-data` from 2.1.2 to 2.1.3

Updates `api-ldap-model` from 2.1.2 to 2.1.3

Updates `api-util` from 2.1.2 to 2.1.3
- [Release notes](https://github.com/apache/directory-ldap-api/releases)
- [Commits](https://github.com/apache/directory-ldap-api/compare/2.1.2...2.1.3)

Updates `api-asn1-api` from 2.1.2 to 2.1.3

---
updated-dependencies:
- dependency-name: org.apache.directory.api:api-ldap-schema-data
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: org.apache.directory.api:api-ldap-model
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.directory.api:api-util
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.directory.api:api-asn1-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-05-01 00:58:27 +00:00
Greg Wilkins cba1fd6930
Fix #9685 Date is not a content header (#9687)
resetContent does not reset Date Header

Signed-off-by: gregw <gregw@webtide.com>
2023-04-29 13:36:12 +02:00
Lachlan Roberts fa32199559 Merge remote-tracking branch 'origin/jetty-10.0.x' into jetty-10.0.x-9554-qpack-hpack 2023-04-28 16:25:34 +10:00
Joakim Erdfelt 96d2977942
Merge pull request #9646 from eclipse/release-10.0.15
Merge Release 10.0.15 back into `jetty-10.0.x`
2023-04-19 09:28:09 -05:00
Joakim Erdfelt f998745165
Fixing jetty-maven-plugin it tests invoker:install missing deps 2023-04-19 07:56:05 -05:00
Joakim Erdfelt 15c07165ea
Fixing jetty-runner it tests invoker install missing deps 2023-04-19 06:34:53 -05:00
Joakim Erdfelt 5babd20c4f
Cleanup VERSION.txt in `jetty-10.0.x`
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2023-04-18 13:35:45 -05:00
Lachlan Roberts a7b0b727dd Issue #9554 - add javadoc for huffman / n-bit integer classes and remove static decode methods
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2023-04-18 15:24:59 +10:00
Lachlan Roberts 09e6e6b211 Issue #9554 - add javadoc for illegal vchar methods and move to HttpTokens
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2023-04-18 10:46:29 +10:00
Lachlan Roberts c3b6b47915 Use ISO-8859-1 for encoding/decoding in huffman/hpack/qpack
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2023-04-17 17:11:14 +10:00
Lachlan Roberts b6d89af3ea Issue #9554 - fix test expectations for hpack
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2023-04-12 15:36:54 +10:00
Joakim Erdfelt ca3c1756ad
Updating to version 10.0.16-SNAPSHOT 2023-04-11 13:23:25 -05:00
Joakim Erdfelt 68017dbd00
Updating to version 10.0.15 2023-04-11 12:24:32 -05:00
Lachlan Roberts ebec7d2ea3 Issue #9554 - move common hpack/qpack code to jetty-http
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2023-04-11 16:51:37 +10:00
Lachlan 24b7d06fd5
Issue #9464 - Add optional configuration to log user out after OpenID idToken expires. (Jetty-10) (#9528)
* improvements to logout from the OpenIdLoginService validate
* respect idToken expiry for lifetime of login
* fix checkstyle error
* Add respectIdTokenExpiry configuration
* changes from review
* rename respectIdTokenExpiry to logoutWhenIdTokenIsExpired
* changes from review

---------

Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
2023-04-11 12:20:16 +10:00
Joakim Erdfelt 81efae2f98
jetty-start cleanup (#9555)
* Extract jars/zips using zipfs
* Restrict MavenMetadata external DTD/XSD access
* Introduce --allow-insecure-http-downloads
* Produce debug log if file exists in destination during copy.
* Simpler MavenMetadata
* If `maven.repo.uri` has been redeclared by user, automatically set allow insecure http downloads.

---------

Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2023-04-10 08:53:58 -05:00
Simone Bordet 2c61011de1
Fixes #6184 - JEP-411 will deprecate/remove the SecurityManager from … (#9616)
* Fixes #6184 - JEP-411 will deprecate/remove the SecurityManager from the JVM.

Removed usages of `SecurityManager` and `AccessControlller.doPrivileged()`.
In places where they are still necessary, now using reflection via newly introduced `SecurityUtils` class.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2023-04-06 10:59:02 +02:00
Lachlan 795315f6ff
Merge pull request #9531 from eclipse/jetty-10.0.x-multiPartTestImprovment
parameterize MultiPartServletTest for complianceModes and add extra test
2023-04-06 09:34:34 +10:00
Joakim Erdfelt 3e42cbfd7b
Fixes #9556 - Better prompt for input on Password (#9557)
* Fixes #9556 - Better prompt for input on Password
* Allow blank username (results in no CRYPT output)
* Error on blank password during input
* Fixing PasswordTest.testCommandLineUsage
* Changes from review

Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2023-04-05 16:02:01 -05:00
Ludovic Orban 9ff24ea443 #9622 replace wait loops with awaitility and ensure the tested values are stable for a certain duration
Signed-off-by: Ludovic Orban <lorban@bitronix.be>
2023-04-05 18:52:05 +02:00
Joakim Erdfelt 642ce818ae
Update README about build tools (#9545)
* Update README about build tools
* Add Docker as tool needed for third party testing
* fast build and jdk to use
* add home/runner locations/branches

---------

Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
Signed-off-by: Olivier Lamy <olamy@apache.org>
Co-authored-by: Olivier Lamy <olamy@apache.org>
2023-04-05 08:59:50 -05:00
Joakim Erdfelt a87784cf5d
Merge pull request #9585 from eclipse/dependabot/maven/jetty-10.0.x/maven.surefire.plugin.version-3.0.0
Bump maven.surefire.plugin.version from 3.0.0-M9 to 3.0.0
2023-04-03 14:30:03 -05:00
Joakim Erdfelt 7c03051151
Merge pull request #9575 from eclipse/dependabot/maven/jetty-10.0.x/org.infinispan.protostream-protostream-4.6.2.Final
Bump protostream from 4.6.1.Final to 4.6.2.Final
2023-04-03 13:10:20 -05:00
dependabot[bot] bc8bd45f5a
Bump maven.surefire.plugin.version from 3.0.0-M9 to 3.0.0
Bumps `maven.surefire.plugin.version` from 3.0.0-M9 to 3.0.0.

Updates `maven-failsafe-plugin` from 3.0.0-M9 to 3.0.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.0.0-M9...surefire-3.0.0)

Updates `maven-surefire-plugin` from 3.0.0-M9 to 3.0.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.0.0-M9...surefire-3.0.0)

Updates `surefire-junit47` from 3.0.0-M9 to 3.0.0

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.surefire:surefire-junit47
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-02 16:36:32 +00:00
dependabot[bot] 10f79e19bd
Bump protostream from 4.6.1.Final to 4.6.2.Final
Bumps [protostream](https://github.com/infinispan/protostream) from 4.6.1.Final to 4.6.2.Final.
- [Release notes](https://github.com/infinispan/protostream/releases)
- [Commits](https://github.com/infinispan/protostream/commits)

---
updated-dependencies:
- dependency-name: org.infinispan.protostream:protostream
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-02 16:36:31 +00:00
Joakim Erdfelt 59646cdf4c
Merge pull request #9614 from eclipse/fix/10.0.x/dependabot-rollup-2023-april
Jetty 10 - Dependabot Rollup (2023 - April)
2023-04-02 10:32:39 -05:00
Joakim Erdfelt fc06feab6b
Bump osgi.util.promise to 1.3.0
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2023-04-02 08:45:15 -05:00
Joakim Erdfelt 64b8a7fa2e
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.eclipse.platform-org.eclipse.osgi-3.18.300' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:48 -05:00
Joakim Erdfelt 6de595c8e1
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.eclipse.platform-org.eclipse.osgi.util-3.7.200' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:46 -05:00
Joakim Erdfelt 3ddb5ee8f1
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.eclipse.tycho-tycho-p2-repository-plugin-3.0.4' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:44 -05:00
Joakim Erdfelt 05b14ff668
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.codehaus.plexus-plexus-utils-3.5.1' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:39 -05:00
Joakim Erdfelt d57b0d7317
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.asciidoctor-asciidoctor-maven-plugin-2.2.3' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:37 -05:00
Joakim Erdfelt 2048f5f8bd
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.apache.maven.scm-maven-scm-provider-jgit-2.0.0' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:34 -05:00
Joakim Erdfelt 75f9bf0f46
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.apache.maven.plugins-maven-resources-plugin-3.3.1' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:31 -05:00
Joakim Erdfelt 5a02f7de71
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.apache.maven.plugins-maven-release-plugin-3.0.0' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:29 -05:00
Joakim Erdfelt 9baa5089b8
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.apache.maven.plugins-maven-invoker-plugin-3.5.1' into fix/10.0.x/dependabot-rollup-2023-april
# Conflicts:
#	pom.xml
2023-04-02 06:39:26 -05:00
Joakim Erdfelt 8241c6ab1f
Merge remote-tracking branch 'origin/dependabot/maven/jetty-10.0.x/org.apache.maven.plugins-maven-install-plugin-3.1.1' into fix/10.0.x/dependabot-rollup-2023-april 2023-04-02 06:39:01 -05:00