davidblasby
davidblasby
This PR adds support for OAuth2 OpenId Connect Single Sign-on and also support for OIDC Bearer tokens. This has been tested with Azure AD and with KeyCloak (backed by Azure...
[](https://osgeo-org.atlassian.net/browse/GEOS-10646) This PR is improving the support for Bearer Tokens. See the updated GS OpenID documentation for setup and usage. Issue: https://osgeo-org.atlassian.net/browse/GEOS-10646 Summary: attach an Access Token to your HTTP...
[](https://osgeo-org.atlassian.net/browse/GEOS-10648) WIP: this isn't finished - I am early-submitting for early feedback. See Geowebcache-side PR: https://github.com/GeoWebCache/geowebcache/pull/1086 See bug report: https://osgeo-org.atlassian.net/browse/GEOS-10648 1. When GS global services are off allow GWC to...
This is a fairly simple security module for header-based OAUTH2/OIDC type authentication - for example Apache mod_auth_openid and robot-base-access with JWT Access Tokens. New functionality: 1. Extract user name from...
This is for working with @jodygarnett (follow up to his older PR and current PR) for making it easier to troubleshoot ElasticSearch problems. There aren't any code changes, however; 1....
WIP - in progress. Added PR for early review. Test coverage is about 90%. This is a new Security Module - that follows the GeoServer JWT Header security module so...
This is for @josegar74 review. WIP
DO NOT MERGE - EXPERIMENT An issue was reported when using AD FS - the user-info (check token) endpoint didnt have the username in it. However, the username is available...
This is for https://github.com/geonetwork/core-geonetwork/issues/8096 I've made it so that it accepts claims of type `String `or `List` for the audience testing (for the 3 claim). Original bug report was that...
DO NOT MERGE - this is not complete This is a new Wicket `ModalDialog` based `GSModalDialog`. In Wicket 9, the old (used by GS) `ModalWindow` is deprecated (and has CSP...