oic-auth-plugin

oic-auth-plugin copied to clipboard

Fix calculation of expiration timestamp

2

`currentTimestamp` is in millis already which is why it should not be mulitplied by 1000. The constructor of `OicCredentials` is called with `CLOCK.millis()` ([here](https://github.com/jenkinsci/oic-auth-plugin/blob/master/src/main/java/org/jenkinsci/plugins/oic/OicSecurityRealm.java#L1000) and [here](https://github.com/jenkinsci/oic-auth-plugin/blob/master/src/main/java/org/jenkinsci/plugins/oic/OicSecurityRealm.java#L1490)) for the `currentTimestamp` parameter...

mprausa

unable to use with Microsoft AD FS server

2

### Jenkins and plugins versions report `mvn hpi:run` from master (cddbd8ae4694860c0115cb784f87eaa3f32df2cf) Environment Microsoft AD FS server (2022) https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/operations/set-up-an-ad-fs-lab-environment#install-the-ad-fs-server-role ```text nap ``` For whatever reason and despite advertising differently the AD...

jtnord

Log WWW-Authenticate header on errors if present

2

### What feature do you want to see added? Some providers may put additional information in the WWW-Authenticate header when a request fails. This should get logged if present to...

MarkRx

This changes the Google OAuth library which is in maintainance mode with a supported library (nimbusds via pac4j) The library requires that the Issuer is set to enforce security and...

jtnord

Redirect to login page in case token is expired instead of showing an error page

3

Instead of showing an error page, the user should be redirected to the login page. Proposal to solve: https://github.com/jenkinsci/oic-auth-plugin/issues/396 ### Testing done I have tested this with [4.340.ve70636c6590e](https://github.com/jenkinsci/oic-auth-plugin/releases/tag/4.340.ve70636c6590e) and by...

eva-mueller-coremedia

Unexpected signing algorithm PS512 after the last updates

6

### Jenkins and plugins versions report Environment ```Jenkins: 2.477 OS: Linux - 5.14.0-427.35.1.el9_4.x86_64 Java: 21.0.4 - Red Hat, Inc. (OpenJDK 64-Bit Server VM) --- active-directory:2.36 analysis-model-api:12.7.0 antisamy-markup-formatter:162.v0e6ec0fcfcf6 apache-httpcomponents-client-4-api:4.5.14-208.v438351942757 apache-httpcomponents-client-5-api:5.4-118.v199115451c4d asm-api:9.7-33.v4d23ef79fcc8...

tuxmaster5000

Bumps [org.openrewrite.maven:rewrite-maven-plugin](https://github.com/openrewrite/rewrite-maven-plugin) from 5.40.2 to 5.41.0. Release notes Sourced from org.openrewrite.maven:rewrite-maven-plugin's releases. 5.41.0 What's Changed chore(ci): bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.5 to 3.2.6 by @​dependabot in openrewrite/rewrite-maven-plugin#864 chore(ci): bump io.micrometer:micrometer-core from...

dependabot[bot]

Bumps [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) from 10.18.1 to 10.18.2. Release notes Sourced from com.puppycrawl.tools:checkstyle's releases. checkstyle-10.18.2 Checkstyle 10.18.2 - https://checkstyle.org/releasenotes.html#Release_10.18.2 Bug fixes: #15690 - JavadocParagraph: allowNewlineParagraph should allow '\n' after P tag and...

dependabot[bot]

Bumps [org.openrewrite.recipe:rewrite-jenkins](https://github.com/openrewrite/rewrite-jenkins) from 0.13.0 to 0.14.0. Release notes Sourced from org.openrewrite.recipe:rewrite-jenkins's releases. 0.14.0 What's Changed refactor: Update Gradle wrapper by @​shanman190 in openrewrite/rewrite-jenkins#72 Full Changelog: https://github.com/openrewrite/rewrite-jenkins/compare/v0.13.0...v0.14.0 Commits 23f0e74 Merge pull...

dependabot[bot]

Re-use refresh token instead of starting new authorization code flow

2

### What feature do you want to see added? Refresh token support was recently added to oic-auth-plugin and it works as expected for calls with API tokens. However, even when...

ZIRAKrezovic