[midPoint-git] [Evolveum/midpoint] c90cf7: fix for security issue on the self registration page

KaterynaHonchar noreply at github.com
Fri May 26 13:25:08 CEST 2023


  Branch: refs/heads/support-4.4
  Home:   https://github.com/Evolveum/midpoint
  Commit: c90cf7375caea9ffc90ad05f4af0703e9b6ca647
      https://github.com/Evolveum/midpoint/commit/c90cf7375caea9ffc90ad05f4af0703e9b6ca647
  Author: Kateryna Honchar <gonchar.kate at gmail.com>
  Date:   2023-05-25 (Thu, 25 May 2023)

  Changed paths:
    A gui/admin-gui/src/main/java/com/evolveum/midpoint/web/page/login/PageInvitation.java
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/page/login/PageRegistrationBase.java
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/page/login/PageSelfRegistration.html
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/page/login/PageSelfRegistration.java
    A gui/admin-gui/src/main/java/com/evolveum/midpoint/web/security/channel/InvitationAuthenticationChannel.java
    A gui/admin-gui/src/main/java/com/evolveum/midpoint/web/security/factory/channel/InvitationChannelFactory.java
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/security/util/SecurityUtils.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/constants/SchemaConstants.java
    M infra/schema/src/main/java/com/evolveum/midpoint/schema/util/SecurityPolicyUtil.java
    M model/model-api/src/main/java/com/evolveum/midpoint/model/api/ModelInteractionService.java
    M model/model-api/src/main/java/com/evolveum/midpoint/model/api/expr/MidpointFunctions.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/controller/ModelInteractionServiceImpl.java
    M model/model-impl/src/main/java/com/evolveum/midpoint/model/impl/expr/MidpointFunctionsImpl.java
    M repo/security-api/src/main/java/com/evolveum/midpoint/security/api/AuthorizationConstants.java
    M repo/security-api/src/main/java/com/evolveum/midpoint/security/api/SecurityUtil.java

  Log Message:
  -----------
  fix for security issue on the self registration page


  Commit: 78093b8dc788da85042071be3c9aef45fd3b5872
      https://github.com/Evolveum/midpoint/commit/78093b8dc788da85042071be3c9aef45fd3b5872
  Author: Kateryna Honchar <gonchar.kate at gmail.com>
  Date:   2023-05-26 (Fri, 26 May 2023)

  Changed paths:
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/security/filter/MidpointExceptionTranslationFilter.java
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/security/filter/configurers/MidpointExceptionHandlingConfigurer.java
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/security/module/MailNonceFormModuleWebSecurityConfig.java
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/security/module/SamlModuleWebSecurityConfig.java

  Log Message:
  -----------
  fix for invitation url usage without parameters


  Commit: d332cf1b78872e7e08038b25db9d15dafa57447f
      https://github.com/Evolveum/midpoint/commit/d332cf1b78872e7e08038b25db9d15dafa57447f
  Author: Kateryna Honchar <gonchar.kate at gmail.com>
  Date:   2023-05-26 (Fri, 26 May 2023)

  Changed paths:
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/page/login/PageSelfRegistration.java

  Log Message:
  -----------
  self registration page : enable behavior fix


  Commit: bd3da7efd9e51adceaab7eaa3f986005ecb52e75
      https://github.com/Evolveum/midpoint/commit/bd3da7efd9e51adceaab7eaa3f986005ecb52e75
  Author: Kateryna Honchar <gonchar.kate at gmail.com>
  Date:   2023-05-26 (Fri, 26 May 2023)

  Changed paths:
    A config/bdsa-false-positives.yaml
    M config/false-positives.xml
    M testing/story/pom.xml

  Log Message:
  -----------
  Merge branch 'support-4.4' of https://github.com/Evolveum/midpoint into support-4.4


  Commit: fadcb104b4d4d568bb067a874798856e557f9f33
      https://github.com/Evolveum/midpoint/commit/fadcb104b4d4d568bb067a874798856e557f9f33
  Author: Kateryna Honchar <gonchar.kate at gmail.com>
  Date:   2023-05-26 (Fri, 26 May 2023)

  Changed paths:
    M gui/admin-gui/src/main/java/com/evolveum/midpoint/web/page/login/PageInvitation.java

  Log Message:
  -----------
  checkstyle fix


Compare: https://github.com/Evolveum/midpoint/compare/6da36dfb0bce...fadcb104b4d4


More information about the midPoint-svn mailing list