Skip to content
Sign in

Changes

Started 2 yr 4 mo ago
Took 1.4 sec
Move the UserInfo into northbound security

The User Info class belongs with the northbound security API which is a factory for it

Signed-off-by: Tim Ward <timothyjward@apache.org>
(commit: e12ff02)
northbound/session/session-impl/src/test/java/org/eclipse/sensinact/nortbound/session/integration/SensinactSessionTest.java southbound/virtual/virtual-temperature-sensor/integration-test.bndrun northbound/sensorthings/rest.gateway/src/test/java/org/eclipse/sensinact/sensorthings/sensing/rest/integration/AbstractIntegrationTest.java northbound/websocket/integration-test.bndrun northbound/websocket/src/main/java/org/eclipse/sensinact/northbound/ws/impl/WebSocketCreator.java northbound/security/openid-connect/src/main/java/org/eclipse/sensinact/gateway/northbound/security/oidc/JwsUserInfo.java distribution/features/northbound-ogc-sensorthings-feature/src/main/resources/northbound-ogc-sensorthings-feature.json northbound/session/session-api/src/main/java/org/eclipse/sensinact/northbound/session/SensiNactSession.java northbound/rest/src/test/java/org/eclipse/sensinact/northbound/rest/integration/SecureAccessTest.java northbound/rest/src/test/java/org/eclipse/sensinact/northbound/rest/integration/notification/ResourceNotificationsTest.java southbound/http/http-device-factory/integration-test.bndrun northbound/rest/integration-test.bndrun northbound/security/openid-connect/src/main/java/org/eclipse/sensinact/gateway/northbound/security/oidc/OIDCTokenValidator.java northbound/security/authentication-api/src/main/java/org/eclipse/sensinact/northbound/security/api/package-info.java southbound/mqtt/mqtt-device-factory/integration-test.bndrun northbound/query-handler/src/test/java/org/eclipse/sensinact/northbound/query/test/integration/MissingEntityTest.java northbound/query-handler/src/test/java/org/eclipse/sensinact/northbound/query/test/integration/DescriptionsTest.java northbound/query-handler/integration-test.bndrun northbound/session/session-impl/src/test/java/org/eclipse/sensinact/nortbound/session/integration/SessionSubscribeTest.java southbound/http/http-device-factory/src/test/java/org/eclipse/sensinact/gateway/southbound/http/factory/integration/HttpDeviceFactoryAuthTest.java southbound/virtual/virtual-temperature-sensor/src/test/java/org/eclipse/sensinact/gateway/southbound/virtual/temperature/integration/TemperatureSensorTest.java distribution/features/northbound-rest-feature/pom.xml northbound/rest/src/main/java/org/eclipse/sensinact/northbound/rest/impl/SensinactSessionProvider.java northbound/rest/src/test/java/org/eclipse/sensinact/northbound/rest/integration/ResourceAccessTest.java northbound/security/authentication-api/pom.xml northbound/websocket/src/test/java/org/eclipse/sensinact/northbound/websocket/integration/SecureWebSocketTest.java northbound/session/session-api/pom.xml southbound/mqtt/mqtt-device-factory/src/test/java/org/eclipse/sensinact/gateway/southbound/mqtt/factory/integration/MqttDeviceFactoryTest.java distribution/features/northbound-ogc-sensorthings-feature/pom.xml northbound/security/openid-connect/src/test/java/org/eclipse/sensinact/gateway/northbound/security/oidc/integration/ValidatorTest.java northbound/websocket/src/main/java/org/eclipse/sensinact/northbound/ws/impl/WebSocketJettyRegistrar.java northbound/session/session-api/src/main/java/org/eclipse/sensinact/northbound/session/SensiNactSessionManager.java southbound/http/http-device-factory/src/test/java/org/eclipse/sensinact/gateway/southbound/http/factory/integration/HttpDeviceFactoryTest.java northbound/rest/src/main/java/org/eclipse/sensinact/northbound/rest/impl/AuthenticationFilter.java core/api/src/main/java/org/eclipse/sensinact/core/security/UserInfo.java northbound/security/security-api/src/main/java/org/eclipse/sensinact/northbound/security/api/package-info.java distribution/features/northbound-ogc-sensorthings-mqtt-feature/pom.xml core/api/src/main/java/org/eclipse/sensinact/core/security/package-info.java southbound/http/http-device-factory/src/test/java/org/eclipse/sensinact/gateway/southbound/http/factory/integration/HttpDeviceFactoryParallelQueries.java northbound/sensorthings/rest.gateway/src/main/java/org/eclipse/sensinact/sensorthings/sensing/rest/impl/SensinactSessionProvider.java northbound/sensorthings/rest.gateway/integration-test.bndrun distribution/features/northbound-oidc-authenticator-feature/pom.xml distribution/features/northbound-oidc-authenticator-feature/src/main/resources/northbound-oidc-authenticator-feature.json northbound/session/session-impl/src/main/java/org/eclipse/sensinact/nortbound/session/impl/SensiNactSessionImpl.java northbound/security/security-api/src/main/java/org/eclipse/sensinact/northbound/security/api/UserInfo.java northbound/session/session-impl/src/main/java/org/eclipse/sensinact/nortbound/session/impl/SessionManager.java southbound/http/http-device-factory/src/test/java/org/eclipse/sensinact/gateway/southbound/http/factory/integration/HttpDeviceFactorySSLTest.java northbound/security/security-api/src/main/java/org/eclipse/sensinact/northbound/security/api/Authenticator.java northbound/security/authentication-api/src/main/java/org/eclipse/sensinact/northbound/security/api/Authenticator.java distribution/features/northbound-rest-feature/src/main/resources/northbound-rest-feature.json northbound/query-handler/src/test/java/org/eclipse/sensinact/northbound/query/test/integration/ResourceAccessTest.java northbound/rest/pom.xml northbound/security/pom.xml northbound/security/openid-connect/integration-test.bndrun northbound/security/security-api/pom.xml northbound/websocket/pom.xml distribution/features/northbound-ogc-sensorthings-mqtt-feature/src/main/resources/northbound-ogc-sensorthings-mqtt-feature.json northbound/security/openid-connect/pom.xml
timothyjward at
Introduce authorization checks in the Session API

* Include a configurable default fallback to allow all, allow authenticated only, or forbid all
* Apply as many checks as possible prior to accessing the gateway thread

Signed-off-by: Tim Ward <timothyjward@apache.org>
(commit: dab4465)
core/impl/src/main/java/org/eclipse/sensinact/core/command/impl/GatewayThreadImpl.java northbound/session/session-impl/src/main/java/org/eclipse/sensinact/nortbound/session/impl/DefaultAuthPolicy.java northbound/session/session-impl/src/test/java/org/eclipse/sensinact/nortbound/session/integration/SensinactSessionTest.java northbound/session/session-impl/src/main/java/org/eclipse/sensinact/nortbound/session/impl/DefaultSessionAuthorizationEngine.java southbound/virtual/virtual-temperature-sensor/src/test/java/org/eclipse/sensinact/gateway/southbound/virtual/temperature/integration/TemperatureSensorTest.java northbound/rest/src/test/java/org/eclipse/sensinact/northbound/rest/integration/MissingEntityTest.java southbound/virtual/virtual-temperature-sensor/integration-test.bndrun northbound/security/security-api/src/main/java/org/eclipse/sensinact/northbound/security/api/AuthorizationEngine.java northbound/session/session-impl/src/test/java/org/eclipse/sensinact/nortbound/session/impl/TestUserInfo.java northbound/rest/src/test/java/org/eclipse/sensinact/northbound/rest/integration/ResourceAccessTest.java pom.xml northbound/query-handler/src/test/java/org/eclipse/sensinact/northbound/query/test/integration/DescriptionsTest.java distribution/features/timescale-history-provider-feature/src/it/resources/config/configuration.json northbound/session/session-impl/src/main/java/org/eclipse/sensinact/nortbound/session/impl/DenyAllAuthorizer.java northbound/session/session-impl/src/main/java/org/eclipse/sensinact/nortbound/session/impl/SessionManager.java southbound/http/http-device-factory/src/test/java/org/eclipse/sensinact/gateway/southbound/http/factory/integration/HttpDeviceFactoryAuthTest.java northbound/sensorthings/rest.gateway/src/test/java/org/eclipse/sensinact/sensorthings/sensing/rest/integration/ObservationHistoryTest.java northbound/rest/src/test/java/org/eclipse/sensinact/northbound/rest/integration/notification/ResourceNotificationsTest.java distribution/features/northbound-oidc-authenticator-feature/src/it/resources/config/configuration.json northbound/query-handler/src/test/java/org/eclipse/sensinact/northbound/query/test/integration/ResourceAccessTest.java southbound/http/http-device-factory/src/test/java/org/eclipse/sensinact/gateway/southbound/http/factory/integration/HttpDeviceFactoryTest.java northbound/sensorthings/rest.gateway/src/test/java/org/eclipse/sensinact/sensorthings/sensing/rest/integration/AbstractIntegrationTest.java core/impl/integration-test.bndrun southbound/http/http-device-factory/integration-test.bndrun northbound/session/session-impl/pom.xml northbound/session/session-impl/src/test/java/org/eclipse/sensinact/nortbound/session/integration/SessionSubscribeTest.java northbound/rest/src/main/java/org/eclipse/sensinact/northbound/rest/impl/RestAccessApplication.java distribution/features/virtual-temperature-sensor-feature/src/it/resources/config/configuration.json northbound/query-handler/integration-test.bndrun northbound/session/session-impl/src/main/java/org/eclipse/sensinact/nortbound/session/impl/AllowAllAuthorizer.java southbound/http/http-device-factory/src/test/java/org/eclipse/sensinact/gateway/southbound/http/factory/integration/HttpDeviceFactoryParallelQueries.java southbound/http/http-device-factory/src/test/java/org/eclipse/sensinact/gateway/southbound/http/factory/integration/HttpDeviceFactorySSLTest.java northbound/session/session-impl/integration-test.bndrun northbound/websocket/src/test/java/org/eclipse/sensinact/northbound/websocket/integration/SecureWebSocketTest.java northbound/rest/src/test/java/org/eclipse/sensinact/northbound/rest/integration/SecureAccessTest.java northbound/websocket/src/test/java/org/eclipse/sensinact/northbound/websocket/integration/WebSocketTest.java southbound/mqtt/mqtt-device-factory/src/test/java/org/eclipse/sensinact/gateway/southbound/mqtt/factory/integration/MqttDeviceFactoryTest.java northbound/rest/src/test/java/org/eclipse/sensinact/northbound/rest/integration/DescriptionsTest.java northbound/session/session-impl/src/main/java/org/eclipse/sensinact/nortbound/session/impl/SensiNactSessionImpl.java northbound/session/session-impl/src/test/java/org/eclipse/sensinact/nortbound/session/impl/DefaultSessionAuthorizationEngineTests.java northbound/query-handler/src/test/java/org/eclipse/sensinact/northbound/query/test/integration/MissingEntityTest.java
timothyjward at
Lint checking fixes

Spacing tidy up and adding a missing license header

Signed-off-by: Tim Ward <timothyjward@apache.org>
(commit: a918712)
northbound/session/session-impl/src/test/java/org/eclipse/sensinact/nortbound/session/impl/TestUserInfo.java northbound/sensorthings/rest.gateway/src/test/java/org/eclipse/sensinact/sensorthings/sensing/rest/integration/ObservationHistoryTest.java northbound/session/session-impl/src/test/java/org/eclipse/sensinact/nortbound/session/integration/SensinactSessionTest.java northbound/session/session-impl/src/test/java/org/eclipse/sensinact/nortbound/session/impl/DefaultSessionAuthorizationEngineTests.java core/impl/src/main/java/org/eclipse/sensinact/core/twin/impl/SensinactDigitalTwinImpl.java northbound/rest/src/test/java/org/eclipse/sensinact/northbound/rest/integration/SecureAccessTest.java northbound/security/security-api/src/main/java/org/eclipse/sensinact/northbound/security/api/AuthorizationEngine.java northbound/rest/src/test/java/org/eclipse/sensinact/northbound/rest/integration/ResourceAccessTest.java northbound/sensorthings/rest.gateway/src/test/java/org/eclipse/sensinact/sensorthings/sensing/rest/integration/AbstractIntegrationTest.java northbound/session/session-impl/src/main/java/org/eclipse/sensinact/nortbound/session/impl/SensiNactSessionImpl.java distribution/features/virtual-temperature-sensor-feature/src/it/resources/config/configuration.json northbound/session/session-impl/src/main/java/org/eclipse/sensinact/nortbound/session/impl/DefaultAuthPolicy.java northbound/session/session-impl/src/test/java/org/eclipse/sensinact/nortbound/session/integration/SessionSubscribeTest.java core/impl/src/main/java/org/eclipse/sensinact/core/model/nexus/ModelNexus.java northbound/session/session-impl/src/main/java/org/eclipse/sensinact/nortbound/session/impl/DenyAllAuthorizer.java core/api/src/main/java/org/eclipse/sensinact/core/twin/SensinactProvider.java northbound/session/session-impl/src/main/java/org/eclipse/sensinact/nortbound/session/impl/DefaultSessionAuthorizationEngine.java northbound/session/session-impl/src/main/java/org/eclipse/sensinact/nortbound/session/impl/AllowAllAuthorizer.java northbound/session/session-impl/src/main/java/org/eclipse/sensinact/nortbound/session/impl/SessionManager.java
timothyjward at
Make the sensiNact build more CI friendly

Since Maven 3.5.0 poms have had the ability to be [CI-friendly](https://maven.apache.org/maven-ci-friendly.html) allowing a more flexible approach to releasing without the need to edit POM files. This also impacts the creation of our feature files, which can now flexibly alter the versions of the bundles they deploy to match what's being built in by CI. The end result should be a much simpler time when we want to tag or release any particular commit.

Signed-off-by: Tim Ward <timothyjward@apache.org>
(commit: 75ebfda)
core/emf-api/pom.xml distribution/features/core-feature/src/main/resources/core-feature.json northbound/gogo-shell/pom.xml core/geo-json/pom.xml northbound/sensorthings/mqtt/pom.xml core/pom.xml distribution/features/pom.xml southbound/history/pom.xml northbound/session/pom.xml southbound/device-factory/parser-json/pom.xml southbound/virtual/virtual-temperature-sensor/pom.xml southbound/device-factory/pom.xml distribution/launcher/pom.xml southbound/http/http-callback-whiteboard/pom.xml distribution/features/jakarta-rest-whiteboard-feature/pom.xml distribution/features/northbound-ogc-sensorthings-mqtt-feature/src/main/resources/northbound-ogc-sensorthings-mqtt-feature.json distribution/features/northbound-websocket-feature/pom.xml northbound/sensorthings/dto/pom.xml northbound/security/security-api/pom.xml examples/model-based/pom.xml northbound/security/pom.xml distribution/pom.xml southbound/pom.xml examples/pom.xml northbound/pom.xml northbound/security/openid-connect/pom.xml southbound/device-factory/device-factory-core/pom.xml distribution/features/northbound-rest-feature/pom.xml distribution/features/northbound-oidc-authenticator-feature/pom.xml examples/generic/pom.xml distribution/features/jakarta-servlet-whiteboard-feature/src/main/resources/jakarta-servlet-whiteboard-feature.json northbound/filters/filters.core/pom.xml northbound/sensorthings/rest.gateway/pom.xml northbound/session/session-api/pom.xml pom.xml southbound/history/history-api/pom.xml core/models/provider/pom.xml sensinact-bom/pom.xml core/models/pom.xml examples/pull-based/pom.xml core/api/pom.xml distribution/test-utils/pom.xml examples/action/pom.xml southbound/virtual/pom.xml examples/push-based/pom.xml northbound/sensorthings/pom.xml southbound/mqtt/mqtt-device-factory/pom.xml distribution/features/core-feature/pom.xml northbound/sensorthings/rest.api/pom.xml distribution/features/jakarta-servlet-whiteboard-feature/pom.xml northbound/session/session-impl/pom.xml northbound/query-handler/pom.xml southbound/mqtt/pom.xml distribution/features/northbound-ogc-sensorthings-feature/pom.xml southbound/device-factory/parser-csv/pom.xml southbound/mqtt/mqtt-client/pom.xml southbound/http/http-device-factory/pom.xml distribution/features/virtual-temperature-sensor-feature/src/main/resources/virtual-temperature-sensor-feature.json northbound/filters/pom.xml core/annotation/pom.xml distribution/features/timescale-history-provider-feature/src/main/resources/timescale-history-provider-feature.json distribution/features/gogo-shell-feature/src/main/resources/gogo-shell-feature.json distribution/features/northbound-ogc-sensorthings-mqtt-feature/pom.xml distribution/features/gogo-shell-feature/pom.xml distribution/features/northbound-rest-feature/src/main/resources/northbound-rest-feature.json distribution/features/northbound-oidc-authenticator-feature/src/main/resources/northbound-oidc-authenticator-feature.json distribution/features/jakarta-rest-whiteboard-feature/src/main/resources/jakarta-rest-whiteboard-feature.json examples/writable/pom.xml southbound/http/pom.xml core/models/metadata/pom.xml distribution/features/timescale-history-provider-feature/pom.xml examples/reflective/pom.xml distribution/features/northbound-websocket-feature/src/main/resources/northbound-websocket-feature.json northbound/websocket/pom.xml distribution/features/virtual-temperature-sensor-feature/pom.xml northbound/sensorthings/filter/pom.xml distribution/assembly/pom.xml northbound/filters/ldap/pom.xml southbound/history/timescale-provider/pom.xml core/impl/pom.xml northbound/rest/pom.xml distribution/features/northbound-ogc-sensorthings-feature/src/main/resources/northbound-ogc-sensorthings-feature.json examples/notification/pom.xml
timothyjward at