Messages by Thread
-
[jira] [Updated] (CXF-9236) Hawk validator: nonce/replay protection silently disabled by default (NonceVerifier never wired) — fail closed or auto-wire
Guanping Zhang (Jira)
-
[jira] [Created] (CXF-9237) JCacheOAuthDataProvider.createCache() sets no expiry policy — cache entries (incl. expired tokens) are never evicted
Guanping Zhang (Jira)
-
[jira] [Created] (CXF-9236) Hawk validator: nonce/replay protection silently disabled by default (NonceVerifier never wired) — fail closed or auto-wire
Guanping Zhang (Jira)
-
[jira] [Commented] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted
Guanping Zhang (Jira)
-
[jira] [Comment Edited] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request
Freeman Yue Fang (Jira)
-
[jira] [Resolved] (CXF-9234) Concurrent DynamicClientFactory.createClient for the same WSDL url corrupts the cached schema DOM and spins forever at 100% CPU
Freeman Yue Fang (Jira)
-
[jira] [Commented] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request
Neena Jacob (Jira)
-
[jira] [Updated] (CXF-9235) Invocation.Builder.property() settings ignored by HTTP transport for set.content.type.for.empty.request
Neena Jacob (Jira)
-
[jira] [Updated] (CXF-9235) set.content.type.for.empty.request seems to be ignored in DELETE request
Neena Jacob (Jira)
-
[jira] [Created] (CXF-9235) set.content.type.for.empty.request seems to be ignored in DELETE request
Neena Jacob (Jira)
-
[jira] [Updated] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :(
Valentino Porta (Jira)
-
[jira] [Updated] (CXF-9220) Remove Apache Derby since it is retired
Andriy Redko (Jira)
-
[jira] [Assigned] (CXF-9234) Concurrent DynamicClientFactory.createClient for the same WSDL url corrupts the cached schema DOM and spins forever at 100% CPU
Freeman Yue Fang (Jira)
-
[jira] [Created] (CXF-9234) Concurrent DynamicClientFactory.createClient for the same WSDL url corrupts the cached schema DOM and spins forever at 100% CPU
David Richter (Jira)
-
[jira] [Comment Edited] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :(
Valentino Porta (Jira)
-
[jira] [Commented] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :(
Valentino Porta (Jira)
-
[jira] [Created] (CXF-9233) AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT log is disable :(
Valentino Porta (Jira)
-
[jira] [Resolved] (CXF-9223) completeAudienceMatch=false defaults to prefix matching for audience validation, widening resource access
Colm O hEigeartaigh (Jira)
-
[jira] [Commented] (CXF-9223) completeAudienceMatch=false defaults to prefix matching for audience validation, widening resource access
Colm O hEigeartaigh (Jira)
-
[jira] [Updated] (CXF-9223) completeAudienceMatch=false defaults to prefix matching for audience validation, widening resource access
Colm O hEigeartaigh (Jira)
-
[jira] [Assigned] (CXF-9223) completeAudienceMatch=false defaults to prefix matching for audience validation, widening resource access
Colm O hEigeartaigh (Jira)
-
[jira] [Resolved] (CXF-9225) OIDC RP does not enforce nonce validation for Implicit/Hybrid flows
Colm O hEigeartaigh (Jira)
-
[jira] [Updated] (CXF-9225) OIDC RP does not enforce nonce validation for Implicit/Hybrid flows
Colm O hEigeartaigh (Jira)
-
[jira] [Assigned] (CXF-9225) OIDC RP does not enforce nonce validation for Implicit/Hybrid flows
Colm O hEigeartaigh (Jira)
-
[jira] [Resolved] (CXF-8780) 3.5.4 Version - org.apache.cxf.common.util.ReflectionUtil.getDeclaredMethod no such method error
Colm O hEigeartaigh (Jira)
-
[jira] [Reopened] (CXF-8998) cxf-codegen-plugin - debug output velocity
Karl Heinz Marbaise (Jira)
-
[jira] [Created] (CXF-9232) Implement JTI/Assertion-ID replay cache for SAML and JWT bearer grants (Close //TODO)
Guanping Zhang (Jira)
-
[jira] [Commented] (CXF-9231) sign/verify and encrypt/decrypt soap payload with PQC compatible Alg
Freeman Yue Fang (Jira)
-
[jira] [Assigned] (CXF-9231) sign/verify and encrypt/decrypt soap payload with PQC compatible Alg
Freeman Yue Fang (Jira)
-
[jira] [Created] (CXF-9231) sign/verify and encrypt/decrypt soap payload with PQC compatible Alg
Freeman Yue Fang (Jira)
-
[jira] [Resolved] (CXF-9229) Prove that CXF can support Post-Quantum Cryptography TLS using the X25519MLKEM768 hybrid key-encapsulation mechanism (KEM).
Freeman Yue Fang (Jira)
-
[jira] [Updated] (CXF-9229) Prove that CXF can support Post-Quantum Cryptography TLS using the X25519MLKEM768 hybrid key-encapsulation mechanism (KEM).
Freeman Yue Fang (Jira)
-
[jira] [Comment Edited] (CXF-9229) Prove that CXF can support Post-Quantum Cryptography TLS using the X25519MLKEM768 hybrid key-encapsulation mechanism (KEM).
Freeman Yue Fang (Jira)
-
[jira] [Resolved] (CXF-9230) Update to Spring Boot 4.1 release line
Andriy Redko (Jira)
-
[jira] [Created] (CXF-9230) Update to Spring Boot 4.1 release line
Andriy Redko (Jira)
-
[jira] [Commented] (CXF-9229) Prove that CXF can support Post-Quantum Cryptography TLS using the X25519MLKEM768 hybrid key-encapsulation mechanism (KEM).
Freeman Yue Fang (Jira)
-
[jira] [Created] (CXF-9228) Post-Quantum Cryptography (PQC) Readiness
Freeman Yue Fang (Jira)
-
[jira] [Assigned] (CXF-9229) Prove that CXF can support Post-Quantum Cryptography TLS using the X25519MLKEM768 hybrid key-encapsulation mechanism (KEM).
Freeman Yue Fang (Jira)
-
[jira] [Created] (CXF-9229) Prove that CXF can support Post-Quantum Cryptography TLS using the X25519MLKEM768 hybrid key-encapsulation mechanism (KEM).
Freeman Yue Fang (Jira)
-
[jira] [Resolved] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407)
Freeman Yue Fang (Jira)
-
[jira] [Resolved] (CXF-9161) Some of the OIDCFlowTest fail with timeout (JPA only) when HttpClient instance is shared
Andriy Redko (Jira)
-
[jira] [Resolved] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements
Freeman Yue Fang (Jira)
-
[jira] [Commented] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements
Fabio Burzigotti (Jira)
-
[jira] [Resolved] (CXF-9222) partialMatchScopeValidation allows prefix-based scope escalation (e.g., read grants readwrite)
Colm O hEigeartaigh (Jira)
-
[jira] [Updated] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements
Freeman Yue Fang (Jira)
-
[jira] [Created] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements
Freeman Yue Fang (Jira)
-
[jira] [Assigned] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements
Freeman Yue Fang (Jira)
-
[jira] [Commented] (CXF-9222) partialMatchScopeValidation allows prefix-based scope escalation (e.g., read grants readwrite)
Colm O hEigeartaigh (Jira)
-
[jira] [Updated] (CXF-9222) partialMatchScopeValidation allows prefix-based scope escalation (e.g., read grants readwrite)
Colm O hEigeartaigh (Jira)
-
[jira] [Assigned] (CXF-9222) partialMatchScopeValidation allows prefix-based scope escalation (e.g., read grants readwrite)
Colm O hEigeartaigh (Jira)
-
[jira] [Commented] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407)
Freeman Yue Fang (Jira)
-
[jira] [Assigned] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407)
Freeman Yue Fang (Jira)
-
[jira] [Updated] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407)
Reto Weiss (Jira)
-
[jira] [Created] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407)
Reto Weiss (Jira)
-
[jira] [Resolved] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted
Andriy Redko (Jira)
-
[jira] [Assigned] (CXF-9224) Authorization responses omit RFC 9207 iss parameter, exposing clients to OAuth mix-up attacks
Colm O hEigeartaigh (Jira)
-
[jira] [Assigned] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted
Andriy Redko (Jira)
-
[jira] [Created] (CXF-9225) OIDC RP does not enforce nonce validation for Implicit/Hybrid flows
Guanping Zhang (Jira)
-
[jira] [Created] (CXF-9224) Authorization responses omit RFC 9207 iss parameter, exposing clients to OAuth mix-up attacks
Guanping Zhang (Jira)
-
[jira] [Created] (CXF-9223) completeAudienceMatch=false defaults to prefix matching for audience validation, widening resource access
Guanping Zhang (Jira)
-
[jira] [Created] (CXF-9222) partialMatchScopeValidation allows prefix-based scope escalation (e.g., read grants readwrite)
Guanping Zhang (Jira)
-
[jira] [Updated] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted
Guanping Zhang (Jira)
-
[jira] [Created] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted
Guanping Zhang (Jira)
-
[jira] [Created] (CXF-9220) Remove Apache Derby since it is retired
Andriy Redko (Jira)
-
[jira] [Resolved] (CXF-9219) cxf-bom manages dependencies for 4.x that no longer exist or are not published
Andriy Redko (Jira)
-
[jira] [Assigned] (CXF-9219) cxf-bom manages dependencies for 4.x that no longer exist or are not published
Andriy Redko (Jira)
-
[jira] [Updated] (CXF-9219) cxf-bom manages dependencies for 4.x that no longer exist or are not published
Andriy Redko (Jira)
-
[jira] [Created] (CXF-9219) cxf-bom manages dependencies for 4.x that no longer exist or are not published
James Hutton (Jira)
-
[jira] [Updated] (CXF-8926) MTOM - Lock while processing attachment
Freeman Yue Fang (Jira)
-
[jira] [Assigned] (CXF-8926) MTOM - Lock while processing attachment
Freeman Yue Fang (Jira)
-
[jira] [Resolved] (CXF-9213) RetryStrategy is a stateful class whose objects shouldn't be reused
Freeman Yue Fang (Jira)
-
[jira] [Resolved] (CXF-9218) Respect configured ProxySelector instead of hard-wiring system proxy properties
Freeman Yue Fang (Jira)
-
[jira] [Resolved] (CXF-9129) Chunked attachment streaming not working when using ws-security
Freeman Yue Fang (Jira)
-
[jira] [Assigned] (CXF-9218) Respect configured ProxySelector instead of hard-wiring system proxy properties
Freeman Yue Fang (Jira)
-
[jira] [Commented] (CXF-9218) Respect configured ProxySelector instead of hard-wiring system proxy properties
Freeman Yue Fang (Jira)
-
[jira] [Created] (CXF-9218) Respect configured ProxySelector instead of hard-wiring system proxy properties
Matthias Pretzer (Jira)
-
[jira] [Assigned] (CXF-9129) Chunked attachment streaming not working when using ws-security
Freeman Yue Fang (Jira)
-
[jira] [Closed] (CXF-9217) UriInfoImpl#getMatchedResourceTemplate() omits the @ApplicationPath from the returned template
Markus Jung (Jira)
-
[jira] [Comment Edited] (CXF-9217) UriInfoImpl#getMatchedResourceTemplate() omits the @ApplicationPath from the returned template
Andriy Redko (Jira)
-
[jira] [Commented] (CXF-9217) UriInfoImpl#getMatchedResourceTemplate() omits the @ApplicationPath from the returned template
Andriy Redko (Jira)
-
[jira] [Created] (CXF-9217) UriInfoImpl#getMatchedResourceTemplate() omits the @ApplicationPath from the returned template
Markus Jung (Jira)
-
[jira] [Resolved] (CXF-9216) Switch default OAuth2 code verifier to Digest
Colm O hEigeartaigh (Jira)
-
[jira] [Created] (CXF-9216) Switch default OAuth2 code verifier to Digest
Colm O hEigeartaigh (Jira)
-
[jira] [Created] (CXF-9215) Enforce PKCE by default
Colm O hEigeartaigh (Jira)
-
[jira] [Resolved] (CXF-9214) WSDLs and XSDs cannot be loaded from class path on GraalVM
Colm O hEigeartaigh (Jira)
-
[jira] [Updated] (CXF-9214) WSDLs and XSDs cannot be loaded from class path on GraalVM
Colm O hEigeartaigh (Jira)
-
[jira] [Assigned] (CXF-9214) WSDLs and XSDs cannot be loaded from class path on GraalVM
Colm O hEigeartaigh (Jira)
-
[jira] [Created] (CXF-9214) WSDLs and XSDs cannot be loaded from class path on GraalVM
Peter Palaga (Jira)
-
[jira] [Updated] (CXF-9213) RetryStrategy is a stateful class whose objects shouldn't be reused
Sammy Chan (Jira)
-
[jira] [Assigned] (CXF-9213) RetryStrategy is a stateful class whose object shouldn't be shared
Freeman Yue Fang (Jira)
-
[jira] [Updated] (CXF-9213) RetryStrategy is a stateful class whose object shouldn't be shared
Sammy Chan (Jira)
-
[jira] [Created] (CXF-9213) RetryStrategy is a stateful class whose object shouldn't be shared
Sammy Chan (Jira)
-
[jira] [Updated] (CXF-9212) Restrict valid URL protocols in TLSParameterJaxBUtils and URIResolver
Andriy Redko (Jira)
-
[jira] [Commented] (CXF-9212) Restrict valid URL protocols in TLSParameterJaxBUtils and URIResolver
Fabio Burzigotti (Jira)
-
[jira] [Resolved] (CXF-9212) Restrict valid URL protocols in TLSParameterJaxBUtils and URIResolver
Andriy Redko (Jira)
-
[jira] [Created] (CXF-9212) Restrict valid URL protocols in TLSParameterJaxBUtils and URIResolver
Andriy Redko (Jira)
-
[jira] [Resolved] (CXF-9211) [JAX-RS proxy clients] Use template URL instead of actual path values for JAX-RS micrometer metrics
Andriy Redko (Jira)
-
[jira] [Updated] (CXF-9211) [JAX-RS proxy clients] Use template URL instead of actual path values for JAX-RS micrometer metrics
der-brecher (Jira)
-
[jira] [Created] (CXF-9211) [JAX-RS proxy clients] Use template URL instead of actual path values for JAX-RS micrometer metrics
der-brecher (Jira)
-
[jira] [Resolved] (CXF-9147) WSDL to Java: Missing namespace since 4.1.*
Freeman Yue Fang (Jira)
-
[jira] [Commented] (CXF-9147) WSDL to Java: Missing namespace since 4.1.*
Manuel K (Jira)
-
[jira] [Resolved] (CXF-9008) FIPS support
Freeman Yue Fang (Jira)
-
[jira] [Updated] (CXF-9210) JAX-RS Client Fails When CacheControlFeature is used but Server Doesn't return Cache-Control Header
Andriy Redko (Jira)
-
[jira] [Resolved] (CXF-9207) Improve multipart Content-Disposition formatting (optional space after form-data;) for better interoperability with strict WAFs
Andriy Redko (Jira)
-
[jira] [Resolved] (CXF-9210) JAX-RS Client Fails When CacheControlFeature is used but Server Doesn't return Cache-Control Header
Andriy Redko (Jira)
-
[jira] [Commented] (CXF-9210) JAX-RS Client Fails When CacheControlFeature is used but Server Doesn't return Cache-Control Header
Corey Bodendein (Jira)
-
[jira] [Assigned] (CXF-9210) JAX-RS Client Fails When CacheControlFeature is used but Server Doesn't return Cache-Control Header
Freeman Yue Fang (Jira)
-
[jira] [Created] (CXF-9210) JAX-RS Client Fails When CacheControlFeature is used but Server Doesn't return Cache-Control Header
Corey Bodendein (Jira)
-
[jira] [Resolved] (CXF-9209) UriInfoImpl#getMatchedResourceTemplate does not work for Paths with variables
Andriy Redko (Jira)
-
[jira] [Resolved] (CXF-9206) Duplicated value of 'cxf.server.requests' metric for JAX RS Server
Freeman Yue Fang (Jira)
-
[jira] [Resolved] (CXF-8748) nonProxyHosts is case sensitive
Andriy Redko (Jira)
-
[jira] [Updated] (CXF-9209) UriInfoImpl#getMatchedResourceTemplate does not work for Paths with variables
Markus Jung (Jira)
-
[jira] [Created] (CXF-9209) UriInfoImpl#getMatchedResourceTemplate does not work for templated Paths
Markus Jung (Jira)
-
[jira] [Resolved] (CXF-8393) Umbrella issue to address fixing flaky tests
Andriy Redko (Jira)
-
[jira] [Closed] (CXF-8805) Fix org.apache.cxf.transport.jms.RequestResponseTest.testRequestTopicResponseTempQueue
Andriy Redko (Jira)
-
[jira] [Closed] (CXF-8444) Fix org.apache.cxf.systest.ws.rm.DeliveryAssuranceOnewayTest.testExactlyOnceInOrder
Andriy Redko (Jira)
-
[jira] [Closed] (CXF-8560) Fix org.apache.cxf.systest.ws.rm.ProtocolVariationsTest.testDefaultDecoupled
Andriy Redko (Jira)
-
[jira] [Closed] (CXF-8807) Fix org.apache.cxf.transport.jms.RequestResponseTest.testRequestTopicResponseStaticQueue
Andriy Redko (Jira)
-
[jira] [Closed] (CXF-8663) Fix org.apache.cxf.systest.ws.addressing.MAPTest.testImplicitMAPs
Andriy Redko (Jira)
-
[jira] [Closed] (CXF-8399) Fix org.apache.cxf.transport.jms.uri.URIConfiguredConduitTest.testSendReceive
Andriy Redko (Jira)
-
[jira] [Closed] (CXF-8398) Fix org.apache.cxf.systest.ws.rm.DeliveryAssuranceOnewayTest.testInOrderAsyncExecutor
Andriy Redko (Jira)
-
[jira] [Closed] (CXF-8397) Fix org.apache.cxf.systest.ws.rm.SequenceTest.testOnewayAnonymousAcksSuppressedAsyncExecutor
Andriy Redko (Jira)
-
[jira] [Closed] (CXF-8804) Fix org.apache.cxf.systest.jaxrs.failover.FailoverTest.testSequentialStrategyWithDiffBaseAddresses
Andriy Redko (Jira)
-
[jira] [Closed] (CXF-8396) Fix org.apache.cxf.systest.ws.rm.ProtocolVariationsTest.testRM10WSA200408Decoupled
Andriy Redko (Jira)
-
[jira] [Updated] (CXF-8748) nonProxyHosts is case sensitive
Andriy Redko (Jira)
-
[jira] [Assigned] (CXF-9206) Duplicated value of 'cxf.server.requests' metric for JAX RS Server
Freeman Yue Fang (Jira)
-
[jira] [Resolved] (CXF-9208) Current release signing key missing from https://downloads.apache.org/cxf/KEYS ?
Andriy Redko (Jira)
-
[jira] [Assigned] (CXF-9208) Current release signing key missing from https://downloads.apache.org/cxf/KEYS ?
Andriy Redko (Jira)
-
[jira] [Commented] (CXF-9208) Current release signing key missing from https://downloads.apache.org/cxf/KEYS ?
Andriy Redko (Jira)
-
[jira] [Updated] (CXF-9208) Current release signing key missing from https://downloads.apache.org/cxf/KEYS ?
Tobias Gierke (Jira)
-
[jira] [Created] (CXF-9208) Current release signng key missing from https://downloads.apache.org/cxf/KEYS ?
Tobias Gierke (Jira)
-
[jira] [Comment Edited] (CXF-9207) Improve multipart Content-Disposition formatting (optional space after form-data;) for better interoperability with strict WAFs
Andriy Redko (Jira)
-
[jira] [Commented] (CXF-9207) Improve multipart Content-Disposition formatting (optional space after form-data;) for better interoperability with strict WAFs
Andriy Redko (Jira)
-
[jira] [Assigned] (CXF-9207) Improve multipart Content-Disposition formatting (optional space after form-data;) for better interoperability with strict WAFs
Andriy Redko (Jira)
-
[jira] [Updated] (CXF-9207) Improve multipart Content-Disposition formatting (optional space after form-data;) for better interoperability with strict WAFs
Andriy Redko (Jira)
-
[jira] [Created] (CXF-9207) Improve multipart Content-Disposition formatting (optional space after form-data;) for better interoperability with strict WAFs
Markus Mahlmann (Jira)
-
[jira] [Resolved] (CXF-9205) The org.apache.cxf.binding.soap.interceptor.ReadHeadersInterceptor invalidates the signed SOAP Header elemements
Andriy Redko (Jira)
-
[jira] [Updated] (CXF-9205) The org.apache.cxf.binding.soap.interceptor.ReadHeadersInterceptor invalidates the signed SOAP Header elemements
Andriy Redko (Jira)
-
[jira] [Commented] (CXF-9206) Duplicated value of 'cxf.server.requests' metric for JAX RS Server
Andriy Redko (Jira)
-
[jira] [Created] (CXF-9206) Duplicated value of 'cxf.server.requests' metric for JAX RS Server
Rafal (Jira)