Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-9849

Refactor SAML 2 Support using Spring Security 5

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 1.17.0
    • Core Framework, Security
    • None

    Description

      The Spring Security SAML project, which provides the implementation for SAML integration in NiFi reached end of life in October 2021. Spring Security 5.5 and 5.6 include a new implementation of support for SAML integration.

      NiFi integration with SAML should be refactored to remove the dependency on the unmaintained Spring Security SAML library. The new implementation should be built on Spring Security 5 libraries, which also includes a number of transitive dependency upgrades.

      Attachments

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. NIFI-10313 Unexpected "Access Token not found"

          • Major - Major loss of function.
          • Resolved
          fixes

          Bug - A problem which impairs or prevents the functions of the product. NIFI-10080 Upgrade Vulnerable esapi dependency

          • Major - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. NIFI-9676 Upgrade xmlsec to 2.1.7/2.2.3 due to CVE-2021-40690

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. NIFI-10083 Upgrade xmlsec-1.5.8 To Most Recent Version

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. NIFI-10545 OpenSAML 2.6.6 has reached EOL

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. NIFI-10084 Upgrade commons-httpclient

          • Major - Major loss of function.
          • Resolved
          is related to

          Improvement - An improvement or enhancement to an existing feature or task. NIFI-10084 Upgrade commons-httpclient

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link GitHub Pull Request #6145

          Activity

            People

              exceptionfactory David Handermann
              exceptionfactory David Handermann
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 1h 10m
                  1h 10m