Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-9849

Refactor SAML 2 Support using Spring Security 5

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 1.17.0
    • Core Framework, Security
    • None

    Description

      The Spring Security SAML project, which provides the implementation for SAML integration in NiFi reached end of life in October 2021. Spring Security 5.5 and 5.6 include a new implementation of support for SAML integration.

      NiFi integration with SAML should be refactored to remove the dependency on the unmaintained Spring Security SAML library. The new implementation should be built on Spring Security 5 libraries, which also includes a number of transitive dependency upgrades.

      Attachments

        Issue Links

        causes

        Bug - A problem which impairs or prevents the functions of the product. NIFI-10313 Unexpected "Access Token not found"

        • Major - Major loss of function.
        • Resolved
        fixes

        Bug - A problem which impairs or prevents the functions of the product. NIFI-10080 Upgrade Vulnerable esapi dependency

        • Major - Major loss of function.
        • Resolved

        Bug - A problem which impairs or prevents the functions of the product. NIFI-9676 Upgrade xmlsec to 2.1.7/2.2.3 due to CVE-2021-40690

        • Minor - Minor loss of function, or other problem where easy workaround is present.
        • Resolved

        Bug - A problem which impairs or prevents the functions of the product. NIFI-10083 Upgrade xmlsec-1.5.8 To Most Recent Version

        • Minor - Minor loss of function, or other problem where easy workaround is present.
        • Resolved

        Improvement - An improvement or enhancement to an existing feature or task. NIFI-10545 OpenSAML 2.6.6 has reached EOL

        • Critical - Crashes, loss of data, severe memory leak.
        • Resolved

        Improvement - An improvement or enhancement to an existing feature or task. NIFI-10084 Upgrade commons-httpclient

        • Major - Major loss of function.
        • Resolved
        is related to

        Improvement - An improvement or enhancement to an existing feature or task. NIFI-10084 Upgrade commons-httpclient

        • Major - Major loss of function.
        • Resolved
        links to

        Web Link GitHub Pull Request #6145

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            exceptionfactory David Handermann
            exceptionfactory David Handermann
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 1h 10m
                1h 10m

                Slack

                  Issue deployment