Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Revert "Using SAML subject_key and roles_key in the HTTPSamlAuthentic… #1015

Merged

Conversation

debjanibnrj
Copy link
Contributor

@debjanibnrj debjanibnrj commented Feb 4, 2021

…ator"

This reverts commit 59d12de.

opendistro-for-elasticsearch/security pull request intake form

Please provide as much details as possible to get feedback/acceptance on your PR quickly

  1. Category: (Enhancement, New feature, Bug fix, Test fix, Refactoring, Maintenance, Documentation)
    Bug fix

  2. Github Issue # or road-map entry, if available:

  3. Description of changes:
    We made a change to default JWT subject_key to SAML subject_key if SAML subject_key is present.

However JWT keys have specific values and cannot always take up SAML key values. This is why we are reverting this fix.

  1. Why these changes are required?

  2. What is the old behavior before changes and new behavior after changes? (Please add any example/logs/screen-shot if available)

  3. Testing done: (Please provide details of testing done: Unit testing, integration testing and manual testing)
    Tested on local environment.

  4. TO-DOs, if any: (Please describe pending items and provide Github issues# for each of them)

  5. Is it backport from master branch? (If yes, please add backport PR # and commits #)

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@debjanibnrj debjanibnrj requested a review from a team as a code owner February 4, 2021 22:13
@codecov
Copy link

codecov bot commented Feb 5, 2021

Codecov Report

Merging #1015 (c4f09a8) into opendistro-1.4 (b487ed0) will decrease coverage by 0.08%.
The diff coverage is 66.66%.

Impacted file tree graph

@@                 Coverage Diff                  @@
##             opendistro-1.4    #1015      +/-   ##
====================================================
- Coverage             63.56%   63.48%   -0.09%     
+ Complexity             3028     3023       -5     
====================================================
  Files                   235      235              
  Lines                 16704    16704              
  Branches               3013     3013              
====================================================
- Hits                  10618    10604      -14     
- Misses                 4538     4551      +13     
- Partials               1548     1549       +1     
Impacted Files Coverage Δ Complexity Δ
...zon/dlic/auth/http/saml/HTTPSamlAuthenticator.java 70.00% <66.66%> (ø) 24.00 <0.00> (ø)
...ecurity/ssl/DefaultOpenDistroSecurityKeyStore.java 68.89% <0.00%> (-5.30%) 73.00% <0.00%> (-8.00%)
...ticsearch/security/auditlog/impl/AuditLogImpl.java 85.71% <0.00%> (+1.09%) 42.00% <0.00%> (+1.00%)
...transport/OpenDistroSecuritySSLNettyTransport.java 69.14% <0.00%> (+6.38%) 5.00% <0.00%> (+1.00%)
...security/auditlog/AuditLogSslExceptionHandler.java 42.85% <0.00%> (+9.52%) 4.00% <0.00%> (+1.00%)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update b487ed0...5b823fa. Read the comment docs.

@hardik-k-shah hardik-k-shah merged commit b465309 into opensearch-project:opendistro-1.4 Feb 5, 2021
gaobinlong pushed a commit to gaobinlong/security that referenced this pull request Aug 30, 2023
Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants