[WFCORE-6692] Upgrade WildFly Elytron to 2.3.0.Final

[fjuma]

https://issues.redhat.com/browse/WFCORE-6692

    Release Notes - WildFly Elytron - Version 2.3.0.Final

Bug

• [ELY-1700] - Intermittently failing AttributeMappingSuiteChild
• [ELY-2576] - Make it possible to use DigestPasswords when using the DIGEST-SHA-256 and DIGEST-SHA-512-256 HTTP Digest authentication mechanisms
• [ELY-2658] - Remove the unassigned call to the constructor in X500AttributePrincipalDecoderTest#testDecodeWithConcatenation
• [ELY-2717] - Ensure that the credential algorithm for the DIGEST mechanism is set to digest-md5

Task

• [ELY-2166] - Add javadoc for org.wildfly.security.sasl.util.SaslMechanismInformation.Names class
• [ELY-2167] - Add javadoc for SNI related classes
• [ELY-2174] - Add tests for the BEARER authentication mechanism.
• [ELY-2329] - Utilize the simple implementation of HttpServerCookie
• [ELY-2349] - Clean up ElytronXmlParser code.
• [ELY-2412] - Update link to Elytron's Jira issues in README.adoc
• [ELY-2507] - Move appropriate methods in AbstractDigestMechanism into "DigestWrapper".
• [ELY-2508] - Add tests for DigestMechanismFactory
• [ELY-2511] - Add test that verifies that digest response prefix is case insensitive
• [ELY-2512] - Move assertions from test methods that have expected exception defined
• [ELY-2550] - Add option to skip certificate verification with the realm when using SASL EXTERNAL
• [ELY-2570] - Add newly added constants for bearer-only support to org.wildfly.security.http.oidc.Oidc
• [ELY-2573] - Fix version.org.jboss.logging.tools
• [ELY-2577] - OIDC testsuite relies on localhost being in /etc/hosts
• [ELY-2581] - Update Elytron's SECURITY.md file
• [ELY-2583] - Make requestURI and Source-Address available from RealmSuccessfulAuthenticationEvent and RealmFailedAuthenticationEvent
• [ELY-2592] - Update the SyslogAuditEndpoint constructor to no longer use a ternary statement
• [ELY-2593] - Update the CompositePrincipal constructor to no longer use a ternary statement
• [ELY-2595] - Remove unused method parameter in FileSystemSecurityRealm#requiredVersion
• [ELY-2596] - Add missing @OverRide annotation to the FileSystemSecurityRealm#Identity class dispose method
• [ELY-2597] - Merge an if statement in verifyCertificate in X509EvidenceVerifier with its enclosing if statement
• [ELY-2599] - Update assertEquals calls in RegexRoleMapperTest so that the expected value and actual value are passed in the correct order
• [ELY-2601] - Declare newMap on a separate line in PasswordKeyStoreSpi
• [ELY-2602] - Update assertEquals calls in ElytronXmlParserTest so that the expected value and actual value are passed in the correct order
• [ELY-2603] - Replace a switch statement in ElytronXmlParser#parseCertificateRevocationLists to improve readability
• [ELY-2604] - Make the constructor for FailoverRealmIdentity to “protected” since it is an abstract class
• [ELY-2605] - Make two fields in the CredentialStoreCommand class final
• [ELY-2606] - Make two fields in the ElytronTool class final
• [ELY-2607] - Directly append iterationCount instead of using String.valueOf()
• [ELY-2608] - Use a constant for the mask prefix in VaultCommand
• [ELY-2609] - Replace if-then-else statement with a single return statement in OidcPrincipal
• [ELY-2610] - The getAccessTokenHash method can be moved into the AtHashValidator class
• [ELY-2612] - Update 4 tests in BasicScramSelfTest to call a common method in order to remove duplicated code
• [ELY-2613] - Update an assertEquals call in ScramServerCompatibilityTest#testAllowedAuthorizationId so that the expected value and actual value are passed in the correct order
• [ELY-2614] - Update 3 tests in KeyStoreUtilTest to call a common method in order to remove duplicated code
• [ELY-2615] - Add a test class that tests creating and making use of a custom NameRewriter
• [ELY-2616] - Replace this "switch" statement by "if" statements to increase readability.
• [ELY-2617] - Add a default case to this switch in DigestMechanismFactory
• [ELY-2618] - Replace this if-then-else statement by a single return statement in OidcClientConfiguration
• [ELY-2619] - Immediately return this expression instead of assigning it to the temporary variable
• [ELY-2620] - Add a test that makes use of the RoleMapper#and method to RoleMappingTest
• [ELY-2621] - Add a test that makes use of the RoleMapper#or method to RoleMappingTest
• [ELY-2622] - Add a new test class that makes use of the BearerMechanismFactory
• [ELY-2623] - Add a new test methods testing that the verifyEvidence method of identity obtained from DistributedSecurityRealm works as expected
• [ELY-2624] - Update the JavaDoc for the PrincipalDecoder#aggregate method
• [ELY-2625] - Add a test to X500AttributePrincipalDecoderTest that makes use of the PrincipalDecoder#aggregate method
• [ELY-2628] - Move the method LongNameSetPermissionCollection#permissionFor to the inner class Iter
• [ELY-2629] - move the method IntNameSetPermissionCollection#permissionFor to the inner class Iter
• [ELY-2632] - Add a test testing that the exception is thrown when incorrect "response" field is provided by the SASL client
• [ELY-2635] - Update README to specify 2.x instead of the 1.x branch
• [ELY-2640] - Simplify assertion in maskCompatibilityCheck test in MaskCommandTest class
• [ELY-2641] - Simplify assersions in MaskCommandTest#testMissingSaltAndIteration method
• [ELY-2642] - Simplify assertion in testMissingIteration method of MaskCommandTest class
• [ELY-2643] - Simplify assertions in testIterationAsStringValue method in MaskCommandTest
• [ELY-2644] - Simplify assertions in testIterationAsLongMax method in MaskCommandTest
• [ELY-2645] - Simplify assertions in testIterationAsNegativeValue method in MaskCommandTest
• [ELY-2647] - Add a link to elytron-examples repository to wildfly-elytron README file
• [ELY-2676] - Merge if statement with the enclosing one in AcmeClientSpi#getRetryAfter
• [ELY-2677] - Merge if statement with the enclosing one in X500#createX509CertificateChain
• [ELY-2678] - Replace assert in VaultCommandTest with a proper check
• [ELY-2679] - Replace assert in VaultCommandTest with a proper check
• [ELY-2681] - Refactor OAuth2SaslClientV10Test to use common method
• [ELY-2682] - Refactor OAuth2SaslClientV11Test to use common method
• [ELY-2683] - Refactor OAuth2SaslClientV11Test to use common method
• [ELY-2684] - Update 3 tests in OTPTest to call a common method in order to remove duplicated code
• [ELY-2685] - Replace assert in PasswordBasedEncryptionUtilTest with a proper check
• [ELY-2686] - Merge an if statement with the enclosing one in X509EvidenceVerifier
• [ELY-2687] - Merge an if statement with the enclosing one in ServerAuthenticationContext
• [ELY-2688] - Merge an if statement with the enclosing one in RequestAuthenticator#authenticate
• [ELY-2690] - Merge an if statement with the enclosing one in SSLUtils
• [ELY-2691] - Merge if statement with the enclosing one in X509RevocationTrustManager#checkCertPathLength
• [ELY-2692] - Merge an if statement with the enclosing one in X509RevocationTrustManager
• [ELY-2693] - Update 3 tests in JwtSecurityRealmTest to call a common method in order to remove duplicated code
• [ELY-2694] - Update assertEquals calls in CommandCredentialSourceTest so that the expected value and actual value are passed in the correct order
• [ELY-2695] - Update the import statement in CommandCredentialSourceTest for the Assert class objects to import them explicitly
• [ELY-2697] - Update 4 tests in CompatibilityServerTest to call a common method in order to remove duplicated code
• [ELY-2699] - Update 4 tests in DigestTest to call a common method in order to remove duplicated code

Release

• [ELY-2718] - Release Elytron 2.3.0.Final

Component Upgrade

• [ELY-2578] - Upgrade nimbus-jose-jwt from 8.2.1 to 9.31
• [ELY-2582] - Upgrade Jackson FasterXML to version 2.15.2 - resolves CVE PRISMA-2023-0067
• [ELY-2650] - Upgrade sshd-common from 2.9.2 to 2.10.0
• [ELY-2660] - Upgrade commons-cli:commons-cli from 1.4 to 1.5.0
• [ELY-2661] - Upgrade jakarta.enterprise:jakarta.enterprise.cdi-api from 2.0.2 to 4.0.1
• [ELY-2664] - Upgrade org.apache.httpcomponents:httpclient from 4.5.13 to 4.5.14
• [ELY-2665] - Upgrade org.apache.httpcomponents:httpcore from 4.4.15 to 4.4.16
• [ELY-2666] - Upgrade org.apache.sshd:sshd-common from 2.9.2 to 2.10.0
• [ELY-2667] - Upgrade org.jboss.logging:jboss-logging from 3.4.3.Final to 3.5.3.Final
• [ELY-2668] - Upgrade org.jboss.logmanager:jboss-logmanager from 2.1.18.Final to 2.1.19.Final
• [ELY-2669] - Upgrade org.jboss.modules:jboss-modules from 1.9.2.Final to 1.12.2.Final
• [ELY-2670] - Upgrade org.jboss.slf4j:slf4j-jboss-logmanager from 1.0.4.GA to 1.2.0.Final
• [ELY-2671] - Upgrade org.jboss.threads:jboss-threads from 2.4.0.Final to 3.5.1.Final
• [ELY-2672] - Upgrade org.kohsuke.metainf-services:metainf-services from 1.7 to 1.11
• [ELY-2673] - Upgrade org.wildfly.common:wildfly-common from 1.5.4.Final to 1.6.0.Final
• [ELY-2700] - Bump version.com.fasterxml.jackson from 2.15.2 to 2.15.3
• [ELY-2703] - Upgrade Apache Commons CLI from 1.5.0 to 1.6.0
• [ELY-2706] - Upgrade commons-lang3 from 3.13.0 to 3.14.0
• [ELY-2710] - Bump org.bitbucket.b_c:jose4j from 0.9.3 to 0.9.4
• [ELY-2716] - Upgrade Apache SSHD to version 2.12.0

[wildfly-ci]

Core -> WildFly Preview Integration Build 13293 outcome was FAILURE using a merge of 59b36cf
Summary: Tests failed: 1 (1 new), passed: 4967, ignored: 86 Build time: 03:45:54

Failed tests

org.jboss.as.test.clustering.cluster.ejb.timer.DistributedTimerServiceTestCase.test: java.lang.AssertionError: node-1: org.jboss.as.test.clustering.cluster.ejb.timer.beans.SingleActionTransientTimerBean expected:<1> but was:<0>
	at org.jboss.as.test.clustering.cluster.ejb.timer.AbstractTimerServiceTestCase.test(AbstractTimerServiceTestCase.java:95)
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor35.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor34.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor33.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor5.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor4.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor3.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor15.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor14.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor5.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor4.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor3.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
------- Stdout: -------
node-2  [0m18:05:09,264 INFO  [org.jboss.as.repository] (management-handler-thread - 1) WFLYDR0001: Content added at location /opt/buildAgent/work/e8e0dd9c7c4ba60/full/testsuite/integration/clustering/target/wildfly-2/standalone/data/content/d5/752dadf428d387ccabb49421c8c7787847c248/content
 [0mnode-2  [0m18:05:09,270 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-8) WFLYSRV0027: Starting deployment of "DistributedTimerServiceTestCase.war" (runtime-name: "DistributedTimerServiceTestCase.war")
 [0mnode-2  [0m18:05:09,705 INFO  [org.jboss.weld.deployer] (MSC service thread 1-5) WFLYWELD0003: Processing weld deployment DistributedTimerServiceTestCase.war
 [0mnode-2  [0m18:05:09,752 INFO  [org.jboss.as.ejb3.deployment] (MSC service thread 1-5) WFLYEJB0473: JNDI bindings for session bean named 'AutoTransientTimerBean' in deployment unit 'deployment "DistributedTimerServiceTestCase.war"' are as follows:

	java:global/DistributedTimerServiceTestCase/AutoTransientTimerBean!org.jboss.as.test.clustering.cluster.ejb.timer.beans.TimerBean
	java:app/DistributedTimerServiceTestCase/AutoTransientTimerBean!org.jboss.as.test.clustering.cluster.ejb.timer.beans.TimerBean
	java:module/AutoTransientTimerBean!org.jboss.as.test.clustering.cluster.ejb.timer.beans.TimerBean
	java:global/DistributedTimerServiceTestCase/AutoTransientTimerBean
	java:app/DistributedTimerServiceTestCase/AutoTransientTimerBean
	java:module/AutoTransientTimerBean

 [0mnode-2  [0m18:05:09,753 INFO  [org.jboss.as.ejb3.deployment] (MSC service thread 1-5) WFLYEJB0473: JNDI bindings for session bean named 'SingleActionPersistentTimerBean' in deployment unit 'deployment "DistributedTimerServiceTestCase.war"' are as follows:

	java:global/DistributedTimerServiceTestCase/SingleActionPersistentTimerBean!org.jboss.as.test.clustering.cluster.ejb.timer.beans.ManualTimerBean
	java:app/DistributedTimerServiceTestCase/SingleActionPersistentTimerBean!org.jboss.as.test.clustering.cluster.ejb.timer.beans.ManualTimerBean
	java:module/SingleActionPersistentTimerBean!org.jboss.as.test.clustering.cluster.ejb.timer.beans.ManualTimerBean
	java:global/DistributedTimerServiceTestCase/SingleActionPersistentTimerBean
	java:app/DistributedTimerServiceTestCase/SingleActionPersistentTimerBean
	java:module/SingleActionPersistentTimerBean

 [0mnode-2  [0m18:05:09,753 INFO  [org.jboss.as.ejb3.deployment] (MSC service thread 1-5) WFLYEJB0473: JNDI bindings for session bean named 'AutoPersistentTimerBean' in deployment unit 'deployment "DistributedTimerServiceTestCase.war"' are as follows:

[wildfly-ci]

Core -> WildFly Preview Integration Build 13295 outcome was FAILURE using a merge of 59b36cf
Summary: Tests failed: 1, passed: 4967, ignored: 86 Build time: 02:56:31

Failed tests

org.jboss.as.test.clustering.cluster.ejb.timer.DistributedTimerServiceTestCase.test: java.lang.AssertionError: class org.jboss.as.test.clustering.cluster.ejb.timer.beans.IntervalPersistentTimerBean={node-1=[]}. Actual: 0
	at org.jboss.as.test.clustering.cluster.ejb.timer.AbstractTimerServiceTestCase.test(AbstractTimerServiceTestCase.java:302)
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor35.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor34.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor33.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor5.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor4.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor3.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor15.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor14.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor5.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor4.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at jdk.internal.reflect.GeneratedMethodAccessor3.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
------- Stdout: -------
node-2  [0m21:38:45,087 INFO  [org.jboss.as.repository] (management-handler-thread - 1) WFLYDR0001: Content added at location /opt/buildAgent/work/e8e0dd9c7c4ba60/full/testsuite/integration/clustering/target/wildfly-2/standalone/data/content/d6/227132504392a169ae8cb4444f0f1553291ad9/content
 [0mnode-2  [0m21:38:45,092 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-6) WFLYSRV0027: Starting deployment of "DistributedTimerServiceTestCase.war" (runtime-name: "DistributedTimerServiceTestCase.war")
 [0mnode-2  [0m21:38:45,479 INFO  [org.jboss.weld.deployer] (MSC service thread 1-2) WFLYWELD0003: Processing weld deployment DistributedTimerServiceTestCase.war
 [0mnode-2  [0m21:38:45,495 INFO  [org.jboss.as.ejb3.deployment] (MSC service thread 1-2) WFLYEJB0473: JNDI bindings for session bean named 'AutoTransientTimerBean' in deployment unit 'deployment "DistributedTimerServiceTestCase.war"' are as follows:

	java:global/DistributedTimerServiceTestCase/AutoTransientTimerBean!org.jboss.as.test.clustering.cluster.ejb.timer.beans.TimerBean
	java:app/DistributedTimerServiceTestCase/AutoTransientTimerBean!org.jboss.as.test.clustering.cluster.ejb.timer.beans.TimerBean
	java:module/AutoTransientTimerBean!org.jboss.as.test.clustering.cluster.ejb.timer.beans.TimerBean
	java:global/DistributedTimerServiceTestCase/AutoTransientTimerBean
	java:app/DistributedTimerServiceTestCase/AutoTransientTimerBean
	java:module/AutoTransientTimerBean

 [0mnode-2  [0m21:38:45,495 INFO  [org.jboss.as.ejb3.deployment] (MSC service thread 1-2) WFLYEJB0473: JNDI bindings for session bean named 'SingleActionPersistentTimerBean' in deployment unit 'deployment "DistributedTimerServiceTestCase.war"' are as follows:

	java:global/DistributedTimerServiceTestCase/SingleActionPersistentTimerBean!org.jboss.as.test.clustering.cluster.ejb.timer.beans.ManualTimerBean
	java:app/DistributedTimerServiceTestCase/SingleActionPersistentTimerBean!org.jboss.as.test.clustering.cluster.ejb.timer.beans.ManualTimerBean
	java:module/SingleActionPersistentTimerBean!org.jboss.as.test.clustering.cluster.ejb.timer.beans.ManualTimerBean
	java:global/DistributedTimerServiceTestCase/SingleActionPersistentTimerBean
	java:app/DistributedTimerServiceTestCase/SingleActionPersistentTimerBean
	java:module/SingleActionPersistentTimerBean

 [0mnode-2  [0m21:38:45,495 INFO  [org.jboss.as.ejb3.deployment] (MSC service thread 1-2) WFLYEJB0473: JNDI bindings for session bean named 'AutoPersistentTimerBean' in deployment unit 'deployment "DistributedTimerServiceTestCase.war"' are as follows:

[yersan]

Thanks @fjuma