From fa2384985454568439dc286a6a9051fba47322ed Mon Sep 17 00:00:00 2001
From: Thomas Lenz <thomas.lenz@egiz.gv.at>
Date: Mon, 25 Jan 2021 16:30:07 +0100
Subject: add ID Austria communication-module and additional jUnit test It's
 first alpha-version of eIDAS MS-specific Proxy-Service with ID Austria
 authentication

---
 .../authmodule_id-austria/checks/spotbugs-exclude.xml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 eidas_modules/authmodule_id-austria/checks/spotbugs-exclude.xml

(limited to 'eidas_modules/authmodule_id-austria/checks')

diff --git a/eidas_modules/authmodule_id-austria/checks/spotbugs-exclude.xml b/eidas_modules/authmodule_id-austria/checks/spotbugs-exclude.xml
new file mode 100644
index 00000000..311c3a8e
--- /dev/null
+++ b/eidas_modules/authmodule_id-austria/checks/spotbugs-exclude.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<FindBugsFilter>
+    <Match>
+      <!-- CSRF protection is implicit available by request token -->
+      <Class name="at.asitplus.eidas.specific.modules.auth.idaustria.controller.IdAustriaAuthSignalController" />
+      <Method name="performEidasAuthentication" />
+      <OR>
+        <Bug pattern="SPRING_CSRF_UNRESTRICTED_REQUEST_MAPPING" />                       
+      </OR>
+    </Match>
+    <!-- Logging of invalid SAML2 responses are allowed on debug level -->
+    <Match>
+      <Class name="at.asitplus.eidas.specific.modules.auth.idaustria.tasks.ReceiveFromIdAustriaSystemTask"/>
+      <Method name="execute" />
+      <OR>
+        <Bug pattern="CRLF_INJECTION_LOGS" />                       
+      </OR>
+    </Match>
+</FindBugsFilter>
-- 
cgit v1.2.3