gateway-admin-ui/admin-ui/app/provider-config-wizard/ldap-provider-config.ts (7 lines):
	- line 58: // user search attr name,              // TODO: PJZ: Define Me
	- line 59: // authzn enabled,                     // TODO: PJZ: Define Me
	- line 60: // realm context fact system user,     // TODO: PJZ: Define Me
	- line 61: // realm context fact system user pwd, // TODO: PJZ: Define Me
	- line 63: // user object class,                  // TODO: PJZ: Define Me
	- line 64: // realm search base,                  // TODO: PJZ: Define Me
	- line 65: // realm user search base              // TODO: PJZ: Define Me


gateway-server/src/main/java/org/apache/knox/gateway/deploy/DeploymentFactory.java (4 lines):
	- line 454: // TODO: this is just a temporary injection solution
	- line 455: // TODO: test for the existence of the setter before attempting it
	- line 456: // TODO: avoid exception throwing when there is no setter
	- line 460: // TODO: eliminate the possibility of this being thrown up front


gateway-provider-rewrite/src/main/java/org/apache/knox/gateway/filter/rewrite/impl/UrlRewriteResponse.java (3 lines):
	- line 214: //TODO: Need to buffer the output here and when it is closed, rewrite it and then write the result to the stream.
	- line 322: //TODO: Route these through the rewriter.
	- line 334: //TODO: Route these through the rewriter.


gateway-provider-security-jwt/src/main/java/org/apache/knox/gateway/provider/federation/jwt/filter/JWTAccessTokenAssertionFilter.java (3 lines):
	- line 126: // TODO: populate map from JWT authorization code
	- line 131: // TODO: this url needs to be rewritten when in gateway deployments....
	- line 141: // TODO: may have to check cookie and url as well before sending error


gateway-util-urltemplate/src/main/java/org/apache/knox/gateway/util/urltemplate/Builder.java (2 lines):
	- line 336: //TODO throw new URISyntaxException()? because
	- line 360: //TODO throw new URISyntaxException()? because


gateway-server/src/main/java/org/apache/knox/gateway/GatewayFactory.java (2 lines):
	- line 87: //TODO: Should all elements of the resource and gateway descriptor somehow be added to the filter params?
	- line 88: //TODO: Should we use some composite params object instead of copying all these name value pairs?


gateway-util-urltemplate/src/main/java/org/apache/knox/gateway/util/urltemplate/Expander.java (2 lines):
	- line 48: //TODO: This could be much more efficient if it didn't create and then parse a string.
	- line 140: //TODO: This needs to handle multiple values but only to the limit of the segment.


gateway-server/src/main/java/org/apache/knox/gateway/dispatch/UrlConnectionDispatch.java (2 lines):
	- line 93: //TODO: Some of the compilation should be done at servlet init for performance reasons.
	- line 101: //    //TODO: This should be more at filter init.


knox-token-generation-ui/token-generation/assets/styles/knox.css (2 lines):
	- line 1312: /* TODO causes error */
	- line 1331: /* TODO causes error */


gateway-server/src/main/java/org/apache/knox/gateway/services/registry/impl/DefaultServiceRegistryService.java (2 lines):
	- line 116: e.printStackTrace(); //TODO: I18N
	- line 132: e.printStackTrace(); //TODO: I18N


gateway-provider-security-preauth/src/main/java/org/apache/knox/gateway/preauth/filter/PreAuthFederationFilter.java (2 lines):
	- line 54: // TODO: continue as subject
	- line 57: // TODO: log preauthenticated SSO validation failure


gateway-spi/src/main/java/org/apache/knox/gateway/util/FileUtils.java (2 lines):
	- line 32: // TODO: move to Java 7 NIO support to add windows as well
	- line 33: // TODO: look into the following for Windows: Runtime.getRuntime().exec("attrib


gateway-provider-identity-assertion-common/src/main/java/org/apache/knox/gateway/identityasserter/common/filter/AbstractIdentityAssertionFilter.java (1 line):
	- line 122: // TODO: log as appropriate


gateway-provider-security-preauth/src/main/java/org/apache/knox/gateway/preauth/filter/AbstractPreAuthFederationFilter.java (1 line):
	- line 89: // TODO: log preauthenticated SSO validation failure


gateway-service-knoxtoken/src/main/java/org/apache/knox/gateway/service/knoxtoken/OAuthResource.java (1 line):
	- line 100: // TODO: LJM we may need to translate certain errors into OAuth error messages


gateway-discovery-cm/src/main/java/org/apache/knox/gateway/topology/discovery/cm/model/hbase/HBaseUIServiceModelGenerator.java (1 line):
	- line 64: String port = getRoleConfigValue(roleConfig, MASTER_INFO_PORT); // TODO: Is there an SSL port, or is this property re-used?


gateway-provider-rewrite/src/main/java/org/apache/knox/gateway/filter/rewrite/impl/xml/XmlUrlRewriteFilterReader.java (1 line):
	- line 51: //TODO: Need to limit which values are attempted to be filtered by the name.


gateway-provider-security-authz-acls/src/main/java/org/apache/knox/gateway/filter/AclsAuthorizationFilter.java (1 line):
	- line 238: // TODO: log appropriately


gateway-provider-rewrite/src/main/java/org/apache/knox/gateway/filter/rewrite/impl/UrlRewriteResponseStream.java (1 line):
	- line 28: //TODO: This needs to be coded much more efficiently!


gateway-server/src/main/java/org/apache/knox/gateway/GatewayFilter.java (1 line):
	- line 119: //TODO: The resulting pathInfo + query needs to be added to the servlet context somehow so that filters don't need to rebuild it.  This is done in HttpClientDispatch right now for example.


gateway-util-common/src/main/java/org/apache/knox/gateway/util/IpAddressValidator.java (1 line):
	- line 75: // LJM TODO: log as possible programming error


gateway-provider-security-jwt/src/main/java/org/apache/knox/gateway/provider/federation/jwt/filter/JWTAuthCodeAssertionFilter.java (1 line):
	- line 87: // TODO: populate map from JWT authorization code


gateway-spi/src/main/java/org/apache/knox/gateway/security/SubjectUtils.java (1 line):
	- line 44: // LJM TODO: this implementation assumes the first one found.


gateway-shell/src/main/java/org/apache/knox/gateway/shell/table/KnoxShellTableFilter.java (1 line):
	- line 55: // TODO: use Predicate to evaluate the Pattern.matches


gateway-server/src/main/java/org/apache/knox/gateway/filter/SessionFilter.java (1 line):
	- line 31: //TODO: Implement the session filter.


gateway-provider-rewrite/src/main/java/org/apache/knox/gateway/filter/rewrite/impl/json/JsonFilterReader.java (1 line):
	- line 523: //TODO: Scan the top level apply rules for the first match.


gateway-i18n/src/main/java/org/apache/knox/gateway/i18n/messages/MessagesInvoker.java (1 line):
	- line 54: //TODO: Should probably only do this if the logger is at debug or finer to make sure there isn't a performance impact during production usage.


gateway-provider-security-preauth/src/main/java/org/apache/knox/gateway/preauth/filter/PreAuthService.java (1 line):
	- line 95: // TODO log exception


gateway-util-launcher/src/main/java/org/apache/knox/gateway/launcher/Command.java (1 line):
	- line 99: //TODO    ((URLClassLoader)this.getClass().getClassLoader()).getURLs();


gateway-server/src/main/java/org/apache/knox/gateway/services/security/impl/ZookeeperRemoteAliasService.java (1 line):
	- line 538: //TODO: UPDATED??


gateway-provider-rewrite-step-secure-query/src/main/java/org/apache/knox/gateway/securequery/SecureQueryEncodeProcessor.java (1 line):
	- line 46: //TODO: Need some way to get a reference to the keystore service and the encryption key in particular.


gateway-server/src/main/java/org/apache/knox/gateway/services/token/impl/DefaultTokenAuthorityService.java (1 line):
	- line 207: // TODO: interrogate the token for issuer claim in order to determine the public key to use for verification


gateway-provider-rewrite/src/main/java/org/apache/knox/gateway/filter/rewrite/impl/html/HtmlUrlRewriteFilterReader.java (1 line):
	- line 49: //TODO: Need to limit which values are attempted to be filtered by the name.


gateway-provider-rewrite-step-secure-query/src/main/java/org/apache/knox/gateway/securequery/SecureQueryDecodeProcessor.java (1 line):
	- line 50: //TODO: Need some way to get a reference to the keystore service and the encryption key in particular.


gateway-util-urltemplate/src/main/java/org/apache/knox/gateway/util/urltemplate/Rewriter.java (1 line):
	- line 25: //TODO: There are usability issues when trying to rewrite only the path portion of a fully qualified URL.


gateway-util-urltemplate/src/main/java/org/apache/knox/gateway/util/urltemplate/Matcher.java (1 line):
	- line 411: //TODO private Params extra;


gateway-server/src/main/java/org/apache/knox/gateway/filter/BasicAuthChallengeFilter.java (1 line):
	- line 26: //TODO: Remove the Authenticate header from the expect so that downstream filters and dispatch don't see it.


gateway-server/src/main/java/org/apache/knox/gateway/GatewayServer.java (1 line):
	- line 1094: //TODO:APPS:This should only fail if there are services in the topology.


gateway-provider-rewrite-step-secure-query/src/main/java/org/apache/knox/gateway/securequery/SecureQueryDecryptProcessor.java (1 line):
	- line 59: //TODO: Need some way to get a reference to the keystore service and the encryption key in particular.


gateway-spi/src/main/java/org/apache/knox/gateway/deploy/ServiceDeploymentContributorBase.java (1 line):
	- line 98: //    Temp - TODO refactor xForwardedHeaderFilter


gateway-service-remoteconfig/src/main/java/org/apache/knox/gateway/service/config/remote/zk/RemoteConfigurationRegistryJAASConfig.java (1 line):
	- line 92: // TODO: PJZ: ZooKeeper 3.6.0 will have per-client JAAS Configuration support; Upgrade ASAP!!


gateway-discovery-ambari/src/main/java/org/apache/knox/gateway/topology/discovery/ambari/AmbariServiceDiscovery.java (1 line):
	- line 234: e.printStackTrace(); // TODO: Logging


gateway-applications/src/main/resources/applications/knoxauth/app/logout.jsp (1 line):
	- line 76: // LJM TODO: get cookie name and possibly domain prefix info for use in logout


gateway-server/src/main/java/org/apache/knox/gateway/deploy/impl/ServiceDefinitionDeploymentContributor.java (1 line):
	- line 313: //TODO: [sumit] Get rid of special case. Add config/param capabilities to service definitions?


gateway-provider-rewrite/src/main/java/org/apache/knox/gateway/filter/rewrite/impl/form/FormUrlRewriteFilterReader.java (1 line):
	- line 47: //TODO: Need to limit which values are attempted to be filtered by the name.


gateway-server/src/main/java/org/apache/knox/gateway/topology/builder/property/interpreter/ServicePropertyInterpreter.java (1 line):
	- line 62: //TODO: sumit - version needs to be passed parsed and passed in if we want to continue to support the 'ambari' format


gateway-provider-rewrite/src/main/java/org/apache/knox/gateway/filter/rewrite/impl/UrlRewriteRequest.java (1 line):
	- line 137: //TODO: I think this method is implemented wrong based on the HttpServletRequest.getRequestURI docs.


gateway-i18n/src/main/java/org/apache/knox/gateway/i18n/messages/loggers/jdk/JdkMessageLogger.java (1 line):
	- line 40: //TODO: Handle message ID.


gateway-provider-security-preauth/src/main/java/org/apache/knox/gateway/preauth/filter/DefaultValidator.java (1 line):
	- line 26: * TODO: log the fact that there is no verification going on to validate


gateway-provider-security-authz-path-acls/src/main/java/org/apache/knox/gateway/filter/PathAclsAuthorizationFilter.java (1 line):
	- line 178: * TODO NOTE: Important thing here is that we have the ability to capture the path or


gateway-server/src/main/java/org/apache/knox/gateway/GatewayServlet.java (1 line):
	- line 153: //TODO: This should really happen naturally somehow as part of being a filter.  This way will cause problems eventually.


gateway-server/src/main/java/org/apache/knox/gateway/services/security/impl/DefaultKeystoreService.java (1 line):
	- line 591: // TODO: backup the keystore on disk before attempting a write and restore on failure


gateway-admin-ui/admin-ui/app/provider-config-wizard/kerberos-provider-config.ts (1 line):
	- line 90: console.debug('KerberosProviderConfig --> setParam(' + name + ', ' + value + ')'); // TODO: PJZ: DELETE ME


gateway-provider-rewrite-step-secure-query/src/main/java/org/apache/knox/gateway/securequery/SecureQueryEncryptProcessor.java (1 line):
	- line 53: //TODO: Need some way to get a reference to the keystore service and the encryption key in particular.