Commit Graph

2512 Commits

Author SHA1 Message Date
Dominic Schabel
94b7c12cde Fixes #1067
JSON body response for HTTP 404 error may contain unsafe URL path characters. Thus removing path from the response

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2021-01-12 11:56:56 +01:00
Florian Ruschbaschan
8816396d18 Add existsByInstalledOrAssignedDistributionSet (#1064)
Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>
2021-01-12 11:29:48 +01:00
Florian Ruschbaschan
2191db40d7 Add Github actions stale and first-interaction workflow (#1054)
* Add Github actions workflow

Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>

* Change secret name

Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>
2021-01-11 15:50:06 +01:00
Ammar Bikic
adeabbd442 Changes requested within pull request review.
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2021-01-08 19:28:26 +01:00
Ammar Bikic
7434293e27 Changes requested within pull request review.
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2021-01-08 19:27:59 +01:00
Ammar Bikic
3ee7d8146c Overwriting VaadinAuthenticationSuccessHandler of default VaadinSharedSecurityConfiguration
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2021-01-08 17:36:49 +01:00
Dominic Schabel
6df3a04f51 Removed "time" field from tests
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-12-16 17:42:41 +01:00
Dominic Schabel
76fa389eeb Unused time field removed from DDI docs
Back in the days "time" was specified in API but never implemented/evaluated by hawkBit.
So we better remove it from the docs in order to avoid confusion.

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-12-15 17:13:17 +01:00
Florian Ruschbaschan
5cf008cc03 Update Spring Boot to 2.3.7.RELEASE
Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>
2020-12-11 13:58:56 +01:00
Jeroen Laverman
158da91c74 Update host of sandbox to new eclipse projects.io 2020-12-09 09:04:08 +01:00
Ammar Bikic
918304f1b6 SonarQube adaptations
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-12-04 14:22:46 +01:00
Ammar Bikic
458bc8cb03 Merge remote-tracking branch 'origin/master' into fix_migration_to_new_spring_boot_version_merge_master
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-12-04 13:40:31 +01:00
Ammar Bikic
98f7a5b9f3 Host header attack implementation improvements and tests
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-12-04 13:33:59 +01:00
Ammar Bikic
e23f4dae63 Improve firewall logging
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-12-03 09:58:28 +01:00
Ammar Bikic
75d906252e Fix host header attack
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-11-30 16:25:43 +01:00
Markus Block
cb2b2ca4e8 Increase cronutils version (#1053)
* CVE-2020-26238

Signed-off-by: Markus Block <markus.block@bosch-si.com>

* adapted code to new cron-utils versions

Signed-off-by: Markus Block <markus.block@bosch-si.com>
2020-11-27 12:19:49 +01:00
Ammar Bikic
68e4cd93e1 Merge remote-tracking branch 'origin/master' into fix_migration_to_new_spring_boot_version_merge_master
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-11-09 16:13:10 +01:00
Markus Block
cc40529dc9 Cleanup UI code after Vaadin migration (#1027)
* Removed code duplications in DistSMTypeFilterLayout
* Removed code duplications in DistributionSetGridLayout
* fix Sonar issues
* fixed Sonar issues
* fix Sonar issues
* Removed duplications in SwModuleGridLayout and SoftwareModuleGridLayout
* started to remove ui duplications in *WindowController classes
* Removed unused variables
* introduced UIConfiguration object as container for common used dependencies
* continued introducing UIConfiguration object
* fixed Sonar issues
* Removed some duplicated code in WindowController classes
* call getter in super class instead of accessing fields directly
* introduced convinience methods for showing notifications in super class
* Renamed UIConfiguration to CommonUiDependencies
* Renamed UIConfiguration to CommonUiDependencies
* Introduced parent classes for add and update window controllers
* fixed Sonar issue
* introduced validator delegates in the window controller classes
* remove duplicate code between add/update controllers
* removed unnecessary abstract method used only for logging
* fixed DS selection after create
* check for duplicate entity only if attributes have changed
* fixed some failures
* fixed using wrong method for displaying validation error
* making hawkbit bot happy
* Fixed displaying success message now with persisted entity name
* make Sonar happy
* Incorporated review remarks

Signed-off-by: Markus Block <markus.block@bosch-si.com>
2020-11-05 09:59:10 +01:00
Ammar Bikic
165f6e0435 Change to proper versioning
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-11-03 09:59:21 +01:00
Dominic Schabel
ed9a4b1bb3 Java 11 support for hawkBit (#1038)
* hawkBit on Java 11
* Reference to created GH issue added

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-10-29 16:36:55 +01:00
Sergey Gerasimov
929f09a0c1 Removed misleading code from RSQLUtility - unused operator '=li=' (#1030)
Signed-off-by: Sergey Gerasimov <sergey.gerasimov@devolo.de>
2020-10-28 17:56:47 +01:00
Dominic Schabel
c2f7c2f778 Raise Allure to 2.13.6 (#1037)
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-10-26 17:56:28 +01:00
Ammar Bikic
2e224b0ffd Merge remote-tracking branch 'origin/master' into fix_migration_to_new_spring_boot_version_merge
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-10-23 13:32:42 +02:00
Bondar Bogdan
ac2d482aad fixed metadata permissions for entity details header metadata icons, details metadata grid, metadata window header, grid and input fields (#1035)
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
2020-10-22 13:23:10 +02:00
Anand Kumar
c75b481373 Feature docker auth (#1034)
* Added docker auth to circle-CI
Signed-off-by: Anand Kumar <anand.kumar@bosch-si.com>

* Added docker auth for rabbitmq image
Signed-off-by: Anand Kumar <anand.kumar@bosch-si.com>
2020-10-21 17:21:55 +02:00
Anand Kumar
6acd11c507 Added docker auth to circle-CI (#1033)
Signed-off-by: Anand Kumar <anand.kumar@bosch-si.com>
2020-10-21 14:25:18 +02:00
Bondar Bogdan
c6bec4c97e fixed overriding deprecated method on no count repository (#1032)
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
2020-10-20 09:30:04 +02:00
Ammar Bikic
2e0122d1b7 Adaptations due to PR comments
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-10-15 14:03:50 +02:00
Ammar Bikic
bd382c3725 Adaptations due to PR comments
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-10-15 11:45:08 +02:00
Sergey Gerasimov
99c8725b70 Create index on "last_modified_at" column in "sp_target" table. (#1015)
* Create index on "last_modified_at" column in "sp_target" table.
* Added tenant to the index.

Signed-off-by: Sergey Gerasimov <sergey.gerasimov@devolo.de>
2020-10-13 17:06:43 +02:00
Bondar Bogdan
541a0129ef UI Spring Context Holder bean registration (#1026)
* register the Spring Context Holder bean for UI instead of setting the context for each UI separately
* reverted test scope for db driver

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
2020-10-13 17:04:18 +02:00
Bondar Bogdan
a092747c99 Deregister UI remote event push strategy from application context (#1022)
* deregister UI remote event push strategy from application context
* remove application context from holder after detaching the UI

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
2020-10-12 11:42:40 +02:00
Ammar Bikic
edb9d91065 Remove aspectj-weaver.arg
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-10-05 08:27:26 +02:00
Ammar Bikic
ddabbc5249 Replace MediaTypes and make use of proper Identifiable.class
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-10-05 05:11:48 +02:00
Ammar Bikic
6faaad8e07 Add license header to MgmtContentTypeTest
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-10-02 18:19:47 +02:00
Ammar Bikic
26964ce5e4 Update Spring Boot to 2.3.4
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-10-02 18:18:43 +02:00
Ammar Bikic
16675e0e85 Update supported versions in README.md
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-10-02 18:18:27 +02:00
Ammar Bikic
2d3de50982 Remove aspectj-weaver again as not needed
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-10-02 18:18:12 +02:00
Ammar Bikic
c17ba89c6c Use best practise annotation for SAM interfaces in Java 8
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-10-02 18:17:30 +02:00
Ammar Bikic
8e90ffd95e Adaptations due to Vaadin 8 merge
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-10-02 18:17:04 +02:00
Ammar Bikic
a6404fdb83 Update Spring Boot to 2.3.3
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-10-02 18:12:54 +02:00
Ammar Bikic
28b65a290d Update Spring Boot to 2.3.2
-Update Spring Cloud to Hoxton.SR7
-Replace ResourceSupport by RepresentationModel (Spring Hateoas 1.0)
-Replace ControllerLinkBuilder by WebMvcLinkBuilder (Spring Hateoas 1.0)
-Move getId() from Identifiable to BaseEntity (Spring Hateoas 1.0)
-Remove hamcrest.Factory
-Use static Sort.by reference
-Place http security anyRequest().authenticated()
-Replace MockMvcRequestBuilders.fileUpload by MockMvcRequestBuilders.multipart
-Deprecate MEDIA_TYPE_CBOR_UTF8
-Replace MEDIA_TYPE_CBOR_UTF8 by MEDIA_TYPE_CBOR in tests
-Replace HAL_JSON_UTF8 by HAL_JSON in tests
-Replace APPLICATION_JSON_UTF8 by APPLICATION_JSON in tests
-Use org.mockito.junit.MockitoJUnitRunner
-Remove overridden dependency versions
-Removing not needed comments in pom.xml
-Downgrade flyway-core to be MySQL 5.6 compatible
-Add maven-site-plugin since it was removed with spring-boot 2.3
-Set servlet encoding properties
-Introducing Test that verifies the charset inside the content-type of a response
-Add @DirtiesContext to CorsTest and ContentTypeTest
-Add content-type mockmvc test with adapted mockmvc config
-Move encoding.force property to test class
-Switch expected and actual parameter values in content-type test
-Delete deprecated content-type test with TestRestTemplate
-Exclude JUnit5 from spring-boot-starter-test
-Upgrade allure-junit4 to 2.13.5
-Add aspectjweaver 1.9.6 to surefire test execution
-Add flyway-core version to property
-Use getRequiredLink() within MgmtBaseEntity.getId()

Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-10-02 18:11:18 +02:00
Dominic Schabel
e6b5f480da Fixes #963 (#1019)
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-10-02 14:11:13 +02:00
Dominic Schabel
7df4e4003b Fix for licence check
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-09-30 17:43:32 +02:00
Dominic Schabel
d524afe532 Fixed from file extension; Docker setup excluded instead of each singe file
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-09-30 17:11:22 +02:00
Ahmed Sayed
ba96c68eb0 added triggeredBy for rollouts and autoassignment (#1017)
* added triggeredBy for rollouts and autoassignment

Signed-off-by: Ahmed Sayed <ahmed.sayed@bosch-si.com>

* use createdBy as fallback for triggeredBy in AutoAssignChecker

Signed-off-by: Ahmed Sayed <ahmed.sayed@bosch-si.com>

* removed 'NOT NULL' from db migration scripts for JpaTargetFilterQuery

Signed-off-by: Ahmed Sayed <ahmed.sayed@bosch-si.com>

* fixed tests

Signed-off-by: Ahmed Sayed <ahmed.sayed@bosch-si.com>

* fixed review findings

Signed-off-by: Ahmed Sayed <ahmed.sayed@bosch-si.com>

* inlined redundant method in JpaDeploymentManagement

Signed-off-by: Ahmed Sayed <ahmed.sayed@bosch-si.com>

* added tests + renamed property to 'initiatedBy'

Signed-off-by: Ahmed Sayed <ahmed.sayed@bosch-si.com>

* fixed review findings

Signed-off-by: Ahmed Sayed <ahmed.sayed@bosch-si.com>
2020-09-28 09:35:19 +02:00
Michael Herdt
e82b9cee70 Feature/type for multi actions (#986)
* Introduce different types of Multi Action Event to distinguish between an Assignment and a Cancel.
* Minimize the payload for the multiAction assignment and cancel event. Write tests for the MultiActionCancelEvent.
* Remove unused action status.
* Move list of actionIds to MultiActionEvent and declare it as abstract.
* Remove unused imports.

Signed-off-by: Michael Herdt <Michael.Herdt2@bosch-si.com>
2020-09-25 13:12:42 +02:00
Markus Block
1b92b653da Updated to Vaadin 8.11.3 (#1010)
Signed-off-by: Markus Block <markus.block@bosch-si.com>
2020-09-24 14:08:24 +02:00
Bondar Bogdan
16ce6f35bf Fix combobox initial selection (#1012)
* extended TargetFilterQueryAware interface with target filter name to fix the combobox initial selection rendering issue

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* introduced ProxyTargetFilterQueryInfo for consistency and usage of binder convertor, adapted code

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* removed ProxyIdNameVersion in favour of ProxyDistributionSetInfo, adapted usage

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* changed DsIdAware to use ProxyDistributionSetInfo in order to fix the initial combobox selection, adapted corresponding usages

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* changed ProxySystemConfigWindow to use the ProxyTypeInfo for fixing the initial selection of Ds type, adapted code

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
2020-09-22 12:02:37 +02:00
Diego Rondini
30d5df59bd Add Update Factory by Kynetics as hawkbit provider (#1007)
Signed-off-by: Diego Rondini <diego.rondini@kynetics.com>
2020-09-15 16:52:39 +02:00