Commit Graph

2306 Commits

Author SHA1 Message Date
Natalia Kislicyn
eae34e65cc Update vendor Bosch Software Innovations to Bosch.IO (#993)
Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>
2020-08-04 11:32:03 +02:00
Alexander Dobler
5e6d8a03fc Added documentation for download status of ddi feedback (#985)
* Added documentation for download status of ddi feedback

Signed-off-by: Alexander Dobler <alexander.dobler3@bosch.io>

* Added download status to cancelAction docs

Signed-off-by: Alexander Dobler <alexander.dobler3@bosch.io>

* Fixed some typos in documentation

Signed-off-by: Alexander Dobler <alexander.dobler3@bosch.io>

* Added download status to ddi_api.md and added missing quotation marks

Signed-off-by: Alexander Dobler <alexander.dobler3@bosch.io>

* Added mising of in documentation

Signed-off-by: Alexander Dobler <alexander.dobler3@bosch.io>
2020-08-03 13:14:41 +02:00
Sergey Gerasimov
f04ca12566 Add devolo 2020 copyright header template. (#984)
Signed-off-by: Sergey Gerasimov <sergey.gerasimov@devolo.de>
2020-07-30 15:08:35 +02:00
Dominic Schabel
0873f6df97 CircleCI dropped webhook support in favour of Slack Orb
See: https://discuss.circleci.com/t/access-to-the-old-ui-will-be-shut-down-on-august-14th

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-07-24 13:29:03 +02:00
Dominic Schabel
195ad6fc2e Fix displayed code style
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-07-10 15:51:07 +02:00
Dominic Schabel
89b4142157 Fixes #972
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-07-03 14:46:38 +02:00
ajaybalakumar
a8ec8e5544 Custom Filter refreshed in management page - #916 (#970)
* Custom Filter refreshed in management page

Add, modify and remove events handled for custom filter and the
management page is updated acordingly

Signed-off-by: Ajay Balakumar Jeyabalakrishnan <ajaybalakumar.jeyabalakrishnan@in.bosch.com>

* Custom Filter refreshed in management page - #916

Review comments fixed.

Signed-off-by: Ajay Balakumar Jeyabalakrishnan <ajaybalakumar.jeyabalakrishnan@in.bosch.com>
2020-06-18 11:28:36 +02:00
Dominic Schabel
f95be2439d Broken Quartz link fixed #962
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-04-29 18:50:45 +02:00
Alexander Dobler
bff2c97e1f Fix NPE issues in RSQLUtility (#959)
* Fix Sonar NPE issues in RSQLUtility
* Fix RSQL test to not result in null path

Signed-off-by: Alexander Dobler <alexander.dobler3@bosch-si.com>
2020-04-16 13:51:12 +02:00
Shruthi Manavalli Ramanna
21a36a8bce Re-arranged the notification to indication user of already assigned ds (#956)
Signed-off-by: Shruthi Manavalli Ramanna <shruthimanavalli.ramanna@bosch-si.com>
2020-04-16 13:39:21 +02:00
Sebastian Firsching
0d52524202 Fix not equal operator (#935)
* Use nested query in getNotEqual Predicate
* Refactor RSQL Utility + use identifierField for field enums
* Don't join in case of not equal rsql operator
* Bugfix for automatic cross join + small refactoring
* Fix rsql out operator
* Fix tests for out-operator + extend TargetFieldTest
* Use inner join for subquery
* Don't use subquery for simple rsql queries
* Refactor RSQLUtility
* Change some methods to static
* Only use outer joins when they are needed
* Add tests for empty tag names
* Minor changes and refactoring for RSQLUtility
* Refactor methods to remove duplications

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>
2020-04-15 08:01:54 +02:00
AnbazhakanSubramaniam
6df1e934ee Allow to download an artifact from the UI (#786) (#944)
This feature allows to download the artifact from the Artifact details
table

Review points are handled

Signed-off-by: usb1cob <Anbazhakan.Subramaniam@in.bosch.com>
2020-04-09 14:51:55 +02:00
amic
793227e501 Fix treshold column headers (#951)
* Adapt header of error treshold column to make it more understandable

Signed-off-by: Ammar Bikic <ammar.bikic@bosch-si.com>

* Adapt header of error treshold column to make it more understandable

Signed-off-by: Ammar Bikic <ammar.bikic@bosch-si.com>
2020-03-23 16:43:28 +01:00
Natalia Kislicyn
6d9faee589 Streamline hawkBit logout behaviour (OIDC vs. Credentials) (#945)
* remove logout success handler bean in oidc configuration

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* changed logoutSuccessHandler for oidc configuration

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* set target url parameter to "/" instead of null

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>
2020-03-23 09:40:55 +01:00
Michael Herdt
ef3ee7cd5c Add permissions with roles for spring.security users. (#949)
* Add permissions with roles for spring.security users.
* Fix review findings.
* Use better authorityList initialisation.

Signed-off-by: Michael Herdt <Michael.Herdt2@bosch-si.com>
2020-03-19 17:23:36 +01:00
Sandeep Ravindranath
cf7add7aaa add method to get a single action by externalRef (#942)
* add method to get a single action by externalRef
* adding junit test for ControllerManagement::getActionByExternalRef
* fixing sonarQube findings
* improve assert statement

Signed-off-by: Ravindranath Sandeep <Sandeep.Ravindranath@bosch-si.com>
2020-03-19 10:16:30 +01:00
Sebastian Firsching
46ce3b632a Add spring exception handler for FileStreamingFailedException (#943)
Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>
2020-03-17 08:04:11 +01:00
Natalia Kislicyn
83161ea267 Show username in tables (#946)
* formatting the username is slightly improved

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* formatting the username without steams

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* formatting the username without information about first or last name

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>
2020-03-17 08:01:22 +01:00
amic
2dc5a959f0 Fix xss remained parts (#947)
* Fix remained XSS related tooltips by disabling them
* Adding TODOs to tooltips which has been set to null because of XSS
* Removing TODOs because of SonarQube

Signed-off-by: Ammar Bikic <ammar.bikic@bosch-si.com>
2020-03-17 07:53:32 +01:00
Dominic Schabel
7cf41c9a28 Add license header for Bosch.IO 2020 (#939)
* Add license header for Bosch.IO 2020

Signed-off-by: Alexander Dobler <alexander.dobler3@bosch-si.com>

* fix broken link in hawkbit documentation

Signed-off-by: Alexander Dobler <alexander.dobler3@bosch-si.com>

* Added license header template to pom

Signed-off-by: Alexander Dobler <alexander.dobler3@bosch-si.com>
2020-03-05 14:16:50 +01:00
Dominic Schabel
a3f5849268 Broken link fixed
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-03-05 14:15:54 +01:00
Natalia Kislicyn
b1497a6f0f Configure logoutHandler and logoutSuccessHandler as Beans (#938)
* Keep the given query parameter when redirecting the login url

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch-si.com>

* Make logout endpoint configurable via properties;
Undo query parameter acceptance when redirecting the login url

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch-si.com>

* make logout base variable non static

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch-si.com>

* Redo query parameter acceptance when redirecting the login url

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch-si.com>

* Remove tenant redirection in RedirectController

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch-si.com>

* Configure logoutHandler and logoutSuccessHandler with Beans

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch-si.com>

* Undo logout endpoint configuration via properties;

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch-si.com>

* remove authenticationEntryPoint configuration; fix review issues

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch-si.com>

* adopt review comments

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch-si.com>
2020-03-04 17:13:54 +01:00
Dominic Schabel
c091518777 Database overview updated
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-03-03 16:29:06 +01:00
Andrey Voronkov
73f9f6e933 PostgreSQL support (#932)
* PostgreSQL support

Signed-off-by: Andrey Voronkov <avoronkov@enapter.com>

* Add Enapter (c) to licenses.

Signed-off-by: Andrey Voronkov <avoronkov@enapter.com>

* Remove PostgreSQL dockerfiles and generator

Signed-off-by: Andrey Voronkov <avoronkov@enapter.com>

* Add ENAPTER license header to the valid headers list.

Signed-off-by: Andrey Voronkov <avoronkov@enapter.com>

* Fix sp_rollout table boolean value

Signed-off-by: Andrey Voronkov <avoronkov@enapter.com>
2020-03-03 09:01:31 +01:00
Dominic Schabel
ba5fa45a75 CQ added for PR #932
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-03-02 18:16:16 +01:00
Dominic Schabel
9436053652 Bosch Software Innovations is now Bosch IO
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-03-02 17:28:31 +01:00
Michael Herdt
9e715c292c Read tenant configuration value from system context to prevent permission issues while loading the rollouts view. (#937)
Signed-off-by: Michael Herdt <Michael.Herdt2@bosch-si.com>
2020-02-20 13:44:36 +01:00
Sebastian Firsching
a9b4195732 Add x-content-type-options header to fileStreamingUtil (#934)
* Add x-content-type-options header to fileStreamingUtil

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Add comment why the x-content-type-options header has to be set

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>
2020-02-20 11:09:29 +01:00
Michael Herdt
c7e910c9c3 Do not set or read user cookies on login. (#933)
* Do not set or read cookies on login.
* Change import order

Signed-off-by: Michael Herdt <Michael.Herdt2@bosch-si.com>
2020-02-19 09:45:16 +01:00
Michael Herdt
144ebd0f19 Show correct notification message for single and multiple notifications. (#931)
Signed-off-by: Michael Herdt <Michael.Herdt2@bosch-si.com>
2020-02-19 09:26:01 +01:00
Sebastian Firsching
87eadf59cd Reduce log output for entity not found in AmqpAuthenticationMessageHandler (#929)
* Reduce log output for entity not found in AmqpAuthenticationMessageHandler

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Adapt tests for reduced log message

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Suppress sonar warning + change log level for EntityNotFound

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>
2020-02-18 11:29:41 +01:00
Brandon Schmitt
b5f46b8b5d Make logout Button in dashboard menu context path aware. (#930)
Signed-off-by: Brandon Schmitt <Brandon.Schmitt@kiwigrid.com>
2020-02-06 10:27:54 +01:00
amic
6c162b2e93 Fix xss vulnerability (#924)
* Fix XSS vulnerability for Distribution Set and Software Module field
* Fix XSS vulnerability for Artifact Details of header in Upload view
* Fix XSS vulnerability in Distribution View Software Module box show artifact details window and fix SonarQube issue
* Fix XSS vulnerability in Upload View Software Module field manage metadata
* Fix XSS vulnerability for Notifications when creating or deleting new or existing Distributions or Software Modules plus adapting error notifications when trying to duplicate
* Fix XSS vulnerability for Distributions View when assigning sm to dist confirmation popup text
* Fix XSS vulnerability for Distributions View modules tab of distribution value of SoftwareModule
* Fix XSS vulnerability for Deployment View assigned tab of target which has risky distribution assigned
* Fix XSS vulnerability in Deployment view action history (of) field and eliminate bugs
* Fix XSS vulnerability bug in Deployment View Action history of field
* Fix XSS vulnerability for Distributions View Module tab as it rendered tool tip
* Fix XSS vulnerability formatting
* Invented some IDs to ease testing regarding XSS vulnerability
* Fix XSS peer review findings
* Fix XSS vulnerability for Distribution Set and Software Module field
* Resolve merge conflicts

Signed-off-by: Ammar Bikic <ammar.bikic@bosch-si.com>
2020-01-27 14:41:07 +01:00
Sebastian Firsching
62c876a435 Fix empty controller name (#925)
* Truncate target name when name is empty and controllerId exceeds name length limit
* Add check if controllerId is null
* Use seperate method to truncate controllerId + use Array.asList to create list
* Make truncateControllerIdToMaxNameLength a static method
* Additionally check target name by calling target management

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>
2020-01-27 13:09:43 +01:00
Sebastian Firsching
835757e93a Sort controller attributes alphabetically (#928)
* Sort controller attributes alphabetically
* Use TreeMap instead of streams to sort controller attributes

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>
2020-01-24 13:25:45 +01:00
Dominic Schabel
4969bf3eb7 Add Stack Overflow as communication channel (#926)
* Stack Overflow added as communication channel

Signed-off-by: Dominic Schabel <dominic.schabel@bosch-si.com>

* Wording improved

Signed-off-by: Dominic Schabel <dominic.schabel@bosch-si.com>
2020-01-22 10:24:57 +01:00
Jeroen Laverman
53345d9f2f Add Docker for M6 (#927)
* Add docker for M6

Signed-off-by: Jeroen Laverman <jeroen.laverman@bosch-si.com>

* update generator

Signed-off-by: Jeroen Laverman <jeroen.laverman@bosch-si.com>

* update versions

Signed-off-by: Jeroen Laverman <jeroen.laverman@bosch-si.com>

* fix version

Signed-off-by: Jeroen Laverman <jeroen.laverman@bosch-si.com>

* update Java

Signed-off-by: Jeroen Laverman <jeroen.laverman@bosch-si.com>
2020-01-21 17:42:05 +01:00
Dominic Schabel
16bb59c9a9 0.3.0M6 added to release notes
Signed-off-by: Dominic Schabel <dominic.schabel@bosch-si.com>
2020-01-21 13:53:45 +01:00
Dominic Schabel
f3659f0142 List of CQs updated
Signed-off-by: Dominic Schabel <dominic.schabel@bosch-si.com>
2020-01-16 12:04:12 +01:00
Dominic Schabel
435ca500f4 Switch to OAuth2 starters + exclude mail-dependency
Signed-off-by: Dominic Schabel <dominic.schabel@bosch-si.com>
2020-01-14 15:26:02 +01:00
Dominic Schabel
df21a63ee3 Sonar issues from PR #865 fixed
Signed-off-by: Dominic Schabel <dominic.schabel@bosch-si.com>
2020-01-14 14:29:20 +01:00
Dominic Schabel
67ecd875a7 Put back CORS config
+ minor formatting

Signed-off-by: Dominic Schabel <dominic.schabel@bosch-si.com>
2020-01-14 13:25:53 +01:00
Brandon Schmitt
1bcced9838 OpenID Connect support (#865)
* Added OpenID Connect support

Utilized Spring Security's OAuth2 respectively OIDC support as another
possibility to manage users and their permissions.

Signed-off-by: Brandon Schmitt <Brandon.Schmitt@kiwigrid.com>

* Document OpenID Connect Support

Signed-off-by: Brandon Schmitt <Brandon.Schmitt@kiwigrid.com>

* Updated license in OidcUserManagementAutoConfiguration.java

Signed-off-by: Brandon Schmitt <Brandon.Schmitt@kiwigrid.com>

* Revert updated license notice and add Kiwigrid license file

This reverts commit 23d36245

Signed-off-by: Brandon Schmitt <Brandon.Schmitt@kiwigrid.com>

* Resolve SonarQube issues

- Explicitly import the needed specific classes
- Document public methods
- Add `static` to the constant `JwtAuthoritiesOidcUserService.INVALID_REQUEST`
- Remove superfluous runtime exception `OAuth2AuthenticationException`

Signed-off-by: Brandon Schmitt <Brandon.Schmitt@kiwigrid.com>

* Add OidcUser support in SpringSecurityAuditorAware

Signed-off-by: Brandon Schmitt <Brandon.Schmitt@kiwigrid.com>

* Secure Management API using OpenID Connect, too.

Signed-off-by: Brandon Schmitt <Brandon.Schmitt@kiwigrid.com>
2020-01-14 13:09:13 +01:00
Dominic Schabel
38017ba7bc Temporarily removed CORS config
Signed-off-by: Dominic Schabel <dominic.schabel@bosch-si.com>
2020-01-14 13:06:36 +01:00
Sebastian Firsching
8d3ba68be9 Fix already assigned targets (#919)
* Dont count not existing targets as already assigned to DS

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Add test for deploymentManagement

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Delete 404 error message from docs when target is not found

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Add text to implementation notes

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Add assertions to test

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Add expected behaviour to test description

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Refactor deploymentMgmtTest

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Filter out non-existing controllerIds

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Extend test descriptions

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Refactor createTargets method

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Add createTargetAndJsonArray method

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Correct expected test result

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Adapt rest docs

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Correct test

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Only count targets that exist for total and adapt test

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Use only existign targetWithActionTypes for assignment

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Rename targetIds to providedTargetIds

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>
2020-01-13 12:41:59 +01:00
Sebastian Firsching
5feb5873c4 Feature mgmtapi add sha256 to softwaremodules (#918)
* Add sha256 hash to softwaremodules in mgmt api

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Adapt rest docs

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Edit comments

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>

* Add proper license header

Signed-off-by: Sebastian Firsching <sebastian.firsching@bosch-si.com>
2020-01-13 12:36:14 +01:00
Michael Herdt
0e9caf3a88 Move the refresh button for the controller attributes to the left to … (#920)
* Move the refresh button for the controller attributes to the left to prevent overlay with scrollbar.
* Move the controller attributes refresh button to a separate column.

Signed-off-by: Michael Herdt <Michael.Herdt2@bosch-si.com>
2020-01-13 11:25:16 +01:00
Dominic Schabel
d1159ba1a7 Slides for Community Day 2019 added
Signed-off-by: Dominic Schabel <dominic.schabel@bosch-si.com>
2019-12-03 17:17:03 +01:00
Michael Herdt
e815873dad Check only DELETE_TARGET permission by validating delete permissions for TargetTable (#909)
Signed-off-by: Michael Herdt <Michael.Herdt2@bosch-si.com>
2019-11-26 12:53:02 +01:00
Bondar Bogdan
f295a98314 changed PageRequest to OffsetBasedPageRequest for all of the Bean Queries (#912)
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch-si.com>
2019-11-18 11:05:35 +01:00