Commit Graph

2390 Commits

Author SHA1 Message Date
Dominic Schabel
f7494da0b8 How to report vulnerability
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2021-02-23 10:15:47 +01:00
Bondar Bogdan
f2e129ab40 Merge pull request #1089 from bosch-io/fix_vaadin_security_upgrade
Upgrade Vaadin to 8.12.3
2021-02-22 21:25:25 +01:00
Bogdan Bondar
b185d653be upgraded Vaadin to 8.12.3
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
2021-02-22 12:57:49 +01:00
Dominic Schabel
1d4ffa7604 Proxy support for sandbox fixed
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2021-02-15 18:09:26 +01:00
Dominic Schabel
186d7ca855 Bump docker setup to 0.3.0M7
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2021-02-15 14:47:04 +01:00
Dominic Schabel
9f16d1517d 0.3.0M7 release notes added
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2021-02-12 08:23:47 +01:00
Dominic Schabel
9c5360e59d JUnit5 support (#1063)
* First preparation for JUnit5

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>

* Exclusion of JUnit5 removed

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2021-02-12 08:22:26 +01:00
Natalia Kislicyn
3422781125 Restructure Tenant Configuration View to make it more flexible for adaptations (#1043)
* Extract view creation for Configuration Components into Beans;
Split implementations of config Binders into corresponding view classes:
- add ProxySystemConfig classes respectively for ConfigurationViews;
- create Binder and config Bean in BaseConfigurationView via Generics;
- extend ConfigurationViews from BaseConfigurationView;
- populate Binders and config Bean in ConfigurationView;
- access binder getter/setter in ConfigurationItem through corresponding ProxySystemConfig;
- autowire Collection of Config Views in TenantConfigurationDashboardView;
- create components, call save and undo for each config view in Collection

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* Do not send the target token when anonymous download is enabled

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* Update amqp tests to cover enabled anonymous download config

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* Do not change TargetToken functionality for hawkbit;
Make createDownloadAndUpdateRequest protected;
Undo some of previous test changes;

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* Add license header to ProxySystemConfigDsType

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* Call save methods for filtered ConfigurationViews only, not the autowired.

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* Document public classes

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* Adopt Review Comments:
- Rename DefaultDistributionSetTypeLayout
- Remove unnecessary qualifier TenantConfigurationProperties

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* Refactoring: implement InitializingBean instead of using PostConstruct

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* Apply to remaining classes: implement InitializingBean instead of using PostConstruct

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* Removed unnecessary method notifyConfigurationChanged();
Documented Bean creation of configuration views

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* Rename TenantConfigurationAutoConfiguration to SystemConfigViewAutoConfiguration

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>

* Rename init method of DefaultDistributionSetTypeView

Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>
2021-02-11 17:21:55 +01:00
Michael Herdt
3deb325514 Show Controller ID within target, filter and rollouts view (#1056)
* Add the controllerId column to the targetGrid of the deployment, rollout target and filter search result view.

Signed-off-by: Michael Herdt <Michael.Herdt@bosch.io>

* Fix review findings.

Signed-off-by: Michael Herdt <Michael.Herdt@bosch.io>

* introduce a constant for the default min_width in GridComponentBuilder

Signed-off-by: Michael Herdt <Michael.Herdt@bosch.io>
2021-02-11 17:10:49 +01:00
Florian Ruschbaschan
74630b4bce Update .adoc path reference (#1078)
Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>
2021-02-11 16:43:28 +01:00
Dominic Schabel
17cca56a1b Merge pull request #1018 from bosch-io/fix_migration_to_new_spring_boot_version
Update Spring Boot to 2.3.7.RELEASE
2021-02-11 16:42:14 +01:00
Stefan Klotz
84f0180ad1 Document and explain DB migration issue (#1079)
* add explanation

Signed-off-by: Stefan Klotz <stefan.klotz@bosch.io>

* add hyperlinks

Signed-off-by: Stefan Klotz <stefan.klotz@bosch.io>

* rephrase

Signed-off-by: Stefan Klotz <stefan.klotz@bosch.io>

* rephrase

Signed-off-by: Stefan Klotz <stefan.klotz@bosch.io>
2021-02-10 17:06:50 +01:00
Jeroen Laverman
296beca32d add slides for eclipse community day 2020 (#1031)
* add slides for eclipse community day 2020
* add slides for eclipse community day 2020

Signed-off-by: Jeroen Laverman <jeroen.laverman@bosch-si.com>
2021-02-10 08:56:05 +01:00
Dominic Schabel
63a269835e Fixed permission matrix (#1076)
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2021-02-08 16:56:50 +01:00
Stefan Klotz
ba2b3a6427 Fix database migration scripts (#1061)
* fix sql server migration

Signed-off-by: Stefan Klotz <stefan.klotz@bosch.io>

* fix postgres migration

Signed-off-by: Stefan Klotz <stefan.klotz@bosch.io>

* fix db2 migration

Signed-off-by: Stefan Klotz <stefan.klotz@bosch.io>
2021-02-08 10:17:45 +01:00
Natalia Kislicyn
d1c60d613a Fix NPE that occurs on invalid user input in editfields (#1077)
Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>
2021-02-05 13:57:09 +01:00
Florian Ruschbaschan
09db327ba4 Add license header example to the contribution guide (#1073)
Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>
2021-02-03 17:30:53 +01:00
Dominic Schabel
9afe923605 List of CQs refreshed
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2021-01-25 11:27:06 +01:00
Dominic Schabel
632bd26744 Fixed default token settings (#1074)
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2021-01-22 14:54:07 +01:00
Guillaume Desmottes
c65ce74e61 README: link to hawkbit-rs (#1072)
I just released a couple of Rust crates which could likely be useful to
anyone looking to implement a hawkBit client in Rust.

Signed-off-by: Guillaume Desmottes <guillaume.desmottes@collabora.com>
2021-01-22 09:38:35 +01:00
Ammar Bikic
0a31b513ec Merge remote-tracking branch 'origin/master' into fix_migration_to_new_spring_boot_version_merge_master
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2021-01-21 17:26:37 +01:00
Dominic Schabel
8e4a721801 Fixed GitHub actions for first time contributors
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2021-01-21 17:20:32 +01:00
Ammar Bikic
ac8c174b2c Merge remote-tracking branch 'origin/master' into fix_migration_to_new_spring_boot_version_merge_master
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2021-01-15 17:28:49 +01:00
Ammar Bikic
0356039c42 Insert spring-webmvc dependency with test scope to make tests running
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2021-01-15 16:25:49 +01:00
Stefan Schake
70ee9472bf Fixup force delete action documentation (#1042)
This was doing a GET request and didn't even specify
the action ID.

Signed-off-by: Stefan Schake <stefan.schake@devolo.de>
2021-01-14 15:52:39 +01:00
Dominic Schabel
ba81ae6fb4 Fix introduced issues
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2021-01-14 13:44:22 +01:00
Kai Zimmermann
e9f11d2a20 DB and RabbitMQ integration tests and PostgreSQL testing/bug fixing (#1047)
* Initial matrixSigned-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>

* License header

* MySQL DB testSigned-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>

* Create matrix for DBsSigned-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>

* RabbitMQ and H2Signed-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>

* MySQL 8.0Signed-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>

* Postgresql test supportSigned-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>

* Postgresql test supportSigned-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>

* Fix DB issues post and mssql

Signed-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>

* Wait MSSQL

Signed-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>

* Fix postgresql tests.

Signed-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>

* MSSQL startup fix.Signed-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>

* Fix syntax error

Signed-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>

* Further fix postgres tests.Signed-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>

* Revert unnecessary changes.

Signed-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>

* Add SonarCloud Signed-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>

* Simplify devcontainer. Test JDK 15Signed-off-by: Kai Zimmermann <kai.zimmermann@microsoft.com>
2021-01-14 09:07:03 +01:00
Dominic Schabel
4ea5d7655b Bosch licence header 2021 added
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2021-01-13 17:46:53 +01:00
Dominic Schabel
94b7c12cde Fixes #1067
JSON body response for HTTP 404 error may contain unsafe URL path characters. Thus removing path from the response

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2021-01-12 11:56:56 +01:00
Florian Ruschbaschan
8816396d18 Add existsByInstalledOrAssignedDistributionSet (#1064)
Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>
2021-01-12 11:29:48 +01:00
Florian Ruschbaschan
2191db40d7 Add Github actions stale and first-interaction workflow (#1054)
* Add Github actions workflow

Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>

* Change secret name

Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>
2021-01-11 15:50:06 +01:00
Ammar Bikic
adeabbd442 Changes requested within pull request review.
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2021-01-08 19:28:26 +01:00
Ammar Bikic
7434293e27 Changes requested within pull request review.
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2021-01-08 19:27:59 +01:00
Ammar Bikic
3ee7d8146c Overwriting VaadinAuthenticationSuccessHandler of default VaadinSharedSecurityConfiguration
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2021-01-08 17:36:49 +01:00
Dominic Schabel
6df3a04f51 Removed "time" field from tests
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-12-16 17:42:41 +01:00
Dominic Schabel
76fa389eeb Unused time field removed from DDI docs
Back in the days "time" was specified in API but never implemented/evaluated by hawkBit.
So we better remove it from the docs in order to avoid confusion.

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-12-15 17:13:17 +01:00
Florian Ruschbaschan
5cf008cc03 Update Spring Boot to 2.3.7.RELEASE
Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>
2020-12-11 13:58:56 +01:00
Jeroen Laverman
158da91c74 Update host of sandbox to new eclipse projects.io 2020-12-09 09:04:08 +01:00
Ammar Bikic
918304f1b6 SonarQube adaptations
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-12-04 14:22:46 +01:00
Ammar Bikic
458bc8cb03 Merge remote-tracking branch 'origin/master' into fix_migration_to_new_spring_boot_version_merge_master
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-12-04 13:40:31 +01:00
Ammar Bikic
98f7a5b9f3 Host header attack implementation improvements and tests
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-12-04 13:33:59 +01:00
Ammar Bikic
e23f4dae63 Improve firewall logging
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-12-03 09:58:28 +01:00
Ammar Bikic
75d906252e Fix host header attack
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-11-30 16:25:43 +01:00
Markus Block
cb2b2ca4e8 Increase cronutils version (#1053)
* CVE-2020-26238

Signed-off-by: Markus Block <markus.block@bosch-si.com>

* adapted code to new cron-utils versions

Signed-off-by: Markus Block <markus.block@bosch-si.com>
2020-11-27 12:19:49 +01:00
Ammar Bikic
68e4cd93e1 Merge remote-tracking branch 'origin/master' into fix_migration_to_new_spring_boot_version_merge_master
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-11-09 16:13:10 +01:00
Markus Block
cc40529dc9 Cleanup UI code after Vaadin migration (#1027)
* Removed code duplications in DistSMTypeFilterLayout
* Removed code duplications in DistributionSetGridLayout
* fix Sonar issues
* fixed Sonar issues
* fix Sonar issues
* Removed duplications in SwModuleGridLayout and SoftwareModuleGridLayout
* started to remove ui duplications in *WindowController classes
* Removed unused variables
* introduced UIConfiguration object as container for common used dependencies
* continued introducing UIConfiguration object
* fixed Sonar issues
* Removed some duplicated code in WindowController classes
* call getter in super class instead of accessing fields directly
* introduced convinience methods for showing notifications in super class
* Renamed UIConfiguration to CommonUiDependencies
* Renamed UIConfiguration to CommonUiDependencies
* Introduced parent classes for add and update window controllers
* fixed Sonar issue
* introduced validator delegates in the window controller classes
* remove duplicate code between add/update controllers
* removed unnecessary abstract method used only for logging
* fixed DS selection after create
* check for duplicate entity only if attributes have changed
* fixed some failures
* fixed using wrong method for displaying validation error
* making hawkbit bot happy
* Fixed displaying success message now with persisted entity name
* make Sonar happy
* Incorporated review remarks

Signed-off-by: Markus Block <markus.block@bosch-si.com>
2020-11-05 09:59:10 +01:00
Ammar Bikic
165f6e0435 Change to proper versioning
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
2020-11-03 09:59:21 +01:00
Dominic Schabel
ed9a4b1bb3 Java 11 support for hawkBit (#1038)
* hawkBit on Java 11
* Reference to created GH issue added

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-10-29 16:36:55 +01:00
Sergey Gerasimov
929f09a0c1 Removed misleading code from RSQLUtility - unused operator '=li=' (#1030)
Signed-off-by: Sergey Gerasimov <sergey.gerasimov@devolo.de>
2020-10-28 17:56:47 +01:00
Dominic Schabel
c2f7c2f778 Raise Allure to 2.13.6 (#1037)
Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
2020-10-26 17:56:28 +01:00