Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

INDIGO IAM v1.10.3 release #899

Open
wants to merge 22 commits into
base: master
Choose a base branch
from
Open

INDIGO IAM v1.10.3 release #899

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
3fdc770
Bump version to 1.10.3
rmiccoli Nov 18, 2024
99fc6fa
Handle HEAD requests
rmiccoli Nov 13, 2024
f15ef57
Update matchingPolicy
garaimanoj Oct 22, 2024
5acde91
Redirect to login page when signing AUP
federicaagostini Nov 14, 2024
e2588ce
Bump mitreid version to 1.3.7.cnaf-20241119
rmiccoli Nov 19, 2024
d93535f
Fix tests
rmiccoli Nov 19, 2024
af34308
Add confirmation before rotate client secret
SteDev2 Nov 20, 2024
6bbaccd
Grant admin scopes to admin-approved clients only
rmiccoli Jul 18, 2024
4026957
Fix account mapping
rmiccoli Nov 22, 2024
f628b97
Add POST endpoint for registration requests confirmation (#881)
enricovianello Nov 22, 2024
8836869
Fix CERN lifecycle handler (#871)
enricovianello Nov 22, 2024
9955809
Cosmetic fixes before 1.10.3 release (#882)
enricovianello Nov 26, 2024
442b58e
Exclude IAM optional groups from VOMS AC (#894)
rmiccoli Dec 16, 2024
b55eb54
Fix CERN lifecycle logic (#896)
enricovianello Dec 17, 2024
1ca2b20
Find account by certificate sub and iss in VOMS AA (#897)
rmiccoli Dec 17, 2024
42386e2
Avoid NullPointerException
enricovianello Dec 18, 2024
5312234
Fix code smells
rmiccoli Dec 19, 2024
59725c7
Remove Institute label
enricovianello Dec 19, 2024
8f068aa
Log lifecycle handlers start and end with INFO level
enricovianello Dec 19, 2024
284fbeb
Fix lifecycle management
enricovianello Dec 20, 2024
8b01a8f
Fix AuthZ on endpoints that requires identity
enricovianello Dec 20, 2024
430d36f
Fix sonar issues
enricovianello Dec 23, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Remove Institute label 
The 64 char limit on label val is not enough to store Institute.
  • Loading branch information
@enricovianello
enricovianello committed Dec 19, 2024
commit 59725c726cab9e271e16e241b2e389feb8fe897d
7 changes: 0 additions & 7 deletions ...ogin-service/src/main/java/it/infn/mw/iam/core/lifecycle/cern/CernHrLifecycleHandler.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,6 @@

import it.infn.mw.iam.api.registration.cern.CernHrDBApiService;
import it.infn.mw.iam.api.registration.cern.CernHrDbApiError;
import it.infn.mw.iam.api.registration.cern.dto.InstituteDTO;
import it.infn.mw.iam.api.registration.cern.dto.ParticipationDTO;
import it.infn.mw.iam.api.registration.cern.dto.VOPersonDTO;
import it.infn.mw.iam.api.scim.exception.IllegalArgumentException;
Expand Down Expand Up @@ -129,7 +128,6 @@ public void handleAccount(String cernPersonId, String experiment, IamAccount a)
return;
}

syncInstitute(a, ep.get().getInstitute());
syncAccountEndTime(a, ep.get().getEndDate());
setCernStatusLabel(a, CernStatus.VO_MEMBER, format(SYNCHRONIZED_MESSAGE));

Expand Down Expand Up @@ -244,11 +242,6 @@ private void restoreAccount(IamAccount a) {
accountService.deleteLabel(a, statusLabel);
}

private void syncInstitute(IamAccount a, InstituteDTO institute) {
IamLabel instituteLabel = CernHrLifecycleUtils.buildInstituteLabel(institute);
accountService.addLabel(a, instituteLabel);
}

private void syncAccountEndTime(IamAccount a, Date endDate) {
if (!isSkipEndDateSynch(a)) {
accountService.setAccountEndTime(a, endDate);
Expand Down
11 changes: 0 additions & 11 deletions iam-login-service/src/main/java/it/infn/mw/iam/core/lifecycle/cern/CernHrLifecycleUtils.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,6 @@

import org.joda.time.DateTimeComparator;

import it.infn.mw.iam.api.registration.cern.dto.InstituteDTO;
import it.infn.mw.iam.api.registration.cern.dto.ParticipationDTO;
import it.infn.mw.iam.core.lifecycle.ExpiredAccountsHandler;
import it.infn.mw.iam.core.lifecycle.ExpiredAccountsHandler.AccountLifecycleStatus;
Expand All @@ -45,7 +44,6 @@ public class CernHrLifecycleUtils {
public static final String LABEL_IGNORE = "ignore";
public static final String LABEL_SKIP_EMAIL_SYNCH = "skip-email-synch";
public static final String LABEL_SKIP_END_DATE_SYNCH = "skip-end-date-synch";
public static final String LABEL_INSTITUTE = "institute";

private CernHrLifecycleUtils() {}

Expand Down Expand Up @@ -109,13 +107,4 @@ public static boolean isActiveMembership(Date endTime) {
public static boolean isAccountIgnored(IamAccount a) {
return a.hasLabel(buildCernIgnoreLabel());
}

public static IamLabel buildInstituteLabel(InstituteDTO i) {
String fullInstitute = String.format("%s, %s, %s", i.getName(), i.getTown(), i.getCountry());
return IamLabel.builder()
.prefix(LABEL_CERN_PREFIX)
.name(LABEL_INSTITUTE)
.value(fullInstitute)
.build();
}
}
9 changes: 0 additions & 9 deletions ...n-service/src/test/java/it/infn/mw/iam/test/lifecycle/cern/CernAccountLifecycleTests.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,6 @@
import static it.infn.mw.iam.core.lifecycle.cern.CernHrLifecycleHandler.SYNCHRONIZED_MESSAGE;
import static it.infn.mw.iam.core.lifecycle.cern.CernHrLifecycleHandler.CernStatus.IGNORED;
import static it.infn.mw.iam.core.lifecycle.cern.CernHrLifecycleUtils.LABEL_CERN_PREFIX;
import static it.infn.mw.iam.core.lifecycle.cern.CernHrLifecycleUtils.LABEL_INSTITUTE;
import static it.infn.mw.iam.core.lifecycle.cern.CernHrLifecycleUtils.LABEL_MESSAGE;
import static it.infn.mw.iam.core.lifecycle.cern.CernHrLifecycleUtils.LABEL_STATUS;
import static it.infn.mw.iam.core.lifecycle.cern.CernHrLifecycleUtils.LABEL_TIMESTAMP;
Expand Down Expand Up @@ -277,14 +276,6 @@ public void testLifecycleWorksForValidAccounts() {
Optional<IamLabel> cernTimestampLabel =
testAccount.getLabelByPrefixAndName(LABEL_CERN_PREFIX, LABEL_TIMESTAMP);
assertThat(cernTimestampLabel.isPresent(), is(false));

Optional<IamLabel> cernInstituteLabel =
testAccount.getLabelByPrefixAndName(LABEL_CERN_PREFIX, LABEL_INSTITUTE);
assertThat(cernInstituteLabel.isPresent(), is(true));
assertThat(cernInstituteLabel.get().getValue(),
is("Istituto Nazionale di Fisica Nucleare, Bologna, IT"));


}

@Test
Expand Down
Loading