Skip to content

Add SecurityConfiguration fixes - #1066

Merged
mpgxvii merged 79 commits into
devfrom
feature/auth-fixes
Nov 25, 2025
Merged

Add SecurityConfiguration fixes#1066
mpgxvii merged 79 commits into
devfrom
feature/auth-fixes

Conversation

@mpgxvii

@mpgxvii mpgxvii commented May 15, 2025 •
edited
Loading

Copy link
Copy Markdown
Member

Description:

  • Add SecurityConfiguration auth endpoint fixes
  • Fix admin details override methods (email and password override in identity service)
  • Keep the OAuth2 Clients edition in the MP working
  • Several extra fixes for error handling and few issues introduced by the AuthServerEnabled annotation.
  • Merge changes from master

Checklist:

  • The Main workflow has succeeded
  • The Gatling tests have passed
  • I have logged into the portal running locally with default admin credentials
  • I have updated the README files if this change requires documentation update
  • I have commented my code, particularly in hard-to-understand areas

this-Aditya and others added 29 commits April 25, 2025 17:55
@this-Aditya @mpgxvii
Added public endpoint for fetching subset of projects info
16f319b
@this-Aditya @mpgxvii
PR feedback addressed
92ee8ae
@this-Aditya @mpgxvii
Removed use of lite word
8c640b2
@this-Aditya @mpgxvii
Using MinimalSourceType instead of SourceType
bd3172e
@mpgxvii
Update kotlin version
84a8cbd
@mpgxvii
Update gitignore
f256b51
@mpgxvii
Update dependencies
0c9b6fa 
- Updates vulnerable deps
@mpgxvii
Update undertow version
b9a2c81
@mpgxvii
Update jackson version
250b981
@pvannierop @mpgxvii
Create single instance of HttpClient
9a13041
@Bdegraaf1234 @mpgxvii
Get token from session if available
68ed437
@pvannierop @mpgxvii
Fix passing url to HttpClient
abc1174
@pvannierop @mpgxvii
Fix key name variable for release publishing action
1a7095a
@pvannierop @mpgxvii
Fix docker compose command
457af66
@keyvaann @mpgxvii
Add scheduled Snyk check for Docker image
ce13a8e
@keyvaann @mpgxvii
Allow manual run of the synk scan
b58b221
@keyvaann @mpgxvii
Fixed the snyk scan CI
e263313
@pvannierop @mpgxvii
Fix snyk cli version ref in action
2b2149b
@pvannierop @mpgxvii
Fix output file for Snyk Docker image test
c8aca61
@pvannierop @mpgxvii
Update snyk scans
4930088 
Weekly check code base and docker base image for vulnerabilities. Vulnerabilities are reported to the Security tab in Github.
@pvannierop @mpgxvii
Apply security upgrades March 2025 platform upgrade
692b270
@mpgxvii
Add alternative check for client credentials auth
f01fbf3
@mpgxvii
Bump version
7a310b8
@mpgxvii
Always publish snapshots
fd15fa7
@mpgxvii
Update .github/workflows/snyk.yaml
0c68c3d 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@mpgxvii
Update annotation in PublicProjectDTO and imports
6d6817f
@mpgxvii
Bump version
2145443
@mpgxvii
Update snapshot publishing in main GA workflow
6b345ab
@mpgxvii
Merge pull request #1063 from RADAR-base/release-2.1.9
4790a1b 
Release 2.1.9
pvannierop and others added 29 commits September 2, 2025 13:12
@pvannierop
Up project version to 2.1.10
4b4917a
@pvannierop
Merge pull request #1070 from RADAR-base/release-2.1.10
02a090f 
release-2.1.10
@pvannierop
Fix OSSRH upload credentials
84dc415
@pvannierop
Up project version to 2.1.11
173ead3
@pvannierop
Merge pull request #1071 from RADAR-base/release-2.1.11
29c4dd7 
release-2.1.11
@pvannierop
Fix urls to Maven Central repos
4dc7202
@pvannierop
Set required JVM version to 17
31ce5ae
@pvannierop
Up action versions
56997e4
@pvannierop
Up project version to 2.1.12
977a212
@pvannierop
Merge pull request #1072 from RADAR-base/release-2.1.12
1d466a8 
release-2.1.12
@pvannierop
Globally disable liquibase analytics
6c7defe
@pvannierop
Merge pull request #1073 from RADAR-base/release-2.1.12
cbe8d81 
Globally disable liquibase analytics
ewelinagr
Improve error handling in security config loader
ed1d68c
ewelinagr
fix: Remove AuthServerEnabled annotation to keep jdbcClientDetailsSer…
3bb481c 
…vice not null.
ewelinagr
fix: Change Kratos activation email to use link verification flow
9972427
ewelinagr
feat: implement separate OAuth2 client service for Hydra
b70d424
ewelinagr
fix: adjust management portal client config
c74141a
ewelinagr
fix: Only load MP's own token_key endpoint if the internal auth server
34855e4
@pvannierop
Add read packages persmission to docker image scanning action
b9e9990
@pvannierop
Fix docker image scanning action
8429958
@pvannierop
fix: re-add checkout in GitHub action
1f67fdc
@pvannierop
fix: URL encode projectId
9dc5090 
Whitespace in projectId caused errors. I would assume that OkHttp URLBuilder to take care of this, but apparently it doesn't.
@pvannierop
chore: up project version to 2.1.13
c2a00ec
@pvannierop
Merge pull request #1076
0140bac 
fix: encode projectId in MP client URL
@mpgxvii
Merge pull request #1074 from RADAR-base/feature/auth-fixes-improvements
625e56b 
Feature/auth fixes improvements
@mpgxvii
Merge branch 'dev' of https://github.com/RADAR-base/ManagementPortal …
ecab9be 
…into feature/auth-fixes
@mpgxvii
Merge branch 'master' of https://github.com/RADAR-base/ManagementPortal…
53653e7 
… into feature/auth-fixes
@mpgxvii
Merge branch 'feature/auth-fixes' of https://github.com/RADAR-base/Ma…
390d72a 
…nagementPortal into feature/auth-fixes
@mpgxvii
Fix unassigning sources from subject
0f44f8f
@mpgxvii
mpgxvii merged commit 9a31889 into dev Nov 25, 2025
7 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@peyman-mohtashami peyman-mohtashami Awaiting requested review from peyman-mohtashami peyman-mohtashami is a code owner
@yatharthranjan yatharthranjan Awaiting requested review from yatharthranjan yatharthranjan is a code owner
@pvannierop pvannierop Awaiting requested review from pvannierop pvannierop is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

6 participants

@mpgxvii @pvannierop @github-advanced-security @this-Aditya @Bdegraaf1234 @keyvaann