Add project direct_dependencies in components API

Author: sahibamittal

api/src/main/openapi/components/schemas/component-project.yaml

@@ -24,4 +24,6 @@ properties:
     maxLength: 255
   uuid:
     type: string
-    format: uuid
+    format: uuid
+  direct_dependencies:
+    type: string

apiserver/src/main/java/org/dependencytrack/persistence/jdbi/ComponentDao.java

@@ -283,7 +283,8 @@ default Page<Component> listComponents(
                         "L"."NAME" AS "licenseName",
                         "PROJECT"."NAME" AS "projectName",
                         "PROJECT"."UUID" AS "projectUuid",
-                        "PROJECT"."VERSION" AS "projectVersion"
+                        "PROJECT"."VERSION" AS "projectVersion",
+                        "PROJECT"."DIRECT_DEPENDENCIES" AS "projectDirectDependencies"
                 FROM "COMPONENT" "C"
                 INNER JOIN "PROJECT" ON "C"."PROJECT_ID" = "PROJECT"."ID"
                 LEFT OUTER JOIN "LICENSE" "L" ON "C"."LICENSE_ID" = "L"."ID"
@@ -346,6 +347,7 @@ public Component map(final ResultSet rs, final StatementContext ctx) throws SQLE
                 project.setUuid(UUID.fromString(rs.getString("projectUuid")));
                 maybeSet(rs, "projectName", ResultSet::getString, project::setName);
                 maybeSet(rs, "projectVersion", ResultSet::getString, project::setVersion);
+                maybeSet(rs, "projectDirectDependencies", ResultSet::getString, project::setDirectDependencies);
                 component.setProject(project);
             }
             maybeSet(rs, "componentPurl", ResultSet::getString, component::setPurl);

apiserver/src/main/java/org/dependencytrack/resources/v2/ComponentsResource.java

@@ -77,7 +77,7 @@ public class ComponentsResource extends AbstractApiResource implements Component
     public Response createComponent(final CreateComponentRequest request) {
         final UUID projectUuid = request.getProjectUuid();
         try (QueryManager qm = new QueryManager()) {
-            final Component componentCreated = qm.callInTransaction(() -> {
+            qm.callInTransaction(() -> {
                 final Project project = qm.getObjectByUuid(Project.class, projectUuid);
                 if (project == null) {
                     throw new NotFoundException();

apiserver/src/main/java/org/dependencytrack/resources/v2/mapping/ModelMapper.java

@@ -62,6 +62,7 @@ public static ComponentProject mapProject(org.dependencytrack.model.Project proj
                 .name(project.getName())
                 .version(project.getVersion())
                 .uuid(project.getUuid())
+                .directDependencies(project.getDirectDependencies())
                 .build();
     }
 

apiserver/src/test/java/org/dependencytrack/resources/v2/ComponentsResourceTest.java

@@ -26,6 +26,7 @@
 import org.dependencytrack.ResourceTest;
 import org.dependencytrack.auth.Permissions;
 import org.dependencytrack.model.Component;
+import org.dependencytrack.model.ComponentIdentity;
 import org.dependencytrack.model.Project;
 import org.junit.jupiter.api.Test;
 import org.junit.jupiter.api.extension.RegisterExtension;
@@ -163,7 +164,8 @@ public void listComponentsByIdentityPaginationTest() {
                         "project": {
                             "name": "projectA",
                             "version": "1.0",
-                            "uuid": "${json-unit.any-string}"
+                            "uuid": "${json-unit.any-string}",
+                            "direct_dependencies": "${json-unit.any-string}"
                         }
                       },
                       {
@@ -352,7 +354,8 @@ public void listComponentsByIdentityWithProjectTest() {
                         "project": {
                             "name": "projectA",
                             "version": "1.0",
-                            "uuid": "${json-unit.any-string}"
+                            "uuid": "${json-unit.any-string}",
+                            "direct_dependencies": "${json-unit.any-string}"
                         }
                       }
                   ]
@@ -399,7 +402,8 @@ public void listComponentsByIdentityAclTest() {
                         "project": {
                             "name": "projectA",
                             "version": "1.0",
-                            "uuid": "${json-unit.any-string}"
+                            "uuid": "${json-unit.any-string}",
+                            "direct_dependencies": "${json-unit.any-string}"
                         }
                       }
                   ]
@@ -418,6 +422,7 @@ private void prepareComponents() {
         componentA.setCpe("cpe:2.3:a:groupA:nameA:versionA:*:*:*:*:*:*:*");
         componentA.setPurl("pkg:maven/groupA/nameA@versionA?foo=bar");
         qm.createComponent(componentA, false);
+        projectA.setDirectDependencies("[%s]".formatted(new ComponentIdentity(componentA).toJSON()));
 
         final Project projectB = qm.createProject("projectB", null, "1.0", null, null, null, null, false);
         var componentB = new Component();