Commit ad2086f
authored
Feature/configurable powers domain (#185)
* update version
* feat: when fetching credential procedures, allow admins to fetch all issued procedures (from all organizations).
* feat: add owner_email in ProcedureBasicInfo so it can be shown in UI
* feat: add organization in ProcedureBasicInfo so it can be shown in UI
* feat: remove owner email from ProcedureBasicInfo
* fix: replace organizationIdentifier for organization in ProcedureBasicInfo
* fix(CredentialProcedureServiceImpl): fix fetching of the decoded credential in toProcedureBasicInfo()
* feat: include organizationIdentifier instead of organization in ProcedureBasicInfo.
* feat(CredentialProcedureService): when getting one procedure by ID and org ID, if user is admin, get it only by ID
* feat(CredentialProcedureService): include ownerEmail in credential details
* test(CredentialProcedureServiceImplTest): tests for getCredentialProcedureById
* feat(issuance): add onBehalf field to CredentialProcedure and CredentialProcedureCreationRequest; when issuing LEAR Credential Employee, add this field (so emails that are sent to the actual credential issuer)
* Revert "feat(issuance): add onBehalf field to CredentialProcedure and CredentialProcedureCreationRequest; when issuing LEAR Credential Employee, add this field (so emails that are sent to the actual credential issuer)"
This reverts commit 58d37fb.
* feat(buildCredentialProcedureCreationRequest): when creating CredentialProcedure for Employee and Machine VCs, use always the mandator organization ID for the organizationIdentifier field.
* refactor: change "owner email" for "subject email"
* test commit: hardcode organization name for email info
* feat: add auditing
* fix(SecurityConfig): replace lambda Converter with explicit class to fix generic type inference error at startup
* fix(CredentialProcedureServiceImpl): restore update in basic info and set it as Instant to make it compatible with new CredentialProcedure
* core/fix: add jackson-datatype-jsr310 to support Instant
* add test logs
* fix(R2dbcAuditingConfig): use reactive security context holder
* in ProcedureBasicInfo), change output organizationIdentifier for organization_identifier
* style: remove and change comments, adjust tabs
* tests
* tests
* restore comment in V7 migration file to avoid flyway error
* upgrade coverage
* sonar issues
* avoid duplication creating a JwtPrincipalService
* avoid duplication creating a JwtPrincipalService
* change "subject_email" for "email" in CredentialProcedure-related models; update flyway scripts
* enhance comments
* fix(issuance): change remaining credential subject email references
* fix(issuance): send email pending credential to admin email (from token mandatee) when acting on behalf
* fix: create securityUtils to get the current access token from authentication context; use it to get org id and mandatee email when sending email on behalf
* Revert "fix: create securityUtils to get the current access token from authentication context; use it to get org id and mandatee email when sending email on behalf"
This reverts commit c0a5ce1.
* wip fix(RemoteSignatureServiceImpl): get admin email from updated_at
* fix(signature flow): make handlePostRecoverError admit email as optional parameter. This is needed because when retrying signature from retrySignUnsignedCredential, the update_at field of the procedure (from which the email was obtained normally) hasn't been updated yet with the current user's email.
* fix(handleOperationMode): get email from procedure.email
* fix: make createDetailedIsssuer and related methods admit email as parameter. This is needed because updatedAt in procedure is updated as system during the previous process
* fix(generateVerifiableCredentialResponse): get email from udpatedBy, not from email
* chivatos
* fix test
* test in JwtPrincipalServiceImpl: set hardcoded email
* feat(security): for public endpoints, add logic to set the email of the id token as principal
* chivatos
* fix(JwtPrincipalService): adapt extractMandateeEmail to ID token structure
* fix(JwtPrincipalService): if couldn't find email, return principal as "anonymous" instead of null to avoid error
* refactor: remove JwtPrincipalService, move its methods to JWTService
* remove credentialProcedureService.getSignerEmailFromDecodedCredentialByProcedureId method
* remove unused comments and parameters
* chivatos
* temporary fix(VerifiableCredentialPolicyAuthorizationServiceImpl.isSignerIssuancePolicyValid): admit LEAR Credential Machine mandator check.
* remove isLikelyEmail
* remove logs
* remove CredentialSignerController
* add logs
* upgrade coverage
* update changelog
* sonar issues
* update changelog
* remove unused parameter 'credentialType' in create...Issuer related methods
* in activate-credential-email-es.html, replace: "Estimado/a [usuario]," > "Hola,"
* add test logs
* fix(SignUnsignedCredentialController): get and use bearer token instead of authorization header
* feat: make admin organization identifier configurable
* fix tests
* upgrade coverage
* sonar issues
* test: manually updated updated_by after sending reminder
* Revert "test: manually updated updated_by after sending reminder"
This reverts commit 082893f.
* sonar issues
* Revert "sonar issues"
This reverts commit 5d34f25.
* dockerfile: replace openjdk for bellsoft/liberica-openjdk-alpine-musl:17
* Reapply "sonar issues"
This reverts commit cec49f3.
* Sonar issues
* Sonar issues
* update chagnelog
* sonar issue in SecurityConfig.convert
* remove and enhance logs and comments
* sonar issue: nonNull in SecurityConfig
* sonar issue: nonNull in SecurityConfig
* update Changelog
* fix(SecurityConfig): avoid error in initialization for lambda causing type uncertainty
* core(Dockerfile): use eclipse-temurin:17-jdk-alpine
* fix(security): suppress S2638 in JwtToAuthConverter
The convert package includes @NonNullApi, but our method overrides
Converter interface which declares convert() as @nullable. This creates
a nullability conflict detected by Sonar. Suppression is safe as the
method always returns Mono.just(), never null.
* update changelog
* refactor: implmenet single responsibility principle in CustomAuthenticationManager and DualTokenAuthentication
* feat: add "sys-tenant" env variable and use it instead of constant DEFAULT_ORGANIZATION_NAME (remove this)
* update version and changelog
* update version and changelog
* fix tests
* add logs
* upgrade coverage
* small arrangements before revision (remove logs and comments)1 parent 8e2c722 commit ad2086f
File tree
12 files changed
+187
-30
lines changed- src
- main
- resources
12 files changed
+187
-30
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
4 | 4 | | |
5 | 5 | | |
6 | 6 | | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
7 | 10 | | |
8 | 11 | | |
9 | 12 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
12 | 12 | | |
13 | 13 | | |
14 | 14 | | |
15 | | - | |
| 15 | + | |
16 | 16 | | |
17 | 17 | | |
18 | 18 | | |
| |||
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
132 | 132 | | |
133 | 133 | | |
134 | 134 | | |
135 | | - | |
| 135 | + | |
136 | 136 | | |
137 | 137 | | |
138 | 138 | | |
| |||
src/main/java/es/in2/issuer/backend/shared/domain/service/impl/CredentialProcedureServiceImpl.java
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
379 | 379 | | |
380 | 380 | | |
381 | 381 | | |
382 | | - | |
| 382 | + | |
383 | 383 | | |
384 | 384 | | |
385 | 385 | | |
| |||
Lines changed: 0 additions & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
36 | 36 | | |
37 | 37 | | |
38 | 38 | | |
39 | | - | |
40 | 39 | | |
Lines changed: 4 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
87 | 87 | | |
88 | 88 | | |
89 | 89 | | |
| 90 | + | |
| 91 | + | |
| 92 | + | |
| 93 | + | |
90 | 94 | | |
Lines changed: 5 additions & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
18 | 18 | | |
19 | 19 | | |
20 | 20 | | |
21 | | - | |
22 | | - | |
| 21 | + | |
| 22 | + | |
23 | 23 | | |
24 | 24 | | |
25 | 25 | | |
| |||
32 | 32 | | |
33 | 33 | | |
34 | 34 | | |
35 | | - | |
| 35 | + | |
| 36 | + | |
36 | 37 | | |
37 | 38 | | |
38 | 39 | | |
| |||
43 | 44 | | |
44 | 45 | | |
45 | 46 | | |
| 47 | + | |
46 | 48 | | |
47 | 49 | | |
48 | 50 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
135 | 135 | | |
136 | 136 | | |
137 | 137 | | |
| 138 | + | |
| 139 | + | |
138 | 140 | | |
139 | 141 | | |
140 | 142 | | |
| |||
Lines changed: 60 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
| 8 | + | |
| 9 | + | |
8 | 10 | | |
9 | 11 | | |
10 | 12 | | |
| |||
913 | 915 | | |
914 | 916 | | |
915 | 917 | | |
| 918 | + | |
| 919 | + | |
| 920 | + | |
| 921 | + | |
| 922 | + | |
| 923 | + | |
| 924 | + | |
| 925 | + | |
| 926 | + | |
| 927 | + | |
| 928 | + | |
| 929 | + | |
| 930 | + | |
| 931 | + | |
| 932 | + | |
| 933 | + | |
| 934 | + | |
| 935 | + | |
| 936 | + | |
| 937 | + | |
| 938 | + | |
| 939 | + | |
| 940 | + | |
| 941 | + | |
| 942 | + | |
| 943 | + | |
| 944 | + | |
| 945 | + | |
| 946 | + | |
| 947 | + | |
| 948 | + | |
| 949 | + | |
| 950 | + | |
| 951 | + | |
| 952 | + | |
| 953 | + | |
| 954 | + | |
| 955 | + | |
| 956 | + | |
| 957 | + | |
| 958 | + | |
| 959 | + | |
| 960 | + | |
| 961 | + | |
| 962 | + | |
| 963 | + | |
| 964 | + | |
| 965 | + | |
| 966 | + | |
| 967 | + | |
| 968 | + | |
| 969 | + | |
| 970 | + | |
| 971 | + | |
| 972 | + | |
| 973 | + | |
| 974 | + | |
| 975 | + | |
916 | 976 | | |
917 | 977 | | |
Lines changed: 37 additions & 4 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
8 | | - | |
9 | | - | |
10 | | - | |
11 | | - | |
| 8 | + | |
12 | 9 | | |
13 | 10 | | |
14 | 11 | | |
| |||
18 | 15 | | |
19 | 16 | | |
20 | 17 | | |
| 18 | + | |
21 | 19 | | |
22 | 20 | | |
23 | 21 | | |
| |||
770 | 768 | | |
771 | 769 | | |
772 | 770 | | |
| 771 | + | |
| 772 | + | |
| 773 | + | |
| 774 | + | |
| 775 | + | |
| 776 | + | |
| 777 | + | |
| 778 | + | |
| 779 | + | |
| 780 | + | |
| 781 | + | |
| 782 | + | |
| 783 | + | |
| 784 | + | |
| 785 | + | |
| 786 | + | |
| 787 | + | |
| 788 | + | |
| 789 | + | |
| 790 | + | |
| 791 | + | |
| 792 | + | |
| 793 | + | |
| 794 | + | |
| 795 | + | |
| 796 | + | |
| 797 | + | |
| 798 | + | |
| 799 | + | |
| 800 | + | |
| 801 | + | |
| 802 | + | |
| 803 | + | |
| 804 | + | |
| 805 | + | |
773 | 806 | | |
0 commit comments