All notable changes to this project will be documented in this file.
- cosign version upgrade with alpine image; must include --insecure-ignore-tlog flag
- Added cosign permission for folder (Dockerfile)
- CertificationCheck now uses Cosign to verify if running version is signed
- Made optional logic for validating self description document
- logic to validate SelfDescription in response flow
- Fix mapping in ProxyController
- Swagger UI
- HttpFirewall
- firewall.properties file for managing Firewall
- Property application.firewall.isEnabled for turning on HttpFirewal
- Authentication Listeners for logging successful or failed login attempts
- XSS protection in Spring Security
- Spring Boot version upgraded from 2.2.5.RELEASE to 2.5.14
- Hardcoded to use TLS communication only
- Property application.security.username deleted, instead the fixed value idsUser is used
- Dockerfile improvements
- SSL certificate update
- Add Certification check
- Add checkSum verification
- Property application.verifyCheckSum required for checkSum verification
- Fixed docker ci GitHub Action
- Fixed check if requestedArtifact is blank when creating ArtifactRequestMessage
- removed internal self description logic; now using default self description endpoint on ecc
- Property application.ecc.selfdescription-port required for getting the Self Description from ecc
- Security basic Authorization for /proxy endpoint
- New "proxy" port (application.proxyPort) and logic for filtering "proxy" vs "non proxy" requests based on port
- when creating docker image, it requires GH tag to exists; bind java and docker versions
- Property application.ecc.wss-port no longer needed for WSS flow
- Property application.ecc.selfdescription-context=/internal/sd ; now hard-coded
- improved logic when extracting and decoding payload in response flow; fixed Postman timeout
- Support for storing different type of objects in HashMap stored in ThreadLocal
- Support for GitHub Workflow (release process, docker image signing)
- Property application.ecc.wss-port mandatory for WSS flow
- WSS flow now supports use of Message handlers
- Distinguished REST and WSS flow in message handlers, with additional checks related to requested element
- Cleaned unused code after refactoring
- Multipart message library upgraded to 1.0.17
- Websocket library upgraded to 1.0.17
- Infomodel dependency now managed via Multipart Library
- Jacoco plugin support for evaluating test code coverage in DataApp
- Message factory and proper handlers for each type of IDS message (Artifact Message, Contract Request Message, Contract Agreement Message, and Description Request Message) which are holding business logic for processing messages
- HttpHeadersUtil - util class for handling things related to http-header conversion to IDS Messages
- Global Exception handler and exceptions related to all types of IDS Rejection Reasons (BAD_PARAMETERS, INTERNAL_RECIPIENT_ERROR, MALFORMED_MESSAGE, MESSAGE_TYPE_NOT_SUPPORTED, METHOD_NOT_SUPPORTED, NOT_AUTHENTICATED, NOT_AUTHORIZED, NOT_FOUND, TEMPORARILY_NOT_AVAILABLE, TOO_MANY_RESULTS, VERSION_NOT_SUPPORTED)
- SelfDescriptionService - service that holds business logic related to self-description
- Non-privileged user and log support in Dockerfile
- /home/nobody/data should be used as volume on consumer side to avoid permission errors when writing file to disk
- Multipart message library upgrade from 1.0.14-SNAPSHOT to 1.0.15-SNAPSHOT (memory cleaner in MMP)
- WebSocket Message Streamer library upgrade from 1.0.15-SNAPSHOT to 1.0.16-SNAPSHOT (memory cleaner in MMP)
- Business logic is moved from Message Utils to proper Message handlers, and messages are processed in different message handlers
- Instead of returning null in different scenarios, and then building rejection messages, the proper exceptions are now thrown
- All Data Controllers are refactored according to the new logic
- Java runtime from openjdk:11.0.15-jre to eclipse-temurin:11-jre-alpine in Dockerfile
- Multipart message library upgrade from 1.0.14-SNAPSHOT to 1.0.15-SNAPSHOT (memory cleaner in MMP)
- WebSocket Message Streamer library upgrade from 1.0.15-SNAPSHOT to 1.0.16-SNAPSHOT (memory cleaner in MMP)
- version remains the same since nothing is done to the code
- when pushing to master a new docker image will be created with version develop (rdlabengpa/ids_be_data_app:develop)
- make use of RestTemplateBuilder instead of RestTemplate to solve PKIX, please use ProxyServiceImpl constructor as reference
- added property with path for new internal SelfDescription requests
application.ecc.selfdescription-context=/internal/sd
- removed properties used for fetching SelfDescription
application.ecc.RESTprotocol=
application.ecc.RESTport=
- developer documentation for modifying DataApp, consumer and provider vise
- fixed transferContract field for WSS ArtifactRequestMessage flow
- banner is now packed with jar, to avoid need to manually change it in dockerized version
- added functionality to return only payload in response controlled with property application.extractPayloadFromResponse=
- if rejection message is received as response on sender side it is now processed and only rejection reason and status code are sent from data app (e.g. to Postman)
- new big payload for response available at /big ("requestedArtifact": "http://w3id.org/engrd/connector/artifact/big")
- mixed and form responses are now passed through OutputStream to avoid org.apache.http.ContentTooLongException
- new property to configure issuer connector, will be used in provider and consumer configuration
- new property to configure usage control version - application.usageControlVersion
- added 2 profile property files, so that dataApp can run in 2 instances, one for Consumer and other for Provider connector
- reverted logic that reads policy from filesystem needed for MyData Usage Control
- updated logic for setting request and response messages with correct issuerConnector; in request flow - from property file, in response flow - from request message
- changed the way to send back HttpEntity instead String representation of multipart response
- when requested connector description, dataApp will fetch connector self description and send it back
- in contract negotiation flow, dataApp will fetch connector self description and search it for requested element; also for contract agreement, it will get permission from connector self description document.
- added transfer contract optional field in proxy request; this will be used in contract negotiation sequence
- Created logic to fetch self description from connector and search contract offer for permission and target and create contract agreement
- new property to configure default acceptance for contract offer - application.contract.negotiation.demo
- added logic to Base64 encode and decode payload
- new MMP library - removed extra line in payload part
- now supporting file sending over multipart/form
- improved docker creation
- moved logic from MultiPartMessageService to MultipartMessageProcessor
- removed MultiPartMessageService
- minor exception and exception handling changes
- TestUtilMessageService now everywhere replaced with UtilMessageService
- infomodel version has been changed to 4.1.1
- data app proxy functionality (see README.md)
- DescriptionRequestMessage handling
- Rejection message for ArtifactRequestMessage if some custom criteria are not met (only for demonstration purposes)
- Increased version for multipart message processor library to 1.0.9-SHAPSHOT
- Increased version for websocket message streamer library to 1.0.11-SHAPSHOT
- fix for handling proxy payload - String and JSON support