1
0
Commit Graph

608 Commits

Author SHA1 Message Date
Michael Hoennig a1bac0f764 Taiga#458: fixing exception with real JWT from HS Keycloak OIDC (#220)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/220
Reviewed-by: Marc Sandlus <hsh-marcsandlus@noreply.dev.hostsharing.net>
Co-authored-by: Michael Hoennig <michael.hoennig@hostsharing.net>
Co-committed-by: Michael Hoennig <michael.hoennig@hostsharing.net>
2026-04-24 06:41:02 +02:00
Michael Hoennig 28eebbc95a use Spring-Props for CORS-config, move CORS-config to BaseWebSecurityConfig and add tests (#212)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/212
Reviewed-by: Marc Sandlus <hsh-marcsandlus@noreply.dev.hostsharing.net>
2026-03-21 13:55:43 +01:00
Michael Hoennig 3a24e1c726 avoid-recursive-rbac-query-for-global-admins in the _rv generator (#216)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/216
Reviewed-by: Marc Sandlus <hsh-marcsandlus@noreply.dev.hostsharing.net>
2026-03-19 10:17:08 +01:00
Michael Hoennig 79d4d8c7f2 Taiga#457: improve bookingitem resource mapping error message (#218)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/218
Reviewed-by: Marc Sandlus <hsh-marcsandlus@noreply.dev.hostsharing.net>
2026-03-19 09:40:14 +01:00
Michael Hoennig 69e2fc09a6 Story#5617: amend account module to Keycloak primary (#213)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/213
2026-03-09 11:22:32 +01:00
Peter Hormanns 865830071e ph-enable-cors (#210)
permitted HTTP methods explicitly given

Co-authored-by: Peter Hormanns <peter.hormanns@jalin.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/210
Reviewed-by: Timotheus Pokorra <timotheus.pokorra@hostsharing.net>
Co-authored-by: Peter Hormanns <peter.hormanns@hostsharing.net>
Co-committed-by: Peter Hormanns <peter.hormanns@hostsharing.net>
2025-11-10 18:54:55 +01:00
Michael Hoennig d282885cc9 Story #374 [ACCOUNTS] create initial hsadminng-profile for (new/existing) person (#208)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/208
Reviewed-by: Timotheus Pokorra <timotheus.pokorra@hostsharing.net>
Co-authored-by: Michael Hoennig <michael.hoennig@hostsharing.net>
Co-committed-by: Michael Hoennig <michael.hoennig@hostsharing.net>
2025-11-10 11:03:26 +01:00
Timotheus Pokorra 6d92d80e44 tx_journal: on delete also save the old data in json format (#207)
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/207
Reviewed-by: Peter Hormanns <peter.hormanns@hostsharing.net>
2025-11-10 10:55:18 +01:00
Timotheus Pokorra e1b78f465d ph-enable-cors (#209)
Co-authored-by: Peter Hormanns <peter.hormanns@jalin.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/209
Reviewed-by: Peter Hormanns <peter.hormanns@hostsharing.net>
2025-11-10 10:54:45 +01:00
Peter Hormanns 59901791e3 enable cors handling (#206)
Meine Änderung für CORS. Es gibt eine neue Environment Variable ALLOWED_ORIGINS

Co-authored-by: Peter Hormanns <peter.hormanns@jalin.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/206
Reviewed-by: Timotheus Pokorra <timotheus.pokorra@hostsharing.net>
Co-authored-by: Peter Hormanns <peter.hormanns@hostsharing.net>
Co-committed-by: Peter Hormanns <peter.hormanns@hostsharing.net>
2025-11-10 10:36:24 +01:00
Michael Hoennig 30e0ba1d86 add migrationtest sql-dump-checksum-assertions to prevent accidental changes (#204)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/204
Reviewed-by: Timotheus Pokorra <timotheus.pokorra@hostsharing.net>
2025-10-15 11:59:49 +02:00
Michael Hoennig 4994341232 add SSHA+Argon2 hashed password to accounts profile and validate profile activation (#203)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/203
Reviewed-by: Marc Sandlus <hsh-marcsandlus@noreply.dev.hostsharing.net>
2025-09-17 12:14:47 +02:00
Michael Hoennig bae13d5503 rename Credentials->Profile + Context->Scope (#202)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/202
Reviewed-by: Timotheus Pokorra <timotheus.pokorra@hostsharing.net>
2025-09-12 11:37:55 +02:00
Michael Hoennig 6de920dc38 Revert "remove secrets from credentials (#198)" (#200)
This reverts commit 27b4f59a97.

Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/200
Reviewed-by: Timotheus Pokorra <timotheus.pokorra@hostsharing.net>
2025-09-10 14:26:47 +02:00
Michael Hoennig 942b7a047e dependency-version-upgrade to spring-boot-3.5.5 and others (#196)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/196
2025-09-09 12:00:44 +02:00
Michael Hoennig 27b4f59a97 remove secrets from credentials (#198)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/198
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-09-09 11:47:08 +02:00
Michael Hoennig d7a78d0a79 migrate from CAS to Oauth2-JWT Auth (#197)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/197
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-09-08 15:27:28 +02:00
Michael Hoennig bc06001ce9 add department to contact.postalAddress test data (#192)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/192
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-09-01 15:20:49 +02:00
Michael Hoennig c0991d96d9 credentials validation (#194)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/194
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-09-01 12:13:58 +02:00
Michael Hoennig f1fc1203ae fix authentication errors (#193)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/193
Reviewed-by: Timotheus Pokorra <timotheus.pokorra@hostsharing.net>
2025-08-28 12:06:15 +02:00
Michael Hoennig 68e642c034 scoped programmatic i18n-keys (#190)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/190
Reviewed-by: Timotheus Pokorra <timotheus.pokorra@hostsharing.net>
2025-08-26 15:28:42 +02:00
Michael Hoennig 2a6e86aca8 method-level security-control with some open endpoints (e.g. /api/ping) (#191)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/191
2025-08-26 11:50:09 +02:00
Michael Hoennig 5a5c1466b0 add /api/rbac/context + /api/hs/accounts/current endpoints (#189)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/189
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-08-21 12:45:59 +02:00
Michael Hoennig 60028697d6 align React-GUI and Java API -backend (#188)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/188
Reviewed-by: Timotheus Pokorra <timotheus.pokorra@hostsharing.net>
2025-08-12 12:50:48 +02:00
Michael Hoennig bb02d7d017 optionally limit account-context to natural persons (#187)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/187
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-07-15 13:38:44 +02:00
Michael Hoennig 3aab0ba3c2 credentials.totpSecret as array and update credentials scenario test (#186)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/186
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-07-15 11:53:26 +02:00
Michael Hoennig 97017c1b99 rename package (+schema etc.) credentials to accounts (#185)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/185
Reviewed-by: Timotheus Pokorra <timotheus.pokorra@hostsharing.net>
2025-07-10 11:55:53 +02:00
Michael Hoennig 3603ea911e bugfix: fixes HTTP POST on credentials, including person+subject (#184)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/184
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-07-07 21:09:37 +02:00
Michael Hoennig ad1537b856 containerized Jenkins (#179)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/179
Reviewed-by: Timotheus Pokorra <timotheus.pokorra@hostsharing.net>
2025-06-18 13:51:38 +02:00
Michael Hoennig d351c9a2c1 new-sql-dumps-after-prod-release (#181)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/181
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-06-06 12:02:11 +02:00
Michael Hoennig d4e78f8a50 feature/credentials-schema-updates (#180)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/180
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-06-04 11:36:20 +02:00
Michael Hoennig 17f620c7b8 fix fixme's for credentials error messages 2025-05-21 11:10:08 +02:00
Michael Hoennig 037bbf5a4c fix credentials-api-paths+includes 2025-05-21 10:25:18 +02:00
Michael Hoennig f4bf614d77 dd column seqTxId BIGINT to table base.tx_context 2025-05-20 17:38:20 +02:00
Michael Hoennig 2c8ddc4250 fix ArchTest 2025-05-20 17:37:35 +02:00
Michael Hoennig 58096c1510 login-credentials without RBAC (#173)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/173
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-05-19 12:00:35 +02:00
Timotheus Pokorra 965866dadc TP-202505-postgres_notify_events (#177)
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/177
Reviewed-by: Michael Hoennig <michael.hoennig@hostsharing.net>
2025-05-09 11:29:51 +02:00
Marc Sandlus d4d3d42b2d ms-20250502-coopshares-coopassets-positive-total-constraint (#176)
Co-authored-by: Marc O. Sandlus <marc.o.sandlus@hostsharing.net>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/176
Reviewed-by: Michael Hoennig <michael.hoennig@hostsharing.net>
2025-05-09 01:01:09 +02:00
Timotheus Pokorra 44ba3b2fef Merge pull request 'Add constraint to relation to check if anchor of debitor relation is a PARTNER' (#175) from TP-20250326_relation_contraint_check_debitor_anchor_is_partner into master
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/175
Reviewed-by: Michael Hoennig <michael.hoennig@hostsharing.net>
2025-04-16 11:33:53 +02:00
Timotheus Pokorra 38efe866af add Test canNotAddDebitorRelationWithAnchorThatIsNotAPartner for constraint 2025-04-15 12:15:26 +02:00
Michael Hoennig 77ace7d794 fix potential DoS attac in IPv6 regex (#172)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/172
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-04-10 12:32:07 +02:00
Michael Hoennig 0c32377d77 convert build.gradle to build.gradle.kts (#171)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/171
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-04-10 11:54:57 +02:00
Michael Hoennig 399512bd98 Bugfix: properly handle invalid membership with empty validity - and other empty ranges (#169)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/169
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-04-02 12:09:08 +02:00
Michael Hoennig 4f00d1b920 add i18n support for CoopShareTx (#168)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/168
Reviewed-by: Timotheus Pokorra <timotheus.pokorra@hostsharing.net>
2025-04-01 12:18:36 +02:00
Michael Hoennig 413ca0917e feature/add-i18n-support (#167)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/167
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-03-31 13:46:41 +02:00
Timotheus Pokorra d8dc5655f3 add a constraint for table relation to check if the anchor of a debitor has a partner relation 2025-03-26 12:17:49 +01:00
Michael Hoennig e6b32eda88 produce client-error for unspecified-properties (#166)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/166
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-03-20 12:04:57 +01:00
Michael Hoennig 4994bac101 use @Slf4j (+logback) for logging instead of System.out/err.println (#165)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/165
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-03-19 16:21:55 +01:00
Michael Hoennig eb9edf1cb1 remove current-subject from OpenAPI header specs, use Authorization instead (#164)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/164
Reviewed-by: Timotheus Pokorra <timotheus.pokorra@hostsharing.net>
2025-03-18 11:52:29 +01:00
Michael Hoennig 5ca0638319 unauthenticated swagger-ui on- server-port and proper security filter integration into Spring Security (#163)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/163
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
2025-03-17 12:59:50 +01:00