GitLab

Previous code was having issues where subclasses of the previous default
would be ambiguous as the Quarkus CDI implies @Default on the resource I
generate which is then inherited. There was no quick way to fix it other
than this. This patch will cause breaks in calling code that are easily
fixed by updating imports.

- Fixed configuration source which added a new method to implement
- Repaired the persistence extension BuildTime processor which had references to no longer existing buildstep enhancements.
- Added missing config values for Solr DAO that caused build failures with more strict default value checking.
- Added explicit creation of placeholder DB DAO for search, as the unremovable flag was ignored.

Adds header and check to response to react to external page size changes. This removes any coupling that the core module could have to the persistence module. Added a call in the persistence module to handle adding the headers to the response.

Additionally, attempts to fix issue with the build where Persistence deployment buildstep isn't being resolved in the search library.

delete

Addresses issues around deployment artifact not being able to find itself, or is at least the start of it.

Devservices attempt to spin up a docker container using TestContainers, which is not available currently on the build server. This should allow the build to pass while this is resolved.

Change boolean reference to an Instance<Boolean> reference for the csrf config property. This satisfies the error about unsafe access to the property.

Update to the LICENSE file to add APL 2.0 license

See merge request eclipsefdn/webdev/eclipsefdn-api-common!4

Add CSRF filter + response validation to the core Quarkus lib

See merge request eclipsefdn/webdev/eclipsefdn-api-common!3

Signed-off-by: Martin Lowe <martin.lowe@eclipse-foundation.org>

This call can be used to help sync incoming data w/ foreign keys. If the
objects don't exist, an error is thrown.
Signed-off-by: Martin Lowe <martin.lowe@eclipse-foundation.org>

This enables a CSRF feature that can be used on any app that makes use
of this lib. Enable the csrf through `security.csrf.enabled`, and
configure `security.csrf.salt` to strengthen the security of the app.

Once done, any mutator requests become guarded by CSRF. Other requests
can manually call the CSRF helper to validate a request as done in the
test resource.

Additionally, added authenticated test profile for testing
security/authentication layer separate from the rest of the application.
Authentication has been disabled by default, and can be enabled by
setting the field in the application.properties file of the app.
Signed-off-by: Martin Lowe <martin.lowe@eclipse-foundation.org>

Signed-off-by: Martin Lowe <martin.lowe@eclipse-foundation.org>