Peter Grlica
d9a00a9110
Encode stripped html special chars
2021-07-02 12:06:05 +02:00
Denis Arh
5d5402d2bb
Refactor workflow execution, prevent couple of race conditions
2021-07-02 11:45:20 +02:00
Tomaž Jerman
d12b28d2e4
Fix WF handler closure lapsus
2021-07-02 11:45:20 +02:00
Denis Arh
9e17135715
Fix boot-time race condition with settings notification
2021-07-02 11:45:20 +02:00
Tomaž Jerman
af0563c052
Add CSP to attachments to prevent XSS
2021-06-22 09:47:21 +02:00
Tomaž Jerman
83afe8ed15
Sanitize text record values
2021-06-22 09:47:21 +02:00
Tomaž Jerman
fb83872f48
Add bluemonday for XSS sanitizer
2021-06-22 09:46:03 +02:00
Tomaž Jerman
064c18095e
Fix field access control for default values
2021-06-21 14:43:28 +02:00
Vivek Patel
120446966d
Improves record-value manipulation
...
This will fix WF issue for accessing record's value via selectors & gval expressions
2021-06-21 15:24:24 +05:30
Vivek Patel
b70ba4e6a4
Adds validation for corredor steps in workflow
...
- Adds check at workflow step level for corredorExec function
- Adds `disabled` flag for corredor related functions from `workflows/functions` api response if corredor is disabled
2021-06-14 12:28:42 +05:30
Tomaž Jerman
90e8764c44
Add tests for field-level access control
2021-06-08 14:07:50 +02:00
Tomaž Jerman
7f56c38952
Fix compose record update on modules with deleted fields
2021-06-08 11:41:21 +02:00
Vivek Patel
f8a1b78b98
Fixes type casting of IDs to string in UserFilter struct
2021-06-07 18:12:54 +05:30
Tomaž Jerman
2a5fab633b
Revert "Fix dup records on multi-value field"
...
This reverts commit 5309db9a86
2021-06-07 10:33:34 +02:00
Tomaž Jerman
e59afa483f
Fix module field default value validation
2021-06-01 12:49:21 +02:00
Tomaž Jerman
7ff730caf2
Rework README and CONTRIBUTING
2021-05-31 09:40:17 +02:00
Denis Arh
d3cfd859e9
Fix broken federation encoder tests
2021-05-25 18:42:40 +02:00
Denis Arh
d0539eaf7f
Fix broken record sorting test
2021-05-25 18:42:40 +02:00
Denis Arh
598fb3173e
Fix index creation (add if-not-exists) & query logging
2021-05-25 18:42:40 +02:00
Tomaž Jerman
c018379b04
Improve workflow error handling
...
- prevent the try-catch step from ending the exec session
- prevent pre-run validation checks to cycle the exec
2021-05-25 08:59:32 +02:00
Denis Arh
5309db9a86
Fix dup records on multi-value field
2021-05-25 06:14:53 +02:00
Denis Arh
53d52d27c3
Add indexes to automation_sessions table
...
This will prevent mysql sorting memory issue
2021-05-23 15:55:35 +02:00
Denis Arh
634a534d1c
Add index creating (+ col length) capabilities
2021-05-23 14:56:06 +02:00
Peter Grlica
a29f279ca9
Fixed federation structure sync, added a response wrapper to api response
2021-05-21 14:11:56 +02:00
Jože Fortun
d0580998d6
Update crm provision
2021-05-13 11:44:34 +02:00
Tomaž Jerman
a93785c34b
Add a call stack to prevent infinite WF invocations
2021-05-11 16:50:51 +05:30
Vivek Patel
e1531cd309
Extends SCIM implementation to support role membership management
...
- Updates request payload for patching group
- Updates tests
2021-05-11 16:50:50 +05:30
Tomaž Jerman
6913ae4f02
Tweak ComposeRecord exporting
...
* Fix pagination cursors
* Use service functions for AC
* Add tests
2021-05-10 10:51:50 +02:00
Denis Arh
e2cf7ff0ec
Use proper types for corredor exec automation fn
...
Arguments&results are no longer Any but Vars
2021-05-06 10:42:14 +02:00
Denis Arh
9758d7ee84
Set and log res&event types properly
2021-05-06 10:42:14 +02:00
Tomaž Jerman
1bcd94b3de
Add endpoint to fetch available render drivers
2021-05-05 13:49:15 +02:00
Tomaž Jerman
e3af4f4d74
Improve CSV & JSON decoders for larger datasets
...
The built in buffer had a strange interaction with the CSV library.
Changed both decoders for consistency.
2021-05-05 13:44:53 +02:00
Denis Arh
f9dca9f434
Make sure vars-to-json does not crash if value is nil
2021-05-04 21:51:36 +02:00
Denis Arh
1e99082fbf
Make sure we set proper ses. lifetime on external login
2021-05-04 19:58:38 +02:00
Denis Arh
bb2d882f8b
Replace custom ext. logic with handleSuccessfulAuth()
2021-05-04 19:58:38 +02:00
Denis Arh
9e453c6268
Improve how HTTP status on error is sent
2021-04-29 07:31:35 +02:00
Denis Arh
ed544857a1
Implement client_credentials g.type with user imp.
2021-04-29 06:33:28 +02:00
Denis Arh
6cef6a2955
Minor improvement to app migration procedure
2021-04-28 07:36:13 +02:00
Denis Arh
c364ec0b81
Raise def. value for request rate limit to 60
2021-04-15 19:34:37 +02:00
Denis Arh
41374760d1
Add ability to disable CSRF
2021-04-15 19:34:07 +02:00
Denis Arh
cfde435385
Return invalid token on /info endpoint as 403
2021-04-15 07:02:52 +02:00
Denis Arh
a4633f5677
Improve wf debugging capabilities (session tracing)
2021-04-14 17:24:25 +02:00
Denis Arh
5ce2ac9767
Improve workflow session endpoint capabilities
...
Workflow sessions can now be
- sorted by resource or event type,status, creation, competition or suspensio date
- filtered by creator
List of wf sessions is now served w/o stacktraces, input & output scope for performance.
2021-04-14 12:59:22 +02:00
Denis Arh
701f6a4e66
Automatically pick last tag as webapp version
2021-04-14 12:17:46 +02:00
Denis Arh
2c63c1af80
Minor changes in provisioned workflows
2021-04-14 11:13:26 +02:00
Denis Arh
dca7a7fde2
Remove RedirectURI provisioning for def. client
...
This caused too much confusion on simple setup.
For sites that need more secure setup, this can be filled-in at the
later point
2021-04-13 13:42:06 +02:00
Denis Arh
315596c603
Remap state param on def. client authorization
2021-04-13 09:57:56 +02:00
Tomaž Jerman
3f4f7974c1
Tweak envoy system field handling
...
Use compose record service for record owner calculation.
2021-04-13 08:19:16 +02:00
Tomaž Jerman
2450bd9367
Restructure ComposeRecord store/encode error handling
2021-04-12 20:06:40 +02:00
Tomaž Jerman
beca3c1e9c
Envoy store encode improvements
...
* Add default createdBy,
* improve ComposeRecord xreferencing,
* fix ComposeRecord self references.
2021-04-12 17:17:59 +02:00
Peter Grlica
Denis Arh
Tomaž Jerman
Vivek Patel
Jože Fortun