Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Understand auth concept #15

Closed
traffic1000 opened this issue Feb 8, 2024 · 2 comments
Closed

Understand auth concept #15

traffic1000 opened this issue Feb 8, 2024 · 2 comments
Assignees
@TIL-EBP
Labels
enhancement New feature or request
Milestone
Authentication

Comments

@traffic1000
Copy link

traffic1000 commented Feb 8, 2024 •
edited
Loading

  • How does Authentication and Authorization work in Assets? (Goal: get rid of Assets login mechanism)
  • Document findings in Confluence
  • What steps/measure need to be taken for migration to eIAM

Note: Schedule 1 person from GeoW for deployment support

  • Unique identifier (subjectID, OIDC): Cognito or eIAM (tbd)
@traffic1000
Copy link
Author

@TIL-EBP Hast Du die Findings im WIKI festgehalten?

@TIL-EBP
Copy link
Contributor

TIL-EBP commented Mar 13, 2024

Ein Überblick ist hier zu finden :
Auth Concept

@vej-ananas vej-ananas added this to the Authentication milestone Apr 18, 2024
@vej-ananas vej-ananas added the enhancement New feature or request label Apr 18, 2024
daniel-va pushed a commit that referenced this issue May 15, 2024
@ga-ebp @daniel-va
Release to int
9a60c26 
# This is the 1st commit message:

local development environment

# This is the commit message #2:

relocate local development init files

# This is the commit message #3:

create ci action

# This is the commit message #4:

update ci action

# This is the commit message #5:

update ci action

# This is the commit message #6:

clean unit-tests and fix lint errors

# This is the commit message #7:

create codeQL action

# This is the commit message #8:

update codeQL action

# This is the commit message #9:

create pre-release action

# This is the commit message #10:

update pre-release action

# This is the commit message #11:

update pre-release action

# This is the commit message #12:

update pre-release action

# This is the commit message #13:

update pre-release action

# This is the commit message #14:

create release action

# This is the commit message #15:

assets #12 setup local environment and create a clean DB

# This is the commit message #16:

update release action

# This is the commit message #17:

update release action

# This is the commit message #18:

clean-up

# This is the commit message #19:

rename development-names

# This is the commit message #20:

update release action

# This is the commit message #21:

update release action

# This is the commit message #22:

update release action

# This is the commit message #23:

update docker file

# This is the commit message #24:

update docker file

# This is the commit message #25:

Bump @babel/traverse from 7.20.12 to 7.24.0

Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.20.12 to 7.24.0.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.24.0/packages/babel-traverse)

---
updated-dependencies:
- dependency-name: "@babel/traverse"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
# This is the commit message #26:

Bump webpack and @angular-devkit/build-angular

Bumps [webpack](https://github.com/webpack/webpack) to 5.76.1 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.

Updates `webpack` from 5.75.0 to 5.76.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.75.0...v5.76.1)

Updates `@angular-devkit/build-angular` from 15.1.1 to 15.2.10
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@15.1.1...15.2.10)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
# This is the commit message #27:

Bump semver from 5.7.1 to 5.7.2

Bumps [semver](https://github.com/npm/node-semver) from 5.7.1 to 5.7.2.
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.7.1...v5.7.2)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
# This is the commit message #28:

Bump undici from 5.22.1 to 5.28.3

Bumps [undici](https://github.com/nodejs/undici) from 5.22.1 to 5.28.3.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v5.22.1...v5.28.3)

---
updated-dependencies:
- dependency-name: undici
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
# This is the commit message #29:

Bump follow-redirects from 1.15.2 to 1.15.5

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.2 to 1.15.5.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.2...v1.15.5)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
# This is the commit message #30:

Bump axios from 1.4.0 to 1.6.7

Bumps [axios](https://github.com/axios/axios) from 1.4.0 to 1.6.7.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.4.0...v1.6.7)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
# This is the commit message #31:

Bump word-wrap from 1.2.3 to 1.2.5

Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.5.
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases)
- [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5)

---
updated-dependencies:
- dependency-name: word-wrap
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
# This is the commit message #32:

Bump vite from 4.0.4 to 4.5.2

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 4.0.4 to 4.5.2.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v4.5.2/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v4.5.2/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
# This is the commit message #33:

Feature/assets 16 replace logos (#43)

* assets-16: replace the old logo and favicon with new ones

* assets-32: replace the logo with the actual one for assets
# This is the commit message #34:

Feature/assets 8: add missing scrollbars (#40)

* assets-8: add scrollbars to all tabs in assets editor and user management

* assets-8: remove some duplicate attributes

* assets-8: fix unchanged files with annotations

* assets-8: fix unchanged files with annotations

* assets-8: fix unchanged files with annotations

---------

Co-authored-by: Alex Graf <Alex.Graf@ebp.ch>
# This is the commit message #35:

assets-32: break long titles so the edit button is not hidden. same for the search result in order to display the entire title (#44)

# This is the commit message #36:

update pre-release action

# This is the commit message #37:

update pre-release action

# This is the commit message #38:

update pre-release action

# This is the commit message #39:

update pre-release action

# This is the commit message #40:

update release action

# This is the commit message #41:

update release action

# This is the commit message #42:

update dockerfiles and actions

# This is the commit message #43:

update release action

# This is the commit message #44:

update release action

# This is the commit message #45:

update release action

# This is the commit message #46:

update release action

# This is the commit message #47:

update release action

# This is the commit message #48:

update release action

# This is the commit message #49:

update pre-release action

# This is the commit message #50:

update dev-deploy action

# This is the commit message #51:

Bump ip from 2.0.0 to 2.0.1

Bumps [ip](https://github.com/indutny/node-ip) from 2.0.0 to 2.0.1.
- [Commits](indutny/node-ip@v2.0.0...v2.0.1)

---
updated-dependencies:
- dependency-name: ip
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
# This is the commit message #52:

Bump the npm_and_yarn group across 1 directory with 6 updates

Bumps the npm_and_yarn group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.0.11` | `4.2.5` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.252.0` | `3.537.0` |
| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.5` | `1.15.6` |
| [ip](https://github.com/indutny/node-ip) | `2.0.0` | `2.0.1` |
| [tough-cookie](https://github.com/salesforce/tough-cookie) | `4.1.2` | `4.1.3` |
| [@cypress/request](https://github.com/cypress-io/request) | `2.88.11` | `2.88.12` |

Updates `fast-xml-parser` from 4.0.11 to 4.2.5
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v4.0.11...v4.2.5)

Updates `@aws-sdk/client-s3` from 3.252.0 to 3.537.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.537.0/clients/client-s3)

Updates `follow-redirects` from 1.15.5 to 1.15.6
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.5...v1.15.6)

Updates `ip` from 2.0.0 to 2.0.1
- [Commits](indutny/node-ip@v2.0.0...v2.0.1)

Updates `tough-cookie` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](salesforce/tough-cookie@v4.1.2...v4.1.3)

Updates `@cypress/request` from 2.88.11 to 2.88.12
- [Release notes](https://github.com/cypress-io/request/releases)
- [Changelog](https://github.com/cypress-io/request/blob/master/CHANGELOG.md)
- [Commits](cypress-io/request@v2.88.11...v2.88.12)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
- dependency-name: "@aws-sdk/client-s3"
  dependency-type: direct:production
  dependency-group: npm_and_yarn-security-group
- dependency-name: follow-redirects
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
- dependency-name: ip
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
- dependency-name: tough-cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
- dependency-name: "@cypress/request"
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
...

Signed-off-by: dependabot[bot] <support@github.com>
# This is the commit message #53:

Bump tough-cookie and @cypress/request

Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) and [@cypress/request](https://github.com/cypress-io/request). These dependencies needed to be updated together.

Updates `tough-cookie` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](salesforce/tough-cookie@v4.1.2...v4.1.3)

Updates `@cypress/request` from 2.88.11 to 2.88.12
- [Release notes](https://github.com/cypress-io/request/releases)
- [Changelog](https://github.com/cypress-io/request/blob/master/CHANGELOG.md)
- [Commits](cypress-io/request@v2.88.11...v2.88.12)

---
updated-dependencies:
- dependency-name: tough-cookie
  dependency-type: indirect
- dependency-name: "@cypress/request"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
# This is the commit message #54:

Bump fast-xml-parser and @aws-sdk/client-s3

Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) to 4.2.5 and updates ancestor dependency [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3). These dependencies need to be updated together.

Updates `fast-xml-parser` from 4.0.11 to 4.2.5
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v4.0.11...v4.2.5)

Updates `@aws-sdk/client-s3` from 3.252.0 to 3.537.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.537.0/clients/client-s3)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-type: indirect
- dependency-name: "@aws-sdk/client-s3"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
# This is the commit message #55:

Bump follow-redirects from 1.15.5 to 1.15.6

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.5 to 1.15.6.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.5...v1.15.6)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
# This is the commit message #56:

assets-39: remove console log of password from test

# This is the commit message #57:

update dev-deploy action

# This is the commit message #58:

update dev-deploy action

# This is the commit message #59:

update dev-deploy action

# This is the commit message #60:

update dev-deploy action

# This is the commit message #61:

update dev-deploy action

# This is the commit message #62:

update dev-deploy action

# This is the commit message #63:

update dev-deploy action

# This is the commit message #64:

update dev-deploy action

# This is the commit message #65:

update release action

# This is the commit message #66:

update release action

# This is the commit message #67:

update release action

# This is the commit message #68:

Add elasticsearch init script

# This is the commit message #69:

Remove initial `rdsadmin` user

# This is the commit message #70:

Extend setup instructions in README

# This is the commit message #71:

Feature/assets 7 eIAM (#75)

#7:  integrate eIAM

update create-docker-image action

update create-docker-image action

update create-docker-image action

#67: update elasticsearch-index local

fix lint

#11 fix sonar-issues, unit-tests

Replace build workflows with new unified `build` workflow

Rewrite `release` workflow to just add `latest` flag

The workflow will no longer add a new image tagged as `release`.
Also, the ChangeLog has been removed completely as it is not used by the current project team.

Re-add codeql workflow

Remove pull request triggers from workflows

Remove duplicates from displayed sibling assets

Remove all existing siblings when patching an asset

Revert bad commits

Add tagging/release notes to actions

Add name to `release` pipeline

Remove self-dependency of `build.build` step

Remove docker image version tag

Use `install` instead of `ci` to install node modules

Run nx with `npx`

Add node modules cache to build pipeline

Add debug steps to build pipeline

Move debug steps to test job

Add `npm ci` to check jobs

Cache build node_modules from within build dir

Reset nx in build pipeline

Add explicit typing to `contact-edit.service`

Add dev setup steps to build pipeline

Remove postinstall from build pipeline

Run `ng` via npx in build pipeline

Replace `actions/cache@v2` with `v4`

Make `tag_edge_commit` build step depend on `build_and_push_app`

Fix pipeline job branch check

Add checkouts before building images

Remove all existing siblings when patching an asset

Make GITHUB_TOKEN an input for `create-image` action

Add startup prisma migration to server Dockerfile

Extract CRUD of `asset` table into `AssetRepo`

Install `@faker-js/faker`

Library for generating fake data for testing.

Test `AssetRepo`

Update `fp-ts` package

`tap` function is only available from 2.15+

Extract elasticsearch usages into `AssetSearchService`

Add `AllStudy` view definition to schema

Test `AssetSearchService`

Replace elasticsearch usages by `AssetSearchService`

#81: Added checking for user groups in middleware and returns the error message to the frontend. Added env variable fields to template for o_Auth

#81: Show error message when error returned from the backend

Remove unused code for auth (password reset etc) as part of #11

Create Bug template

Add Issue template

Refine templates

#81: pr comments and remove serach field on error page

#81: fix lint issues

Apply `build` workflow to all branches

Merge pull request #96 from swisstopo/feature/asset-71-update-elasticsearch-index

Merge pull request #98 from swisstopo/feature/asset-33-bug-alternative-ids

Add build step to tag release candidate api

Deployment to int (#105)

* local development environment

* relocate local development init files

* create ci action

* update ci action

* update ci action

* clean unit-tests and fix lint errors

* create codeQL action

* update codeQL action

* create pre-release action

* update pre-release action

* update pre-release action

* update pre-release action

* update pre-release action

* assets #12 setup local environment and create a clean DB

* create release action

* update release action

* update release action

* clean-up

* rename development-names

* update release action

* update release action

* update release action

* update docker file

* update docker file

* Bump @babel/traverse from 7.20.12 to 7.24.0

Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.20.12 to 7.24.0.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.24.0/packages/babel-traverse)

---
updated-dependencies:
- dependency-name: "@babel/traverse"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump webpack and @angular-devkit/build-angular

Bumps [webpack](https://github.com/webpack/webpack) to 5.76.1 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.

Updates `webpack` from 5.75.0 to 5.76.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.75.0...v5.76.1)

Updates `@angular-devkit/build-angular` from 15.1.1 to 15.2.10
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@15.1.1...15.2.10)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump vite from 4.0.4 to 4.5.2

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 4.0.4 to 4.5.2.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v4.5.2/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v4.5.2/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump word-wrap from 1.2.3 to 1.2.5

Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.5.
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases)
- [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5)

---
updated-dependencies:
- dependency-name: word-wrap
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump axios from 1.4.0 to 1.6.7

Bumps [axios](https://github.com/axios/axios) from 1.4.0 to 1.6.7.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.4.0...v1.6.7)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump follow-redirects from 1.15.2 to 1.15.5

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.2 to 1.15.5.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.2...v1.15.5)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump undici from 5.22.1 to 5.28.3

Bumps [undici](https://github.com/nodejs/undici) from 5.22.1 to 5.28.3.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v5.22.1...v5.28.3)

---
updated-dependencies:
- dependency-name: undici
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump semver from 5.7.1 to 5.7.2

Bumps [semver](https://github.com/npm/node-semver) from 5.7.1 to 5.7.2.
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.7.1...v5.7.2)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump ip from 2.0.0 to 2.0.1

Bumps [ip](https://github.com/indutny/node-ip) from 2.0.0 to 2.0.1.
- [Commits](indutny/node-ip@v2.0.0...v2.0.1)

---
updated-dependencies:
- dependency-name: ip
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* assets-39: remove console log of password from test

* Feature/assets 16 replace logos (#43)

* assets-16: replace the old logo and favicon with new ones

* assets-32: replace the logo with the actual one for assets

* Feature/assets 8: add missing scrollbars (#40)

* assets-8: add scrollbars to all tabs in assets editor and user management

* assets-8: remove some duplicate attributes

* assets-8: fix unchanged files with annotations

* assets-8: fix unchanged files with annotations

* assets-8: fix unchanged files with annotations

---------

Co-authored-by: Alex Graf <Alex.Graf@ebp.ch>

* assets-32: break long titles so the edit button is not hidden. same for the search result in order to display the entire title (#44)

* update pre-release action

* update pre-release action

* update pre-release action

* update pre-release action

* update release action

* update release action

* update dockerfiles and actions

* Bump follow-redirects from 1.15.5 to 1.15.6

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.5 to 1.15.6.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.5...v1.15.6)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump fast-xml-parser and @aws-sdk/client-s3

Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) to 4.2.5 and updates ancestor dependency [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3). These dependencies need to be updated together.

Updates `fast-xml-parser` from 4.0.11 to 4.2.5
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v4.0.11...v4.2.5)

Updates `@aws-sdk/client-s3` from 3.252.0 to 3.537.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.537.0/clients/client-s3)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-type: indirect
- dependency-name: "@aws-sdk/client-s3"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump tough-cookie and @cypress/request

Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) and [@cypress/request](https://github.com/cypress-io/request). These dependencies needed to be updated together.

Updates `tough-cookie` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](salesforce/tough-cookie@v4.1.2...v4.1.3)

Updates `@cypress/request` from 2.88.11 to 2.88.12
- [Release notes](https://github.com/cypress-io/request/releases)
- [Changelog](https://github.com/cypress-io/request/blob/master/CHANGELOG.md)
- [Commits](cypress-io/request@v2.88.11...v2.88.12)

---
updated-dependencies:
- dependency-name: tough-cookie
  dependency-type: indirect
- dependency-name: "@cypress/request"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* update release action

* update release action

* update release action

* update release action

* Bump the npm_and_yarn group across 1 directory with 6 updates

Bumps the npm_and_yarn group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.0.11` | `4.2.5` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.252.0` | `3.537.0` |
| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.5` | `1.15.6` |
| [ip](https://github.com/indutny/node-ip) | `2.0.0` | `2.0.1` |
| [tough-cookie](https://github.com/salesforce/tough-cookie) | `4.1.2` | `4.1.3` |
| [@cypress/request](https://github.com/cypress-io/request) | `2.88.11` | `2.88.12` |

Updates `fast-xml-parser` from 4.0.11 to 4.2.5
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v4.0.11...v4.2.5)

Updates `@aws-sdk/client-s3` from 3.252.0 to 3.537.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.537.0/clients/client-s3)

Updates `follow-redirects` from 1.15.5 to 1.15.6
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.5...v1.15.6)

Updates `ip` from 2.0.0 to 2.0.1
- [Commits](indutny/node-ip@v2.0.0...v2.0.1)

Updates `tough-cookie` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](salesforce/tough-cookie@v4.1.2...v4.1.3)

Updates `@cypress/request` from 2.88.11 to 2.88.12
- [Release notes](https://github.com/cypress-io/request/releases)
- [Changelog](https://github.com/cypress-io/request/blob/master/CHANGELOG.md)
- [Commits](cypress-io/request@v2.88.11...v2.88.12)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
- dependency-name: "@aws-sdk/client-s3"
  dependency-type: direct:production
  dependency-group: npm_and_yarn-security-group
- dependency-name: follow-redirects
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
- dependency-name: ip
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
- dependency-name: tough-cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
- dependency-name: "@cypress/request"
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
...

Signed-off-by: dependabot[bot] <support@github.com>

* update release action

* update release action

* update pre-release action

* update dev-deploy action

* update dev-deploy action

* update dev-deploy action

* update dev-deploy action

* update dev-deploy action

* update dev-deploy action

* update dev-deploy action

* update dev-deploy action

* update dev-deploy action

* update release action

* update release action

* update release action

* #67: update elasticsearch-index local

* fix lint

* #11 fix sonar-issues, unit-tests

* Feature/assets 7 eIAM (#75)

#7:  integrate eIAM

* Add elasticsearch init script

* Remove initial `rdsadmin` user

* Extend setup instructions in README

* update create-docker-image action

* update create-docker-image action

* update create-docker-image action

* Replace build workflows with new unified `build` workflow

* Rewrite `release` workflow to just add `latest` flag

The workflow will no longer add a new image tagged as `release`.
Also, the ChangeLog has been removed completely as it is not used by the current project team.

* Re-add codeql workflow

* Remove pull request triggers from workflows

* Remove duplicates from displayed sibling assets

* Remove all existing siblings when patching an asset

* Revert bad commits

* Remove all existing siblings when patching an asset

* Add tagging/release notes to actions

* Add name to `release` pipeline

* Remove self-dependency of `build.build` step

* Remove docker image version tag

* Use `install` instead of `ci` to install node modules

* Run nx with `npx`

* Add node modules cache to build pipeline

* Add debug steps to build pipeline

* Move debug steps to test job

* Add `npm ci` to check jobs

* Cache build node_modules from within build dir

* Reset nx in build pipeline

* Add explicit typing to `contact-edit.service`

* Add dev setup steps to build pipeline

* Remove postinstall from build pipeline

* Run `ng` via npx in build pipeline

* Replace `actions/cache@v2` with `v4`

* Make `tag_edge_commit` build step depend on `build_and_push_app`

* Fix pipeline job branch check

* Add checkouts before building images

* Make GITHUB_TOKEN an input for `create-image` action

* Add startup prisma migration to server Dockerfile

* #81: Added checking for user groups in middleware and returns the error message to the frontend. Added env variable fields to template for o_Auth

* #81: Show error message when error returned from the backend

* Remove unused code for auth (password reset etc) as part of #11

* #81: pr comments and remove serach field on error page

* Create Bug template

* Add Issue template

* Refine templates

* #81: fix lint issues

* Extract CRUD of `asset` table into `AssetRepo`

* Install `@faker-js/faker`

Library for generating fake data for testing.

* Test `AssetRepo`

* Apply `build` workflow to all branches

* Update `fp-ts` package

`tap` function is only available from 2.15+

* Extract elasticsearch usages into `AssetSearchService`

* Add `AllStudy` view definition to schema

* Test `AssetSearchService`

* Replace elasticsearch usages by `AssetSearchService`

* Merge pull request #96 from swisstopo/feature/asset-71-update-elasticsearch-index

* Merge pull request #98 from swisstopo/feature/asset-33-bug-alternative-ids

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Alex Graf <Alex.Graf@ebp.ch>
Co-authored-by: till_schuetze <till.schuetze@ebp.ch>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Till Schütze <151851258+TIL-EBP@users.noreply.github.com>
Co-authored-by: Jannic Veith <103118462+vej-ananas@users.noreply.github.com>
Co-authored-by: Jannic Veith <jannic.veith@ebp.ch>

Fix build workflow
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@TIL-EBP TIL-EBP

Labels
enhancement New feature or request
Projects
None yet
Milestone
Authentication
Development

No branches or pull requests
3 participants
@traffic1000 @vej-ananas @TIL-EBP