Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat: [DEV-2621] Add API guarding #218

Merged
merged 20 commits into from
May 23, 2023
Merged

feat: [DEV-2621] Add API guarding #218

merged 20 commits into from
May 23, 2023

Conversation

lampkin-diet
Copy link
Contributor

No description provided.

DaevMithran and others added 16 commits March 17, 2023 18:37
@DaevMithran
build: Update build workflows to staging (#179) (#182)
55e256f 
* Update package-lock.json

* Update workflows
@semantic-release-bot
chore(release): 1.5.1 [skip ci]
c6b989d 
## [1.5.1](1.5.0...1.5.1) (2023-03-17)
@ankurdotb
ci: Update CI and cache cleanup (#194)
5a8c206 
* ci: Update CI and cache cleanup

* Update release.yml

* Update build.yml

* Update cleanup-cache.yml

* Update build.yml

* Bump package
@ankurdotb
Merge branch 'main' into develop
5809042
@ankurdotb
chore: Update package lock
af2e39c
@semantic-release-bot
chore(release): 2.0.0-develop.3 [skip ci]
db5cd7e 
## [2.0.0-develop.3](2.0.0-develop.2...2.0.0-develop.3) (2023-04-03)
@dependabot @ankurdotb
chore(deps-dev): Bump semantic-release from 19.0.5 to 21.0.1 (#193)
5e2c26d 
Bumps [semantic-release](https://github.com/semantic-release/semantic-release) from 19.0.5 to 21.0.1.
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v19.0.5...v21.0.1)

---
updated-dependencies:
- dependency-name: semantic-release
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ankur Banerjee <ankurdotb@users.noreply.github.com>
@dependabot @ankurdotb
chore(deps-dev): Bump eslint-config-prettier from 8.5.0 to 8.8.0 (#191)
d245c76 
* chore(deps-dev): Bump eslint-config-prettier from 8.5.0 to 8.8.0

Bumps [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) from 8.5.0 to 8.8.0.
- [Release notes](https://github.com/prettier/eslint-config-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-config-prettier@v8.5.0...v8.8.0)

---
updated-dependencies:
- dependency-name: eslint-config-prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump package

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ankur Banerjee <ankurdotb@users.noreply.github.com>
@dependabot @ankurdotb
chore(deps-dev): Bump prettier from 2.8.1 to 2.8.7 (#190)
4a38e0b 
* chore(deps-dev): Bump prettier from 2.8.1 to 2.8.7

Bumps [prettier](https://github.com/prettier/prettier) from 2.8.1 to 2.8.7.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@2.8.1...2.8.7)

---
updated-dependencies:
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* bump

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ankur Banerjee <ankurdotb@users.noreply.github.com>
@dependabot @ankurdotb
chore(deps): Bump webpack from 5.75.0 to 5.77.0 (#195)
d12bcad 
* chore(deps): Bump webpack from 5.75.0 to 5.77.0

Bumps [webpack](https://github.com/webpack/webpack) from 5.75.0 to 5.77.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.75.0...v5.77.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update package.json

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ankur Banerjee <ankurdotb@users.noreply.github.com>
Temporarily add logto auth
29f73a0
Merge remote-tracking branch 'origin/add-workspaces' into DEV-2584
07a34ca
Add frontend package
83c0325
Simplify the frontend to just showing the token
2701046
@DaevMithran
Merge branch 'add-workspaces' into DEV-2584
32a3402
Add API guarding middleware
3f42c2f
@ankurdotb
Copy link
Contributor

Task linked: DEV-2621 Update Custodian Mode backend to implement API guarding with LogTo

@gitguardian
Copy link

gitguardian bot commented May 22, 2023 •
edited
Loading

⚠️ GitGuardian has uncovered 4 secrets following the scan of your pull request.

Please consider investigating the findings and remediating the incidents. Failure to do so may lead to compromising the associated services or software components.

🔎 Detected hardcoded secrets in your pull request
GitGuardian id Secret Commit Filename
6625061 Generic High Entropy Secret 29f73a0 src/app.ts View secret
6625061 Generic High Entropy Secret 07a34ca packages/backend/src/app.ts View secret
6677700 Generic High Entropy Secret 83c0325 packages/frontend/.env.example View secret
6677700 Generic High Entropy Secret b5a68a6 packages/frontend/.env.example View secret
🛠 Guidelines to remediate hardcoded secrets
  1. Understand the implications of revoking this secret by investigating where it is used in your code.
  2. Replace and store your secret safely. Learn here the best practices.
  3. Revoke and rotate this secret.
  4. If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.

To avoid such incidents in the future consider

🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.

Our GitHub checks need improvements? Share your feedbacks!

@DaevMithran DaevMithran temporarily deployed to staging May 23, 2023 04:58 — with GitHub Actions Inactive
@DaevMithran DaevMithran temporarily deployed to staging May 23, 2023 05:51 — with GitHub Actions Inactive
@DaevMithran DaevMithran merged commit c2b1f79 into add-workspaces May 23, 2023
@DaevMithran DaevMithran deleted the DEV-2621 branch May 23, 2023 06:03
DaevMithran added a commit that referenced this pull request May 23, 2023
@DaevMithran @semantic-release-bot
@ankurdotb @dependabot
feat: [DEV-2619] Create workspace with frontend and backend packages (#…
08e6a45 
…212)

* feat: Add issuer apis

* feat: Add jsonld support

* docs: Update Readme

* build: Update did-provider-cheqd

* feat: Add controller db

* feat: Add authentication

* feat: Update swagger && refactor

* build: Update Dockerfile

* feat: Remove jsonLD

* feat: Minor updates

* feat: Create migrations in db

* build: Fix migration creation

* build: Add ca cert env

* fix: Update operation

* fix: Search operation in db

* feat: Update swagger

* feat: Update api paths

* feat: Minor fixes

* feat: Use monorepo structure

* feat: Add guard middleware

* feat: Update transition backend to ESM

* fix: Dockerfile permissions

* feat: Add frontend package [DEV-2620] (#211)

* chore(release): 1.5.1 [skip ci]

## [1.5.1](1.5.0...1.5.1) (2023-03-17)

* ci: Update CI and cache cleanup (#194)

* ci: Update CI and cache cleanup

* Update release.yml

* Update build.yml

* Update cleanup-cache.yml

* Update build.yml

* Bump package

* chore: Update package lock

* chore(release): 2.0.0-develop.3 [skip ci]

## [2.0.0-develop.3](2.0.0-develop.2...2.0.0-develop.3) (2023-04-03)

* chore(deps-dev): Bump semantic-release from 19.0.5 to 21.0.1 (#193)

Bumps [semantic-release](https://github.com/semantic-release/semantic-release) from 19.0.5 to 21.0.1.
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v19.0.5...v21.0.1)

---
updated-dependencies:
- dependency-name: semantic-release
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ankur Banerjee <ankurdotb@users.noreply.github.com>

* chore(deps-dev): Bump eslint-config-prettier from 8.5.0 to 8.8.0 (#191)

* chore(deps-dev): Bump eslint-config-prettier from 8.5.0 to 8.8.0

Bumps [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) from 8.5.0 to 8.8.0.
- [Release notes](https://github.com/prettier/eslint-config-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-config-prettier@v8.5.0...v8.8.0)

---
updated-dependencies:
- dependency-name: eslint-config-prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump package

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ankur Banerjee <ankurdotb@users.noreply.github.com>

* chore(deps-dev): Bump prettier from 2.8.1 to 2.8.7 (#190)

* chore(deps-dev): Bump prettier from 2.8.1 to 2.8.7

Bumps [prettier](https://github.com/prettier/prettier) from 2.8.1 to 2.8.7.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@2.8.1...2.8.7)

---
updated-dependencies:
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* bump

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ankur Banerjee <ankurdotb@users.noreply.github.com>

* chore(deps): Bump webpack from 5.75.0 to 5.77.0 (#195)

* chore(deps): Bump webpack from 5.75.0 to 5.77.0

Bumps [webpack](https://github.com/webpack/webpack) from 5.75.0 to 5.77.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.75.0...v5.77.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update package.json

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ankur Banerjee <ankurdotb@users.noreply.github.com>

* Temporarily add logto auth

* Add frontend package

* Simplify the frontend to just showing the token

* feat: Update refactor frontend

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: DaevMithran <61043607+DaevMithran@users.noreply.github.com>
Co-authored-by: semantic-release-bot <semantic-release-bot@martynus.net>
Co-authored-by: Ankur Banerjee <ankurdotb@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: DaevMithran <daevmithran1999@gmail.com>

* fix: package-lock.json

* feat: [DEV-2621] Add API guarding (#218)

* chore(release): 1.5.1 [skip ci]

## [1.5.1](1.5.0...1.5.1) (2023-03-17)

* ci: Update CI and cache cleanup (#194)

* ci: Update CI and cache cleanup

* Update release.yml

* Update build.yml

* Update cleanup-cache.yml

* Update build.yml

* Bump package

* chore: Update package lock

* chore(release): 2.0.0-develop.3 [skip ci]

## [2.0.0-develop.3](2.0.0-develop.2...2.0.0-develop.3) (2023-04-03)

* chore(deps-dev): Bump semantic-release from 19.0.5 to 21.0.1 (#193)

Bumps [semantic-release](https://github.com/semantic-release/semantic-release) from 19.0.5 to 21.0.1.
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v19.0.5...v21.0.1)

---
updated-dependencies:
- dependency-name: semantic-release
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ankur Banerjee <ankurdotb@users.noreply.github.com>

* chore(deps-dev): Bump eslint-config-prettier from 8.5.0 to 8.8.0 (#191)

* chore(deps-dev): Bump eslint-config-prettier from 8.5.0 to 8.8.0

Bumps [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) from 8.5.0 to 8.8.0.
- [Release notes](https://github.com/prettier/eslint-config-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-config-prettier@v8.5.0...v8.8.0)

---
updated-dependencies:
- dependency-name: eslint-config-prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump package

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ankur Banerjee <ankurdotb@users.noreply.github.com>

* chore(deps-dev): Bump prettier from 2.8.1 to 2.8.7 (#190)

* chore(deps-dev): Bump prettier from 2.8.1 to 2.8.7

Bumps [prettier](https://github.com/prettier/prettier) from 2.8.1 to 2.8.7.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@2.8.1...2.8.7)

---
updated-dependencies:
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* bump

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ankur Banerjee <ankurdotb@users.noreply.github.com>

* chore(deps): Bump webpack from 5.75.0 to 5.77.0 (#195)

* chore(deps): Bump webpack from 5.75.0 to 5.77.0

Bumps [webpack](https://github.com/webpack/webpack) from 5.75.0 to 5.77.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.75.0...v5.77.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update package.json

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ankur Banerjee <ankurdotb@users.noreply.github.com>

* Temporarily add logto auth

* Add frontend package

* Simplify the frontend to just showing the token

* Add API guarding middleware

* Remove unused code

* Move to generateHTML for swagger

* fix: git guardian warning

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: DaevMithran <61043607+DaevMithran@users.noreply.github.com>
Co-authored-by: semantic-release-bot <semantic-release-bot@martynus.net>
Co-authored-by: Ankur Banerjee <ankurdotb@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: DaevMithran <daevmithran1999@gmail.com>

* fix: Minor merge issues

* feat: Update frontend package.json

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: DaevMithran <daevmithran1999@gmail.com>
Co-authored-by: DaevMithran <61043607+DaevMithran@users.noreply.github.com>
Co-authored-by: semantic-release-bot <semantic-release-bot@martynus.net>
Co-authored-by: Ankur Banerjee <ankurdotb@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@lampkin-diet @ankurdotb @DaevMithran @semantic-release-bot