Anthony Bucci [Fri, 21 Mar 2025 19:59:28 +0000 (15:59 -0400)]
DRYD-1716: set the antrun plugin that runs check-env-vars to <inherited>false</inherited> (#456)
DRYD-1716: set the antrun plugin that runs check-env-vars to <inherited>false</inherited> to prevent child projects from running this check. It is now only run once.
Anthony Bucci [Fri, 21 Mar 2025 19:52:01 +0000 (15:52 -0400)]
DRYD-1712/DRYD-1715: only run `git-commit-id-plugin` once (#457)
* DRYD-1712/DRYD-1715: removed git-commit-id-plugin from topmost pom, which was inherited by all child poms, and instead placed it in JaxRsServiceProvider. This is the only project that needs it, since this is where the WAR is created and that's where systeminfo picks it up.
Anthony Bucci [Thu, 20 Mar 2025 18:58:33 +0000 (14:58 -0400)]
SAML SSO unit tests etc. (#455)
* Added two unit tests to SecurityUtilsTest to verify the found email address is correct
* Removed unused imports in SecurityUtilsTest
* Added unit tests for ServicesConfigReader while investigating DRYD-1702
* cleaned up leftover printlns in SecurityUtilsTest
* cleaned up imports in SecurityUtilsTest
* reorganized methods in ServicesConfigReaderImplTest
* refactored findUser method to make it easier to test and prepare it for deprecation of ReponseToken
* refactored some useful common code out of SecurityUtilsTest into AbstractSecurityTestBase
* refactored some of the SAML-object-creating utility methods
* made 'parse' methods public so they can be tested
* added unit test to check that 'identifier' probe assertions correctly pull out attribute values
* source cleanup: organizing imports, formatting
* added .mvn to .gitignore to ignore local, per-developer maven properties
Co-authored-by: Anthony Bucci <abucci@bucci.onl>
* Include XSAny when searching for candidate usernames
* Add unit tests for findSamlAssertionCandidateUsernames
Michael Ritter [Thu, 19 Dec 2024 23:14:58 +0000 (18:14 -0500)]
8.1 Reports QA (#444)
* Use objectproductionpeople for related culutres - summary; inventory
* Fix location for mni and afo counts - inventory
* Add collectors to description text - intent to repatriate
* Pull multiple involved parties - intent to repatriate
* Deurn objectproductionpeople - exhibition basic list
* Make header text more consistent for 8.1 reports
* Adjust header spacing and height for 8.1 reports
* Add 8.1 report descriptions
Michael Ritter [Fri, 13 Dec 2024 22:51:50 +0000 (15:51 -0700)]
Consultation Report QA (#443)
* All - Use LocalDate for date formatting
* All - Adjust header height for text which was clipped
* Inventory - Include date with status when available
* Inventory - Remove 'Lot' from AFO Count header
* Summary - Join related sites on collection objects
* Repatriation - Add field collection sites
* Repatriation - Remove 'Lot' from AFO Count header
Michael Ritter [Fri, 13 Dec 2024 22:26:49 +0000 (15:26 -0700)]
NAGPRA Reports QA (#442)
* Notice of Inventory - Fix join for object counts
* Notice of Inventory - Fix join for acquisition date
* Notice of Inventory - Coalesce for better null handling
* Notice of Inventory - Switch to JavaScript templating
* Notice of Inventory - Adjust spacing and increase header height
* Notice of Inventory - Add noData section when result set is empty
* Notice of Repatriation - Increase header height
Ray Lee [Thu, 16 May 2024 03:59:50 +0000 (23:59 -0400)]
DRYD-1422: Improve running of database upgrade scripts.
- All upgrade scripts for a version of CSpace and the update of the database version number are now correctly running in one transaction.
- DB upgrade scripts are now correctly undeployed.
- DB upgrade scripts for versions of CSpace newer than the current version are now ignored.
- Custom version number comparison code has been removed in favor of org.apache.maven.artifact.versioning.ComparableVersion.
Ray Lee [Thu, 7 Mar 2024 04:56:33 +0000 (23:56 -0500)]
Fix last login time updated too frequently, and delete expired oauth tokens on login success.
The last login time was being updated when an authorization success event was triggered from a JWT token, which is now basically every request. A JWT token indicates a continuing session, not what a user would consider a log in event.