mirror of
https://github.com/Telecominfraproject/wlan-cloud-ucentralsec.git
synced 2025-10-29 18:02:29 +00:00
Compare commits
31 Commits
WIFI-10942
...
v2.7.0
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
08df7ff714 | ||
|
|
ad4ac98d1a | ||
|
|
6633a23635 | ||
|
|
e398d3cf4b | ||
|
|
f53cc82df1 | ||
|
|
3f9edc80e0 | ||
|
|
c3a1d84bcd | ||
|
|
a34d8eb625 | ||
|
|
6ae42fe206 | ||
|
|
4539bfb53b | ||
|
|
dc57a94416 | ||
|
|
68e2d20264 | ||
|
|
6025b7a74e | ||
|
|
3fcf6114c0 | ||
|
|
de0c1423af | ||
|
|
f4984247d2 | ||
|
|
e0b80a2640 | ||
|
|
f2c36882be | ||
|
|
3a1e4d66b4 | ||
|
|
6ea62c12c5 | ||
|
|
517b46d275 | ||
|
|
2503cb842e | ||
|
|
3310b7c565 | ||
|
|
2878e2aa25 | ||
|
|
3b7e6da952 | ||
|
|
06267690fc | ||
|
|
db751e31a3 | ||
|
|
49b8664dc0 | ||
|
|
26e54f8433 | ||
|
|
a4ebfdc2e9 | ||
|
|
4b1fbf055f |
@@ -78,6 +78,7 @@ add_executable( owsec
|
||||
src/framework/orm.h
|
||||
src/framework/StorageClass.h
|
||||
src/framework/ow_constants.h
|
||||
src/framework/MicroServiceErrorHandler.h
|
||||
src/framework/WebSocketClientNotifications.h
|
||||
src/seclibs/qrcode/qrcodegen.hpp src/seclibs/qrcode/qrcodegen.cpp
|
||||
src/seclibs/cpptotp/bytes.cpp src/seclibs/cpptotp/bytes.h
|
||||
|
||||
@@ -81,6 +81,9 @@ RUN mkdir cmake-build
|
||||
WORKDIR cmake-build
|
||||
RUN cmake .. -DBUILD_ONLY="sns;s3" \
|
||||
-DCMAKE_BUILD_TYPE=Release \
|
||||
-DUSE_OPENSSL=ON \
|
||||
-DCPP_STANDARD=17 \
|
||||
-DBUILD_SHARED_LIBS=ON \
|
||||
-DCMAKE_CXX_FLAGS="-Wno-error=stringop-overflow -Wno-error=uninitialized" \
|
||||
-DAUTORUN_UNIT_TESTS=OFF
|
||||
RUN cmake --build . --config Release -j8
|
||||
@@ -108,9 +111,7 @@ COPY --from=fmtlib-build /usr/local/lib /usr/local/lib
|
||||
WORKDIR /owsec
|
||||
RUN mkdir cmake-build
|
||||
WORKDIR /owsec/cmake-build
|
||||
RUN cmake .. \
|
||||
-Dcrypto_LIBRARY=/usr/lib/libcrypto.so \
|
||||
-DBUILD_SHARED_LIBS=ON
|
||||
RUN cmake ..
|
||||
RUN cmake --build . --config Release -j8
|
||||
|
||||
FROM debian:$DEBIAN_VERSION
|
||||
@@ -127,7 +128,7 @@ RUN mkdir -p "$OWSEC_ROOT" "$OWSEC_CONFIG" && \
|
||||
|
||||
RUN apt-get update && apt-get install --no-install-recommends -y \
|
||||
librdkafka++1 gosu gettext ca-certificates bash jq curl wget \
|
||||
libmariadb-dev-compat libpq5 unixodbc
|
||||
libmariadb-dev-compat libpq5 unixodbc postgresql-client
|
||||
|
||||
COPY readiness_check /readiness_check
|
||||
COPY test_scripts/curl/cli /cli
|
||||
|
||||
@@ -9,7 +9,7 @@ fullnameOverride: ""
|
||||
images:
|
||||
owsec:
|
||||
repository: tip-tip-wlan-cloud-ucentral.jfrog.io/owsec
|
||||
tag: main
|
||||
tag: v2.7.0
|
||||
pullPolicy: Always
|
||||
# regcred:
|
||||
# registry: tip-tip-wlan-cloud-ucentral.jfrog.io
|
||||
|
||||
@@ -3075,7 +3075,7 @@ namespace OpenWifi {
|
||||
|
||||
private:
|
||||
std::vector<std::unique_ptr<Poco::Net::HTTPServer>> RESTServers_;
|
||||
Poco::ThreadPool Pool_{"x-rest",32,128};
|
||||
Poco::ThreadPool Pool_{"x-rest",8,128};
|
||||
RESTAPI_GenericServer Server_;
|
||||
|
||||
RESTAPI_ExtServer() noexcept:
|
||||
@@ -3209,7 +3209,7 @@ namespace OpenWifi {
|
||||
const Poco::ThreadPool & Pool() { return Pool_; }
|
||||
private:
|
||||
std::vector<std::unique_ptr<Poco::Net::HTTPServer>> RESTServers_;
|
||||
Poco::ThreadPool Pool_{"i-rest",32,96};
|
||||
Poco::ThreadPool Pool_{"i-rest",4,64};
|
||||
RESTAPI_GenericServer Server_;
|
||||
|
||||
RESTAPI_IntServer() noexcept:
|
||||
@@ -3406,7 +3406,7 @@ namespace OpenWifi {
|
||||
bool NoBuiltInCrypto_=false;
|
||||
Poco::JWT::Signer Signer_;
|
||||
Poco::Logger &Logger_;
|
||||
Poco::ThreadPool TimerPool_{"timer:pool",2,16};
|
||||
Poco::ThreadPool TimerPool_{"timer:pool",2,32};
|
||||
std::unique_ptr<BusEventManager> BusEventManager_;
|
||||
};
|
||||
|
||||
@@ -3602,14 +3602,14 @@ namespace OpenWifi {
|
||||
FileChannel->setProperty("archive", "timestamp");
|
||||
FileChannel->setProperty("path", LoggingLocation);
|
||||
Poco::AutoPtr<Poco::AsyncChannel> Async_File(new Poco::AsyncChannel(FileChannel));
|
||||
Poco::AutoPtr<Poco::AsyncChannel> Async_Muxer(new Poco::AsyncChannel(LogMuxer()));
|
||||
Poco::AutoPtr<Poco::SplitterChannel> Splitter(new Poco::SplitterChannel);
|
||||
Splitter->addChannel(Async_File);
|
||||
Splitter->addChannel(Async_Muxer);
|
||||
// Poco::AutoPtr<Poco::AsyncChannel> Async_Muxer(new Poco::AsyncChannel(LogMuxer()));
|
||||
// Poco::AutoPtr<Poco::SplitterChannel> Splitter(new Poco::SplitterChannel);
|
||||
// Splitter->addChannel(Async_File);
|
||||
// Splitter->addChannel(Async_Muxer);
|
||||
Poco::AutoPtr<Poco::PatternFormatter> Formatter(new Poco::PatternFormatter);
|
||||
Formatter->setProperty("pattern", LoggingFormat);
|
||||
Poco::AutoPtr<Poco::FormattingChannel> FormattingChannel(
|
||||
new Poco::FormattingChannel(Formatter, Splitter));
|
||||
new Poco::FormattingChannel(Formatter, Async_File));
|
||||
Poco::Logger::root().setChannel(FormattingChannel);
|
||||
}
|
||||
auto Level = Poco::Logger::parseLevel(MicroService::instance().ConfigGetString("logging.level", "debug"));
|
||||
|
||||
@@ -179,13 +179,19 @@ getlogo() {
|
||||
}
|
||||
|
||||
createuser() {
|
||||
payload="{ \"id\": \"0\", \"email\" : \"$1\", \"currentPassword\" : \"$2\", \"changePassword\" : true}"
|
||||
curl ${FLAGS} -X POST "https://${OWSEC}/api/v1/user/0" \
|
||||
-H "Accept: application/json" \
|
||||
-H "Content-Type: application/json" \
|
||||
-H "Authorization: Bearer ${token}" \
|
||||
-d "$payload" > ${result_file}
|
||||
jq < ${result_file}
|
||||
case $3 in
|
||||
root|admin|subscriber|csr|system|installer|noc|accounting)
|
||||
payload="{ \"id\": \"0\", \"email\" : \"$1\", \"currentPassword\" : \"$2\", \"changePassword\" : true, \"userRole\" : \"$3\" }"
|
||||
curl ${FLAGS} -X POST "https://${OWSEC}/api/v1/user/0" \
|
||||
-H "Accept: application/json" \
|
||||
-H "Content-Type: application/json" \
|
||||
-H "Authorization: Bearer ${token}" \
|
||||
-d "$payload" > ${result_file}
|
||||
jq < ${result_file} ;;
|
||||
*)
|
||||
echo "Error: userRole has to be one of root|admin|subscriber|csr|system|installer|noc|accounting"
|
||||
exit 1 ;;
|
||||
esac
|
||||
}
|
||||
|
||||
createsub() {
|
||||
@@ -199,13 +205,19 @@ createsub() {
|
||||
}
|
||||
|
||||
createuser_v() {
|
||||
payload="{ \"id\": \"0\", \"email\" : \"$1\", \"currentPassword\" : \"$2\", \"changePassword\" : true}"
|
||||
curl ${FLAGS} -X POST "https://${OWSEC}/api/v1/user/0?email_verification=true" \
|
||||
-H "Accept: application/json" \
|
||||
-H "Content-Type: application/json" \
|
||||
-H "Authorization: Bearer ${token}" \
|
||||
-d "$payload" > ${result_file}
|
||||
jq < ${result_file}
|
||||
case $3 in
|
||||
root|admin|subscriber|csr|system|installer|noc|accounting)
|
||||
payload="{ \"id\": \"0\", \"email\" : \"$1\", \"currentPassword\" : \"$2\", \"changePassword\" : true, \"userRole\" : \"$3\" }"
|
||||
curl ${FLAGS} -X POST "https://${OWSEC}/api/v1/user/0?email_verification=true" \
|
||||
-H "Accept: application/json" \
|
||||
-H "Content-Type: application/json" \
|
||||
-H "Authorization: Bearer ${token}" \
|
||||
-d "$payload" > ${result_file}
|
||||
jq < ${result_file} ;;
|
||||
*)
|
||||
echo "Error: userRole has to be one of root|admin|subscriber|csr|system|installer|noc|accounting"
|
||||
exit 1 ;;
|
||||
esac
|
||||
}
|
||||
|
||||
deleteuser() {
|
||||
@@ -447,7 +459,7 @@ test_service() {
|
||||
echo "----------------"
|
||||
echo "Create test user"
|
||||
echo "----------------"
|
||||
createuser testuser@mail.telecominfraproject.com 'Test123!'
|
||||
createuser testuser@mail.telecominfraproject.com 'Test123!' accounting
|
||||
check_response $result_file
|
||||
USER_ID="$(jq -r '.id' < $result_file)"
|
||||
|
||||
@@ -481,35 +493,35 @@ help() {
|
||||
echo
|
||||
echo "Usage: cli <cmd> [args]"
|
||||
echo
|
||||
echo "listendpoints Get all the system endpoints."
|
||||
echo "emailtest Generate a forgot Password e-amil to the logged in user."
|
||||
echo "me Show information about the logged user."
|
||||
echo "createuser <email> <password> Create a user with an initial password and force the user to change password."
|
||||
echo "createuser_v <email> <password> Same as create user but also force an e-mail verification."
|
||||
echo "deleteuser <user UUID> Delete the user."
|
||||
echo "getuser <user UUID> Get the user information."
|
||||
echo "listusers List users."
|
||||
echo "policies List the login and access policies."
|
||||
echo "setavatar <user UUID> <filename> Sets the avatar for user to the image in filename."
|
||||
echo "getavatar <user UUID> Get the avatar for the user."
|
||||
echo "deleteavatar <user UUID> Remove the avatar for a user."
|
||||
echo "sendemail <recipient> <from> Sends a test email to see if the e-mail system is working."
|
||||
echo "setloglevel <subsystem> <loglevel> Set the log level for s specific subsystem."
|
||||
echo "getloglevels Get the current log levels for all subsystems."
|
||||
echo "getloglevelnames Get the log level names available."
|
||||
echo "getsubsystemnames Get the list of subsystems."
|
||||
echo "systeminfo Get basic system information."
|
||||
echo "reloadsubsystem <subsystem name> Reload the configuration for a subsystem."
|
||||
echo "test_service Run a set of CLI commands for testing purposes"
|
||||
echo "listendpoints Get all the system endpoints."
|
||||
echo "emailtest Generate a forgot Password e-amil to the logged in user."
|
||||
echo "me Show information about the logged user."
|
||||
echo "createuser <email> <password> <userrole> Create a user with an initial password and force the user to change password."
|
||||
echo "createuser_v <email> <password> <userrole> Same as create user but also force an e-mail verification."
|
||||
echo "deleteuser <user UUID> Delete the user."
|
||||
echo "getuser <user UUID> Get the user information."
|
||||
echo "listusers List users."
|
||||
echo "policies List the login and access policies."
|
||||
echo "setavatar <user UUID> <filename> Sets the avatar for user to the image in filename."
|
||||
echo "getavatar <user UUID> Get the avatar for the user."
|
||||
echo "deleteavatar <user UUID> Remove the avatar for a user."
|
||||
echo "sendemail <recipient> <from> Sends a test email to see if the e-mail system is working."
|
||||
echo "setloglevel <subsystem> <loglevel> Set the log level for s specific subsystem."
|
||||
echo "getloglevels Get the current log levels for all subsystems."
|
||||
echo "getloglevelnames Get the log level names available."
|
||||
echo "getsubsystemnames Get the list of subsystems."
|
||||
echo "systeminfo Get basic system information."
|
||||
echo "reloadsubsystem <subsystem name> Reload the configuration for a subsystem."
|
||||
echo "test_service Run a set of CLI commands for testing purposes"
|
||||
echo
|
||||
}
|
||||
|
||||
shopt -s nocasematch
|
||||
|
||||
case "$1" in
|
||||
"createuser") login; createuser "$2" "$3"; logout;;
|
||||
"createuser") login; createuser "$2" "$3" "$4"; logout;;
|
||||
"createsub") login; createsub "$2" "$3"; logout;;
|
||||
"createuser_v") login; createuser_v "$2" "$3"; logout;;
|
||||
"createuser_v") login; createuser_v "$2" "$3" "$4"; logout;;
|
||||
"createsub_v") login; createsub_v "$2" "$3"; logout;;
|
||||
"deleteuser") login; deleteuser "$2" ; logout;;
|
||||
"deletesub") login; deletesub "$2" ; logout;;
|
||||
|
||||
Reference in New Issue
Block a user