V5.1 into master #544
Merged
V5.1 into master #544
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Co-authored-by: Nikola Naydenov <nikolanaydenov@AML0232.local>
* feat(qa): cross browser tests' * revert(delete): remove file * fix dependencies * fix codecept unknown option scan error Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com>
* Add currently existing Welsh translations as messages_cy.propertes thus creating a bundle. The messages at this stage are copied "as is", and may contain translation errors. * Externalise messages from Contact Us page. Externalise titles from the remaining pages. * Add a script automating hardcoded text i18n. * SIDM-3761 Add language switcher to wrapper.tag based on example provided in Jira * Introduce language-specific static pages and selection mechanism based on locale in context. * Remove default locale making it possible to set it via Accept-Language HTTP header. * Add support for preferred languages and scripts for the user interface represented as a space-separated list of BCP47. * Minor logging fix. * Fix an invalid test ensuring no cookie is set. * Fix locale parameter rename in JSPs. * Reduce cognitive complexity. Increase readability. * Get available languages from messages bundle rather than hardcoded list of values. * Fix a broken unit test. * Introduce a dedicated JSP tag for a language switch. Make it reuse the current URL and add/replace ui_locales parameter with JS. * Externalise constants. * Change language switching URL to be build server-side to avoid the need for JS client-side.
…rceptor. Add the language header to forget password call manually, as it's being run in another thread and has no knowledge of the user's selected locale.
…user has registered. (#349) * SIDM-3977 Add test to check if activation link can be used after the user has registered. * SIDM-3977 Make it a new scenario. * SIDM-3977 self_registration_test: Fix text Co-authored-by: Tiago Braun <tiago.braun@amido.com>
* COVID-19 Contact Us pages changes (post Welsh) * Use the provided Welsh translation for a missing line.
* Externalise messages from static pages. * Improve message for missing EN elements. * Add missing email addresses for English. * Remove an unused property. * Reexport Contact Us page to include the update and COVID-19 opening times changes.
* SIDM-3582 Fix incorrect error screen for expired account activation url. * SIDM-3582 Increase test coverage. * SIDM-3582 Fix import. * SIDM-3582 Code review changes. * SIDM-3582 Code review changes. * SIDM-3404 Update captions. * SIDM-3404 Add Welsh translations. * SIDM-3582 Fix incorrect error screen for expired account activation url. (#346) * SIDM-3582 Fix incorrect error screen for expired account activation url. * SIDM-3582 Increase test coverage. * SIDM-3582 Fix import. * SIDM-3582 Code review changes. * SIDM-3582 Code review changes. Co-authored-by: nikola-naydenov-hmcts <47384516+nikola-naydenov-hmcts@users.noreply.github.com> * Add some missing Welsh translations for SIDM-3353. * Add a new test. Co-authored-by: nikola-naydenov-hmcts <47384516+nikola-naydenov-hmcts@users.noreply.github.com>
* Add debug code listing request params * Remove debug code. Add an attempted fix.
* Add functional tests: duplicate registration in different languages * Welsh tests. * Welsh tests. * Welsh tests. * Welsh tests.
* Sidm 4015 welsh functional tests (#352) (#362) * Add functional tests: duplicate registration in different languages * Welsh tests. * Welsh tests. * Welsh tests. * Welsh tests. * merge master to demo (#364) * Adding back the prod deployment blocker (#189) * extra tests for code quality (#196) * Removing blocker for go live * Load vault secrets fix * Security fix * Adding go live blocker * Securityscan master (#197) * adding security scan config * update public uRI * adding fun-output dir to gitignore * adding aat url * Exclude jquery from the zap scanners. * [PREVIEW] Fixing the pipeline (#211) * [PREVIEW] SIDM-3007 SIDM-3089 SIDM-3090 Fix PR asp_name, update Dockerfile, add CVE suppression (#201) * fix(local.asp_name): add conditional case for asp_name when running PRs By using the asp_name_override for idam-api, idam-web-public and idam-web-admin for PRs, pipelines cannot run in parallel as they clash with each other. Do not use asp_name_override for PRs. * feat(security suppression): add suppression for pitest related to CVE-2019-15052 pitest 1.3.0 and 1.4.0 are flagged under CVE-2019-15052 but are only used in testing. 1.4.0 is the latest release SIDM-3090 * fix(base image/insights agent): update Dockerfile as base image is no longer available * Change ref in the terraform file. * [PREVIEW] Minor content changes for 1.4.1 (#210) * SIDM-3130 Contact Us screen - Update SSCS details. * SIDM-2904 Update Survey feedback link across IDAM public screens. * [PREVIEW] 1.4.1 Scope Change (#216) (#218) * SIDM-2904 Manually revert SIDM-2904. * SIDM-2757 Fix double apostrophe in a message. (#187) * [PREVIEW] footer pages update (#194) * Add 'Family Public Law' section to the 'Contact Us' page. * Add Family Public Law Service info to cookies and privacy policy pages. * A few adjustements. * Remove repetition. * Add a space. * SIDM-2412 Remove records about 2 cookies which are not used in the Family Public Law Service. (#204) * Add CVE-14540 and 16335 supressions * Adding prod blocker * Disable functional tests * Web public tests 1.5 (#267) * special character password test * added password characters * changed password characters * redued wait time * Sidm 3294 mfa e2e tests (#256) * add mfa otp login tests * add missing file * fix typo * add missing code * fix test failures * add more waits * add more waits * add exiplit wait * add block policy scenario * feat(SIDM-3410-ips): filter out internal ips from policy valuation (#270) * feat(SIDM-3410-ips): filter out internal ips from policy valuation * feat(SIDM-3410-ips): simplify and merge methods * feat(SIDM-3410-ips): simplify regex * This should fix the ArrAffinity token problem (#277) * feat(SIDM-3441-sso): Policy eval: remove bearer auth token (#283) * Include fix for 1.5 (#275) * feat(SIDM-3410-ips-preview): remove filter pattern in preview (#272) * Updating with for suggestions (#273) * Updating with for suggestions * Need to escape the dot * feat(sidm-3410-rc2): merge 3410 preview into RC (#284) * Updating with for suggestions (#273) * fix(vnet_private_ip_pattern): update escape syntax (#281) * feat(SIDM-3410-fix-def): use same escaping as preview which is tested (#285) * feat(SIDM-3437-redir): login/mfa: redirecting using slash (#280) (#287) * Adding prod blocker * Duplicated code fix * Enable functionals * Update contact us details. (#253) * Removing prod blocker * Eliminating vulnerabilities * Removing blocker * Disable functionals * Adding support for multiple affinity cookies (#332) Co-authored-by: Nikola Naydenov <nikolanaydenov@AML0232.local> * Apply suggestions from code review * remove waits and add suggestions * fix test failure * add wait for failing tests * ci(prod blocker): add * fix hmcts policy set for block user test * fix(aat deployment): add credential and environment overrides * 2.0 RC (#330) * Eliminating vulnerabilities * fix unknown char in email links (#317) * SIDM-3511 - Update chart-java release 2.16.0 (#318) * build(chart-java): update chart-java release to 2.16.0 * refactor(cicd): remove deprecated enableDockerBuild() * feat(staging deployment): add aat values for helm * feat(sidm-3483-fr6): 6.5 web-public (#315) (#321) * feat(sidm-3483-fr6): update test regex to extract activation parssword * feat(sidm-3483-fr6): password reset working but had to change some of the codecepts waits * feat(sidm-3483-fr6): add 2s wait after Sign In to fix flappy test * feat(sidm-3483-fr6): remove waits because it was fixed by Shravs changes on codecept conf * chore(ase asp): disable legacy deployments (#323) * ci(env name): add override for env name for build with aks (#325) * Sidm 3561 compare screenshot test (#308) * screen shot compare test * updated code * updated cnp file * added base screen shot folder to repo * added functional-output to git ignore * taking base screen shot is set to false * added diff folder to screenshot folder * added diff folder and ignore functional output * removed some images from base folder * added f-output folder to gitignore * removed some images from base folder * removed some images from base folder * set base image to false in ui tests * added foutput folder to gitignore * update policy check test * added foutput to gitignore * updated code to run all functional tests * updated policy check test * added foutput to gitignore * change name of base screen shot * removed foutpit from gitignore * added wait to failed tests * added foitput to gitignore * added ignore screen compare code * added wait * updates screen shot * removed screen shot * added foutput folder to gitignore * applied retry * added resemblence helper to package.json * added resemblance helper * enabled screen shot for visual testing * cleaned up code * added functional output folder to gitignore * ingored package.lock.json * Delete package-lock.json * added dependencies * added node fetch dependency * updared lockout test Co-authored-by: Shravan Mechineni <shravanmechineni5@gmail.com> * Idam nightly tests (#326) * Adding back the prod deployment blocker (#189) * extra tests for code quality (#196) * Removing blocker for go live * Load vault secrets fix * Security fix * Adding go live blocker * Securityscan master (#197) * adding security scan config * update public uRI * adding fun-output dir to gitignore * adding aat url * Exclude jquery from the zap scanners. * [PREVIEW] Fixing the pipeline (#211) * [PREVIEW] SIDM-3007 SIDM-3089 SIDM-3090 Fix PR asp_name, update Dockerfile, add CVE suppression (#201) * fix(local.asp_name): add conditional case for asp_name when running PRs By using the asp_name_override for idam-api, idam-web-public and idam-web-admin for PRs, pipelines cannot run in parallel as they clash with each other. Do not use asp_name_override for PRs. * feat(security suppression): add suppression for pitest related to CVE-2019-15052 pitest 1.3.0 and 1.4.0 are flagged under CVE-2019-15052 but are only used in testing. 1.4.0 is the latest release SIDM-3090 * fix(base image/insights agent): update Dockerfile as base image is no longer available * Change ref in the terraform file. * [PREVIEW] Minor content changes for 1.4.1 (#210) * SIDM-3130 Contact Us screen - Update SSCS details. * SIDM-2904 Update Survey feedback link across IDAM public screens. * [PREVIEW] 1.4.1 Scope Change (#216) (#218) * SIDM-2904 Manually revert SIDM-2904. * SIDM-2757 Fix double apostrophe in a message. (#187) * [PREVIEW] footer pages update (#194) * Add 'Family Public Law' section to the 'Contact Us' page. * Add Family Public Law Service info to cookies and privacy policy pages. * A few adjustements. * Remove repetition. * Add a space. * SIDM-2412 Remove records about 2 cookies which are not used in the Family Public Law Service. (#204) * Add CVE-14540 and 16335 supressions * Adding prod blocker * Disable functional tests * Web public tests 1.5 (#267) * special character password test * added password characters * changed password characters * redued wait time * Sidm 3294 mfa e2e tests (#256) * add mfa otp login tests * add missing file * fix typo * add missing code * fix test failures * add more waits * add more waits * add exiplit wait * add block policy scenario * feat(SIDM-3410-ips): filter out internal ips from policy valuation (#270) * feat(SIDM-3410-ips): filter out internal ips from policy valuation * feat(SIDM-3410-ips): simplify and merge methods * feat(SIDM-3410-ips): simplify regex * This should fix the ArrAffinity token problem (#277) * feat(SIDM-3441-sso): Policy eval: remove bearer auth token (#283) * Include fix for 1.5 (#275) * feat(SIDM-3410-ips-preview): remove filter pattern in preview (#272) * Updating with for suggestions (#273) * Updating with for suggestions * Need to escape the dot * feat(sidm-3410-rc2): merge 3410 preview into RC (#284) * Updating with for suggestions (#273) * fix(vnet_private_ip_pattern): update escape syntax (#281) * feat(SIDM-3410-fix-def): use same escaping as preview which is tested (#285) * feat(SIDM-3437-redir): login/mfa: redirecting using slash (#280) (#287) * Adding prod blocker * Duplicated code fix * updated security.sh file * updated security.sh file * added false positives to audit.json file * added false positived to audit.json fike * added false positives * added false positives * updated environment * removed unwanted code * updated functional tag * updated secrets env to aat * updated secrets env to aat * updated url to external url * enabled mutation tests * added false positives to audit file * updated audit file * removed spaces * removed spaces * added false positives * added false positives * added false positives * added false positives * updated jenkins-nightly * added false positives * updated jenkins nightly Co-authored-by: kremi <34029797+kremi@users.noreply.github.com> Co-authored-by: NikolaNaydenov <47004340+NikolaNaydenov@users.noreply.github.com> Co-authored-by: James Burke <james.burke@amido.com> Co-authored-by: dfourn <dpatynski@gmail.com> Co-authored-by: nikola-naydenov-hmcts <47384516+nikola-naydenov-hmcts@users.noreply.github.com> Co-authored-by: Shravan Mechineni <shravanmechineni5@gmail.com> Co-authored-by: tbamido <50667636+tbamido@users.noreply.github.com> * Upgrade to tomcat 9.0.31 to address CVE-2020-1938 * Affinity cookie name is different * Upgrade to tomcat 9.0.31 to address CVE-2020-1938 * Affinity cookie name is different * Adding support for multiple affinity cookies (#332) Co-authored-by: Nikola Naydenov <nikolanaydenov@AML0232.local> * Apply suggestions from code review * remove waits and add suggestions * fix test failure * add wait for failing tests * ci(prod blocker): add * fix hmcts policy set for block user test * fix(aat deployment): add credential and environment overrides Co-authored-by: Nikola Naydenov <nikola.naydenov@amido.com> Co-authored-by: Shravan Mechineni <shravanmechineni5@gmail.com> Co-authored-by: Henry Dobson <henrydobson@me.com> Co-authored-by: tbamido <50667636+tbamido@users.noreply.github.com> Co-authored-by: sudhasane <vanisekhar75@gmail.com> Co-authored-by: NikolaNaydenov <47004340+NikolaNaydenov@users.noreply.github.com> Co-authored-by: James Burke <james.burke@amido.com> Co-authored-by: dfourn <dpatynski@gmail.com> Co-authored-by: nikola-naydenov-hmcts <47384516+nikola-naydenov-hmcts@users.noreply.github.com> Co-authored-by: Nikola Naydenov <nikolanaydenov@AML0232.local> Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com> * feat(chart): aat values * 2.0.0 RC1 aat values (#336) * Eliminating vulnerabilities * fix unknown char in email links (#317) * SIDM-3511 - Update chart-java release 2.16.0 (#318) * build(chart-java): update chart-java release to 2.16.0 * refactor(cicd): remove deprecated enableDockerBuild() * feat(staging deployment): add aat values for helm * feat(sidm-3483-fr6): 6.5 web-public (#315) (#321) * feat(sidm-3483-fr6): update test regex to extract activation parssword * feat(sidm-3483-fr6): password reset working but had to change some of the codecepts waits * feat(sidm-3483-fr6): add 2s wait after Sign In to fix flappy test * feat(sidm-3483-fr6): remove waits because it was fixed by Shravs changes on codecept conf * chore(ase asp): disable legacy deployments (#323) * ci(env name): add override for env name for build with aks (#325) * Sidm 3561 compare screenshot test (#308) * screen shot compare test * updated code * updated cnp file * added base screen shot folder to repo * added functional-output to git ignore * taking base screen shot is set to false * added diff folder to screenshot folder * added diff folder and ignore functional output * removed some images from base folder * added f-output folder to gitignore * removed some images from base folder * removed some images from base folder * set base image to false in ui tests * added foutput folder to gitignore * update policy check test * added foutput to gitignore * updated code to run all functional tests * updated policy check test * added foutput to gitignore * change name of base screen shot * removed foutpit from gitignore * added wait to failed tests * added foitput to gitignore * added ignore screen compare code * added wait * updates screen shot * removed screen shot * added foutput folder to gitignore * applied retry * added resemblence helper to package.json * added resemblance helper * enabled screen shot for visual testing * cleaned up code * added functional output folder to gitignore * ingored package.lock.json * Delete package-lock.json * added dependencies * added node fetch dependency * updared lockout test Co-authored-by: Shravan Mechineni <shravanmechineni5@gmail.com> * Idam nightly tests (#326) * Adding back the prod deployment blocker (#189) * extra tests for code quality (#196) * Removing blocker for go live * Load vault secrets fix * Security fix * Adding go live blocker * Securityscan master (#197) * adding security scan config * update public uRI * adding fun-output dir to gitignore * adding aat url * Exclude jquery from the zap scanners. * [PREVIEW] Fixing the pipeline (#211) * [PREVIEW] SIDM-3007 SIDM-3089 SIDM-3090 Fix PR asp_name, update Dockerfile, add CVE suppression (#201) * fix(local.asp_name): add conditional case for asp_name when running PRs By using the asp_name_override for idam-api, idam-web-public and idam-web-admin for PRs, pipelines cannot run in parallel as they clash with each other. Do not use asp_name_override for PRs. * feat(security suppression): add suppression for pitest related to CVE-2019-15052 pitest 1.3.0 and 1.4.0 are flagged under CVE-2019-15052 but are only used in testing. 1.4.0 is the latest release SIDM-3090 * fix(base image/insights agent): update Dockerfile as base image is no longer available * Change ref in the terraform file. * [PREVIEW] Minor content changes for 1.4.1 (#210) * SIDM-3130 Contact Us screen - Update SSCS details. * SIDM-2904 Update Survey feedback link across IDAM public screens. * [PREVIEW] 1.4.1 Scope Change (#216) (#218) * SIDM-2904 Manually revert SIDM-2904. * SIDM-2757 Fix double apostrophe in a message. (#187) * [PREVIEW] footer pages update (#194) * Add 'Family Public Law' section to the 'Contact Us' page. * Add Family Public Law Service info to cookies and privacy policy pages. * A few adjustements. * Remove repetition. * Add a space. * SIDM-2412 Remove records about 2 cookies which are not used in the Family Public Law Service. (#204) * Add CVE-14540 and 16335 supressions * Adding prod blocker * Disable functional tests * Web public tests 1.5 (#267) * special character password test * added password characters * changed password characters * redued wait time * Sidm 3294 mfa e2e tests (#256) * add mfa otp login tests * add missing file * fix typo * add missing code * fix test failures * add more waits * add more waits * add exiplit wait * add block policy scenario * feat(SIDM-3410-ips): filter out internal ips from policy valuation (#270) * feat(SIDM-3410-ips): filter out internal ips from policy valuation * feat(SIDM-3410-ips): simplify and merge methods * feat(SIDM-3410-ips): simplify regex * This should fix the ArrAffinity token problem (#277) * feat(SIDM-3441-sso): Policy eval: remove bearer auth token (#283) * Include fix for 1.5 (#275) * feat(SIDM-3410-ips-preview): remove filter pattern in preview (#272) * Updating with for suggestions (#273) * Updating with for suggestions * Need to escape the dot * feat(sidm-3410-rc2): merge 3410 preview into RC (#284) * Updating with for suggestions (#273) * fix(vnet_private_ip_pattern): update escape syntax (#281) * feat(SIDM-3410-fix-def): use same escaping as preview which is tested (#285) * feat(SIDM-3437-redir): login/mfa: redirecting using slash (#280) (#287) * Adding prod blocker * Duplicated code fix * updated security.sh file * updated security.sh file * added false positives to audit.json file * added false positived to audit.json fike * added false positives * added false positives * updated environment * removed unwanted code * updated functional tag * updated secrets env to aat * updated secrets env to aat * updated url to external url * enabled mutation tests * added false positives to audit file * updated audit file * removed spaces * removed spaces * added false positives * added false positives * added false positives * added false positives * updated jenkins-nightly * added false positives * updated jenkins nightly Co-authored-by: kremi <34029797+kremi@users.noreply.github.com> Co-authored-by: NikolaNaydenov <47004340+NikolaNaydenov@users.noreply.github.com> Co-authored-by: James Burke <james.burke@amido.com> Co-authored-by: dfourn <dpatynski@gmail.com> Co-authored-by: nikola-naydenov-hmcts <47384516+nikola-naydenov-hmcts@users.noreply.github.com> Co-authored-by: Shravan Mechineni <shravanmechineni5@gmail.com> Co-authored-by: tbamido <50667636+tbamido@users.noreply.github.com> * Upgrade to tomcat 9.0.31 to address CVE-2020-1938 * Affinity cookie name is different * Upgrade to tomcat 9.0.31 to address CVE-2020-1938 * Affinity cookie name is different * Adding support for multiple affinity cookies (#332) Co-authored-by: Nikola Naydenov <nikolanaydenov@AML0232.local> * Apply suggestions from code review * remove waits and add suggestions * fix test failure * add wait for failing tests * ci(prod blocker): add * fix hmcts policy set for block user test * fix(aat deployment): add credential and environment overrides * feat(chart): aat values Co-authored-by: Nikola Naydenov <nikola.naydenov@amido.com> Co-authored-by: Shravan Mechineni <shravanmechineni5@gmail.com> Co-authored-by: tbamido <50667636+tbamido@users.noreply.github.com> Co-authored-by: sudhasane <vanisekhar75@gmail.com> Co-authored-by: kremi <34029797+kremi@users.noreply.github.com> Co-authored-by: NikolaNaydenov <47004340+NikolaNaydenov@users.noreply.github.com> Co-authored-by: James Burke <james.burke@amido.com> Co-authored-by: dfourn <dpatynski@gmail.com> Co-authored-by: nikola-naydenov-hmcts <47384516+nikola-naydenov-hmcts@users.noreply.github.com> Co-authored-by: Kremi Nenkova <kremi.nenkova@gmail.com> Co-authored-by: Nikola Naydenov <nikolanaydenov@AML0232.local> Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com> * fix(docker): flexvolume mapping to property * fix(idam-aat): add test variables (#338) * SIDM-2868 - Add nightly tests for 2.0.0 (#341) * fix(idam-aat): add test variables * SIDM-2686 - Add nightly tests for 2.0.0 (#339) * feat(qa): cross browser tests' * revert(delete): remove file * fix dependencies * fix codecept unknown option scan error Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com> Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com> * SIDM-3977 - v2 fix selfservice (#351) * fix(idam-aat): add test variables * SIDM-2686 - Add nightly tests for 2.0.0 (#339) * feat(qa): cross browser tests' * revert(delete): remove file * fix dependencies * fix codecept unknown option scan error Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com> * COVID-19 contatcus page changes * SIDM-3977 Add test to check if activation link can be used after the user has registered. (#349) * SIDM-3977 Add test to check if activation link can be used after the user has registered. * SIDM-3977 Make it a new scenario. * SIDM-3977 self_registration_test: Fix text Co-authored-by: Tiago Braun <tiago.braun@amido.com> Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com> Co-authored-by: Nikola Naydenov <nikolanaydenov@aml0232.home> Co-authored-by: dfourn <daniel.patynski@amido.com> Co-authored-by: Tiago Braun <tiago.braun@amido.com> * chore(idam-prod): remove prod blocker (#358) Co-authored-by: kremi <34029797+kremi@users.noreply.github.com> Co-authored-by: Nikola Naydenov <nikola.naydenov@amido.com> Co-authored-by: James Burke <james.burke@amido.com> Co-authored-by: dfourn <daniel.patynski@amido.com> Co-authored-by: nikola-naydenov-hmcts <47384516+nikola-naydenov-hmcts@users.noreply.github.com> Co-authored-by: Shravan Mechineni <shravanmechineni5@gmail.com> Co-authored-by: tbamido <50667636+tbamido@users.noreply.github.com> Co-authored-by: Nikola Naydenov <nikolanaydenov@AML0232.local> Co-authored-by: Henry Dobson <henrydobson@me.com> Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com> Co-authored-by: sudhasane <vanisekhar75@gmail.com> Co-authored-by: NikolaNaydenov <47004340+NikolaNaydenov@users.noreply.github.com> Co-authored-by: dfourn <dpatynski@gmail.com> Co-authored-by: Kremi Nenkova <kremi.nenkova@gmail.com> Co-authored-by: Nikola Naydenov <nikolanaydenov@aml0232.home> Co-authored-by: Tiago Braun <tiago.braun@amido.com> Co-authored-by: kremi <34029797+kremi@users.noreply.github.com> Co-authored-by: Nikola Naydenov <nikola.naydenov@amido.com> Co-authored-by: James Burke <james.burke@amido.com> Co-authored-by: dfourn <daniel.patynski@amido.com> Co-authored-by: nikola-naydenov-hmcts <47384516+nikola-naydenov-hmcts@users.noreply.github.com> Co-authored-by: Shravan Mechineni <shravanmechineni5@gmail.com> Co-authored-by: tbamido <50667636+tbamido@users.noreply.github.com> Co-authored-by: Nikola Naydenov <nikolanaydenov@AML0232.local> Co-authored-by: Henry Dobson <henrydobson@me.com> Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com> Co-authored-by: sudhasane <vanisekhar75@gmail.com> Co-authored-by: NikolaNaydenov <47004340+NikolaNaydenov@users.noreply.github.com> Co-authored-by: dfourn <dpatynski@gmail.com> Co-authored-by: Kremi Nenkova <kremi.nenkova@gmail.com> Co-authored-by: Nikola Naydenov <nikolanaydenov@aml0232.home> Co-authored-by: Tiago Braun <tiago.braun@amido.com>
* add login with pin test * fix review comment * fix review Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com>
* Fix CVE-2020-9488 vulnerability. * - upgrade Gradle to 6.3 - fix deprecated Gradle elements - upgrade Spring Boot to 2.2.6.RELEASE - upgrade idamBob to 2.0.1 * update to chart-java 2.18.0 * Switch to idam BOM 2.1.0 to fix CVE-2020-9488 vulnerability
#366) * Make /activate POST request redirect to a GET endpoint that can have its language changes. * Restore individual imports. * Code review changes. * Fix broken functional test. * Empty commit.
* Increase code coverage. * Functional tests fix attempt.
* Increase code coverage. * Functional tests fix attempt. * Fix an issue with Welsh language switch urlencoding parameters. * A NPE fix for when there is no query string. * Attempt to fix Sonar false-positive.
* Adding back the prod deployment blocker (#189) * extra tests for code quality (#196) * Removing blocker for go live * Load vault secrets fix * Security fix * Adding go live blocker * Securityscan master (#197) * adding security scan config * update public uRI * adding fun-output dir to gitignore * adding aat url * Exclude jquery from the zap scanners. * [PREVIEW] Fixing the pipeline (#211) * [PREVIEW] SIDM-3007 SIDM-3089 SIDM-3090 Fix PR asp_name, update Dockerfile, add CVE suppression (#201) * fix(local.asp_name): add conditional case for asp_name when running PRs By using the asp_name_override for idam-api, idam-web-public and idam-web-admin for PRs, pipelines cannot run in parallel as they clash with each other. Do not use asp_name_override for PRs. * feat(security suppression): add suppression for pitest related to CVE-2019-15052 pitest 1.3.0 and 1.4.0 are flagged under CVE-2019-15052 but are only used in testing. 1.4.0 is the latest release SIDM-3090 * fix(base image/insights agent): update Dockerfile as base image is no longer available * Change ref in the terraform file. * [PREVIEW] Minor content changes for 1.4.1 (#210) * SIDM-3130 Contact Us screen - Update SSCS details. * SIDM-2904 Update Survey feedback link across IDAM public screens. * [PREVIEW] 1.4.1 Scope Change (#216) (#218) * SIDM-2904 Manually revert SIDM-2904. * SIDM-2757 Fix double apostrophe in a message. (#187) * [PREVIEW] footer pages update (#194) * Add 'Family Public Law' section to the 'Contact Us' page. * Add Family Public Law Service info to cookies and privacy policy pages. * A few adjustements. * Remove repetition. * Add a space. * SIDM-2412 Remove records about 2 cookies which are not used in the Family Public Law Service. (#204) * Add CVE-14540 and 16335 supressions * Adding prod blocker * Disable functional tests * Web public tests 1.5 (#267) * special character password test * added password characters * changed password characters * redued wait time * Sidm 3294 mfa e2e tests (#256) * add mfa otp login tests * add missing file * fix typo * add missing code * fix test failures * add more waits * add more waits * add exiplit wait * add block policy scenario * feat(SIDM-3410-ips): filter out internal ips from policy valuation (#270) * feat(SIDM-3410-ips): filter out internal ips from policy valuation * feat(SIDM-3410-ips): simplify and merge methods * feat(SIDM-3410-ips): simplify regex * This should fix the ArrAffinity token problem (#277) * feat(SIDM-3441-sso): Policy eval: remove bearer auth token (#283) * Include fix for 1.5 (#275) * feat(SIDM-3410-ips-preview): remove filter pattern in preview (#272) * Updating with for suggestions (#273) * Updating with for suggestions * Need to escape the dot * feat(sidm-3410-rc2): merge 3410 preview into RC (#284) * Updating with for suggestions (#273) * fix(vnet_private_ip_pattern): update escape syntax (#281) * feat(SIDM-3410-fix-def): use same escaping as preview which is tested (#285) * feat(SIDM-3437-redir): login/mfa: redirecting using slash (#280) (#287) * Adding prod blocker * Duplicated code fix * Enable functionals * Update contact us details. (#253) * Removing prod blocker * Eliminating vulnerabilities * Removing blocker * Disable functionals * Adding support for multiple affinity cookies (#332) Co-authored-by: Nikola Naydenov <nikolanaydenov@AML0232.local> * Apply suggestions from code review * remove waits and add suggestions * fix test failure * add wait for failing tests * ci(prod blocker): add * fix hmcts policy set for block user test * fix(aat deployment): add credential and environment overrides * 2.0 RC (#330) * Eliminating vulnerabilities * fix unknown char in email links (#317) * SIDM-3511 - Update chart-java release 2.16.0 (#318) * build(chart-java): update chart-java release to 2.16.0 * refactor(cicd): remove deprecated enableDockerBuild() * feat(staging deployment): add aat values for helm * feat(sidm-3483-fr6): 6.5 web-public (#315) (#321) * feat(sidm-3483-fr6): update test regex to extract activation parssword * feat(sidm-3483-fr6): password reset working but had to change some of the codecepts waits * feat(sidm-3483-fr6): add 2s wait after Sign In to fix flappy test * feat(sidm-3483-fr6): remove waits because it was fixed by Shravs changes on codecept conf * chore(ase asp): disable legacy deployments (#323) * ci(env name): add override for env name for build with aks (#325) * Sidm 3561 compare screenshot test (#308) * screen shot compare test * updated code * updated cnp file * added base screen shot folder to repo * added functional-output to git ignore * taking base screen shot is set to false * added diff folder to screenshot folder * added diff folder and ignore functional output * removed some images from base folder * added f-output folder to gitignore * removed some images from base folder * removed some images from base folder * set base image to false in ui tests * added foutput folder to gitignore * update policy check test * added foutput to gitignore * updated code to run all functional tests * updated policy check test * added foutput to gitignore * change name of base screen shot * removed foutpit from gitignore * added wait to failed tests * added foitput to gitignore * added ignore screen compare code * added wait * updates screen shot * removed screen shot * added foutput folder to gitignore * applied retry * added resemblence helper to package.json * added resemblance helper * enabled screen shot for visual testing * cleaned up code * added functional output folder to gitignore * ingored package.lock.json * Delete package-lock.json * added dependencies * added node fetch dependency * updared lockout test Co-authored-by: Shravan Mechineni <shravanmechineni5@gmail.com> * Idam nightly tests (#326) * Adding back the prod deployment blocker (#189) * extra tests for code quality (#196) * Removing blocker for go live * Load vault secrets fix * Security fix * Adding go live blocker * Securityscan master (#197) * adding security scan config * update public uRI * adding fun-output dir to gitignore * adding aat url * Exclude jquery from the zap scanners. * [PREVIEW] Fixing the pipeline (#211) * [PREVIEW] SIDM-3007 SIDM-3089 SIDM-3090 Fix PR asp_name, update Dockerfile, add CVE suppression (#201) * fix(local.asp_name): add conditional case for asp_name when running PRs By using the asp_name_override for idam-api, idam-web-public and idam-web-admin for PRs, pipelines cannot run in parallel as they clash with each other. Do not use asp_name_override for PRs. * feat(security suppression): add suppression for pitest related to CVE-2019-15052 pitest 1.3.0 and 1.4.0 are flagged under CVE-2019-15052 but are only used in testing. 1.4.0 is the latest release SIDM-3090 * fix(base image/insights agent): update Dockerfile as base image is no longer available * Change ref in the terraform file. * [PREVIEW] Minor content changes for 1.4.1 (#210) * SIDM-3130 Contact Us screen - Update SSCS details. * SIDM-2904 Update Survey feedback link across IDAM public screens. * [PREVIEW] 1.4.1 Scope Change (#216) (#218) * SIDM-2904 Manually revert SIDM-2904. * SIDM-2757 Fix double apostrophe in a message. (#187) * [PREVIEW] footer pages update (#194) * Add 'Family Public Law' section to the 'Contact Us' page. * Add Family Public Law Service info to cookies and privacy policy pages. * A few adjustements. * Remove repetition. * Add a space. * SIDM-2412 Remove records about 2 cookies which are not used in the Family Public Law Service. (#204) * Add CVE-14540 and 16335 supressions * Adding prod blocker * Disable functional tests * Web public tests 1.5 (#267) * special character password test * added password characters * changed password characters * redued wait time * Sidm 3294 mfa e2e tests (#256) * add mfa otp login tests * add missing file * fix typo * add missing code * fix test failures * add more waits * add more waits * add exiplit wait * add block policy scenario * feat(SIDM-3410-ips): filter out internal ips from policy valuation (#270) * feat(SIDM-3410-ips): filter out internal ips from policy valuation * feat(SIDM-3410-ips): simplify and merge methods * feat(SIDM-3410-ips): simplify regex * This should fix the ArrAffinity token problem (#277) * feat(SIDM-3441-sso): Policy eval: remove bearer auth token (#283) * Include fix for 1.5 (#275) * feat(SIDM-3410-ips-preview): remove filter pattern in preview (#272) * Updating with for suggestions (#273) * Updating with for suggestions * Need to escape the dot * feat(sidm-3410-rc2): merge 3410 preview into RC (#284) * Updating with for suggestions (#273) * fix(vnet_private_ip_pattern): update escape syntax (#281) * feat(SIDM-3410-fix-def): use same escaping as preview which is tested (#285) * feat(SIDM-3437-redir): login/mfa: redirecting using slash (#280) (#287) * Adding prod blocker * Duplicated code fix * updated security.sh file * updated security.sh file * added false positives to audit.json file * added false positived to audit.json fike * added false positives * added false positives * updated environment * removed unwanted code * updated functional tag * updated secrets env to aat * updated secrets env to aat * updated url to external url * enabled mutation tests * added false positives to audit file * updated audit file * removed spaces * removed spaces * added false positives * added false positives * added false positives * added false positives * updated jenkins-nightly * added false positives * updated jenkins nightly Co-authored-by: kremi <34029797+kremi@users.noreply.github.com> Co-authored-by: NikolaNaydenov <47004340+NikolaNaydenov@users.noreply.github.com> Co-authored-by: James Burke <james.burke@amido.com> Co-authored-by: dfourn <dpatynski@gmail.com> Co-authored-by: nikola-naydenov-hmcts <47384516+nikola-naydenov-hmcts@users.noreply.github.com> Co-authored-by: Shravan Mechineni <shravanmechineni5@gmail.com> Co-authored-by: tbamido <50667636+tbamido@users.noreply.github.com> * Upgrade to tomcat 9.0.31 to address CVE-2020-1938 * Affinity cookie name is different * Upgrade to tomcat 9.0.31 to address CVE-2020-1938 * Affinity cookie name is different * Adding support for multiple affinity cookies (#332) Co-authored-by: Nikola Naydenov <nikolanaydenov@AML0232.local> * Apply suggestions from code review * remove waits and add suggestions * fix test failure * add wait for failing tests * ci(prod blocker): add * fix hmcts policy set for block user test * fix(aat deployment): add credential and environment overrides Co-authored-by: Nikola Naydenov <nikola.naydenov@amido.com> Co-authored-by: Shravan Mechineni <shravanmechineni5@gmail.com> Co-authored-by: Henry Dobson <henrydobson@me.com> Co-authored-by: tbamido <50667636+tbamido@users.noreply.github.com> Co-authored-by: sudhasane <vanisekhar75@gmail.com> Co-authored-by: NikolaNaydenov <47004340+NikolaNaydenov@users.noreply.github.com> Co-authored-by: James Burke <james.burke@amido.com> Co-authored-by: dfourn <dpatynski@gmail.com> Co-authored-by: nikola-naydenov-hmcts <47384516+nikola-naydenov-hmcts@users.noreply.github.com> Co-authored-by: Nikola Naydenov <nikolanaydenov@AML0232.local> Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com> * feat(chart): aat values * 2.0.0 RC1 aat values (#336) * Eliminating vulnerabilities * fix unknown char in email links (#317) * SIDM-3511 - Update chart-java release 2.16.0 (#318) * build(chart-java): update chart-java release to 2.16.0 * refactor(cicd): remove deprecated enableDockerBuild() * feat(staging deployment): add aat values for helm * feat(sidm-3483-fr6): 6.5 web-public (#315) (#321) * feat(sidm-3483-fr6): update test regex to extract activation parssword * feat(sidm-3483-fr6): password reset working but had to change some of the codecepts waits * feat(sidm-3483-fr6): add 2s wait after Sign In to fix flappy test * feat(sidm-3483-fr6): remove waits because it was fixed by Shravs changes on codecept conf * chore(ase asp): disable legacy deployments (#323) * ci(env name): add override for env name for build with aks (#325) * Sidm 3561 compare screenshot test (#308) * screen shot compare test * updated code * updated cnp file * added base screen shot folder to repo * added functional-output to git ignore * taking base screen shot is set to false * added diff folder to screenshot folder * added diff folder and ignore functional output * removed some images from base folder * added f-output folder to gitignore * removed some images from base folder * removed some images from base folder * set base image to false in ui tests * added foutput folder to gitignore * update policy check test * added foutput to gitignore * updated code to run all functional tests * updated policy check test * added foutput to gitignore * change name of base screen shot * removed foutpit from gitignore * added wait to failed tests * added foitput to gitignore * added ignore screen compare code * added wait * updates screen shot * removed screen shot * added foutput folder to gitignore * applied retry * added resemblence helper to package.json * added resemblance helper * enabled screen shot for visual testing * cleaned up code * added functional output folder to gitignore * ingored package.lock.json * Delete package-lock.json * added dependencies * added node fetch dependency * updared lockout test Co-authored-by: Shravan Mechineni <shravanmechineni5@gmail.com> * Idam nightly tests (#326) * Adding back the prod deployment blocker (#189) * extra tests for code quality (#196) * Removing blocker for go live * Load vault secrets fix * Security fix * Adding go live blocker * Securityscan master (#197) * adding security scan config * update public uRI * adding fun-output dir to gitignore * adding aat url * Exclude jquery from the zap scanners. * [PREVIEW] Fixing the pipeline (#211) * [PREVIEW] SIDM-3007 SIDM-3089 SIDM-3090 Fix PR asp_name, update Dockerfile, add CVE suppression (#201) * fix(local.asp_name): add conditional case for asp_name when running PRs By using the asp_name_override for idam-api, idam-web-public and idam-web-admin for PRs, pipelines cannot run in parallel as they clash with each other. Do not use asp_name_override for PRs. * feat(security suppression): add suppression for pitest related to CVE-2019-15052 pitest 1.3.0 and 1.4.0 are flagged under CVE-2019-15052 but are only used in testing. 1.4.0 is the latest release SIDM-3090 * fix(base image/insights agent): update Dockerfile as base image is no longer available * Change ref in the terraform file. * [PREVIEW] Minor content changes for 1.4.1 (#210) * SIDM-3130 Contact Us screen - Update SSCS details. * SIDM-2904 Update Survey feedback link across IDAM public screens. * [PREVIEW] 1.4.1 Scope Change (#216) (#218) * SIDM-2904 Manually revert SIDM-2904. * SIDM-2757 Fix double apostrophe in a message. (#187) * [PREVIEW] footer pages update (#194) * Add 'Family Public Law' section to the 'Contact Us' page. * Add Family Public Law Service info to cookies and privacy policy pages. * A few adjustements. * Remove repetition. * Add a space. * SIDM-2412 Remove records about 2 cookies which are not used in the Family Public Law Service. (#204) * Add CVE-14540 and 16335 supressions * Adding prod blocker * Disable functional tests * Web public tests 1.5 (#267) * special character password test * added password characters * changed password characters * redued wait time * Sidm 3294 mfa e2e tests (#256) * add mfa otp login tests * add missing file * fix typo * add missing code * fix test failures * add more waits * add more waits * add exiplit wait * add block policy scenario * feat(SIDM-3410-ips): filter out internal ips from policy valuation (#270) * feat(SIDM-3410-ips): filter out internal ips from policy valuation * feat(SIDM-3410-ips): simplify and merge methods * feat(SIDM-3410-ips): simplify regex * This should fix the ArrAffinity token problem (#277) * feat(SIDM-3441-sso): Policy eval: remove bearer auth token (#283) * Include fix for 1.5 (#275) * feat(SIDM-3410-ips-preview): remove filter pattern in preview (#272) * Updating with for suggestions (#273) * Updating with for suggestions * Need to escape the dot * feat(sidm-3410-rc2): merge 3410 preview into RC (#284) * Updating with for suggestions (#273) * fix(vnet_private_ip_pattern): update escape syntax (#281) * feat(SIDM-3410-fix-def): use same escaping as preview which is tested (#285) * feat(SIDM-3437-redir): login/mfa: redirecting using slash (#280) (#287) * Adding prod blocker * Duplicated code fix * updated security.sh file * updated security.sh file * added false positives to audit.json file * added false positived to audit.json fike * added false positives * added false positives * updated environment * removed unwanted code * updated functional tag * updated secrets env to aat * updated secrets env to aat * updated url to external url * enabled mutation tests * added false positives to audit file * updated audit file * removed spaces * removed spaces * added false positives * added false positives * added false positives * added false positives * updated jenkins-nightly * added false positives * updated jenkins nightly Co-authored-by: kremi <34029797+kremi@users.noreply.github.com> Co-authored-by: NikolaNaydenov <47004340+NikolaNaydenov@users.noreply.github.com> Co-authored-by: James Burke <james.burke@amido.com> Co-authored-by: dfourn <dpatynski@gmail.com> Co-authored-by: nikola-naydenov-hmcts <47384516+nikola-naydenov-hmcts@users.noreply.github.com> Co-authored-by: Shravan Mechineni <shravanmechineni5@gmail.com> Co-authored-by: tbamido <50667636+tbamido@users.noreply.github.com> * Upgrade to tomcat 9.0.31 to address CVE-2020-1938 * Affinity cookie name is different * Upgrade to tomcat 9.0.31 to address CVE-2020-1938 * Affinity cookie name is different * Adding support for multiple affinity cookies (#332) Co-authored-by: Nikola Naydenov <nikolanaydenov@AML0232.local> * Apply suggestions from code review * remove waits and add suggestions * fix test failure * add wait for failing tests * ci(prod blocker): add * fix hmcts policy set for block user test * fix(aat deployment): add credential and environment overrides * feat(chart): aat values Co-authored-by: Nikola Naydenov <nikola.naydenov@amido.com> Co-authored-by: Shravan Mechineni <shravanmechineni5@gmail.com> Co-authored-by: tbamido <50667636+tbamido@users.noreply.github.com> Co-authored-by: sudhasane <vanisekhar75@gmail.com> Co-authored-by: kremi <34029797+kremi@users.noreply.github.com> Co-authored-by: NikolaNaydenov <47004340+NikolaNaydenov@users.noreply.github.com> Co-authored-by: James Burke <james.burke@amido.com> Co-authored-by: dfourn <dpatynski@gmail.com> Co-authored-by: nikola-naydenov-hmcts <47384516+nikola-naydenov-hmcts@users.noreply.github.com> Co-authored-by: Kremi Nenkova <kremi.nenkova@gmail.com> Co-authored-by: Nikola Naydenov <nikolanaydenov@AML0232.local> Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com> * fix(docker): flexvolume mapping to property * fix(idam-aat): add test variables (#338) * SIDM-2868 - Add nightly tests for 2.0.0 (#341) * fix(idam-aat): add test variables * SIDM-2686 - Add nightly tests for 2.0.0 (#339) * feat(qa): cross browser tests' * revert(delete): remove file * fix dependencies * fix codecept unknown option scan error Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com> Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com> * SIDM-3977 - v2 fix selfservice (#351) * fix(idam-aat): add test variables * SIDM-2686 - Add nightly tests for 2.0.0 (#339) * feat(qa): cross browser tests' * revert(delete): remove file * fix dependencies * fix codecept unknown option scan error Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com> * COVID-19 contatcus page changes * SIDM-3977 Add test to check if activation link can be used after the user has registered. (#349) * SIDM-3977 Add test to check if activation link can be used after the user has registered. * SIDM-3977 Make it a new scenario. * SIDM-3977 self_registration_test: Fix text Co-authored-by: Tiago Braun <tiago.braun@amido.com> Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com> Co-authored-by: Nikola Naydenov <nikolanaydenov@aml0232.home> Co-authored-by: dfourn <daniel.patynski@amido.com> Co-authored-by: Tiago Braun <tiago.braun@amido.com> * chore(idam-prod): remove prod blocker (#358) * Zap Scanner exclusions * excluding contact-us.* from zap scanner * excluding login.* from zap scanner * Ignoring some reverse proxy false positives * chore(installcharts): remove cicd config installCharts (deprecated) * chore(deletion): remove local file * chore(deletion): remove local file * Update dependency-check-suppressions.xml Suppress CVE-2020-9484 Co-authored-by: kremi <34029797+kremi@users.noreply.github.com> Co-authored-by: Nikola Naydenov <nikola.naydenov@amido.com> Co-authored-by: James Burke <james.burke@amido.com> Co-authored-by: dfourn <daniel.patynski@amido.com> Co-authored-by: nikola-naydenov-hmcts <47384516+nikola-naydenov-hmcts@users.noreply.github.com> Co-authored-by: Shravan Mechineni <shravanmechineni5@gmail.com> Co-authored-by: tbamido <50667636+tbamido@users.noreply.github.com> Co-authored-by: Nikola Naydenov <nikolanaydenov@AML0232.local> Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com> Co-authored-by: sudhasane <vanisekhar75@gmail.com> Co-authored-by: NikolaNaydenov <47004340+NikolaNaydenov@users.noreply.github.com> Co-authored-by: dfourn <dpatynski@gmail.com> Co-authored-by: Kremi Nenkova <kremi.nenkova@gmail.com> Co-authored-by: Nikola Naydenov <nikolanaydenov@aml0232.home> Co-authored-by: Tiago Braun <tiago.braun@amido.com>
* Increase test code coverage. * Increase test code coverage, pt.2. * avoid running functional tests twice in nightly build * Add missing assertions in a test. Co-authored-by: Shravan Mechineni <shravan.mechineni@ladbrokescoral.com>
* SIDM-4773 * SIDM-4773 Add missing Welsh translation. Co-authored-by: Radoslaw Orlowski <59831983+radoslaw-orlowski-amido@users.noreply.github.com> Co-authored-by: Radoslaw Orlowski <radoslaw.orlowski@amido.com>
* initial changes * welsh translation added. Co-authored-by: Aloknath Datta <alokdatta.uit@gmail.com> Co-authored-by: Henry Dobson <henrydobson@me.com> Co-authored-by: Radoslaw Orlowski <59831983+radoslaw-orlowski-amido@users.noreply.github.com>
* SIDM-4772 Fix error reporting for setting user password. * SIDM-4772 Fix tests. * SIDM-4772 Code Review fixes
…h translation (intended). (#505)
* Upgrade OWASP dependency plugin version. * Upgrade SpringBoot to resolve a dependency vulnerability. * Suppress an old CVE. * Revert "Upgrade SpringBoot to resolve a dependency vulnerability." This reverts commit 44fb7ec.
* CVE-2020-13943 Fix. * CVE-2020-13943 Fix.
* SIDM-5013 Stash. * SIDM-5013 StepUp autn implementation. * SIDM-5013 Build file fixes. * SIDM-5013 Initial tests/ * add mfa tests * SIDM-5013 More tests. * update mfa tests * SIDM-5013 Add support for GET method in StepUp authn. * SIDM-5013 Make filter ordering more explicit. * SIDM-5013 Attempt to fix a CVE by bumping tomcat version. * CVE-2020-13943 Fix. * CVE-2020-13943 Fix. * SIDM-5013 Always delegate to idam-api. * SIDM-5013 Remove unused code. * mfa e2e tests * fix mfa tests Co-authored-by: shravan mechineni <shravanmechineni5@gmail.com>
* Introduce a feature flag controlling StepUp authentication.
…p-up authentication. (#519)
* Add tests for Sonar. * SIDM-5132 Delegate to api even when additional authentication has failed. * SIDM-5132 Test code fixes. * SIDM-5132 Test coverage.
* Activate user should handle conflict response from api * prevent double submit of activation form
* SIDM-5175 * Update messages_cy.properties * SIDM-5175: added welsh translations changes * SIDM-5175: functional test fixes * SIDM-5175: fixed tests Co-authored-by: James Burke <james.burke.cv@gmail.com>
* improved unit testing for stale user login * SIDM-5175 * Update messages_cy.properties * SIDM-5175: added welsh translations changes * SIDM-5175: functional test fixes * SIDM-5175: fixed tests * SIDM-5176 * SIDM-5176: functional tests * SIDM-5176: fixed unit tests * SIDM-5176: fixed functional test Co-authored-by: James Burke <james.burke.cv@gmail.com>
* improved unit testing for stale user login * SIDM-5175: added more wording * SIDM-5175: added welsh translations
* improve test coverage * improve test coverage
ghost
approved these changes
Dec 1, 2020
|
Kudos, SonarCloud Quality Gate passed! |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
JIRA link (if applicable)
https://tools.hmcts.net/jira/browse/SIDM-5231
Change description
Version 5.1:
Does this PR introduce a breaking change? (check one with "x")