From 21dfcf3c4fcd2968460df62083018fbcc55066e3 Mon Sep 17 00:00:00 2001 From: Paulo Gustavo Veiga Date: Mon, 25 Mar 2024 22:40:35 -0700 Subject: [PATCH 1/5] Add missing endpoint on non-auth. --- .../src/main/java/com/wisemapping/config/rest/RestAppConfig.java | 1 + 1 file changed, 1 insertion(+) diff --git a/wise-api/src/main/java/com/wisemapping/config/rest/RestAppConfig.java b/wise-api/src/main/java/com/wisemapping/config/rest/RestAppConfig.java index 15b99e2c..35ed679a 100644 --- a/wise-api/src/main/java/com/wisemapping/config/rest/RestAppConfig.java +++ b/wise-api/src/main/java/com/wisemapping/config/rest/RestAppConfig.java @@ -45,6 +45,7 @@ public class RestAppConfig { .requestMatchers(mvc.pattern("/api/restful/authenticate")).permitAll() .requestMatchers(mvc.pattern("/api/restful/users/")).permitAll() .requestMatchers(mvc.pattern("/api/restful/app/config")).permitAll() + .requestMatchers(mvc.pattern("/api/restful/maps/*/metadata")).permitAll() .requestMatchers(mvc.pattern("/api/restful/maps/*/document/xml-pub")).permitAll() .requestMatchers(mvc.pattern("/api/restful/users/resetPassword")).permitAll() .requestMatchers(mvc.pattern("/api/restful/oauth2/googlecallback")).permitAll() From 4401cf8fe9152bca162434530ea78666b6ab21f6 Mon Sep 17 00:00:00 2001 From: Paulo Gustavo Veiga Date: Mon, 25 Mar 2024 22:45:21 -0700 Subject: [PATCH 2/5] Fix metadata endpoint permissions. --- .../src/main/java/com/wisemapping/rest/MindmapController.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wise-api/src/main/java/com/wisemapping/rest/MindmapController.java b/wise-api/src/main/java/com/wisemapping/rest/MindmapController.java index a9e141f6..4cdbf698 100644 --- a/wise-api/src/main/java/com/wisemapping/rest/MindmapController.java +++ b/wise-api/src/main/java/com/wisemapping/rest/MindmapController.java @@ -78,7 +78,7 @@ public class MindmapController extends BaseController { return new RestMindmap(mindMap, user); } - @PreAuthorize("isAuthenticated() and hasRole('ROLE_USER')") + @PreAuthorize("permitAll()") @RequestMapping(method = RequestMethod.GET, value = "/{id}/metadata", produces = {"application/json"}) @ResponseBody public RestMindmapMetadata retrieveMetadata(@PathVariable int id) throws WiseMappingException { From cfb2fc60d86e5ae378f3a129d106be6b86cc7a56 Mon Sep 17 00:00:00 2001 From: Paulo Gustavo Veiga Date: Mon, 25 Mar 2024 22:47:37 -0700 Subject: [PATCH 3/5] Minor fix on metadata permissions. --- .../src/main/java/com/wisemapping/rest/MindmapController.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wise-api/src/main/java/com/wisemapping/rest/MindmapController.java b/wise-api/src/main/java/com/wisemapping/rest/MindmapController.java index 4cdbf698..ad510aaa 100644 --- a/wise-api/src/main/java/com/wisemapping/rest/MindmapController.java +++ b/wise-api/src/main/java/com/wisemapping/rest/MindmapController.java @@ -82,7 +82,7 @@ public class MindmapController extends BaseController { @RequestMapping(method = RequestMethod.GET, value = "/{id}/metadata", produces = {"application/json"}) @ResponseBody public RestMindmapMetadata retrieveMetadata(@PathVariable int id) throws WiseMappingException { - final Account user = Utils.getUser(true); + final Account user = Utils.getUser(false); final Mindmap mindmap = findMindmapById(id); final MindMapBean mindMapBean = new MindMapBean(mindmap, user); From 0d7b66a54f53188bc4ced58e33709b997d2c0f8a Mon Sep 17 00:00:00 2001 From: Paulo Gustavo Veiga Date: Mon, 25 Mar 2024 23:53:10 -0700 Subject: [PATCH 4/5] Update springboot. --- wise-api/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wise-api/pom.xml b/wise-api/pom.xml index 5aceb20a..8e5a261e 100644 --- a/wise-api/pom.xml +++ b/wise-api/pom.xml @@ -4,7 +4,7 @@ org.springframework.boot spring-boot-starter-parent - 3.2.3 + 3.2.4 org.wisemapping From 12b46b4400144028cfe7a214e8869f44d766941f Mon Sep 17 00:00:00 2001 From: Paulo Gustavo Veiga Date: Mon, 25 Mar 2024 23:59:02 -0700 Subject: [PATCH 5/5] Update springboot version. --- wise-api/pom.xml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/wise-api/pom.xml b/wise-api/pom.xml index 8e5a261e..b0ca9d85 100644 --- a/wise-api/pom.xml +++ b/wise-api/pom.xml @@ -87,7 +87,7 @@ org.postgresql postgresql - 42.5.4 + 42.7.3 jakarta.xml.bind @@ -109,7 +109,7 @@ com.mysql mysql-connector-j - 8.1.0 + 8.3.0 org.eclipse.angus @@ -146,7 +146,7 @@ com.fasterxml.jackson.core jackson-databind - 2.15.1 + 2.15.4 @@ -158,7 +158,7 @@ commons-io commons-io - 2.11.0 + 2.15.1