Commit Graph

15889 Commits

Author SHA1 Message Date
Cliff Hill
005e97f034 Using re.compile().
Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
2024-10-30 09:09:53 -04:00
Cliff Hill
a9948131cc Scrubbing log records with the formatter.
Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
2024-10-24 12:35:40 -04:00
Cliff Hill
543239d078 Reversing accidental commit.
Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
2024-10-24 12:32:26 -04:00
Cliff Hill
e6c0f045a5 Added PII scrub for all logging through the formatter.
Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
2024-10-24 12:23:32 -04:00
Carlo Costino
a349fb82dc Merge pull request #2004 from GSA/notify-admin-2003
Users can be invited with no permissions
2024-10-24 09:57:07 -04:00
Carlo Costino
a715b33fd0 Merge pull request #2053 from GSA/notify-admin-2037
remove permission to manage API integration
2024-10-24 09:49:21 -04:00
Carlo Costino
9ce00acec3 Merge pull request #2024 from GSA/USN-COMPLY-50-Verify_Nonce_for_Invite
US-NOTIFY-COMPLY 50: Verify Nonce For Invite
2024-10-24 09:36:58 -04:00
Andrew Shumway
f4b6ca4a79 Merge pull request #2054 from GSA/dependabot/pip/coverage-7.6.4
Bump coverage from 7.6.0 to 7.6.4
2024-10-22 14:15:00 -06:00
Cliff Hill
341e5d4cb2 Removed logging.
Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
2024-10-22 14:51:09 -04:00
Alex Janousek
3013d27d7c Merge pull request #2055 from GSA/dependabot/npm_and_yarn/sass-embedded-1.80.3
Bump sass-embedded from 1.79.5 to 1.80.3
2024-10-22 10:27:05 -04:00
dependabot[bot]
17e12495dd Bump sass-embedded from 1.79.5 to 1.80.3
Bumps [sass-embedded](https://github.com/sass/embedded-host-node) from 1.79.5 to 1.80.3.
- [Changelog](https://github.com/sass/embedded-host-node/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/embedded-host-node/compare/1.79.5...1.80.3)

---
updated-dependencies:
- dependency-name: sass-embedded
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-21 23:55:37 +00:00
dependabot[bot]
35d95e4f5c Bump coverage from 7.6.0 to 7.6.4
Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.6.0 to 7.6.4.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/7.6.0...7.6.4)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-21 23:44:06 +00:00
Cliff Hill
e04adba4fd Test written for get_id_token.
Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
2024-10-21 16:41:50 -04:00
Cliff Hill
866a4ad7bd Got the unit test to be fixed, still figuring out a new test for the new
function.

Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
2024-10-21 16:41:49 -04:00
Cliff Hill
579a65c92d Removed defunct imports.
Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
2024-10-21 16:41:49 -04:00
Cliff Hill
7275dac6a0 black, isort, and flake8.
Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
2024-10-21 16:41:49 -04:00
Cliff Hill
8c40538334 Nonce is working now for invites.
Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
2024-10-21 16:41:49 -04:00
Cliff Hill
da6882774b Getting the redis stuff configured correctly.
Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
2024-10-21 16:41:49 -04:00
Cliff Hill
d0cda995cf Standardising nonce storage/retrieval through redis for both login and
invite.

Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
2024-10-21 16:41:49 -04:00
Cliff Hill
82cef7dbd3 Nonce stuff added.
Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
2024-10-21 16:41:33 -04:00
Kenneth Kehl
e2020c188a remove permsision to manage API integration 2024-10-21 12:38:08 -07:00
Kenneth Kehl
7db678ddec remove permsision to manage API integration 2024-10-21 12:27:44 -07:00
Kenneth Kehl
3601b16c7b Merge pull request #2049 from GSA/nonce_nonce_nonce
comment out check for now
2024-10-18 10:24:44 -07:00
Kenneth Kehl
eaed2fc879 comment out check for now 2024-10-18 07:23:19 -07:00
Alex Janousek
00f63aed23 Merge pull request #2033 from GSA/dependabot/npm_and_yarn/rollup/plugin-commonjs-28.0.1
Bump @rollup/plugin-commonjs from 28.0.0 to 28.0.1
2024-10-17 15:10:10 -04:00
Carlo Costino
185f00cd01 Merge pull request #2025 from GSA/notify-compliance-52
investigate security.txt
2024-10-17 14:51:00 -04:00
Alex Janousek
149065576f Merge pull request #2034 from GSA/dependabot/npm_and_yarn/playwright-1.48.1
Bump playwright from 1.48.0 to 1.48.1
2024-10-17 13:11:08 -04:00
dependabot[bot]
4973cb84b1 Bump playwright from 1.48.0 to 1.48.1
Bumps [playwright](https://github.com/microsoft/playwright) from 1.48.0 to 1.48.1.
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](https://github.com/microsoft/playwright/compare/v1.48.0...v1.48.1)

---
updated-dependencies:
- dependency-name: playwright
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-16 23:18:40 +00:00
dependabot[bot]
c2ea4684f6 Bump @rollup/plugin-commonjs from 28.0.0 to 28.0.1
Bumps [@rollup/plugin-commonjs](https://github.com/rollup/plugins/tree/HEAD/packages/commonjs) from 28.0.0 to 28.0.1.
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/commonjs/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/commonjs-v28.0.1/packages/commonjs)

---
updated-dependencies:
- dependency-name: "@rollup/plugin-commonjs"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-16 23:18:17 +00:00
Carlo Costino
ca60eb03c0 Merge pull request #2030 from GSA/fix-deploy-actions
Fix demo and prod deploy actions
2024-10-16 14:36:23 -04:00
Carlo Costino
a3c021b154 Fix demo and prod deploy actions
This changeset makes a couple of more adjustments to the prod and demo deploy actions to make sure they are in sync with staging and work.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-10-16 14:26:02 -04:00
Carlo Costino
31076781a3 Merge pull request #2027 from GSA/fix-deploy-actions
Fix the prod and demo deployment actions
10-16-2024-2
2024-10-16 13:11:16 -04:00
Carlo Costino
e54d18170e Add missing env var
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-10-16 13:03:35 -04:00
Alex Janousek
c3f4482677 Merge pull request #2009 from GSA/dependabot/npm_and_yarn/uswds/uswds-3.9.0
Bump @uswds/uswds from 3.8.2 to 3.9.0
2024-10-16 12:50:18 -04:00
Alex Janousek
0183f37c7b Merge pull request #2022 from GSA/dependabot/npm_and_yarn/sass-embedded-1.79.5
Bump sass-embedded from 1.79.4 to 1.79.5
2024-10-16 12:49:58 -04:00
Carlo Costino
fc6adc6771 Fix the prod and demo deployment actions
This changeset fixes the prod and deployment actions so they have the correct environment variables.  It also fixes the egress proxy deploy config for each.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-10-16 12:44:55 -04:00
Kenneth Kehl
1dbb369143 fix test 2024-10-16 08:38:12 -07:00
Kenneth Kehl
f32845752a update email address 2024-10-16 08:18:19 -07:00
Kenneth Kehl
ae0f8d58d9 investigate security.txt 2024-10-16 07:48:00 -07:00
Kenneth Kehl
34ccfb5bd7 Merge pull request #1996 from GSA/e2e_tests_uncomment
Make e2e tests work fully with staging API
10-16-2024
2024-10-15 09:57:19 -07:00
dependabot[bot]
db5626f5b0 Bump sass-embedded from 1.79.4 to 1.79.5
Bumps [sass-embedded](https://github.com/sass/embedded-host-node) from 1.79.4 to 1.79.5.
- [Changelog](https://github.com/sass/embedded-host-node/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/embedded-host-node/compare/1.79.4...1.79.5)

---
updated-dependencies:
- dependency-name: sass-embedded
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-14 23:36:07 +00:00
Alex Janousek
2624bd885d Merge pull request #2019 from GSA/dependabot/npm_and_yarn/babel/core-7.25.8
Bump @babel/core from 7.25.2 to 7.25.8
2024-10-14 13:53:01 -04:00
Alex Janousek
a5ff9af1eb Merge pull request #2011 from GSA/dependabot/npm_and_yarn/playwright-1.48.0
Bump playwright from 1.47.2 to 1.48.0
2024-10-14 13:44:34 -04:00
dependabot[bot]
8e29229d8b Bump @babel/core from 7.25.2 to 7.25.8
Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.25.2 to 7.25.8.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.25.8/packages/babel-core)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-14 17:39:42 +00:00
Alex Janousek
c30dbec6ce Merge pull request #2020 from GSA/dependabot/npm_and_yarn/babel/preset-env-7.25.8
Bump @babel/preset-env from 7.25.7 to 7.25.8
2024-10-14 13:38:24 -04:00
dependabot[bot]
29854c6164 Bump @babel/preset-env from 7.25.7 to 7.25.8
Bumps [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) from 7.25.7 to 7.25.8.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.25.8/packages/babel-preset-env)

---
updated-dependencies:
- dependency-name: "@babel/preset-env"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-10 23:19:49 +00:00
Carlo Costino
978031744f Merge pull request #2016 from GSA/use-the-correct-env-var-names
Use the correct environment variable names
2024-10-10 14:20:16 -04:00
Carlo Costino
f27703112a Use the correct environment variable names
This changeset corrects the reference to the environment names that we are actually trying to reference.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-10-10 13:06:47 -04:00
Carlo Costino
c47144a8b0 Merge pull request #2014 from GSA/swap-egress-proxy-config-to-env
Swap out config variables for env variables
2024-10-10 10:33:18 -04:00
Carlo Costino
fd447e9a75 Swap out config variables for env variables
This changeset swaps the CF_USERNAME and CF_PASSWORD config vars to be proper env vars so they can be read in as expected.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
2024-10-09 14:20:10 -06:00