This is an automated email from the ASF dual-hosted git repository.
Aman-Mittal pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/fineract-loan-origination.git
from 13eb05b Merge pull request #67 from
KRYSTALM7/feature/FINERACT-2442-backend-auth-api
add d382973 FINERACT-2442: Close auth vulnerabilities, harden secrets
config, wire frontend CI
add 04dc1f9 FINERACT-2442: Add missing StaffApplicationDetailResponse DTO
add 256f634 FINERACT-2442: Fix invalid setup-node SHA in ci.yml
add 1e82c3e FINERACT-2442: Apply Prettier formatting across frontend
source files
new 1bcaf92 Merge pull request #66 from
KRYSTALM7/feature/FINERACT-2442-security-hardening
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/workflows/ci.yml | 40 +-
frontend/src/app/app.routes.ts | 25 +-
frontend/src/app/core/guards/staff-auth.guard.ts | 2 +-
.../src/app/core/interceptors/auth.interceptor.ts | 2 +-
.../src/app/core/models/staff-application.model.ts | 7 +-
frontend/src/app/core/services/auth.service.ts | 36 +-
.../services/customer-loan-application.service.ts | 28 +-
.../app/core/services/loan-application.service.ts | 26 +-
.../src/app/core/services/staff-auth.service.ts | 46 +-
.../services/staff-loan-application.service.ts | 18 +-
.../loan-application-detail.component.ts | 14 +-
.../loan-application-list.component.scss | 2 +-
.../app/features/my-loans/my-loans.component.html | 4 +-
.../staff-application-detail.component.ts | 847 ++++++++++++++-------
.../staff-application-list.component.ts | 339 ++++++---
.../staff/dashboard/staff-dashboard.component.ts | 433 +++++++----
.../features/staff/login/staff-login.component.ts | 259 ++++---
.../layout/staff-layout/staff-layout.component.ts | 619 ++++++++-------
frontend/src/app/shared/styles/_status-colors.scss | 2 +-
.../fineract/los/api/AdminCustomerController.java | 2 +
.../fineract/los/api/ApprovalController.java | 4 +-
.../fineract/los/api/DisbursementController.java | 2 +
.../los/api/LoanApplicationController.java | 2 +
.../fineract/los/bridge/MockFineractAdapter.java | 2 +-
.../org/apache/fineract/los/config/CorsConfig.java | 52 ++
.../apache/fineract/los/config/SecurityConfig.java | 23 +-
.../fineract/los/security/JwtProperties.java | 20 +
.../fineract/los/security/JwtSecretValidator.java | 58 ++
.../los/security/MockCustomerIdentityService.java | 2 +
src/main/resources/application.yml | 4 +-
.../los/cucumber/CucumberSpringConfig.java | 2 +
31 files changed, 1862 insertions(+), 1060 deletions(-)
create mode 100644 src/main/java/org/apache/fineract/los/config/CorsConfig.java
create mode 100644
src/main/java/org/apache/fineract/los/security/JwtSecretValidator.java
