50 Commits (b041888807ab89a0624bd7f9ba75e21ec53861cf)

Author	SHA1	Message	Date
Kirill Solomko	b041888807	MT#60656 add max_age password validation support ... * UI: password are now validated against $c->config->{security}{password}{web_max_age_days} (unless it's 0) and if the password is expired the user is redirected automatically to /changepassword page, and after successful password change back to the original page. * API: if password is expired all API requests will be returning 403 Forbidden "Password expired", except PUT/PATCH to /api/admins or /api/subscribers with the new password in place. * successful login on the UI now redirects to /dashboard instead of / (to prevent unintended redirect to v2) Change-Id: I075f8e17cc9b0658d6b3b3d526ca5b379d050ce4	9 months ago
Kirill Solomko	9d021be65a	MT#59979 add license control ... * UI and API parts are now under license control * new Util::License::get_license($c, $name) - fetches license status by name (1 if enabled, and also if /proc/ngcp/check if 'ok') * add Catalyst::Plugins::NGCP::License with license($name) to fetch valid license by name from anywhere using $c->license('pbx') or from the templates using c.license('pbx'). It internally uses Util::License::get_license($c, $name) * License::get_license_status($c) now requires $c as first argument as well logs license status check errors. * new ActionRoles::License that enables usage of :Does(License) RequiresLicense('pbx') LicenseDetachTo('/denied_page') in the Controller chains * Add license control for UI elements and return 403 Forbidden if a resource is covered by licenses and the license is not active * Hide UI elements if a license is not active * API/Entities/Entities new $c->set_config key: - per endpoint: $c->set_config({ required_licenses => [qw/pbx device_provisioning/] } - or per method: $c->set_config({ required_licenses => { POST => [qw/pbx device_provisioning/] } } } * In case if an API endpoint does not have a license: 403 Forbidden "Invalid license" reply is returned. * Add license based restrictions to API endpoints * /api documentation: - completely hide endpoints that do not have an active license - hide only methods that does not have an active license Change-Id: Iba45fc5068b02306a617fed7b5405f2210574b61	9 months ago
Kirill Solomko	6926930b3a	MT#60227 handle Accept: application/json header ... * if Accept: applicaton/json header is provided for API request - the response's Content-Type header is set to application/json. The return content in this case is preserved as HAL but it's helpful for the clients that only expect aplication/json response Content-Type Change-Id: I8c60da4df7d639f45953d8ace699a59fefc88ddf	11 months ago
Kirill Solomko	1872f342a0	MT#59478 Entities/EntitiesItem more $c->has_errors checks ... * additional $c->has_errors checks for post/patch/put/delete to cover all possible expected called inherited methods scenarios and returns. Change-Id: I0e09ba62bcaa51d582315d9cbb672a4cf11bacf0	1 year ago
Kirill Solomko	9e3653341a	MT#59478 adapt /api/cftimesets to global transactions, more fixes ... * /api/cftimesets now fully use Entities/EntitiesItem * EntitiesItem: delete(): fix delete_item() expression processing * Entities/EntitiesItem: post/put/patch/delete: go to TX_END in scenarios where after a method call (e.g. update_item()) there is a normal return from the function but errors in $c->error, so that they are also caught correctly Change-Id: I3bef409ded590796c2bba4f30acd28b02e99065b	1 year ago
Kirill Solomko	4e2e141308	MT#59478 Entities fix non-existing $item handling in put/patch/delete ... * the error produced by item_id_is_valid() is returned instead of a new one is generated * fix incorrect expression on delete_item() in delete() Change-Id: Ic8e4e24c70bbcd99ec414d901eb2842ee39ae7de	1 year ago
Kirill Solomko	205b27a267	MT#59478 API better transaction and error handling ... * Role/Entities*: POST/PUT/PATCH/DELETE methods changes: - support deadlock detection and transaction retry (2 retry attempts at the moment) - improve transaction control, use local $guard instead of saving the ref to $c->stash, as in that case it went out of scope too late and also reported an error message into the log about abnormal $guard out of scope interruption - move all non transaction related code outside of the scope - add error handling when methods such as update_item, and a like do not return the expected data, instead of simply going out of scope and resulting in an uncontrolled reply * Role/API: - rework transaction control: + get_transaction_control() is renamed to start_transaction() to better reflect what it does + complete_transaction() is renamed to commit_transaction() + remove unused %params arg + pass $guard into commit_transaction() instead of having it stored as $c->stash->{transaction_guard) that caused the $guard ref to be destroyed much late than expected (there was also a typo as transaction_quard, which is not relevant anymore with the changes + add check_deadlock() that is invoked when an exception is caught or an $c->errors contain an error, and if the error message represents a transaction error, the transaction block is re-invoked via "goto TX_START" - rework error(): + it now accepts args as following: ($self, $c, $code, $message, @errors) # code -> returned as HTTP code in the reply # message -> returned as HTTP message in the reply # errors -> contain errors for internal logging, last element often contains a DBIx exception + populates all @errors into $c->error so they are available on demend in the code via $c->error or $c->last_error + $c->log->error is not invoked now as the errors become printed in log_response() - log_response() now prints collected errors from $c->error correctly as a separate log line, that is alike to the other api logs so that those can be looked up by the request's tx_id, also all errors are now printed only into api.log * Adjust all $self->error() calls in catch($e) to include $e as the last argument, as well as the duplicate $c->log->error is removed from those ocassions * Remove all $c->log->error() calls as they are replaced with either $self->error() (that logs it correctly into api.log) or $c->error('err') that also adds it correctly into api.log * API::CallForwards: rework to use Entities/EntitiesItem * API::Contracts: rework POST to use Entities * API::PeeringGroups: rework POST to use Entities * API::SubscriberRegistrations: rework POST to use Entities * API::RewriteRuleSets: improve create_item() functionality * Utils/Message: add 'api_retry' log type * $c->session->{api_request_tx_id} is changed to $c->stash->{api_request_tx_id} because sometimes the session ref is different and a different tx_id becomes used Change-Id: I633ce7a8047b1bf00a2f6889003088edf0825dcd	1 year ago
Kirill Solomko	09b589738d	TT#182101 Phonebook feature is hidden for CE ... * templates now rely on c.config.general.ngcp_type and hide the Phonebook feature everywhere if ngcp_type is CE * introduce "allowed_ngcp_types" config for Controller::API::* that is an array, and when specified, only the ngcp_type roles are allowed, otherwise if not specified all ngcp types allowed (default) * Controller::API::Root: - filter controllers from the documentation rendedring that have allowed_ngcp_type config specified and do not match the current ngcp type * Role::API Role::Entities* - new method check_allowed_ngcp_types() - check_allowed_ngcp_types() is now called in Entities and EntitiesItem auto() and denies to 404 Path not found if the ngcp type does not match * "Phonebook" UI is now hidden for CE * /api/phonebookentries is now hidden for CE Change-Id: I41d4b2f87121f281472be3775b862333923fe37f	3 years ago
Kirill Solomko	5a31937140	TT#132650 EntitiesItem fix incorrect hal item debug ... * non-existing hal resource key was used in the debugging string causing the item operations, such as PATCH to produce 500 error Change-Id: I9e53dcf8b4b21385b9b1b877d87319023222f620	4 years ago
Rene Krenn	b6e696621b	TT#132650 /api/provisioning_templates CRUD rail ... the /api/provisionintemplates rail provides the operations to create, edit and delete "provisioning templates" know from the "batch provisioning" feature of admin panel. these templates can also be defined in config.yml, while it is however only possible to edit templates stored in the database. executing a template and/or uploading a .csv for bulk execution will be available in a separate part. Change-Id: If8627327270edfce5bca1be3b1f777c1bd44e90f	4 years ago
Guillem Jover	467084705d	TT#71950 Fix typos ... Warned-by: codespell Change-Id: If7e52bf2fbf013586e802e5ebb77a272599d9c38	5 years ago
Irina Peshinskaya	345f89d407	TT#47534 Add configured defailt mime-type to Entities FW ... And enable non_json_data processing for Items PUT Change-Id: Ib87bed6aadce2f9217baa60aedc233364560876a	6 years ago
Irina Peshinskaya	c68e4ed8c9	TT#45484 Allow api controllers to control errors and return code ... Change-Id: I4b0c00210f482169437431c8a07f1ae27965ccf0	7 years ago
Irina Peshinskaya	19e88efcab	TT#46667 Make mime-type query param higher prio than Accept header ... And make requested mime-type checking less strict Change-Id: Iba54bd640f833ac2874dba06833a506353ea3ddb	7 years ago
Irina Peshinskaya	0182e3600d	TT#45632 Use query_params and Accept header config together ... Change-Id: I0d4adf1fb0aa03557c80f8957e794d92e2781952	7 years ago
Irina Peshinskaya	af5b5d370f	TT#45632 Add checking of configured Accept values ... Change-Id: I586cc56e08de2c0ff431eaa7480e01481af90940	7 years ago
Irina Peshinskaya	ffd1b487bf	TT#40503 Add journal actions to entities FW ... Change-Id: Ia0d51f246756f649dc440cde7b4fb0e8056d3ced	7 years ago
Gerhard Jungwirth	8f8553f1d8	TT#40540 fix accept header recognition for */* ... this catches */* when only whitespace, semicolon or colon comes before or after it. no other characters Change-Id: I6a6aa2c1ff8b60982497964f7858a94f268567ab	7 years ago
Gerhard Jungwirth	b712de8438	TT#40540 fix Accept Header treatment ... the accept header can contain a list of comma-separated values. If only one of those is application/json or */*, we should send that. Example of an Accept header: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Change-Id: I45bdea5dca05060c1cc17ce5bbdff9c58cb5ca72	7 years ago
Rene Krenn	145167e3db	TT#38401 switch to new billing mappings tables ... Change-Id: I4e57b50a5668170c66521ed5f130bd8293b76b38	7 years ago
Gerhard Jungwirth	f916bdcf3f	TT#37104 fix Subroutines::ProhibitBuiltinHomonyms perlcritic error ... to fix sipwise TAP tests. Change-Id: I622eb8063694a0056d55796001ff35242b0ea847	7 years ago
Irina Peshinskaya	89fa3a14ec	TT#37684 Fix broken journal rails - remove debug ... Change-Id: If97909f54dcadc3096bf944eb8c517f587c61917	7 years ago
Irina Peshinskaya	3a814a98a1	TT#37684 Fix broken journal rails ... Place journal action configuration to correct place Change-Id: I0cd82d0801ac6ce4ad40b86ec715d6704ecff0b0	7 years ago
Irina Peshinskaya	9b10bc58ae	TT#36055 Remove common code from preferences ... Change-Id: Ib5770b10dd8dcf4ca7a327345c9a78e9b1e22452	7 years ago
Irina Peshinskaya	6d69eebf74	TT#35538 Prepare API to faxes changes ... * Consider POST body not utf8 encoded, so encode "json" parameter * Allow empty body for multipart/form-data controlled by configuration as faxes took text from "json" part too. * Allow empty return from create, meaning asynchronous operations, like fax creation * Allow to skip hal validation through form. Can be used for collections without PUT and PATCH. Change-Id: If0d0e7cdc6abe53d76ad0b18568e93743040e90f	7 years ago
Irina Peshinskaya	5adf181084	TT#34567 Use getter for the API controller config ... Change-Id: I17eaa813a3b7eb0ae18c110e12037af713016dad	7 years ago
Irina Peshinskaya	3308321387	TT#34015 Clear and stable implementation of early input check ... Change-Id: I12788583d24f8a02e6e29f04194d8daa0b159efa (cherry picked from commit e946675f4893ba50e0389ff78642b783f7386318)	7 years ago
Irina Peshinskaya	b9f593b7fc	TT#28460 Entities classes use more unified config ... And introduce EntityPreferences Change-Id: I4753f14e1ba2c1e6d01559b44ba0138891c91e81	7 years ago
Irina Peshinskaya	e1c660e442	TT#28460 Introduce log_request config param ... Change-Id: I665b2949361ccd5511ccf93ebe2fa10018aef74c	7 years ago
Irina Peshinskaya	7d4518010a	TT#28462 Rewrite PbxDeviceImages API to Entities ... Change-Id: Ic1d5ad3d54f933d6e6b4a274f80cf67cdf4bb2c6	7 years ago
Irina Peshinskaya	84c1bacc40	TT#28462 Rewrite admins API to Entities ... Change-Id: I3bf47038bfb48c09f95030eed5d83550e392ff0c	7 years ago
Gerhard Jungwirth	24de4232e6	TT#30507 remove DataHal workaround layer ... (NGCP::Panel was loaded every time this was used) Change-Id: I62861e0756aaaf548c9be42b4842e9a06127119c	7 years ago
Gerhard Jungwirth	edbef3c5b8	TT#29617 remove unnecessary form exceptions ... with the previous commit, there is no need anymore to specify form exceptions manually. validate_form will now automatically consider fields in the correct format with and without "_id" Change-Id: I70afae4003c6407c7a37396630110736f1fb13f8	7 years ago
Irina Peshinskaya	3becbebe1b	TT#28453 Fix roles for config_allowed_roles inheritance entities ... And add subscriber as allowed role for the pbxdevicemodels Change-Id: Ifc373a57fcc647d83d955df80494d4a60c825db3	7 years ago
Irina Peshinskaya	34bc2d5485	TT#21348 Add Item class for the conversations API ... Change-Id: Id357e747842d5c3e0f11634dfd5fa950ca36cb1c	8 years ago
Irina Peshinskaya	d67c2c09a6	TT#22494 Fix return_representation ... Pass forms_exceptions to the get_hal_from_item from the PUT and PATCH Change-Id: I95ce0df9e3b9d6ba0d361d61bd1a2b18815d84cd	8 years ago
Irina Peshinskaya	ce315a86c6	TT#21819 Add provisioning fields to the API response resource ... Remove excrescent code from the pbxdevicemodels API & Panel Add roles control per method for the API Use form field "required" attribute for the API uploads Fix getting old resource for the PATCH and PUT methods Change-Id: Ia0515b3d071d45435db7c9138ea9de9447775143	8 years ago
Irina Peshinskaya	c0940df9db	TT#17638 Rewrite Rule API to set priority ... Change-Id: I84099ab6d4869ee232532668fa15f1cc40501fb8	8 years ago
Irina Peshinskaya	24f550a012	TT#17848 Invoice API POST request ... Change-Id: Ibbeccf077c125650547f4e28156325e402d8ec9b	8 years ago
Irina Peshinskaya	07b9f8dcae	TT#10837 Make allowed_roles array reference ... Change-Id: I6ed557df160b963f964cd3cc09f79132ff37cfe8	8 years ago
Rene Krenn	72d9c10650	TT#13973 fix http method override ... the factory Catalyst::ActionRole::HTTPMethods action role is set for any action, and in race with our own NGCP::Panel::Role::HTTPMethods. the testcase could have been misleading ever since, as it uses DELETE /api/customers, which was present when implemting the method override initially, but dropped on the road to 4.5. the issue is resolved by overriding Catalyst::Controller::gather_default_action_roles. until the class hierachy refactoring is completed, only consistent way is to add the override to each api controller. the action_roles config attribute can therefore be removed. using Plack::Middleware::MethodOverride as an alternative from upstream has the drawback to work only with POST. but a required usecase is to also support translation DELETE requests to PATCH. Change-Id: I204ba59869a8327bdd5db8a867fbbb061d1c9e7c	8 years ago
Irina Peshinskaya	2073b9e760	TT#9309 Introduce local version of the Data::HAL::Link ... Change-Id: Ifdf95cef32f0d118330c20316ed447e00c6dae3c	8 years ago
Irina Peshinskaya	41f32401a7	TT#9309 Introduce local version of the Data::HAL with default forcearray ... Change-Id: Ie33396a75fc6d27fd28fe8f7717caba0a476c776	8 years ago
Gerhard Jungwirth	0b999d6727	TT#4324 voicemail permissions for subadmin ... * /api/voicemailgreetings/ * /api/voicemailrecordings/ * /api/voicemails/ * /api/voicemailsettings/ Change-Id: I3d8974b5d6ae821b03bd8d4a005cec91083eb327	8 years ago
Irina Peshinskaya	c31e254486	TT#5953 Voicemail greetings ... Change-Id: I6024de5a9264b765097dfce3f7ab4b99637eabe3	8 years ago
Gerhard Jungwirth	ea210ba37e	MT#17173 small inconsistencies in Entities modules ... * map regex fixed * get_form may return an array with the exceptions now * use get_item_id consistently * use warnings and strict Change-Id: I9f356814ecf4b51613d3aee3782a6b3b91f04cad	9 years ago
Irina Peshinskaya	57efb7c849	MT#17173 Fix typo in return_representation call ... Change-Id: Ibeec75594416c0f800e585dc233f00a2edfaf87a	9 years ago
Irina Peshinskaya	a42334ca16	MT#17173 Add return representation ... Change-Id: Icc48160e57e172196db31ff85c419da7e3e9904a	9 years ago
Irina Peshinskaya	ad208784a1	MT#17173 Adapt common API method for not DB entities ... And add some IoC methods Change-Id: I165824e682c1d0a5ae34f5d2da4b9f2fbd040555	9 years ago
Irina Peshinskaya	f288ec2563	MT#17173 Add common methods to use in future API ... Change-Id: I56387a95e916be2e8e94b32a8981c465962ad66f	9 years ago