Merge pull request #9 from lmco/master

Release 2.1.0

.dockerignore

@@ -0,0 +1,26 @@
+# Ignore everything
+**
+
+# Specify allowed files and directories
+
+!./app
+!./bin
+!./build
+!./certs
+!./config/default.cfg
+!./config/dev.cfg
+!./config/pipeline.cfg
+!./config/example.cfg
+!./config/jsdoc.json
+!./doc
+!./mbee.js
+#!./node_modules
+!./package.json
+!./plugins/routes.js
+!./*.md
+!./scripts
+!./test
+!./yarn.lock
+!./Dockerfile
+!./Dockerfile-build
+!./docker-entrypoint.sh

.gitignore

@@ -17,4 +17,6 @@ package-lock.json
 build/
 data/
 storage/
-certs/
+.nyc_output/
+coverage/
+all_plugins/

CHANGELOG.md

@@ -1,6 +1,74 @@
 # Changelog
 All notable changes to this project will be documented in this file.
 
+## [2.1.0] - 2021-03-09
+### Bug Fixes and Other Changes
+* Reworked Login Worflow to make it more smooth
+* Fixed a security vulnerability where a JS Alert was used for a confirmation
+
+### Configuration Changes
+* Reworking the login workflow adds a "delay" timer for needing to click through the banner in the UI Login Modal configuration.
+```json
+{
+  "ui": {
+    "loginModal": {
+        "hideFor": "480m"
+  }
+}
+```
+## [2.0.0] - 2021-02-08
+### Major Features and Improvements
+* Added Redis datastore for session management
+* Added Reconnect logic for Mongo
+* Added support for DIS (Dynamic Integration Service) so that external services
+  can integrate authentication within MCF and store auth tokens in session.
+* Updated Node version to 12.18.3 or higher.
+### Bug Fixes and Other Changes
+* Separated MongoDB from the MCF docker file for a more mircoservice architecture.
+* Added updates to the dockerfile.
+* Fixed broken UI tests.
+* Added 404 error page.
+### Configuration Changes
+* With the addition of redis as the session store, there are new session
+  configuration options.
+```json
+{
+  "session": {
+    "redis_host": "REDIS_URL",
+    "redis_port": "REDIS_PORT",
+    "redis_db": "REDIS_DATABASE_NUMBER",
+    "cookie": {
+      "secure": false, // true for HTTPS, false for HTTP
+      "httpOnly": true, // true for HTTP, false for HTTPS
+      "sameSite": "lax"
+    }
+  }
+}
+```
+* Added the commitURL configuration option for the mms-adapter commit
+  functionality.
+```json
+{
+  "server": {
+    "commitURL": "127.0.0.1" // This is the same host as MCF
+  }
+}
+```
+* Added the corsAllowList configuration option for cross origin resource
+  sharing.
+```json
+{
+  "server": {
+    "corsAllowList": [
+      "http://localhost:9080",
+      "http://127.0.0.1:9080",
+      "http://127.0.0.1",
+      "http://localhost"
+    ]
+  }
+}
+```
+
 ## [1.1.0] - 2020-04-28
 ### Bug Fixes and Other Changes
 * Fixed a bug where webhook custom data could not be updated
@@ -12,7 +80,7 @@ All notable changes to this project will be documented in this file.
 ## [1.0.4] - 2020-03-13
 ### Bug Fixes and Other Changes
 * Fixed a bug preventing Webhook creation with custom data
-* Added `scripts/webpack-dev.config.js` to support hot reload for React 
+* Added `scripts/webpack-dev.config.js` to support hot reload for React
   development. Running `yarn watch` in a separate terminal will transpile
   updates made to React component JSX files
 
@@ -21,7 +89,7 @@ All notable changes to this project will be documented in this file.
 * Refactored outgoing webhooks to simplify response input
 
 ### Bug Fixes and Other Changes
-* Fixed a bug causing elements with cross-references to not render properly 
+* Fixed a bug causing elements with cross-references to not render properly
   in the UI
 * Added "depth" option to the `getElements()` endpoint
 
@@ -38,7 +106,7 @@ All notable changes to this project will be documented in this file.
 * Added the ability for system wide admins to reset a users password
 * Added support for temporary passwords. Whenever a local user is created or
   has their password reset, they must change their password upon first login
-  
+
 ### Bug Fixes and Other Changes
 * Fixed a bug causing the cursor to flicker while hovering over buttons in the
   UI

Dockerfile

@@ -0,0 +1,65 @@
+FROM registry.access.redhat.com/ubi7/ubi
+WORKDIR /opt/mbee
+
+# Create mbee user and run mcf under that context
+RUN groupadd -r mcf -g 1020 \
+     && useradd -u 1020 -r -g mcf -m -d /opt/mbee -s /sbin/nologin -c "MCF user" mcf
+
+ENV MBEE_ENV=default \
+    NODE_ENV=development
+
+# Copy Project
+COPY . ./
+
+# Create log and artifact project directories
+RUN mkdir logs \
+    && mkdir -p data/artifacts \
+    && mkdir -p all_plugins
+
+COPY ./plugins all_plugins
+
+# Change permission on entrypoint and mbee directory
+RUN chmod +x ./docker-entrypoint.sh \
+    && chmod 755 /opt/mbee \
+    && chown -R mcf:mcf /opt/mbee
+
+# Install wget and git
+RUN yum install -y wget git
+
+# Install Prince
+RUN curl -kL -o ./prince-13.5-1.centos7.x86_64.rpm \
+    https://www.princexml.com/download/prince-13.5-1.centos7.x86_64.rpm \
+    && yum install -y ./prince-13.5-1.centos7.x86_64.rpm \
+    && rm prince-13.5-1.centos7.x86_64.rpm
+
+# Install NodeJS 12
+RUN wget https://nodejs.org/dist/v12.18.4/node-v12.18.4-linux-x64.tar.gz --no-check-certificate \
+    && tar --strip-components 1 -xzvf node-v* -C /usr/local
+
+# Init git configuration
+RUN git init \
+    && git config user.email "[email protected]" \
+    && git config user.name "MBEE Container Runtime" \
+    && git add . \
+    && git commit -m "Initialize Container" -q
+
+# Install yarn
+RUN npm install -g yarn
+
+# Update permissions and install plugin dependencies
+RUN chmod +x ./scripts/install-plugin-modules.sh \
+    && ./scripts/install-plugin-modules.sh
+
+# Init mcf user
+USER mcf
+
+# Install yarn packages
+RUN NOPOSTINSTALL=1 NOPREINSTALL=1 yarn install
+
+VOLUME all_plugins
+EXPOSE 9080 9443
+
+# Run server
+ENTRYPOINT ["/opt/mbee/docker-entrypoint.sh"]
+
+CMD ["node","mbee","start"]