Merge pull request #48 from Open-MBEE/release/4.0.9

Release/4.0.9

docker-compose.yml

@@ -38,4 +38,4 @@ services:
       - elasticsearch
       - minio
     ports:
-      - 8080:8080
+      - 8080:8080

docs/conf.py

@@ -26,7 +26,7 @@
 master_doc = 'index'
 
 # The full version, including alpha/beta/rc tags
-release = '4.0.0'
+release = '4.0.9'
 
 
 # -- General configuration ---------------------------------------------------

docs/configuration.rst

@@ -153,11 +153,13 @@ LDAP Configuration
 Storage Configuration
 ---------------------
 
+If aws s3 environment is used and s3.access_key and s3.secret_key are not defined, credentials will be taken according to the `aws default credential provider chain <https://docs.aws.amazon.com/sdk-for-java/v1/developer-guide/credentials.html>`_.
+
   s3.access_key
-    This is the access key for the S3 bucket. Required.
+    This is the access key for the S3 bucket. Required (Optional if using AWS).
 
   s3.secret_key
-    This is the secret key for the S3 bucket. Required.
+    This is the secret key for the S3 bucket. Required (Optional if using AWS).
 
   s3.region
     This is the region that the S3 bucket is located in. Required.

gradle.properties

@@ -1,5 +1,5 @@
-version=4.0.8b
+version=4.0.9
 group=org.openmbee.mms
 
-mmsVersion=4.0.8
+mmsVersion=4.0.9
 springBootVersion=2.6.7

openapi/api-docs.yaml

@@ -5,7 +5,7 @@ info:
   license:
     name: Apache 2.0
     url: http://www.apache.org/licenses/LICENSE-2.0.txt
-  version: 4.0.4
+  version: 4.0.9
   contact:
     name: OpenMBEE
     url: http://openmbee.org

openapi/doc-config.json

@@ -3,5 +3,5 @@
     "invokerPackage": "org.openmbee.mms",
     "groupId": "org.openmbee.mms",
     "artifactId": "mms-client",
-    "artifactVersion": "4.0.4"
+    "artifactVersion": "4.0.9"
 }

openapi/java-config.json

@@ -1,7 +1,7 @@
 {
     "groupId": "org.openmbee.mms",
     "artifactId": "mms-java-client",
-    "artifactVersion": "4.0.4",
+    "artifactVersion": "4.0.9",
     "artifactUrl": "https://github.com/Open-MBEE/mms",
     "artifactDescription": "Java OpenAPI Client for MMS",
     "library": "jersey2",

openapi/python-config.json

@@ -1,5 +1,5 @@
 {
     "packageName": "mms_python_client",
     "projectName": "mms-python-client",
-    "packageVersion": "4.0.4"
+    "packageVersion": "4.0.9"
 }

src/main/java/org/openmbee/mms/mmsri/MMSRIApplication.java

@@ -13,7 +13,7 @@
 @OpenAPIDefinition(
     info = @Info(
         title = "MMS Reference Implementation API",
-        version = "4.0.4",
+        version = "4.0.9",
         description = "Documentation for MMS API",
         license = @License(name = "Apache 2.0", url = "http://www.apache.org/licenses/LICENSE-2.0.txt")
     ),

src/main/java/org/openmbee/mms/mmsri/config/SecurityConfig.java

@@ -33,6 +33,9 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter implements
     @Value("${mms.hsts.enabled:false}")
     private boolean hsts;
 
+    @Value("${cors.allowed.origins:*}")
+    private String allowedOrigins;
+
     @Autowired
     AuthSecurityConfig authSecurityConfig;
 
@@ -77,14 +80,16 @@ public void addCorsMappings(CorsRegistry registry) {
                 .allowedMethods("*")
                 .allowCredentials(true)
                 .maxAge(3600L)
-                .allowedOriginPatterns("*");
+                .allowedOriginPatterns(allowedOrigins.split(","));
     }
 
     private CorsFilter corsFilter() {
         UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
         CorsConfiguration config = new CorsConfiguration();
         config.setAllowCredentials(true);
-        config.addAllowedOriginPattern("*");
+        for (String origin: allowedOrigins.split(",")) {
+            config.addAllowedOriginPattern(origin);
+        }
         config.addAllowedHeader("*");
         config.addAllowedMethod("*");
         config.setMaxAge(3600L);

src/main/resources/application.properties.example

@@ -4,6 +4,8 @@ mms.admin.username=test
 mms.admin.password=test
 mms.stream.batch.size=100000
 
+cors.allowed.origins=*
+
 # jwt issued by mms for logins via /authentication
 jwt.secret=make_me_something_really_long
 jwt.expiration=86400