nditech/cybersim-backend

An application for aiding facilitation of the CyberSim cybersecurity exercise

cybersim-backend's Issues

Migrating game content from Airtable doesn't work

Steps to reproduce:

1. Open cybersim.demcloud.org and click the Migrate Game button.
2. Add the Master password, Airtable API key, and Airtable base id for the base you want to migrate. We used this base: https://airtable.com/appEivZlU4HhpJY9P/tblht0qIOnroFQrgF/viwQQSotzN2xurTBv?blocks=hide
3. Click "Migrate the Database"
4. Note that the button changes to "Ongoing migration..." but nothing happens.

Screen.Recording.2023-05-05.at.5.36.00.PM.mov

make starting percentage and budget amount part of game airtable migration

Currently, the starting budget and polling percentage can be defined by editing src/models/game.js like we did with this pull request. For polling percentage, you need to add a decimal to the number (i.e. "55.0"). We would like to define these starting variables as part of the came content/airtable migration process instead of having to edit code.

Update postgres version

AirTable API Key Deprecation

Airtable API key depreciation will impact the integration for migrating new game content on https://cybersim.demcloud.org/migrate. API Key deprecation period will last for 12 months and end on Feb 1, 2024.

Migration Error "value too long for type character varying(255)"

When Migrating this Airtable, we get this error when the description field in the events tab exceeds 255 characters. Please add a migration validation error notification for this field if the number of characters is over 255.

{"level":50,"time":1720623302445,"pid":1,"hostname":"f7d6c6c92318","length":99,"name":"error","severity":"ERROR","code":"22001","file":"varchar.c","line":"635","routine":"varchar","stack":"error: insert into "injection" ("asset_code", "description", "followup_injecion", "id", "location", "poll_change", "recipient_role", "recommendations", "skipper_mitigation", "systems_to_disable", "title", "trigger_time", "type") values ($1, $2, $3, $4, $5, DEFAULT, $6, $7, $8, DEFAULT, $9, $10, $11), ($12, $13, $14, $15, $16, DEFAULT, $17, $18, DEFAULT, DEFAULT, $19, $20, $21), ($22, $23, $24, $25, $26, DEFAULT, $27, $28, DEFAULT, DEFAULT, $29, $30, $31), ($32, $33, $34, $35, $36, DEFAULT, $37, $38, DEFAULT, DEFAULT, $39, $40, $41), ($42, $43, $44, $45, $46, DEFAULT, $47, $48, DEFAULT, DEFAULT, $49, $50, $51), ($52, $53, $54, $55, $56, DEFAULT, $57, $58, DEFAULT, DEFAULT, $59, $60, $61), ($62, $63, DEFAULT, $64, $65, DEFAULT, $66, $67, $68, $69, $70, $71, $72), ($73, $74, $75, $76, $77, DEFAULT, $78, $79, DEFAULT, DEFAULT, $80, $81, $82), ($83, $84, $85, $86, $87, DEFAULT, $88, $89, DEFAULT, DEFAULT, $90, $91, $92), ($93, $94, $95, $96, $97, DEFAULT, $98, $99, DEFAULT, DEFAULT, $100, $101, $102), ($103, $104, DEFAULT, $105, $106, DEFAULT, $107, $108, DEFAULT, $109, $110, $111, $112), ($113, $114, $115, $116, $117, DEFAULT, $118, $119, $120, DEFAULT, $121, $122, $123), ($124, $125, DEFAULT, $126, $127, $128, $129, $130, DEFAULT, $131, $132, $133, $134), ($135, $136, DEFAULT, $137, $138, $139, $140, $141, $142, DEFAULT, $143, $144, $145), ($146, $147, $148, $149, $150, DEFAULT, $151, $152, DEFAULT, DEFAULT, $153, $154, $155), ($156, $157, DEFAULT, $158, $159, DEFAULT, $160, $161, DEFAULT, $162, $163, $164, $165), ($166, $167, DEFAULT, $168, $169, DEFAULT, $170, $171, $172, $173, $174, $175, $176), ($177, $178, $179, $180, $181, DEFAULT, $182, DEFAULT, DEFAULT, DEFAULT, $183, $184, $185), ($186, $187, DEFAULT, $188, $189, DEFAULT, $190, $191, $192, $193, $194, $195, $196), ($197, $198, DEFAULT, $199, $200, $201, $202, $203, DEFAULT, DEFAULT, $204, $205, $206), ($207, $208, DEFAULT, $209, $210, $211, $212, $213, $214, $215, $216, $217, $218), ($219, $220, DEFAULT, $221, $222, $223, $224, $225, DEFAULT, DEFAULT, $226, $227, $228), ($229, $230, DEFAULT, $231, $232, DEFAULT, $233, $234, $235, $236, $237, $238, $239), ($240, $241, DEFAULT, $242, $243, $244, $245, $246, $247, DEFAULT, $248, $249, $250), ($251, $252, DEFAULT, $253, $254, $255, $256, $257, $258, DEFAULT, $259, $260, $261), ($262, $263, DEFAULT, $264, $265, $266, $267, DEFAULT, $268, DEFAULT, $269, $270, $271), ($272, $273, DEFAULT, $274, $275, $276, $277, $278, DEFAULT, DEFAULT, $279, $280, $281), ($282, $283, $284, $285, $286, DEFAULT, $287, $288, DEFAULT, DEFAULT, $289, $290, $291), ($292, $293, DEFAULT, $294, $295, $296, $297, $298, $299, DEFAULT, $300, $301, $302), ($303, $304, DEFAULT, $305, $306, $307, $308, $309, $310, DEFAULT, $311, $312, $313), ($314, $315, DEFAULT, $316, $317, $318, $319, $320, $321, $322, $323, $324, $325), ($326, $327, DEFAULT, $328, $329, DEFAULT, $330, $331, DEFAULT, $332, $333, $334, $335), ($336, $337, DEFAULT, $338, $339, DEFAULT, $340, $341, DEFAULT, $342, $343, $344, $345), ($346, $347, DEFAULT, $348, $349, $350, $351, $352, $353, DEFAULT, $354, $355, $356), ($357, $358, DEFAULT, $359, $360, $361, $362, $363, $364, DEFAULT, $365, $366, $367), ($368, $369, DEFAULT, $370, $371, $372, $373, $374, $375, DEFAULT, $376, $377, $378), ($379, $380, DEFAULT, $381, $382, DEFAULT, $383, $384, DEFAULT, $385, $386, $387, $388), ($389, $390, DEFAULT, $391, $392, DEFAULT, $393, $394, DEFAULT, $395, $396, $397, $398), ($399, $400, DEFAULT, $401, $402, DEFAULT, $403, DEFAULT, DEFAULT, $404, $405, $406, $407), ($408, $409, DEFAULT, $410, $411, DEFAULT, $412, $413, DEFAULT, $414, $415, $416, $417), ($418, $419, DEFAULT, $420, $421, $422, $423, $424, DEFAULT, DEFAULT, $425, $426, $427), ($428, $429, DEFAULT, $430, $431, DEFAULT, $432, $433, DEFAULT, $434, $435, $436, $437), ($438, $439, DEFAULT, $440, $441, $442, $443, $444, $445, $446, $447, $448, $449) - value too long for type character varying(255)\n at Parser.parseErrorMessage (/app/node_modules/pg-protocol/dist/parser.js:287:98)\n at Parser.handlePacket (/app/node_modules/pg-protocol/dist/parser.js:126:29)\n at Parser.parse (/app/node_modules/pg-protocol/dist/parser.js:39:38)\n at TLSSocket. (/app/node_modules/pg-protocol/dist/index.js:11:42)\n at TLSSocket.emit (events.js:314:20)\n at addChunk (_stream_readable.js:304:12)\n at readableAddChunk (_stream_readable.js:280:9)\n at TLSSocket.Readable.push (_stream_readable.js:219:10)\n at TLSWrap.onStreamRead (internal/stream_base_commons.js:188:23)","type":"Error","msg":"insert into "injection" ("asset_code", "description", "followup_injecion", "id", "location", "poll_change", "recipient_role", "recommendations", "skipper_mitigation", "systems_to_disable", "title", "trigger_time", "type") values ($1, $2, $3, $4, $5, DEFAULT, $6, $7, $8, DEFAULT, $9, $10, $11), ($12, $13, $14, $15, $16, DEFAULT, $17, $18, DEFAULT, DEFAULT, $19, $20, $21), ($22, $23, $24, $25, $26, DEFAULT, $27, $28, DEFAULT, DEFAULT, $29, $30, $31), ($32, $33, $34, $35, $36, DEFAULT, $37, $38, DEFAULT, DEFAULT, $39, $40, $41), ($42, $43, $44, $45, $46, DEFAULT, $47, $48, DEFAULT, DEFAULT, $49, $50, $51), ($52, $53, $54, $55, $56, DEFAULT, $57, $58, DEFAULT, DEFAULT, $59, $60, $61), ($62, $63, DEFAULT, $64, $65, DEFAULT, $66, $67, $68, $69, $70, $71, $72), ($73, $74, $75, $76, $77, DEFAULT, $78, $79, DEFAULT, DEFAULT, $80, $81, $82), ($83, $84, $85, $86, $87, DEFAULT, $88, $89, DEFAULT, DEFAULT, $90, $91, $92), ($93, $94, $95, $96, $97, DEFAULT, $98, $99, DEFAULT, DEFAULT, $100, $101, $102), ($103, $104, DEFAULT, $105, $106, DEFAULT, $107, $108, DEFAULT, $109, $110, $111, $112), ($113, $114, $115, $116, $117, DEFAULT, $118, $119, $120, DEFAULT, $121, $122, $123), ($124, $125, DEFAULT, $126, $127, $128, $129, $130, DEFAULT, $131, $132, $133, $134), ($135, $136, DEFAULT, $137, $138, $139, $140, $141, $142, DEFAULT, $143, $144, $145), ($146, $147, $148, $149, $150, DEFAULT, $151, $152, DEFAULT, DEFAULT, $153, $154, $155), ($156, $157, DEFAULT, $158, $159, DEFAULT, $160, $161, DEFAULT, $162, $163, $164, $165), ($166, $167, DEFAULT, $168, $169, DEFAULT, $170, $171, $172, $173, $174, $175, $176), ($177, $178, $179, $180, $181, DEFAULT, $182, DEFAULT, DEFAULT, DEFAULT, $183, $184, $185), ($186, $187, DEFAULT, $188, $189, DEFAULT, $190, $191, $192, $193, $194, $195, $196), ($197, $198, DEFAULT, $199, $200, $201, $202, $203, DEFAULT, DEFAULT, $204, $205, $206), ($207, $208, DEFAULT, $209, $210, $211, $212, $213, $214, $215, $216, $217, $218), ($219, $220, DEFAULT, $221, $222, $223, $224, $225, DEFAULT, DEFAULT, $226, $227, $228), ($229, $230, DEFAULT, $231, $232, DEFAULT, $233, $234, $235, $236, $237, $238, $239), ($240, $241, DEFAULT, $242, $243, $244, $245, $246, $247, DEFAULT, $248, $249, $250), ($251, $252, DEFAULT, $253, $254, $255, $256, $257, $258, DEFAULT, $259, $260, $261), ($262, $263, DEFAULT, $264, $265, $266, $267, DEFAULT, $268, DEFAULT, $269, $270, $271), ($272, $273, DEFAULT, $274, $275, $276, $277, $278, DEFAULT, DEFAULT, $279, $280, $281), ($282, $283, $284, $285, $286, DEFAULT, $287, $288, DEFAULT, DEFAULT, $289, $290, $291), ($292, $293, DEFAULT, $294, $295, $296, $297, $298, $299, DEFAULT, $300, $301, $302), ($303, $304, DEFAULT, $305, $306, $307, $308, $309, $310, DEFAULT, $311, $312, $313), ($314, $315, DEFAULT, $316, $317, $318, $319, $320, $321, $322, $323, $324, $325), ($326, $327, DEFAULT, $328, $329, DEFAULT, $330, $331, DEFAULT, $332, $333, $334, $335), ($336, $337, DEFAULT, $338, $339, DEFAULT, $340, $341, DEFAULT, $342, $343, $344, $345), ($346, $347, DEFAULT, $348, $349, $350, $351, $352, $353, DEFAULT, $354, $355, $356), ($357, $358, DEFAULT, $359, $360, $361, $362, $363, $364, DEFAULT, $365, $366, $367), ($368, $369, DEFAULT, $370, $371, $372, $373, $374, $375, DEFAULT, $376, $377, $378), ($379, $380, DEFAULT, $381, $382, DEFAULT, $383, $384, DEFAULT, $385, $386, $387, $388), ($389, $390, DEFAULT, $391, $392, DEFAULT, $393, $394, DEFAULT, $395, $396, $397, $398), ($399, $400, DEFAULT, $401, $402, DEFAULT, $403, DEFAULT, DEFAULT, $404, $405, $406, $407), ($408, $409, DEFAULT, $410, $411, DEFAULT, $412, $413, DEFAULT, $414, $415, $416, $417), ($418, $419, DEFAULT, $420, $421, $422, $423, $424, DEFAULT, DEFAULT, $425, $426, $427), ($428, $429, DEFAULT, $430, $431, DEFAULT, $432, $433, DEFAULT, $434, $435, $436, $437), ($438, $439, DEFAULT, $440, $441, $442, $443, $444, $445, $446, $447, $448, $449) - value too long for type character varying(255)"}

Update node version

We got an error when trying to create a local development copy of the site that said that node was out of date. Rising Stack should update Node to the latest version and test for regressions.

Order of items in budgeting phase and game phase don't match

The order of the budget items on the "PURCHASE AVAILABLE BUDGET ITEM:" section in Campaign HQ tab of the app doesn't match the order of those same items when listed in the Action Table tab's "PURCHASED ITEMS" section. We want this to reflect the order, categories in the Airtable base.

Please use this Airtable base. It has the correct order and categories: https://airtable.com/appXBKch2EmilLftJ/tblnSvzCt9flfWaqM/viwIIuibGNh9kAYN5?blocks=hide

Specifically we want:

• - The budgeting phase screen (first screen of the game) to reflect the Airtable purchased_mitigations tab. Specifically, the category remain the section heading but in the proper order AND items within each category should be ordered the same as the order in the Airtable.
• - The Purchased Items section should have the same section headings and order as the budgeting phase screen, reflecting the order in the Airtable.

Meeting with Carlos about back-end configuration of app

spin up a development site for cybersim.demcloud.org

Accessing API from another PC in the same network.

Any suggestion how to use the entire project, UI + backend on another PC in the same network so we can test it out on various pcs.
Im not sure what more I should change to make it work.

Thx in advance.

Deprecated plugins/Modules 25 vulnerabilities- (12 moderate, 12 high, 1 critical)

[Container] 2024/07/10 15:16:47.957247 Running command npm ci
28 | npm WARN deprecated [email protected]: this library is no longer supported
29 | npm WARN deprecated @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-private-methods instead.
30 | npm WARN deprecated @npmcli/[email protected]: This functionality has been moved to @npmcli/fs
31 | npm WARN deprecated @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-nullish-coalescing-operator instead.
32 | npm WARN deprecated [email protected]: This package has been deprecated and is no longer maintained. Please use @rollup/plugin-terser
33 | npm WARN deprecated @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-numeric-separator instead.
34 | npm WARN deprecated @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-class-properties instead.
35 | npm WARN deprecated [email protected]: Modern JS already guarantees Array#sort() is a stable sort, so this library is deprecated. See the compatibility table on MDN: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/sort#browser_compatibility
36 | npm WARN deprecated [email protected]: Please use @jridgewell/sourcemap-codec instead
37 | npm WARN deprecated [email protected]: Use your platform's native performance.now() and performance.timeOrigin.
38 | npm WARN deprecated @babel/[email protected]: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-optional-chaining instead.
39 | npm WARN deprecated [email protected]: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.
40 | npm WARN deprecated [email protected]: [email protected]
41 | npm WARN deprecated [email protected]: request has been deprecated, see request/request#3142
42 | npm WARN deprecated [email protected]: This SVGO version is no longer supported. Upgrade to v2.x.x.
43 | npm WARN deprecated [email protected]: You can find the new Popper v2 at @popperjs/core, this package is dedicated to the legacy v1
44 |  
45 | added 1674 packages, and audited 1675 packages in 3m
46 |  
47 | 261 packages are looking for funding
48 | run npm fund for details
49 |  
50 | 25 vulnerabilities (12 moderate, 12 high, 1 critical)
51

Update documentation- READ ME (AWS Section)

The current READ ME (AWS section) does not match our current production is currently configured. I would like a review the READ me section to make sure a site can be easily reproduced based on the instructions provided.