profirator/profi-platform

Apinf - Open source API management platform with multi proxy and protocol support

profi-platform's Issues

allow tenant creators to grant access to QL and/or CB

ui needs tickboxes:

story: as tenant creator, I want to be able to control who can access data on CB and QL.

needs support from tenant-manager

Feature: Update Authorization part to take Bearer tokens into account

Story: As a user, I find it confusing to see x-apikey as auth method as in some scenarios I cannot use it.

Allow option to create a subscription to QL for tenants

currently subscriptions need to made manually. we need options:

1. one for tenant creator to create (tickbox in ui) a sub
2. master switch platform level on/off setting that will allow or disable subscription creation

needs support from Tenant-manager

restoring disabled login options in sign-in page possible

by manipulating HTML code component visibility.

No Error Message for invalid password while bearer token authorization in APInf UI

same as apinf#3790

if you give wrong password, token successfully fetched message is shown

to reproduce:

• go to platfrom with FIWARE login
• get an Oauth token with wrong pass
  Expected:
• error message is shown
  Actual:
• "we have successfully got you a token"

when token expires, wrong message is shown

how to repro: login to api management. wait one hour. try to load tenant page.

expected. message pops up saying "session expired, please relogin"

actual:
Userlist fetch failed!
Error: failed [403] { "error": { "code": "API_KEY_OR_TOKEN_INVALID", "message": "An invalid api_key or token was supplied. Get one at https://umbrella.fiware.opendata-paderborn.de:443" } }

logging into the platform giveth 500 internal error

How to repro:

1. create an keyrock account with username that has dots in the username (user.one.two)
2. login to platfrom with FIWARE and that user

expected: user can login

Actual: internal server error 500, user cannot log in

If proxies are in wrong order (QuantumLeap first) tenant manager is adding sub url rules in wrong API in umbrella

add proxy for quantum leap
add proxy for context broker
add tenant
expected: sub url settings are added to orion API
actual: sub url settings are added to another API

move token settings to platform

updating API Host URL in apis-settings-general is not reflected in proxy

how to repro:

• create an API on platfrom. save
• check that it's created in umbrella
• change APi host url in platfrom
• check that it's changed in umbrella
  expected: values correspond
  actual: value is saved on platfrom, but in umbrella old value stays

Feature: Allow usage only as Tenant manager

Story: As a admin, I want the possibility to use Platform only as tenant manager as I'm using another API management

update docker-compose

update new image versions to match release

Unwanted sign-up options visible in 'GET STARTED' when native login is disabled

From the frontpage of Platform, when you click 'GET STARTED' you are directed to platform sign-up. If native login is enabled this works as intended. But if you have native login disabled you are greeted with other login methods (and/or their configuration?) even if they are disabled login methods.

In this example only Fiware login is enabled in the platform, but following options show up behind 'GET STARTED'-button

https://platform-subdomain.your-domain/sign-up

Expected:
This page should respect disabled login methods of the system AND not show unconfigured options.

regression in login

disable native login with Admin user (fiware login only option)
logout
login with FIWARE user

Expected: user logs in.

Actual: "login forbidden" message is displayed

when restoring the native login this works. THis is a SHOW STOPPER for 0.60.1 release.

improvement proposal: enable removing Data-consumer role

data consumer role is always on