Jamie Albinson

14159 ci pipeline yaml validation

3

This PR adds YAML validation to the build pipeline. If the validation step fails the build will fail. Test Steps: 1. See that the build here passes (and the new...

Hook up Validation CLI task to build CI pipeline

2

### User Story We want failures to validate our YAML files to cause errors in our CI pipeline ### Dev Notes - To start, we are only validating organizations.yml -...

Auth Microservice POC

1

### User Story We need a proof-of-concept Auth microservice to determine if our approach is feasible. ### Description/Use Case Have a locally working microservice that can validate an access token...

Authorization strategy and implementation for submissions endpoint

3

### User Story As a sender onboarded to ReportStream, I want to be authorized to hit the submissions endpoint ### Description/Use Case We want to only allow authorized senders to...

### User Story We want to tie together the pieces to authorize an sender ### Risks/Impacts/Considerations We do not want any sender to submit reports as another organization ### Dev...

### User Story I want to pass along JWT data in a custom header from a microservice to any other microservice and use the same code to read/write it. ###...

### User Story We want application group information in downstream services to make authorization decisions ### Risks/Impacts/Considerations Any issue getting group information can cause authorization errors for the sender. ###...

Investigate Spring Cloud Gateway support for only allowing the proxying of certain URLs

1

### User Story Our current auth POC uses a simple global wildcard to forward all requests to their correct destination whether it exists or not. This is causing issues with...

### User Story We will need to use the applications group API to retrieve an application's groups to pass along to any service. ### Description/Use Case Application groups cannot be...