Skip to content

Conversation

@SolarFactories
Copy link

@SolarFactories SolarFactories commented Dec 14, 2025

New Endpoint Bindings

  • AboutService.Health - GET /health.
  • OIDCService.RemoveTeamMapping2 - DELETE /api/v1/oidc/group/{groupUuid}/team/{teamUuid}/mapping.
    • Alternative to OIDCService.RemoveTeamMapping, which uses DELETE /api/v1/oidc/mapping/{uuid} from a OIDCMapping.UUID.
  • OIDCService.GetAllUsers - GET /api/v1/user/oidc.
  • OIDCService.CreateUser - PUT /api/v1/user/oidc.
  • OIDCService.DeleteUser - DELETE /api/v1/user/oidc.
  • OIDCService.Login - POST /api/v1/user/oidc/login.
    • To obtain a DependencyTrack Bearer Token, from Identity Provider OIDC Tokens.
  • PermissionService.AddPermissionToUser - POST /api/v1/permission/{permission}/user/{username}.
  • PermissionService.RemovePermissionFromUser - DELETE /api/v1/permission/{permission}/user/{username}.
  • UserService.GetAllManaged - GET /api/v1/user/managed.
  • UserService.CreateManaged - PUT /api/v1/user/managed.
  • UserService.UpdateManaged - POST /api/v1/user/managed.
  • UserService.DeleteManaged - DELETE /api/v1/user/managed.
  • UserService.AddTeamToUser - POST /api/v1/user/{username}/membership.
  • UserService.RemoveTeamFromUser - DELETE /api/v1/user/{username}/membership.
  • UserService.GetSelf - GET /api/v1/user/self.
  • UserService.UpdateSelf - POST /api/v1/user/self.

Fixes

Misc

  • Add minimum API version checks to methods in OIDCService.
  • Add tests for OIDCService, UserService, AboutService.
  • Add -timeout 15m to make test, due to pipeline timing out on tests.

API Coverage

  • Raises API Coverage on 4.13.6 from 122 / 220 (55.5%) to 137 / 220 (62.3%) on endpoints.
    • /health is not counted in difference due to not being listed in /api/openapi.json.

…nd OIDC user management, and current user.

Signed-off-by: SolarFactories <[email protected]>
…returning pages, instead of lists - to match the data returned from API - as API endpoints are not paginated - also removed passing PageOptions due to not being paginated. Updated tests accordingly. Removed SubjectIdentifier in test for creating OIDCUser, as only username is used by API.

Signed-off-by: SolarFactories <[email protected]>
@owasp-dt-bot
Copy link

owasp-dt-bot commented Dec 14, 2025

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@SolarFactories SolarFactories changed the title Users - Managed & OIDC feat/fix: Users - Managed & OIDC Dec 15, 2025
@SolarFactories SolarFactories changed the title feat/fix: Users - Managed & OIDC feat: Users - Managed & OIDC Dec 15, 2025
Copy link

@bilimuho05stack bilimuho05stack left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Help

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants