Deployment of 2025-02-05

.github/workflows/log_management.yml

@@ -13,8 +13,7 @@ jobs:
       - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
       - name: Workflow Housekeeper - workflows NOT in default branch
 
-        uses: JosiahSiegel/workflow-housekeeper@731cc20bb613208b34efb6ac74aab4ba147abb50
-        ## DevSecOps - Aquia (Replace) - uses: ./.github/actions/workflow-housekeeper
+        uses: ./.github/actions/workflow-housekeeper
 
         env:
           GITHUB_TOKEN: ${{ secrets.LOG_MANAGEMENT_TOKEN }}
@@ -25,8 +24,7 @@ jobs:
           dry-run: false
       - name: Workflow Housekeeper - workflows in default branch
 
-        uses: JosiahSiegel/workflow-housekeeper@731cc20bb613208b34efb6ac74aab4ba147abb50
-        ## DevSecOps - Aquia (Replace) - uses: ./.github/actions/workflow-housekeeper
+        uses: ./.github/actions/workflow-housekeeper
 
         env:
           GITHUB_TOKEN: ${{ secrets.LOG_MANAGEMENT_TOKEN }}

.github/workflows/prepare_deployment_branch.yaml

@@ -28,17 +28,15 @@ jobs:
 
       - name: "Create branch '${{ env.BRANCH_NAME }}' to contain the changes for the deployment on ${{ env.DEPLOYMENT_DATE }}"
 
-        uses: JosiahSiegel/remote-branch-action@dbe7a2138eb064fbfdb980abee918091a7501fbe
-        ## DevSecOps - Aquia (Replace) - uses: ./.github/actions/remote-branch-action
+        uses: ./.github/actions/remote-branch
 
         with:
           branch: "${{ env.BRANCH_NAME }}"
 
       - name: "Prepare a Pull Request from ${{ env.BRANCH_NAME }} into production branch"
         id: pr
 
-        uses: JosiahSiegel/reliable-pull-request-action@ae8d0c88126329ee363a35392793d0bc94cb82e7
-        ## DevSecOps - Aquia (Replace) - uses: ./.github/actions/reliable-pull-request-action
+        uses: ./.github/actions/reliable-pull-request
 
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

auth/src/main/kotlin/gov/cdc/prime/reportstream/auth/client/OktaGroupsClient.kt

@@ -7,9 +7,7 @@ import org.apache.logging.log4j.kotlin.Logging
 import org.springframework.stereotype.Service
 
 @Service
-class OktaGroupsClient(
-    private val applicationGroupsApi: ApplicationGroupsApi,
-) : Logging {
+class OktaGroupsClient(private val applicationGroupsApi: ApplicationGroupsApi) : Logging {
 
     /**
      * Get all application groups from the Okta Admin API
@@ -18,8 +16,7 @@ class OktaGroupsClient(
      *
      * @see https://developer.okta.com/docs/api/openapi/okta-management/management/tag/ApplicationGroups/#tag/ApplicationGroups/operation/listApplicationGroupAssignments
      */
-    suspend fun getApplicationGroups(appId: String): List<String> {
-        return withContext(Dispatchers.IO) {
+    suspend fun getApplicationGroups(appId: String): List<String> = withContext(Dispatchers.IO) {
             try {
                 val groups = applicationGroupsApi
                     .listApplicationGroupAssignments(appId, null, null, null, "group")
@@ -33,5 +30,4 @@ class OktaGroupsClient(
                 throw ex
             }
         }
-    }
 }

auth/src/main/kotlin/gov/cdc/prime/reportstream/auth/config/ApplicationConfig.kt

@@ -10,17 +10,11 @@ import kotlin.time.TimeSource
  * Simple class to automatically read configuration from application.yml (or environment variable overrides)
  */
 @ConfigurationProperties(prefix = "app")
-data class ApplicationConfig(
-    val environment: Environment,
-) {
+data class ApplicationConfig(val environment: Environment) {
 
     @Bean
-    fun timeSource(): TimeSource {
-        return TimeSource.Monotonic
-    }
+    fun timeSource(): TimeSource = TimeSource.Monotonic
 
     @Bean
-    fun clock(): Clock {
-        return Clock.systemUTC()
-    }
+    fun clock(): Clock = Clock.systemUTC()
 }

auth/src/main/kotlin/gov/cdc/prime/reportstream/auth/config/OktaClientConfig.kt

@@ -12,26 +12,20 @@ import org.springframework.context.annotation.Profile
 
 @Configuration
 @Profile("!test")
-class OktaClientConfig(
-    private val oktaClientProperties: OktaClientProperties,
-) {
+class OktaClientConfig(private val oktaClientProperties: OktaClientProperties) {
 
     @Bean
-    fun apiClient(): ApiClient {
-        return Clients.builder()
+    fun apiClient(): ApiClient = Clients.builder()
             .setOrgUrl(oktaClientProperties.orgUrl)
             .setAuthorizationMode(AuthorizationMode.PRIVATE_KEY)
             .setClientId(oktaClientProperties.clientId)
             .setScopes(oktaClientProperties.requiredScopes)
             .setPrivateKey(oktaClientProperties.apiPrivateKey)
             // .setCacheManager(...) TODO: investigate caching since groups don't often change
             .build()
-    }
 
     @Bean
-    fun applicationGroupsApi(): ApplicationGroupsApi {
-        return ApplicationGroupsApi(apiClient())
-    }
+    fun applicationGroupsApi(): ApplicationGroupsApi = ApplicationGroupsApi(apiClient())
 
     @ConfigurationProperties(prefix = "okta.admin-client")
     data class OktaClientProperties(

auth/src/main/kotlin/gov/cdc/prime/reportstream/auth/config/SecurityConfig.kt

@@ -16,9 +16,7 @@ import org.springframework.security.web.server.SecurityWebFilterChain
  */
 @Configuration
 @EnableWebFluxSecurity
-class SecurityConfig(
-    private val applicationConfig: ApplicationConfig,
-) : Logging {
+class SecurityConfig(private val applicationConfig: ApplicationConfig) : Logging {
 
     @Bean
     fun securityWebFilterChain(http: ServerHttpSecurity): SecurityWebFilterChain {

auth/src/main/kotlin/gov/cdc/prime/reportstream/auth/controller/HealthController.kt

@@ -8,9 +8,7 @@ import org.springframework.web.bind.annotation.RestController
 import kotlin.time.TimeSource
 
 @RestController
-class HealthController(
-    timeSource: TimeSource,
-) {
+class HealthController(timeSource: TimeSource) {
 
     private val applicationStart = timeSource.markNow()
 

auth/src/main/kotlin/gov/cdc/prime/reportstream/auth/filter/AppendOktaGroupsGatewayFilterFactory.kt

@@ -15,19 +15,15 @@ import reactor.core.publisher.Mono
  * defined in spring-cloud-gateway and is instantiated via configuration under a route's filters.
  */
 @Component
-class AppendOktaGroupsGatewayFilterFactory(
-    private val oktaGroupsService: OktaGroupsService,
-) : AbstractGatewayFilterFactory<Any>() {
+class AppendOktaGroupsGatewayFilterFactory(private val oktaGroupsService: OktaGroupsService) :
+    AbstractGatewayFilterFactory<Any>() {
 
     /**
      * function used only in testing to create our filter without any configuration
      */
-    fun apply(): GatewayFilter {
-        return apply { _: Any? -> }
-    }
+    fun apply(): GatewayFilter = apply { _: Any? -> }
 
-    override fun apply(config: Any?): GatewayFilter {
-        return GatewayFilter { exchange, chain ->
+    override fun apply(config: Any?): GatewayFilter = GatewayFilter { exchange, chain ->
             exchange
                 .getPrincipal<BearerTokenAuthentication>()
                 .flatMap { oktaAccessTokenJWT ->
@@ -57,5 +53,4 @@ class AppendOktaGroupsGatewayFilterFactory(
                     chain.filter(exchange.mutate().request(request).build())
                 }
         }
-    }
 }

auth/src/main/kotlin/gov/cdc/prime/reportstream/auth/model/ApplicationStatus.kt

@@ -3,8 +3,4 @@ package gov.cdc.prime.reportstream.auth.model
 /**
  * Simple json response model for application status
  */
-data class ApplicationStatus(
-    val application: String,
-    val status: String,
-    val uptime: String,
-)
+data class ApplicationStatus(val application: String, val status: String, val uptime: String)

auth/src/main/kotlin/gov/cdc/prime/reportstream/auth/service/OktaGroupsJWTWriter.kt

@@ -17,10 +17,7 @@ import java.util.Date
 import java.util.UUID
 
 @Service
-class OktaGroupsJWTWriter(
-    private val jwtConfig: OktaGroupsJWTConfig,
-    private val clock: Clock,
-) {
+class OktaGroupsJWTWriter(private val jwtConfig: OktaGroupsJWTConfig, private val clock: Clock) {
 
     /**
      * generate and sign our custom JWT containing Okta group information for a particular application

auth/src/test/kotlin/gov/cdc/prime/reportstream/auth/config/TestOktaClientConfig.kt

@@ -15,12 +15,8 @@ import org.springframework.context.annotation.Profile
 class TestOktaClientConfig {
 
     @Bean
-    fun apiClient(): ApiClient {
-        return mockk()
-    }
+    fun apiClient(): ApiClient = mockk()
 
     @Bean
-    fun applicationGroupsApi(): ApplicationGroupsApi {
-        return mockk()
-    }
+    fun applicationGroupsApi(): ApplicationGroupsApi = mockk()
 }

auth/src/test/kotlin/gov/cdc/prime/reportstream/auth/controller/HealthControllerTest.kt

@@ -16,9 +16,7 @@ import kotlin.test.Test
 @SpringBootTest
 @AutoConfigureWebTestClient
 @Import(TestOktaClientConfig::class)
-class HealthControllerTest @Autowired constructor(
-    private val webTestClient: WebTestClient,
-) {
+class HealthControllerTest @Autowired constructor(private val webTestClient: WebTestClient) {
 
     @Test
     fun `successful healthcheck`() {

auth/src/test/kotlin/gov/cdc/prime/reportstream/auth/filter/AppendOktaGroupsGatewayFilterFactoryTest.kt

@@ -42,19 +42,14 @@ class AppendOktaGroupsGatewayFilterFactoryTest @Autowired constructor(
 ) {
 
     @TestConfiguration
-    class Config(
-        @Value("\${wiremock.server.port}") val port: Int,
-    ) {
+    class Config(@Value("\${wiremock.server.port}") val port: Int) {
 
         @Bean
-        fun oktaGroupsService(): OktaGroupsService {
-            return mockk()
-        }
+        fun oktaGroupsService(): OktaGroupsService = mockk()
 
         @Bean
-        fun appendOktaGroupsGatewayFilterFactory(): AppendOktaGroupsGatewayFilterFactory {
-            return AppendOktaGroupsGatewayFilterFactory(oktaGroupsService())
-        }
+        fun appendOktaGroupsGatewayFilterFactory():
+            AppendOktaGroupsGatewayFilterFactory = AppendOktaGroupsGatewayFilterFactory(oktaGroupsService())
 
         @Bean
         fun testRouteLocator(builder: RouteLocatorBuilder): RouteLocator {

buildSrc/shared.gradle.kts

@@ -5,4 +5,3 @@ repositories {
     }
     maven { url = uri("https://repo.spring.io/snapshot") }
 }
-

buildSrc/src/main/kotlin/reportstream.project-conventions.gradle.kts

@@ -1,41 +1,40 @@
+import org.jetbrains.kotlin.gradle.dsl.JvmTarget
 import org.jetbrains.kotlin.gradle.tasks.KotlinCompile
 import org.jlleitschuh.gradle.ktlint.KtlintExtension
 
+apply(from = rootProject.file("buildSrc/shared.gradle.kts"))
+
 plugins {
     kotlin("jvm")
     id("org.jlleitschuh.gradle.ktlint")
 }
 
+ktlint {
+    version = "1.5.0"
+}
+
 group = "gov.cdc.prime.reportstream"
 version = "0.0.1-SNAPSHOT"
 
-repositories {
-    mavenCentral()
-}
+val jvmTarget = JvmTarget.JVM_17
 
 kotlin {
-    jvmToolchain(17)
+    jvmToolchain(jvmTarget.target.toInt())
 }
 
-val majorJavaVersion = 17
 java {
-    sourceCompatibility = JavaVersion.toVersion(majorJavaVersion)
-    targetCompatibility = JavaVersion.toVersion(majorJavaVersion)
+    sourceCompatibility = JavaVersion.toVersion(jvmTarget.target)
+    targetCompatibility = JavaVersion.toVersion(jvmTarget.target)
     toolchain {
-        languageVersion = JavaLanguageVersion.of(majorJavaVersion)
+        languageVersion = JavaLanguageVersion.of(jvmTarget.target)
     }
 }
 val compileKotlin: KotlinCompile by tasks
 val compileTestKotlin: KotlinCompile by tasks
-compileKotlin.kotlinOptions.jvmTarget = "$majorJavaVersion"
-compileKotlin.kotlinOptions.allWarningsAsErrors = true
-compileTestKotlin.kotlinOptions.jvmTarget = "$majorJavaVersion"
-compileTestKotlin.kotlinOptions.allWarningsAsErrors = true
-
-configure<KtlintExtension> {
-    // See ktlint versions at https://github.com/pinterest/ktlint/releases
-    version.set("1.1.1")
-}
+compileKotlin.compilerOptions.jvmTarget.set(jvmTarget)
+compileKotlin.compilerOptions.allWarningsAsErrors = true
+compileTestKotlin.compilerOptions.jvmTarget.set(jvmTarget)
+compileTestKotlin.compilerOptions.allWarningsAsErrors = true
 
 tasks.withType<Test> {
     useJUnitPlatform()

frontend-react/e2e/spec/chromium-only/authenticated/receiver-status-page-user-flow.spec.ts

@@ -193,6 +193,8 @@ test.describe(
                 });
 
                 test("result message", async ({ adminReceiverStatusPage }) => {
+                    await adminReceiverStatusPage.statusContainer.waitFor({ state: "visible" });
+
                     // get first entry's result from all-fail receiver's first day -> third time period
                     const receiverI = 0;
                     const dayI = 0;

frontend-react/package.json

@@ -9,6 +9,7 @@
     "@microsoft/applicationinsights-web": "^3.3.4",
     "@okta/okta-react": "^6.9.0",
     "@okta/okta-signin-widget": "^7.27.2",
+    "@react-pdf/renderer": "^4.1.6",
     "@rest-hooks/rest": "^3.0.3",
     "@tanstack/react-query": "^5.64.0",
     "@tanstack/react-query-devtools": "^5.64.0",