Conversation
Merge main into adm
Merge main into adm
- change all stix component pointers to simple object check - validation will be replaced with custom ADM middleware
- middleware now accepts stixSchemasorSchemas (single schema or array of schemas) - software router now passes [toolSchema, malwareSchema] instead of softwareSchema - no more special handling for softwareSchema
…etween validation mechanisms - VALIDATE_WITH_ADM_SCHEMAS: when enabled, requests are validated with the ATT&CK Data Model Zod schemas - VALIDATE_WITH_LEGACY_SCHEMAS: when enabled, requests are validated with the preexisting, OpenAPI YAML-based spec files
…ng ADM validation The ADM validation middlware now reads a runtime config value at request time to determine whether to perform validation
…untime config parameter - The OpenApiValidator.middleware will attach to the global router ONLY if config.validateRequests.withOpenApi is enabled - The default value for this config parameter is true, so the change is non-breaking
Updated schemas and snapshot service: release tracks will automatically receive the default member_sync config. The Update Config endpoint now accepts member_sync configuration updates
…restriction Zod v4.3.6+ disallows .omit(), .pick(), and .partial() on schemas that already have .check() applied. Restructure schema composition to apply operations in the safe order: base → .omit() → .partial() → .check(). - Import base schemas (without refinements) instead of full schemas - Add getSchema() to compose schemas at request time in the correct order - Simplify validateWorkspaceStixData() to accept STIX type strings - Remove unused createWorkspaceStixSchema and type extraction helpers - Remove ADM schema imports from all route files
…attack-workbench-rest-api into beta
|
🎉 This PR is included in version 4.10.0-beta.5 🎉 The release is available on:
Your semantic-release bot 📦🚀 |
…attack-workbench-rest-api into beta
|
🎉 This PR is included in version 4.10.0-beta.6 🎉 The release is available on:
Your semantic-release bot 📦🚀 |
…e-zod Update zod
|
🎉 This PR is included in version 4.10.0-beta.7 🎉 The release is available on:
Your semantic-release bot 📦🚀 |
Move ADM validation from early-stage middleware into a late-stage step within `create()` and `updateFull()`, restructured as ETL pipelines: Analyze → Compose → Set Server Fields → Hooks → Validate → Persist. - Remove `validation-middleware.js` and its imports from 15 route files - Relocate ADM validation logic into `base.service.js` as the pipeline's validate step, ensuring validation runs against fully composed objects - Strip server-controlled fields (`x_mitre_attack_spec_version`, `x_mitre_modified_by_ref`, ATT&CK external references) instead of rejecting them, with scaffolding for future server control of `id`, `created`, and `modified` - Add `?dryRun=true` query parameter that short-circuits persistence in the actual create/update pipeline, replacing the deprecated `POST /api/validate` endpoint and eliminating validation/service drift - Surface ADM validation warnings (e.g., non-standard `x_mitre_shortname`) in the response body alongside `stix` and `workspace` - Add `toJSON`/`toObject` transforms to the base Mongoose schema and query-level exclusions to strip `_id`, `__v`, `__t` from all responses - Define `dryRun` as a reusable OpenAPI component in `query-parameters.yml`
|
🎉 This PR is included in version 4.10.0-beta.8 🎉 The release is available on:
Your semantic-release bot 📦🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.