use safe resource access, add artifactItem for tika-core, remove not needed entry in allowed bpe classes

Author: wetret

dsf-bpe/dsf-bpe-process-api-v2-impl/pom.xml

@@ -245,6 +245,11 @@
 									<artifactId>opentelemetry-instrumentation-annotations</artifactId>
 									<version>2.4.0</version>
 								</artifactItem>
+								<artifactItem>
+									<groupId>org.apache.tika</groupId>
+									<artifactId>tika-core</artifactId>
+									<version>${apache.tika.version}</version>
+								</artifactItem>
 							</artifactItems>
 						</configuration>
 					</execution>

dsf-bpe/dsf-bpe-server/src/main/resources/bpe/api/v2/allowed-bpe-classes.list

@@ -12,11 +12,6 @@ org.apache.commons.io
 org.apache.commons.lang3
 org.apache.commons.text
 org.apache.http
-org.apache.tika.config.TikaConfig
-org.apache.tika.detect.Detector
-org.apache.tika.io.TikaInputStream
-org.apache.tika.metadata.Metadata
-org.apache.tika.mime.MediaType
 org.camunda.bpm.engine.delegate
 org.camunda.bpm.engine.impl.bpmn.parser.FieldDeclaration
 org.camunda.bpm.engine.impl.el.FixedValue

dsf-bpe/dsf-bpe-test-plugin-v2/src/main/java/dev/dsf/bpe/test/service/MimetypeServiceTest.java

@@ -32,45 +32,45 @@ public void execute(ProcessPluginApi api, Variables variables) throws ErrorBound
 	public void testAttachmentBundle(MimetypeService mimetypeService)
 	{
 		List<Resource> resources = getResourcesNotDocumentReferenceFromPath(
-				"/fhir/Bundle/DocumentReference-with-Attachment-Bundle.xml");
+				"fhir/Bundle/DocumentReference-with-Attachment-Bundle.xml");
 		testResourcesStream(resources, mimetypeService);
 	}
 
 	@PluginTest
 	public void testAttachmentCsv(MimetypeService mimetypeService)
 	{
 		List<Resource> resources = getResourcesNotDocumentReferenceFromPath(
-				"/fhir/Bundle/DocumentReference-with-Attachment-CSV.xml");
+				"fhir/Bundle/DocumentReference-with-Attachment-CSV.xml");
 		testResourcesStream(resources, mimetypeService);
 	}
 
 	@PluginTest
 	public void testAttachmentMeasureReport(MimetypeService mimetypeService)
 	{
 		List<Resource> resources = getResourcesNotDocumentReferenceFromPath(
-				"/fhir/Bundle/DocumentReference-with-Attachment-MeasureReport.xml");
+				"fhir/Bundle/DocumentReference-with-Attachment-MeasureReport.xml");
 		testResourcesStream(resources, mimetypeService);
 	}
 
 	@PluginTest
 	public void testAttachmentNdJson(MimetypeService mimetypeService)
 	{
 		List<Resource> resources = getResourcesNotDocumentReferenceFromPath(
-				"/fhir/Bundle/DocumentReference-with-Attachment-NdJson.xml");
+				"fhir/Bundle/DocumentReference-with-Attachment-NdJson.xml");
 		testResourcesStream(resources, mimetypeService);
 	}
 
 	@PluginTest
 	public void testAttachmentZip(MimetypeService mimetypeService)
 	{
 		List<Resource> resources = getResourcesNotDocumentReferenceFromPath(
-				"/fhir/Bundle/DocumentReference-with-Attachment-ZIP.xml");
+				"fhir/Bundle/DocumentReference-with-Attachment-ZIP.xml");
 		testResourcesStream(resources, mimetypeService);
 	}
 
 	private List<Resource> getResourcesNotDocumentReferenceFromPath(String pathToBundle)
 	{
-		try (InputStream input = getClass().getResourceAsStream(pathToBundle))
+		try (InputStream input = MimetypeServiceTest.class.getClassLoader().getResourceAsStream(pathToBundle))
 		{
 			Bundle bundle = FhirContext.forR4().newXmlParser().parseResource(Bundle.class, input);
 			return bundle.getEntry().stream().filter(Bundle.BundleEntryComponent::hasResource)