Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
61 commits
Select commit Hold shift + click to select a range
a7305f9
Added user and org mongoose models for user registry
cberger8 Mar 17, 2025
6c99c53
[WIP] Progress on registry user endpoints
cberger8 Apr 7, 2025
40e7960
[WIP] added routes for registry orgs
cberger8 Apr 21, 2025
aa22b17
Updated registries to use uuids
david-rocca Apr 21, 2025
7eddb02
Updated controller and middleware for orgs
david-rocca Apr 21, 2025
1a1495d
Added new populate script and test data for new collections
david-rocca Apr 21, 2025
60d87bc
Swagger
david-rocca Apr 21, 2025
fc00d4b
I don't know how to spell
david-rocca Apr 22, 2025
e68e460
Populate reference fields
cberger8 May 5, 2025
da339b4
Fix org_affiliations field
cberger8 May 5, 2025
278956b
An org can not be a root, and not report to anyone, however, we may w…
david-rocca Apr 22, 2025
2d51490
Added secretariat data, so we can start building policy
david-rocca Apr 22, 2025
dec2330
Secretariat policy now is applied
david-rocca May 6, 2025
6deaa15
single org now respects policy
david-rocca May 6, 2025
8b827a3
Post request for create org is now working
david-rocca May 6, 2025
9e8b0e8
Update org now works
david-rocca May 6, 2025
df0e75b
Updated get/registryUsers to now handle new policy
david-rocca May 13, 2025
1925ee6
Added registryOrg shortname user get
david-rocca May 13, 2025
f6b4b60
More updates for user endpoints
david-rocca May 14, 2025
396374b
Holy damn, it works, kinda sorta
david-rocca May 15, 2025
671b554
post /api/org is now backwards compatible
david-rocca May 19, 2025
1c29818
working state
david-rocca May 28, 2025
2d25cf5
Actually use sessions in create org, fixing my previous mistake
david-rocca May 28, 2025
198c327
Added script to create replica set
david-rocca May 28, 2025
9e18751
Got sessions? Finally actually fix create Org to use sessions
david-rocca May 28, 2025
bee70b5
We are rolling now, getOrg by identifier is now backwards compatible
david-rocca May 29, 2025
aeea28c
Get quota is now backwards compatible
david-rocca May 29, 2025
f15f8bd
get users are backwards compatible
david-rocca May 29, 2025
b9454c0
get users by org is now backwards compatible
david-rocca May 29, 2025
69bc7a4
Get secret is now backwards compatible.
david-rocca May 29, 2025
4592aed
Added user and org mongoose models for user registry
cberger8 Mar 17, 2025
1c3fe65
[WIP] Progress on registry user endpoints
cberger8 Apr 7, 2025
addafc2
[WIP] added routes for registry orgs
cberger8 Apr 21, 2025
e691ab5
Updated registries to use uuids
david-rocca Apr 21, 2025
295c5a6
Updated controller and middleware for orgs
david-rocca Apr 21, 2025
72f9bbf
Added new populate script and test data for new collections
david-rocca Apr 21, 2025
cab5e20
Swagger
david-rocca Apr 21, 2025
b09e9d6
I don't know how to spell
david-rocca Apr 22, 2025
8aa543c
Populate reference fields
cberger8 May 5, 2025
5721c9f
Fix org_affiliations field
cberger8 May 5, 2025
97b8a46
An org can not be a root, and not report to anyone, however, we may w…
david-rocca Apr 22, 2025
06a73df
Added secretariat data, so we can start building policy
david-rocca Apr 22, 2025
f4bdc15
Secretariat policy now is applied
david-rocca May 6, 2025
0cf59a5
single org now respects policy
david-rocca May 6, 2025
db60bfa
Post request for create org is now working
david-rocca May 6, 2025
87352f1
Update org now works
david-rocca May 6, 2025
abdc658
Updated get/registryUsers to now handle new policy
david-rocca May 13, 2025
3d12cf2
Added registryOrg shortname user get
david-rocca May 13, 2025
a1254e9
More updates for user endpoints
david-rocca May 14, 2025
f103d01
Holy damn, it works, kinda sorta
david-rocca May 15, 2025
e22ee0c
post /api/org is now backwards compatible
david-rocca May 19, 2025
dfb4d98
working state
david-rocca May 28, 2025
2862c71
Actually use sessions in create org, fixing my previous mistake
david-rocca May 28, 2025
a6fd4d5
Added script to create replica set
david-rocca May 28, 2025
4db3eea
Got sessions? Finally actually fix create Org to use sessions
david-rocca May 28, 2025
e1bd6e8
We are rolling now, getOrg by identifier is now backwards compatible
david-rocca May 29, 2025
16a234b
Get quota is now backwards compatible
david-rocca May 29, 2025
aa24567
get users are backwards compatible
david-rocca May 29, 2025
828fbd1
get users by org is now backwards compatible
david-rocca May 29, 2025
5e21d78
Get secret is now backwards compatible.
david-rocca May 29, 2025
1691394
Merge branch 'dr_registry_user_policy' into dtw/rebase_dev
dwelch2344 Jun 3, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1,363 changes: 1,362 additions & 1 deletion api-docs/openapi.json

Large diffs are not rendered by default.

147 changes: 147 additions & 0 deletions datadump/pre-population/registry-orgs.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,147 @@
[
{
"UUID": "org-secretariat",
"long_name": "Secretariat Org",
"short_name": "SecretariatOrg",
"aliases": [],
"cve_program_org_function": "Secretariat",
"authority": {
"active_roles": [
"CNA",
"Top Level Root",
"CNA-LR",
"Bulk Download",
"SECRETARIAT"
]
},
"reports_to": null,
"oversees": ["org-uuid-1", "org-uuid-3"],
"root_or_tlr": true,
"users": ["user-uuid-secretariat"],
"charter_or_scope": "All Things CVE",
"disclosure_policy": "When the time is right",
"product_list": "Product A, Product B, Product C",
"soft_quota": 100,
"hard_quota": 150,
"contact_info": {
"additional_contact_users": [],
"poc": "John Doe",
"poc_email": "john.doe@secretariat.com",
"poc_phone": "+1-555-001-1001",
"admins": [],
"org_email": "contact@secretariat.com",
"website": "https://www.cve.org"
},
"in_use": true,
"created": "2023-06-01T00:00:00.000Z",
"last_updated": "2023-06-01T00:00:00.000Z"
},
{
"UUID": "org-uuid-1",
"long_name": "Test Organization One",
"short_name": "TestOrg1",
"aliases": [
"TO1",
"Test1"
],
"cve_program_org_function": "CNA",
"authority": {
"active_roles": [
"CNA"
]
},
"reports_to": null,
"oversees": ["org-uuid-2"],
"root_or_tlr": true,
"users": ["user-uuid-1"],
"charter_or_scope": "Responsible for technology sector vulnerabilities",
"disclosure_policy": "90-day disclosure policy",
"product_list": "Product A, Product B, Product C",
"soft_quota": 100,
"hard_quota": 150,
"contact_info": {
"additional_contact_users": [],
"poc": "John Doe",
"poc_email": "john.doe@testorg1.com",
"poc_phone": "+1-555-001-1001",
"admins": ["user-uuid-1"],
"org_email": "contact@testorg1.com",
"website": "https://www.testorg1.com"
},
"in_use": true,
"created": "2023-06-01T00:00:00.000Z",
"last_updated": "2023-06-01T00:00:00.000Z"
},
{
"UUID": "org-uuid-2",
"long_name": "Security Solutions Inc.",
"short_name": "SecSol",
"aliases": [
"SSI",
"SecInc"
],
"cve_program_org_function": "CNA",
"authority": {
"active_roles": [
"CNA"
]
},
"reports_to": "org-uuid-1",
"oversees": [],
"root_or_tlr": true,
"users": ["user-uuid-2"],
"charter_or_scope": "Focused on cybersecurity software vulnerabilities",
"disclosure_policy": "60-day responsible disclosure policy",
"product_list": "SecureShield, CyberGuard, DataDefender",
"soft_quota": 75,
"hard_quota": 100,
"contact_info": {
"additional_contact_users": [],
"poc": "Jane Smith",
"poc_email": "jane.smith@secsol.com",
"poc_phone": "+1-555-002-2002",
"admins": ["user-uuid-2"],
"org_email": "info@secsol.com",
"website": "https://www.secsol.com"
},
"in_use": true,
"created": "2023-06-02T00:00:00.000Z",
"last_updated": "2023-06-02T00:00:00.000Z"
},
{
"UUID": "org-uuid-3",
"long_name": "Global Network Systems",
"short_name": "GNS",
"aliases": [
"GlobalNet",
"NetSys"
],
"cve_program_org_function": "CNA",
"authority": {
"active_roles": [
"CNA"
]
},
"reports_to": null,
"oversees": [],
"root_or_tlr": false,
"users": ["user-uuid-3"],
"charter_or_scope": "Specializing in network infrastructure vulnerabilities",
"disclosure_policy": "45-day coordinated disclosure policy",
"product_list": "NetRouter, CloudConnect, SecureSwitch",
"soft_quota": 120,
"hard_quota": 180,
"contact_info": {
"additional_contact_users": [],
"poc": "Michael Johnson",
"poc_email": "michael.johnson@gns.com",
"poc_phone": "+1-555-003-3003",
"admins": ["user-uuid-3"],
"org_email": "contact@gns.com",
"website": "https://www.gns.com"
},
"in_use": true,
"created": "2023-06-03T00:00:00.000Z",
"last_updated": "2023-06-03T00:00:00.000Z"
}
]
114 changes: 114 additions & 0 deletions datadump/pre-population/registry-users.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,114 @@
[
{
"UUID": "user-uuid-secretariat",
"user_id": "secretariat",
"name": {
"first": "David",
"last": "Rocca",
"middle": "T",
"suffix": ""
},
"org_affiliations": [
{
"org_id": "org-secretariat",
"email": "drocca@mitre.org",
"phone": "+1-555-001-1001"
}
],
"cve_program_org_membership": [
{
"program_org": "org-secretariat",
"role": "Admin",
"status": "active"
}
],
"created": "2023-06-01T00:00:00.000Z",
"created_by": "drocca",
"last_updated": "2023-06-01T00:00:00.000Z",
"last_active": "2023-06-01T00:00:00.000Z"
},
{
"UUID": "user-uuid-1",
"user_id": "user1@testorg1.com",
"name": {
"first": "John",
"last": "Doe",
"middle": "A",
"suffix": "Jr"
},
"org_affiliations": [
{
"org_id": "org-uuid-1",
"email": "john.doe@testorg1.com",
"phone": "+1-555-001-1001"
}
],
"cve_program_org_membership": [
{
"program_org": "org-uuid-1",
"role": "Admin",
"status": "active"
}
],
"created": "2023-06-01T00:00:00.000Z",
"created_by": "system",
"last_updated": "2023-06-01T00:00:00.000Z",
"last_active": "2023-06-01T00:00:00.000Z"
},
{
"UUID": "user-uuid-2",
"user_id": "jane.smith@secsol.com",
"name": {
"first": "Jane",
"last": "Smith",
"middle": "B",
"suffix": ""
},
"org_affiliations": [
{
"org_id": "org-uuid-2",
"email": "jane.smith@secsol.com",
"phone": "+1-555-002-2002"
}
],
"cve_program_org_membership": [
{
"program_org": "org-uuid-2",
"role": "Admin",
"status": "active"
}
],
"created": "2023-06-02T00:00:00.000Z",
"created_by": "system",
"last_updated": "2023-06-02T00:00:00.000Z",
"last_active": "2023-06-02T00:00:00.000Z"
},
{
"UUID": "user-uuid-3",
"user_id": "michael.johnson@gns.com",
"name": {
"first": "Michael",
"last": "Johnson",
"middle": "C",
"suffix": ""
},
"org_affiliations": [
{
"org_id": "org-uuid-3",
"email": "michael.johnson@gns.com",
"phone": "+1-555-003-3003"
}
],
"cve_program_org_membership": [
{
"program_org": "org-uuid-3",
"role": "Admin",
"status": "active"
}
],
"created": "2023-06-03T00:00:00.000Z",
"created_by": "system",
"last_updated": "2023-06-03T00:00:00.000Z",
"last_active": "2023-06-03T00:00:00.000Z"
}
]
Loading