refactor cassandra ticket registry impl to store attributes as documents for easier searching and indexing

Author: mmoayyed

api/cas-server-core-api-services/src/main/java/org/apereo/cas/services/RegisteredServiceDelegatedAuthenticationPolicy.java

@@ -67,7 +67,21 @@ default boolean isProviderAllowed(final String provider, final RegisteredService
      */
     @JsonIgnore
     default boolean isProviderRequired() {
-        return isExclusive() && (!getAllowedProviders().isEmpty() || (getAllowedProviders().isEmpty() && !isPermitUndefined()));
+        return isExclusive() && getAllowedProviders() != null
+               && (!getAllowedProviders().isEmpty() || (getAllowedProviders().isEmpty() && !isPermitUndefined()));
     }
 
+    /**
+     * Is exclusive to provider?.
+     *
+     * @param name the name
+     * @return the boolean
+     */
+    @JsonIgnore
+    default boolean isExclusiveToProvider(final String name) {
+        return isExclusive()
+               && getAllowedProviders() != null
+               && getAllowedProviders().size() == 1
+               && name.equalsIgnoreCase(getAllowedProviders().iterator().next());
+    }
 }

ci/tests/aws/run-aws-server.sh

@@ -11,8 +11,8 @@ docker run --rm -d -e 'DEBUG=1' -e 'SERVICES=ssm,events,cloudwatch,logs,s3,s3api
 docker ps | grep "localstack"
 retVal=$?
 if [ $retVal == 0 ]; then
-    echo "localstack docker image is running."
+    echo "localstack docker container is running."
 else
-    echo "localstack docker image failed to start."
+    echo "localstack docker container failed to start."
     exit $retVal
 fi

ci/tests/cassandra/cassandra.yaml

@@ -464,7 +464,7 @@ seed_provider:
       parameters:
           # seeds is actually a comma-delimited list of addresses.
           # Ex: "<ip1>,<ip2>,<ip3>"
-          - seeds: "172.17.0.2"
+          - seeds: "172.17.0.3"
 
 # For workloads with more data than can fit in memory, Cassandra's
 # bottleneck will be reads that need to fetch data from
@@ -664,7 +664,7 @@ ssl_storage_port: 7001
 #
 # Setting listen_address to 0.0.0.0 is always wrong.
 #
-listen_address: 172.17.0.2
+listen_address: 172.17.0.3
 
 # Set listen_address OR listen_interface, not both. Interfaces must correspond
 # to a single address, IP aliasing is not supported.
@@ -678,7 +678,7 @@ listen_address: 172.17.0.2
 
 # Address to broadcast to other Cassandra nodes
 # Leaving this blank will set it to the same value as listen_address
-broadcast_address: 172.17.0.2
+broadcast_address: 172.17.0.3
 
 # When using multiple physical network interfaces, set this
 # to true to listen on broadcast_address in addition to
@@ -748,7 +748,7 @@ native_transport_allow_older_protocols: true
 # set broadcast_rpc_address to a value other than 0.0.0.0.
 #
 # For security reasons, you should not expose this port to the internet.  Firewall it if needed.
-rpc_address: 0.0.0.0
+rpc_address: 0.0.0.0
 
 # Set rpc_address OR rpc_interface, not both. Interfaces must correspond
 # to a single address, IP aliasing is not supported.
@@ -764,7 +764,7 @@ rpc_address: 0.0.0.0
 # be set to 0.0.0.0. If left blank, this will be set to the value of
 # rpc_address. If rpc_address is set to 0.0.0.0, broadcast_rpc_address must
 # be set.
-broadcast_rpc_address: 172.17.0.2
+broadcast_rpc_address: 172.17.0.3
 
 # enable or disable keepalive on rpc/native connections
 rpc_keepalive: true
@@ -1408,7 +1408,7 @@ enable_materialized_views: false
 
 # Enables SASI index creation on this node.
 # SASI indexes are considered experimental and are not recommended for production use.
-enable_sasi_indexes: false
+enable_sasi_indexes: true
 
 # Enables creation of transiently replicated keyspaces on this node.
 # Transient replication is experimental and is not recommended for production use.

ci/tests/cassandra/run-cassandra-server.sh

@@ -11,16 +11,17 @@ docker run --rm --name cassandra -d -p 7199:7199 -p 7000:7000 -p 7001:7001 -p 90
   -v "$PWD"/ci/tests/cassandra/cassandra.yaml:/etc/cassandra/cassandra.yaml \
   -v "$PWD"/ci/tests/cassandra/cqlshrc:/root/.cassandra/cqlshrc \
   -v "$PWD"/ci/tests/cassandra/security:/security \
+  -e CASSANDRA_USER=cassandra -e CASSANDRA_PASSWORD=cassandra \
   cassandra:4.1.0
 
 #docker logs -f cassandra &
 
 docker ps | grep "cassandra"
 retVal=$?
 if [ $retVal == 0 ]; then
-    echo "Cassandra docker image is running."
+    echo "Cassandra docker container is running."
 else
-    echo "Cassandra docker image failed to start."
+    echo "Cassandra docker container failed to start."
     exit $retVal
 fi
 
@@ -32,7 +33,7 @@ docker exec cassandra cqlsh --ssl -e "CREATE KEYSPACE cas WITH REPLICATION = {'c
 sleep 5
 
 echo "Creating new super user: cassystem"
-docker exec cassandra cqlsh --ssl -e "CREATE ROLE cassystem WITH PASSWORD = 'RUstriFINFiENtrO' AND SUPERUSER = true AND LOGIN = true"
+docker exec cassandra cqlsh --ssl -u cassandra -p cassandra -e "CREATE ROLE cassystem WITH PASSWORD = 'RUstriFINFiENtrO' AND SUPERUSER = true AND LOGIN = true"
 sleep 5
 
 echo "Creating Cassandra users table"

ci/tests/couchbase/run-couchbase-server.sh

@@ -121,8 +121,8 @@ createPrimaryIndex
 docker ps | grep "couchbase"
 retVal=$?
 if [ $retVal == 0 ]; then
-    echo "Couchbase docker image is running."
+    echo "Couchbase docker container is running."
 else
-    echo "Couchbase docker image failed to start."
+    echo "Couchbase docker container failed to start."
     exit $retVal
 fi

ci/tests/couchdb/run-couchdb-server.sh

@@ -11,9 +11,9 @@ docker run --rm  -d -e COUCHDB_USER=admin -e COUCHDB_PASSWORD=password \
 docker ps | grep "couchdb-server"
 retVal=$?
 if [ $retVal == 0 ]; then
-    echo "CouchDb docker image is running."
+    echo "CouchDb docker container is running."
 else
-    echo "CouchDb docker image failed to start."
+    echo "CouchDb docker container failed to start."
     exit $retVal
 fi
 

ci/tests/dynamodb/run-dynamodb-server.sh

@@ -9,8 +9,8 @@ docker run --rm -d -p 8000:8000 --name "dynamodb-server" amazon/dynamodb-local:1
 docker ps | grep "dynamodb-server"
 retVal=$?
 if [ $retVal == 0 ]; then
-    echo "DynamoDb docker image is running."
+    echo "DynamoDb docker container is running."
 else
-    echo "DynamoDb docker image failed to start."
+    echo "DynamoDb docker container failed to start."
     exit $retVal
 fi

ci/tests/influxdb/run-influxdb-server.sh

@@ -16,8 +16,8 @@ docker exec influxdb-server influx bucket create \
 docker ps | grep "influxdb-server"
 retVal=$?
 if [ $retVal == 0 ]; then
-    echo "InfluxDb docker image is running."
+    echo "InfluxDb docker container is running."
 else
-    echo "InfluxDb docker image failed to start."
+    echo "InfluxDb docker container failed to start."
     exit $retVal
 fi

ci/tests/ldap/run-ldap-server.sh

@@ -9,9 +9,9 @@ docker run --rm  -d -p 10389:389 -p 1389:389 --name="ldap-server" mmoayyed/ldap
 docker ps | grep "ldap-server"
 retVal=$?
 if [ $retVal == 0 ]; then
-    echo "LDAP docker image is running."
+    echo "LDAP docker container is running."
 else
-    echo "LDAP docker image failed to start."
+    echo "LDAP docker container failed to start."
     exit $retVal
 fi
 
@@ -26,8 +26,8 @@ osixia/openldap --copy-service --loglevel debug
 docker ps | grep "openldap-server"
 retVal=$?
 if [ $retVal == 0 ]; then
-    echo "OpenLDAP docker image is running."
+    echo "OpenLDAP docker container is running."
 else
-    echo "OpenLDAP docker image failed to start."
+    echo "OpenLDAP docker container failed to start."
     exit $retVal
 fi

ci/tests/mail/run-mail-server.sh

@@ -9,8 +9,8 @@ docker run --rm -d -p25000:25000 -p8282:8282 --name "email-server" mmoayyed/mock
 docker ps | grep "email-server"
 retVal=$?
 if [ $retVal == 0 ]; then
-    echo "MockMock docker image is running."
+    echo "MockMock docker container is running."
 else
-    echo "MockMock docker image failed to start."
+    echo "MockMock docker container failed to start."
     exit $retVal
 fi