Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ALS is sending out multiple requests to participants for both Oracle records that match non-subId and subId result set #2374

Closed
mdebarros opened this issue Aug 6, 2021 · 2 comments
Assignees
Labels
bug Something isn't working or it has wrong behavior on a Mojaloop Core service oss-core This is an issue - story or epic related to a feature on a Mojaloop core service or related to it
Milestone

Comments

@mdebarros
Copy link
Member

mdebarros commented Aug 6, 2021

Summary:

ALS is sending out multiple requests to participants for both Oracle records that match non-subId and subId result set with incorrect API operation GET /parties/{partyType}/{partyId} (i.e. no SubId in URI).

ALS incorrectly sends a GET /parties/{partyType}/{partyId} for each result with no SubId and with the SubId to the destination Participant

Severity:
Low

Priority:
Low

Expected Behavior

ALS will sends a GET /parties/{partyType}/{partyId} for each result with no SubId to the destination Participant

Steps to Reproduce

  1. Register a Party on the Mojaloop-Simulator Oracle with no SubId and a SubId

Example:

$ curl http://localhost:8080/oracle/participants/MSISDN/27713803912
{"partyList":[{"fspId":"payeefsp","currency":"USD"},{"fspId":"payeefsp","currency":"USD","partySubIdOrType":"30"}]}
  1. Send a GET /parties/MSISDN/27713803912

  2. Only a single GET /parties/MSISDN/27713803912 request should be forwarded to the payeefsp.

Specifications

  • Component (if known): Account-Lookup-Service
  • Version: v11.7.0
  • Platform: moja1
  • Subsystem: n/a
  • Type of testing: Manual
  • Bug found/raised by: @vijayg10

Notes:

  • Severity when opened: Low
  • Priority when opened: Low
@mdebarros mdebarros added bug Something isn't working or it has wrong behavior on a Mojaloop Core service to-be-refined This story is ready to be groomed oss-core This is an issue - story or epic related to a feature on a Mojaloop core service or related to it labels Aug 6, 2021
@elnyry-sam-k elnyry-sam-k added this to the Sprint 15.2 milestone Aug 12, 2021
@elnyry-sam-k elnyry-sam-k removed the to-be-refined This story is ready to be groomed label Aug 12, 2021
@mdebarros mdebarros self-assigned this Aug 12, 2021
mdebarros added a commit to mdebarros/account-lookup-service that referenced this issue Aug 16, 2021
…ants for both Oracle records that match non-subId and subId result set

- Updated gitignore with devspace patterns
- Fix for ALS is sending out multiple requests to participants for both Oracle records that match non-subId and subId result set [mojaloop/#2374](mojaloop/project#2374)
- Updated unit tests for [mojaloop/#2374](mojaloop/project#2374)
 fix
- Updated latest dependencies
- Fixes for audit-resolve

--------------------------------------------------
 yargs-parser needs your attention.

[ low ] Prototype Pollution
 vulnerable versions <13.1.2 || >=14.0.0 <15.0.1 || >=16.0.0 <18.1.2 found in:
 - dependencies: @mojaloop/central-services-shared>widdershins>yargs>yargs-parser

> Outcome: Ignored for a week
> Impact: Minimal as the dependencies are used for the Developer Documentation end-point
@mdebarros
Copy link
Member Author

PR open mojaloop/account-lookup-service#424

mdebarros added a commit to mojaloop/account-lookup-service that referenced this issue Aug 16, 2021
…ants for both Oracle records that match non-subId and subId result set (#424)

fix(mojaloop/#2374): ALS is sending out multiple requests to participants for both Oracle records that match non-subId and subId result set:
- Fix for ALS is sending out multiple requests to participants for both Oracle records that match non-subId and subId result set for [mojaloop/#2374](mojaloop/project#2374)
- Updated unit tests for [mojaloop/#2374](mojaloop/project#2374) fix
- Updated gitignore with devspace patterns
- Updated latest dependencies
- Fixes for audit-resolve

```text
--------------------------------------------------
 yargs-parser needs your attention.

[ low ] Prototype Pollution
 vulnerable versions <13.1.2 || >=14.0.0 <15.0.1 || >=16.0.0 <18.1.2 found in:
 - dependencies: @mojaloop/central-services-shared>widdershins>yargs>yargs-parser
```

> Outcome: Ignored for a week
> Impact: Minimal as the dependencies are used for the Developer Documentation end-point
@mdebarros
Copy link
Member Author

PR open mojaloop/account-lookup-service#424

PR for Helm v13.0.2.

Test Suite:GP Tests
Environment:moja2.test.mojaloop.live
┌───────────────────────────────────────────────────┐
│                      SUMMARY                      │
├───────────────────┬───────────────────────────────┤
│ Total assertions  │ 2064                          │
├───────────────────┼───────────────────────────────┤
│ Passed assertions │ 2064                          │
├───────────────────┼───────────────────────────────┤
│ Failed assertions │ 0                             │
├───────────────────┼───────────────────────────────┤
│ Total requests    │ 446                           │
├───────────────────┼───────────────────────────────┤
│ Total test cases  │ 99                            │
├───────────────────┼───────────────────────────────┤
│ Passed percentage │ 100.00%                       │
├───────────────────┼───────────────────────────────┤
│ Started time      │ Tue, 17 Aug 2021 08:46:09 GMT │
├───────────────────┼───────────────────────────────┤
│ Completed time    │ Tue, 17 Aug 2021 08:48:32 GMT │
├───────────────────┼───────────────────────────────┤
│ Runtime duration  │ 142526 ms                     │
└───────────────────┴───────────────────────────────┘

View Report

mdebarros added a commit to mojaloop/account-lookup-service that referenced this issue Aug 17, 2021
… myanmar script unicode strings (#425)

fix(mojaloop/#2374): ALS is sending out multiple requests to participants for both Oracle records that match non-subId and subId result set:
- Corrected fix for ALS is sending out multiple requests to participants for both Oracle records that match non-subId and subId result set for [mojaloop/#2374](mojaloop/project#2374)
- Fixed filter for sub-id match
- Added unit test to handle when sub-id is provided but no match is not found

Maintenance changes:
- changed circleci config to use .Environment.CIRCLE_SHA1 instead of hash of the package.json for dependency caching
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working or it has wrong behavior on a Mojaloop Core service oss-core This is an issue - story or epic related to a feature on a Mojaloop core service or related to it
Projects
None yet
Development

No branches or pull requests

2 participants