thingsboard

Open-source IoT Platform - Device management, data collection, processing and visualization.

dashboard java cloud coap iot iot-analytics iot-platform iot-solutions kafka lwm2m microservices middleware mqtt netty platform snmp thingsboard visualization websockets widgets

History

Sergey Matvienko 08e94a7f2a Fix flaky TbRestApiCallNodeTest via SsrfProtectionValidator ResourceLock TbRestApiCallNodeTest ran concurrently with SsrfSafeAddressResolverGroupTest, which toggles the static SsrfProtectionValidator.enabled flag in its setUp/tearDown. When the flag leaked into the REST test's async HTTP calls, 'localhost' was rejected by SSRF and extra tellFailure invocations broke the Mockito verify count. TbHttpClientTest and SsrfSafeAddressResolverGroupTest already declare @ResourceLock("SsrfProtectionValidator"); apply the same lock to TbRestApiCallNodeTest so all three SSRF-sensitive tests serialize. Fixes #15453	2 months ago
..
main/java/org/thingsboard/rule/engine	Fix REST API Call node blocking actor thread and semaphore permit leak	2 months ago
test	Fix flaky TbRestApiCallNodeTest via SsrfProtectionValidator ResourceLock	2 months ago

Sergey Matvienko 08e94a7f2a Fix flaky TbRestApiCallNodeTest via SsrfProtectionValidator ResourceLock

TbRestApiCallNodeTest ran concurrently with SsrfSafeAddressResolverGroupTest,
which toggles the static SsrfProtectionValidator.enabled flag in its
setUp/tearDown. When the flag leaked into the REST test's async HTTP calls,
'localhost' was rejected by SSRF and extra tellFailure invocations broke the
Mockito verify count.

TbHttpClientTest and SsrfSafeAddressResolverGroupTest already declare
@ResourceLock("SsrfProtectionValidator"); apply the same lock to
TbRestApiCallNodeTest so all three SSRF-sensitive tests serialize.

Fixes #15453

2 months ago

main/java/org/thingsboard/rule/engine

Fix REST API Call node blocking actor thread and semaphore permit leak

2 months ago

test

Fix flaky TbRestApiCallNodeTest via SsrfProtectionValidator ResourceLock

2 months ago