[FINERACT-865] Strengthen/Harden Fineract 1.x to LTS Version by Upgrading Java & Improving Code Coverage of Tests

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Auto Closed
• Labels: Cleanup2022 fineract gsoc gsoc2020 mentor
• Assignee: Unassigned
• Reporter: Sanyam Goel
• Created: 20/Mar/20 16:58
• Updated: 07/Nov/22 18:11
• Resolved: 07/Nov/22 18:11

Description

Overview & Objectives: The Fineract 1.x code base powering Mifos X and dozen of cloud-based core banking and fintech solutions around the world supporting millions of clients is very robust and feature-rich. With the wide functional footprint, there comes greater complexity in the code that makes maintainability more difficult. Additionally, as new features have been added the test coverage hasn't been extended at the same rate. The combination of these multiple factors - a large and varied user base that is reliant upon this vast codebase, the high maintenance burden, the need for increased testing coverage, and the need for a stable point for migration to the new architecture - merits this very important project will consist of these major tasks, documented in the following issues:
Description:

• Update Java from Version 8 to 11 (https://issues.apache.org/jira/browse/FINERACT-846)
• Measure Existing Code Coverage of Tests and Improve to at least 50% and Reduce Execution time (https://issues.apache.org/jira/browse/FINERACT-713)
• Ensure Fineract Codebase should pass PMD, Findbugs and Checkstyle analysis (https://issues.apache.org/jira/browse/FINERACT-712)

Helpful Skills: Spring, Hibernate, REST, Java, SQL
Impact: Improved functionality and increased stability of the core Fineract platform
Other Resources: Getting Started with Apache Fineract: https://cwiki.apache.org/confluence/display/FINERACT/Getting+Started+Docs

Issue Links

• Blocked: FINERACT-846 Upgrade Fineract 1.x to Java 11 and Upgrade Dependencies to latest versions
• Blocked: FINERACT-963 Upgrade about 15 of our 3rd-party libraries to their latest versions
• Blocked: FINERACT-712 Fineract codebase should pass PMD, Findbugs and Checkstyle analysis
• Blocked: FINERACT-713 Improve code-coverage to at-least 50% and reduce execution time
• Blocked: FINERACT-949 Improve Java API style used for writing integration tests in Fineract
• is blocked by: FINERACT-969 Run OWASP zaproxy.org against Fineract (e.g. fineract.dev)
• is blocked by: FINERACT-853 Use find-sec-bugs SpotBugs plugin to detect SQL injection issues (and other security related problems)
• is blocked by: FINERACT-854 Use prepared statements instead of string concatenated SQL everywhere
• is blocked by: FINERACT-967 lgtm.com Security Vulnerability Assessment Scanning
• is blocked by: FINERACT-988 Snyk.io Security Vulnerability Assessment Scanning