[STRATOS-1303] Application signup process not validated

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 4.1.0 Alpha
• Component/s: REST API
• Assignee: Unassigned
• Reporter: Mariangela Hills
• Created: 31/Mar/15 11:53
• Updated: 31/Mar/15 11:53

Description

The following are the related issues identified:

1) <STRATOS_SOURCE_HOME>/samples/applications/single-cartridge/artifacts/application-signup.json defines artifact repository information for two cartridges PHP and Tomcat. However, only the PHP cartridge is defined and added for this sample. Therefore, the artifact repository information for the Tomcat cartridge needs to be removed as it is not correct having it.

2) Application signup process not validated - Even though the artifact repository details for two cartridges (PHP & Tomcat) are given in the application-signup.json and are passed when executing POST /applications/

{applicationId}

/signup it does not give an error in the HTTP output or the logs indicating that the artifact repository details for the Tomcat cartridge are not applicable as no such cartridge has been added for this sample.

--------------------------------------------------------------------------------------------------------

[1]
Admin16s-MacBook-Air:artifacts Admin16$ curl -X POST -H "Content-Type: application/json" -d @'application-signup.json' -k -v -u admin:admin https://localhost:9443/api/applications/single-cartridge-app/signup

• About to connect() to localhost port 9443 (#0)
• Trying ::1...
• connected
• Connected to localhost (::1) port 9443 (#0)
• SSLv3, TLS handshake, Client hello (1):
• SSLv3, TLS handshake, Server hello (2):
• SSLv3, TLS handshake, CERT (11):
• SSLv3, TLS handshake, Server key exchange (12):
• SSLv3, TLS handshake, Server finished (14):
• SSLv3, TLS handshake, Client key exchange (16):
• SSLv3, TLS change cipher, Client hello (1):
• SSLv3, TLS handshake, Finished (20):
• SSLv3, TLS change cipher, Client hello (1):
• SSLv3, TLS handshake, Finished (20):
• SSL connection using DHE-RSA-AES256-SHA
• Server certificate:
• subject: C=US; ST=CA; L=Mountain View; O=WSO2; CN=localhost
• start date: 2010-02-19 07:02:26 GMT
• expire date: 2035-02-13 07:02:26 GMT
• common name: localhost (matched)
• issuer: C=US; ST=CA; L=Mountain View; O=WSO2; CN=localhost
• SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
• Server auth using Basic with user 'admin'
  > POST /api/applications/single-cartridge-app/signup HTTP/1.1
  > Authorization: Basic YWRtaW46YWRtaW4=
  > User-Agent: curl/7.24.0 (x86_64-apple-darwin12.0) libcurl/7.24.0 OpenSSL/0.9.8| zlib/1.2.5
  > Host: localhost:9443
  > Accept: /
  > Content-Type: application/json
  > Content-Length: 428
  >
• upload completely sent off: 428 out of 428 bytes
  < HTTP/1.1 200 OK
  < Date: Tue, 31 Mar 2015 10:08:58 GMT
  < Content-Type: application/json
  < Transfer-Encoding: chunked
  < Server: WSO2 Carbon Server
  <
• Connection #0 to host localhost left intact {"statusCode":200,"successMessage":"Successfully signed up for: [application] single-cartridge-app"}

  * Closing connection #0

• SSLv3, TLS alert, Client hello (1):