AdityaandClaude Opus 4.7
8284851f67
Backend:
- m_bank_user_dsc + m_dsc_challenge tables (Liquibase 0292/0293/0294)
- DSC enrollment flow: start → JNLP → JWS helper → callback → upsert
- DSC login factor: challenge → sign → verify → claim minted TFA token
- 2FA gate now also accepts an active DSC mapping (AuthenticationApiResource
+ TwoFactorAuthenticationFilter), defensively wrapped so a missing DSC table
doesn't 500 the auth path
- TenantAwareBasicAuthenticationFilter exempts /api/v*/dsc/helper.jar and
strips Authorization header for that path so JWS's raw GET works without
the user seeing a browser Basic-auth prompt
- DSC helper JAR served at /api/v*/dsc/helper.jar from a configurable
filesystem path (default ~/.cbsnexora/dsc-helper.jar)
Java helper JAR (dsc-helper/):
- Standalone Gradle subproject, Java 8 target, fat jar with Gson shaded in
- Cross-platform token picker (Windows Cert Store / ePass2003 / eToken /
ProxKey / Other) — matches the JNLP arg contract emitted by the backend
- Sets Fineract-Platform-TenantId on its callback POST from the JNLP args
- JNLP age check now reads cbsnexora-dsc.jnlp (current name) AND
SignTender.jnlp (legacy) — picks the youngest, never blocks if none exist
Inline KYC upsert in updateClient (mirror of the create-flow path):
- ClientKycWritePlatformService.upsertKycInline() — creates or merges KYC
fields, bumps status to IN_PROGRESS on real changes; resets PAN verification
on PAN edit of a verified record
- ClientWritePlatformServiceJpaRepositoryImpl.updateClient() handles the
kyc:{} sub-object on PUT /clients/{id}, matching createClient
User uniqueness:
- m_appuser.email + m_appuser.mobile_no UNIQUE (Liquibase 0295)
- Pre-flight assertEmailAndMobileUnique() in create/update with self-exclusion
- handleDataIntegrityIssues maps the two new constraints to clean
field-scoped error messages (race-condition safety net)
Email OTP subject line now: "Your OTP for Login - <AppName> (dd-MM-yy-HH:mm)"
where AppName comes from fineract.email.from-name (default "CBSnexora").
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
52 lines
1.5 KiB
Groovy
52 lines
1.5 KiB
Groovy
/*
|
|
* Builds the cbsnexora-dsc-helper.jar consumed by the JNLP from /api/v1/dsc/helper.jar.
|
|
*
|
|
* Targets Java 1.8 so the broadest set of client JREs (incl. legacy OpenWebStart installs)
|
|
* can launch the helper. The JAR is a "fat" jar with Gson shaded in — JNLP <resources> can only
|
|
* list one <jar href="..."> cleanly, and avoiding network round-trips for tiny Gson is a win.
|
|
*/
|
|
plugins {
|
|
id 'java'
|
|
}
|
|
|
|
group = 'com.cbsnexora'
|
|
version = '1.0.0'
|
|
|
|
java {
|
|
sourceCompatibility = JavaVersion.VERSION_1_8
|
|
targetCompatibility = JavaVersion.VERSION_1_8
|
|
}
|
|
|
|
repositories {
|
|
mavenCentral()
|
|
}
|
|
|
|
dependencies {
|
|
implementation 'com.google.code.gson:gson:2.10.1'
|
|
}
|
|
|
|
jar {
|
|
archiveBaseName = 'cbsnexora-dsc-helper'
|
|
archiveClassifier = ''
|
|
|
|
manifest {
|
|
attributes(
|
|
'Main-Class' : 'com.cbsnexora.dsc.CbsnexoraDscHelper',
|
|
'Permissions' : 'all-permissions',
|
|
'Application-Name' : 'CBSnexora DSC Helper',
|
|
'Codebase' : '*',
|
|
'Implementation-Version': project.version
|
|
)
|
|
}
|
|
|
|
// Shade Gson into the same jar so JNLP only needs one <jar> entry.
|
|
duplicatesStrategy = DuplicatesStrategy.EXCLUDE
|
|
from {
|
|
configurations.runtimeClasspath.collect { it.isDirectory() ? it : zipTree(it) }
|
|
}
|
|
// Strip signatures from shaded deps so re-signing the fat jar is clean.
|
|
exclude 'META-INF/*.SF'
|
|
exclude 'META-INF/*.DSA'
|
|
exclude 'META-INF/*.RSA'
|
|
}
|