Is your feature request related to a problem? Please describe.
Outdated deps versions is a security risk.

Describe the solution you'd like
At least update and test code base with updated versions for the Critical and High severity flagged dependencies on this list:
https://github.com/uio-bmi/localega-tsd-proxy/security/dependabot

Describe alternatives you've considered
Consider also patching the Moderate severity flagged deps.

Is your feature request related to a problem? Please describe.
Seems to be no tests /checks present for this service ( is tested by overall integration tests only). I. e.there is no support to see if a dependabot update or other changes breaks this particular service before approving a PR .

Describe the solution you'd like
A mminimal set of tests for the proxy service that do not require a full blown stack to interact with. Build, ++

Based on agreed upon discussions, this PR moves the localega-tsd-proxy repositorie's group ID to no.elixir.fega. Also bumps the version in pom.xml to 2.0.0.

Possibly linked with elixir-oslo/clearinghouse.

The advanced-security/maven-dependency-submission-action@v3 breaks the build process with a 403.
Probably needs a look into the pre-reqs at https://github.com/marketplace/actions/maven-dependency-tree-dependency-submission#pre-requisites

Describe the bug
The MVC content does not show.

The PR with relevant changes is in place:

Todo:

• Push the v2.0.0 tag
• Make sure the release notes document the group ID change

Depends on:

• #2
• uio-bmi/tsd-file-api-client#1

Automatic re-deployment of localega-tsd-proxy container on SSL cert renewal

Describe the bug
HTTP timeouts are necessary to expire inactive connections and failing to do so might make the application vulnerable to attacks like slowloris which work by sending data very slow, which in case of no timeout will keep the connection active eventually leading to a denial-of-service (DoS) attack. (CWE-400)

Lifted from:
neicnordic/sda-s3proxy#293

May be relevant for other https servers in setup? Web?

"filesize":0,"file_last_modified":0 are sent to cega and they are not in additionalProperties of remove message and the values are also 0.

Describe the bug
If a user is deleting an uploaded file from the inbox, it is correctly removed by lega-commander/TSD in co-operation, but the proper "remove" message to CEGA is not having the intended effect. I.e. CEGA still lists the file as available for user to pick for ingestion (when defining a Run or DataSet in the submission portal).

A "remove" message is being sent (seen in the logs), unknown if:

• if the format conforms to the json schema for this message type
• if a proper correlationID is set for the message (CEGA known to fail/ignore messages without a mandatory correlationID)
• if all fields of the message has the proper content. Both fileSize and lastModified fields are set to value "0" which probably should be corrected.

Expected behavior
When the delete end-point is executed, a properly formatted message with correct content is sent to CEGA from the proxy service (similar pattern to the upload message when the upload end-point is utilized)

Is your feature request related to a problem? Please describe.
No.

Describe the solution you'd like
The current version of README.md does not provide up-to-date information on the LocalEGA-TSD-proxy or shortly proxy service.

CEGA credentials shouldn't be required for Data Out - only Elixir AAI token.

Describe the bug
A clear and concise description of what the bug is.
The java server spits out errors about invalid mime type specifically for the { token.

Additional context
Add any other context about the problem here.
Specifying MediaType to JSON (for proxyController)/ HTML (for authcontroller) might help with this.

It is a github action on build.yml file for dependency graph

Describe the bug
The service has a circular dependency.

To Reproduce
running the integration tests in LocalEGA-deploy-swarm reproduces the problem.

Expected behavior
In #42 spring-boot-starter-parent was upgraded to 2.6.2 which does not allow circular referencing.

Screenshots
| The dependencies of some of the beans in the application context form a cycle:
|
| ┌─────┐
| | localEGATSDProxyApplication
| ↑ ↓
| | org.springframework.boot.autoconfigure.web.servlet.WebMvcAutoConfiguration$EnableWebMvcConfiguration
| ↑ ↓
| | org.springframework.security.config.annotation.web.configuration.OAuth2ClientConfiguration$OAuth2ClientWebMvcSecurityConfiguration
| └─────┘
|
|
| Action:
|
| Relying upon circular references is discouraged and they are prohibited by default. Update your application to remove the dependency cycle between beans. As a last resort, it may be possible to break the cycle automatically by setting spring.main.allow-circular-references to ***.

Is your feature request related to a problem? Please describe.
API refactor needed based on API changes in Central EGA NSS

Describe the solution you'd like
refactor for:

1. New API response from Central EGA NSS
2. New endpoint URL from Central EGA NSS

Describe alternatives you've considered

Additional context
neicnordic/sda-inbox-sftp#287

Describe the bug
When issuing a "delete file in inbox" operation in the REST interface (i.e. using lega-commander), the message being posted by the MQ Aspect to CEGA is incomplete. It has "filesize":0 and "file_last_modified":0.

To Reproduce
Steps to reproduce the behavior:

1. List your files in your inbox using "lega-commander inbox -l"
2. Select a file to delete: "lega-commander inbox -d delete-this-file.c4gh"
3. Log into ega.elixir.no and inspect proxy server log to see MQ message posted to CEGA: "docker logs proxy-container-id | less"
4. Observe wrong message

Expected behavior
filesize should be set correctly.
file_last_modified: check docs for what info this should contain

Screenshot

Review current dependabot updates
NB: clearing-house and TSD-File-API-client latest releases not detected yet
Decide which features too merge for a new release for the planned Sept production deployment

• NB certificate renewal (read cert from file and not docker secret)