fix(jans-cli-tui): populate config-api widgets when page entered

[devrimyatar]

closes #9414

• I confirm that there is no impact on the docs due to the code changes in this PR.

[dryrunsecurity]

DryRun Security Summary

The pull request focuses on improving the functionality of the Jans CLI TUI application, including changes to the retrieval and handling of attributes from the Jans server and the configuration API plugin, without introducing any obvious security concerns, but requiring proper validation and sanitization of input parameters and configuration data.

Expand for full summary

Summary:

The code changes in this pull request are focused on improving the functionality of the Jans CLI TUI application, specifically related to the retrieval and handling of attributes from the Jans server and the configuration API plugin.

The changes in the background_tasks.py file are related to the retrieval of attributes from the Jans server. The changes involve storing the retrieved attributes in a separate list before updating the common_data.jans_attributes list. This change does not introduce any obvious security concerns, but it's important to ensure that the input parameters used in the API requests are properly validated and sanitized to prevent potential injection attacks.

The changes in the main.py file of the Config API plugin involve updating the initialization and handling of the configuration data. The changes include moving the attribute widget feeding to the on_page_enter method, creating a background task to fetch the configuration, and updating the schema retrieval and UI rendering. These changes also do not appear to introduce any immediate security vulnerabilities, but it's crucial to ensure that the configuration data is properly validated and sanitized to prevent potential security issues.

Files Changed:

1. jans-cli-tui/cli_tui/utils/background_tasks.py:

   • The get_attributes_coroutine function has been modified to store the retrieved attributes in a separate jans_attributes list before updating the common_data.jans_attributes list.
   • The changes do not introduce any obvious security concerns, but it's important to ensure that the input parameters used in the API requests are properly validated and sanitized.

2. jans-cli-tui/cli_tui/plugins/140_config_api/main.py:

   • The __init__ method no longer appends the feed_attribute_widgets function to the common_data.background_tasks_feeds['attributes'] list, and instead, it is called in the on_page_enter method.
   • The init_plugin method now creates a background task to fetch the configuration using the get_configuration method.
   • The create_widgets method has been updated to use the get_schema_from_reference method to retrieve the schema for the ApiAppConfiguration component.
   • The get_configuration method has been updated to handle errors when fetching the configuration and to call the create_widgets method to update the UI.
   • The changes do not appear to introduce any obvious security concerns, but it's important to ensure that the configuration data is properly validated and sanitized.

Code Analysis

We ran 9 analyzers against 2 files and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[sonarqubecloud]

Quality Gate passed for 'jans-cli'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[sonarqubecloud]

Quality Gate passed for 'jans-linux-setup'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[sonarqubecloud]

Quality Gate passed for 'jans-config-api-parent'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[sonarqubecloud]

Quality Gate passed for 'jans-core'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud