fix(jans-cli-tui): scim patch operation

[devrimyatar]

closes #9472

• Relevant documentation has been updated if any (i.e. user guides, installation and configuration guides, technical design docs etc)

[dryrunsecurity]

DryRun Security Summary

The pull request focuses on improving the validation and handling of PATCH requests in the Jans Config API CLI application, as well as enhancing the user management functionality of the Janssen Server, including the introduction of a new patch-user-by-id operation.

Expand for full summary

Summary:

The code changes in this pull request focus on improving the validation and handling of PATCH requests in the Jans Config API CLI application, as well as enhancing the user management functionality of the Janssen Server.

The changes to the cli_tui/cli/config_cli.py file ensure that the op and path fields in the PATCH request data are properly formatted and validated before processing the request. This helps to prevent potential errors or unexpected behavior during the PATCH operation, which is a positive security enhancement.

The changes to the docs/admin/config-guide/scim-config/user-config.md file introduce new user management features, such as the ability to perform partial updates on user profiles using the patch-user-by-id operation. While these features can improve the flexibility and usability of the Janssen Server's user management functionality, it is essential to ensure that appropriate security controls and best practices are in place, such as robust input validation, access control, and comprehensive logging and auditing.

Files Changed:

1. jans-cli-tui/cli_tui/cli/config_cli.py:

   • The process_command_patch function now checks the op field in the PATCH request data to ensure it is a valid operation, and it also ensures that the path field starts with a forward slash.
   • These changes improve the validation of the PATCH request data, reducing the risk of potential security vulnerabilities.

2. docs/admin/config-guide/scim-config/user-config.md:

   • The changes introduce the patch-user-by-id operation, which allows partially updating a user's properties.
   • The code provides a sample JSON payload for the patch-user-by-id operation and examples of how to use the Janssen CLI and REST API for user management.
   • From a security perspective, it is important to ensure that appropriate input validation, access control, and logging/auditing mechanisms are in place for these user management features.

Code Analysis

We ran 9 analyzers against 2 files and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[sonarqubecloud]

Quality Gate passed for 'jans-cli'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud