Update to v1.4.57

.db_requirements

@@ -1 +1 @@
-v0.1.33
+v0.1.37

.env

@@ -3,6 +3,7 @@
 # -----------------------------------------------------
 ###> symfony/framework-bundle ###
 APP_ENV=dev
+APP_SECRET=32f3c49be690d4c5f499093ae7dd3a7d
 ###< symfony/framework-bundle ###
 
 APP_DEBUG=true
@@ -12,6 +13,7 @@ APP_DEBUG=true
 # -----------------------------------------------------
 
 # Unique secret for creating signatures (rememberme, CSRF etc)
+APP_SECRET=32f3c49be690d4c5f499093ae7dd3a7d
 
 # Database at-rest encryption key (generated with "php bin/console generate:database-key")
 DATABASE_ENCRYPTION_KEY=
@@ -120,3 +122,5 @@ AUDITLOG_RABBITMQ_ROUTING_KEY=auditlog
 AUDITLOG_FILE_ENCRYPTED=false
 AUDITLOG_FILE_LOG_PII=false
 AUDITLOG_FILE_PATH=%kernel.logs_dir%/audit.log
+
+HAS_FEATURE_VERWERKINGSREGISTER_LINK=false

.env.ci

@@ -1,53 +1,22 @@
 # This env file is used for CI testing.
 
-APP_ENV=dev
+# define your env variables for the test env here
+KERNEL_CLASS='App\Kernel'
 APP_SECRET=32f3c49be690d4c5f499093ae7dd3a7d
-
-SITE_NAME=open.minvws.nl
+SYMFONY_DEPRECATIONS_HELPER=999999
+PANTHER_APP_ENV=panther
+PANTHER_ERROR_SCREENSHOT_DIR=./var/error-screenshots
 
 DATABASE_URL="postgresql://postgres:postgres@localhost:5432/postgres?serverVersion=14&charset=utf8"
 
-HIGH_TRANSPORT_DSN=amqp://guest:guest@localhost:5672/%2f/high
-INGESTOR_TRANSPORT_DSN=amqp://guest:guest@localhost:5672/%2f/ingestor
-ESUPDATER_TRANSPORT_DSN=amqp://guest:guest@localhost:5672/%2f/es_updates
-GLOBAL_TRANSPORT_DSN=amqp://guest:guest@localhost:5672/%2f/global
-
-ELASTICSEARCH_HOST=http://localhost:9200
-ELASTICSEARCH_USER=
-ELASTICSEARCH_PASS=
-ELASTICSEARCH_MTLS_CERT_PATH=
-ELASTICSEARCH_MTLS_KEY_PATH=
-ELASTICSEARCH_MTLS_CA_PATH=
-
-TIKA_HOST=http://localhost:9998
-
-REDIS_URL=redis://localhost:6379
-REDIS_TLS_CAFILE=
-REDIS_TLS_LOCAL_CERT=
-REDIS_TLS_LOCAL_PK=
-
-COOKIE_NAME=WOOPID
-
-TOTP_ISSUER=localhost
-
-APP_MODE=BOTH
-PUBLIC_BASE_URL=http://localhost:8000
-
-
-STORAGE_DOCUMENT_ADAPTER=local
-STORAGE_THUMBNAIL_ADAPTER=local
-STORAGE_BATCH_ADAPTER=local
-
-PIWIK_ANALYTICS_ID=0
+HIGH_TRANSPORT_DSN=in-memory://
+INGESTOR_TRANSPORT_DSN=in-memory://
+ESUPDATER_TRANSPORT_DSN=in-memory://
+GLOBAL_TRANSPORT_DSN=in-memory://
 
-#------------------------------------------------------
-# audit logger variables
-AUDITLOG_ENCRYPTION_PUB_KEY=
-AUDITLOG_ENCRYPTION_PRIV_KEY=
+RABBITMQ_URL=amqp://guest:guest@localhost:5672
 
-AUDITLOG_PSR_ENCRYPTED=false
-AUDITLOG_DOCTRINE_ENCRYPTED=false
-AUDITLOG_RABBITMQ_ENCRYPTED=false
-AUDITLOG_FILE_ENCRYPTED=false
-AUDITLOG_FILE_PATH=%kernel.logs_dir%/audit.log
+# The key to encrypt fields in the database. Generate with "bin/console generate:database-key"
+DATABASE_ENCRYPTION_KEY=314005005c42fb6849aa5d7ca12faba81643c03e71e3a590e1436a882e9fff8135237d39d99652bc7f35a39c87bd370fa4745276126b145b3d2e34f2c3ea105d424893ae82f92347393860d4fa9836fdb1933525e7de765a379bed5777402bc10cc6be46
+# SYMFONY_DEPRECATIONS_HELPER="disabled=1"
 

.env.test

@@ -1,6 +1,20 @@
 # define your env variables for the test env here
 KERNEL_CLASS='App\Kernel'
-APP_SECRET='$ecretf0rt3st'
+APP_SECRET=32f3c49be690d4c5f499093ae7dd3a7d
 SYMFONY_DEPRECATIONS_HELPER=999999
 PANTHER_APP_ENV=panther
 PANTHER_ERROR_SCREENSHOT_DIR=./var/error-screenshots
+
+DATABASE_URL="postgresql://postgres:postgres@postgres:5432/postgres?serverVersion=14&charset=utf8"
+
+HIGH_TRANSPORT_DSN=in-memory://
+INGESTOR_TRANSPORT_DSN=in-memory://
+ESUPDATER_TRANSPORT_DSN=in-memory://
+GLOBAL_TRANSPORT_DSN=in-memory://
+
+RABBITMQ_URL=amqp://guest:guest@rabbitmq:5672
+
+# The key to encrypt fields in the database. Generate with "bin/console generate:database-key"
+DATABASE_ENCRYPTION_KEY=314005005c42fb6849aa5d7ca12faba81643c03e71e3a590e1436a882e9fff8135237d39d99652bc7f35a39c87bd370fa4745276126b145b3d2e34f2c3ea105d424893ae82f92347393860d4fa9836fdb1933525e7de765a379bed5777402bc10cc6be46
+# SYMFONY_DEPRECATIONS_HELPER="disabled=1"
+

.eslintrc.js

@@ -31,6 +31,7 @@ module.exports = {
     '@typescript-eslint/lines-between-class-members': 'off',
     '@typescript-eslint/no-use-before-define': 'off',
     'class-methods-use-this': 'off',
+    'import/no-extraneous-dependencies': 'off',
     'import/extensions': [
       'error',
       'never',
@@ -64,7 +65,7 @@ module.exports = {
         '@typescript-eslint/no-explicit-any': 'off',
         '@typescript-eslint/no-var-requires': 'off',
         'global-require': 'off',
-        'import/no-extraneous-dependencies': 'off',
+        'import/extensions': 'off',
       },
     },
   ],

.github/CODEOWNERS

@@ -0,0 +1,3 @@
+* @minvws/rdo-woo-codeowners
+
+/tests/robot_framework @minvws/rdo-robotframework-codeowners

.github/dependabot.yml

@@ -0,0 +1,18 @@
+version: 2
+updates:
+  - package-ecosystem: "composer"
+    directory: "/" 
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "npm"
+    directory: "/" 
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "github-actions"
+    directory: "/" 
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "docker"
+    directory: "/" 
+    schedule:
+      interval: "weekly"

.github/workflows/ci.yml

@@ -0,0 +1,124 @@
+name: Continuous Integration
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+env:
+  NODE_VERSION: 18
+  PHP_VERSION: 8.2
+
+jobs:
+  validate:
+    name: 'Build & validate'
+    runs-on: 'ubuntu-22.04'
+    services:
+      postgres:
+        image: postgres:14.10-bookworm
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: postgres
+          POSTGRES_DB: postgres_test
+        ports:
+          - 5432:5432
+        options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
+      rabbitmq:
+        image: rabbitmq:3
+        ports:
+          - 5672:5672
+        options: --health-cmd "rabbitmqctl node_health_check" --health-interval 10s --health-timeout 5s --health-retries 5
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Setup node
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+          registry-url: 'https://npm.pkg.github.com'
+      - name: Install npm dependencies
+        run: |
+          echo "//npm.pkg.github.com/:_authToken=$NODE_AUTH_TOKEN"  >> ~/.npmrc
+          npm ci --ignore-scripts
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.REPO_READ_ONLY_TOKEN }}
+      - name: 'Linting: javascript'
+        if: always()
+        run: |
+          npm run jslint
+          sed -i 's@'$GITHUB_WORKSPACE'@/github/workspace@g' reports/eslint.json
+      - name: 'Linting: Markdown'
+        uses: DavidAnson/markdownlint-cli2-action@v16
+        if: always()
+        with:
+          globs: |
+            **/*.md
+            !node_modules
+            !vendor
+      - name: 'Linting: REUSE'
+        uses: fsfe/reuse-action@v3
+        if: always()
+      - name: 'Unit tests: front-end'
+        if: always()
+        run: npm test
+      - name: Install PHP
+        uses: shivammathur/setup-php@master
+        if: always()
+        with:
+          php-version: ${{ env.PHP_VERSION }}
+          extensions: zip, pgsql, pcov
+      - name: 'Composer install'
+        if: always()
+        env:
+          COMPOSER_AUTH: '{"github-oauth": {"github.com": "${{ secrets.REPO_READ_ONLY_TOKEN }}"}}'
+        run: composer install  --no-interaction --no-scripts --no-progress --prefer-dist --no-ansi
+      - name: Build npm
+        if: always()
+        run: npm run build
+      - name: 'Linting: PHP CodeSniffer'
+        if: always()
+        run: vendor/bin/phpcs
+      - name: 'Linting: PHP CS Fixer'
+        if: always()
+        run: vendor/bin/php-cs-fixer fix --dry-run --diff --verbose
+      - name: 'Linting: PHPmd'
+        if: always()
+        run: vendor/bin/phpmd src/ text ruleset.phpmd.xml
+      - name: Copy .env.ci to .env.local
+        if: always()
+        run: cp .env.ci .env.test.local
+      - name: Clear and warmup cache
+        if: always()
+        id: cache_warmup
+        env:
+          APP_ENV: prod
+          APP_DEBUG: false
+        run: |
+          bin/console cache:clear
+          bin/console cache:warmup
+      - name: 'Linting: Twig'
+        if: success() || steps.cache_warmup.conclusion == 'success'
+        run: bin/console lint:twig templates
+      - name: 'Linting: Translations'
+        if: success() || steps.cache_warmup.conclusion == 'success'
+        run: bin/console lint:yaml translations
+      - name: 'Static Code Analysis: PHPStan'
+        if: success() || steps.cache_warmup.conclusion == 'success'
+        run: vendor/bin/phpstan analyse --error-format=json > reports/phpstan.json
+      - name: Migrate Test DB
+        if: always()
+        run: bin/console doctrine:schema:create --no-interaction --env=test
+      - name: 'Unit tests: PHP'
+        if: always()
+        run: php -dpcov.enabled=1 -dpcov.directory=. bin/phpunit -d --without-creating-snapshots --log-junit=reports/report-phpunit.xml --coverage-clover=reports/coverage-phpunit.xml
+      - name: 'Static Code Analysis: SonarCloud'
+        if: always()
+        uses: SonarSource/sonarcloud-github-action@master
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/daily-e2e-acc-robotrun.yml

@@ -0,0 +1,38 @@
+name: E2E Tests - Acceptance
+on:
+    schedule:
+      - cron: '0 0 * * *' # This cron schedule runs the workflow every day at midnight UTC
+    workflow_dispatch:
+
+jobs:
+  e2e-robot-tests:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+    - name: Install python dependencies
+      run: |
+        python -m pip install --upgrade pip
+        pip install -r tests/robot_framework/requirements.txt --use-deprecated=legacy-resolver
+        rfbrowser init
+    - name: Execute Robot Framework tests
+      env:
+        OTP_SECRET_WOO: ${{ secrets.OTP_SECRET_WOO }}
+        USERNAME_WOO_STAGING: ${{ secrets.USERNAME_WOO_STAGING }}
+        PASSWORD_WOO_STAGING: ${{ secrets.PASSWORD_WOO_STAGING }}
+      run: |
+        python -m robot -d tests/robot_framework/results -x outputxunit.xml -i E2E_ACC -e LOGS -v headless:true tests/robot_framework
+    - name: Upload test results
+      uses: actions/upload-artifact@v4
+      if: always()
+      with:
+        name: reports
+        path: tests/robot_framework/results
+    - name: Publish test results
+      uses: minvws/[email protected]
+      if: always()
+      with:
+        output_file: 'tests/robot_framework/results/output.xml'
+        endpoints: 'https://web.acc.woo.rdobeheer.nl'
+        username: '${{ secrets.USERNAME_WOO_STAGING }}'
+        password: '${{ secrets.PASSWORD_WOO_STAGING }}'

.github/workflows/daily-e2e-tst-robotrun.yml

@@ -0,0 +1,41 @@
+name: E2E Tests - Test
+on:
+    schedule:
+      - cron: '0 0 * * *' # This cron schedule runs the workflow every day at midnight UTC
+    workflow_dispatch:
+
+jobs:
+  e2e-robot-tests:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+    - name: Install python dependencies
+      run: |
+        python -m pip install --upgrade pip
+        pip install -r tests/robot_framework/requirements.txt --use-deprecated=legacy-resolver
+        rfbrowser init
+    - name: Execute Robot Framework tests
+      env:
+        OTP_SECRET_WOO: ${{ secrets.OTP_SECRET_WOO }}
+        USERNAME_WOO_TEST: ${{ secrets.USERNAME_WOO_TEST }}
+        PASSWORD_WOO_TEST: ${{ secrets.PASSWORD_WOO_TEST }}
+        EMAIL_WOO_TEST_BALIE: ${{ secrets.EMAIL_WOO_TEST_BALIE }}
+        PASSWORD_WOO_TEST_BALIE: ${{ secrets.PASSWORD_WOO_TEST_BALIE }}
+        SECRET_WOO_TEST_BALIE: ${{ secrets.SECRET_WOO_TEST_BALIE }}
+      run: |
+        python -m robot -d tests/robot_framework/results -x outputxunit.xml -i E2E_TST -e LOGS -v headless:true tests/robot_framework
+    - name: Upload test results
+      uses: actions/upload-artifact@v4
+      if: always()
+      with:
+        name: reports
+        path: tests/robot_framework/results
+    - name: Publish test results
+      uses: minvws/[email protected]
+      if: always()
+      with:
+        output_file: 'tests/robot_framework/results/output.xml'
+        endpoints: 'https://web.test.woo.rdobeheer.nl'
+        username: '${{ secrets.USERNAME_WOO_TEST }}'
+        password: '${{ secrets.PASSWORD_WOO_TEST }}'