Skip to content

Auth refactor: SITE_ACCESS/AUTH_PROVIDERS, auth provider plugins, scoped role bindings, groups, token v2 - #1139

Merged
tariqksoliman merged 115 commits into
developmentfrom
devin/1792534660-authz-redesign
Oct 27, 2026
Merged

Auth refactor: SITE_ACCESS/AUTH_PROVIDERS, auth provider plugins, scoped role bindings, groups, token v2#1139
tariqksoliman merged 115 commits into
developmentfrom
devin/1792534660-authz-redesign

Auth providers: fixes from the second developer wave

2060008
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis failed Oct 27, 2026 in 15m 31s

Quality Gate failed

Failed conditions
E Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Annotations

Check warning on line 468 in plugins/core/backend/Utils/routes/utils.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Command Argument Tampering via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I5PsvqXLKMkNpJq0&open=AaF7I5PsvqXLKMkNpJq0&pullRequest=1139

Check warning on line 128 in plugins/core/backend/Stac/routes/stac.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

API Traversal via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I5aOvqXLKMkNpJq5&open=AaF7I5aOvqXLKMkNpJq5&pullRequest=1139

Check failure on line 1923 in plugins/core/backend/Geodatasets/routes/geodatasets.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

SQL Injection via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I4xvvqXLKMkNpJqk&open=AaF7I4xvvqXLKMkNpJqk&pullRequest=1139

Check failure on line 92 in plugins/core/backend/Utils/routes/utils.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Path Traversal via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I5PsvqXLKMkNpJqy&open=AaF7I5PsvqXLKMkNpJqy&pullRequest=1139

Check failure on line 1410 in plugins/core/backend/Config/routes/configs.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Path Traversal via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I5B1vqXLKMkNpJqs&open=AaF7I5B1vqXLKMkNpJqs&pullRequest=1139

Check warning on line 355 in plugins/core/backend/Utils/routes/utils.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Command Argument Tampering via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I5PsvqXLKMkNpJqz&open=AaF7I5PsvqXLKMkNpJqz&pullRequest=1139

Check failure on line 549 in plugins/core/backend/Geodatasets/routes/geodatasets.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

SQL Injection via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I4xvvqXLKMkNpJqm&open=AaF7I4xvvqXLKMkNpJqm&pullRequest=1139

Check warning on line 148 in API/logger.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Log Injection via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I34ivqXLKMkNpJqi&open=AaF7I34ivqXLKMkNpJqi&pullRequest=1139

Check warning on line 299 in plugins/core/backend/Utils/routes/utils.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Command Argument Tampering via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I5PsvqXLKMkNpJqx&open=AaF7I5PsvqXLKMkNpJqx&pullRequest=1139

Check failure on line 1520 in plugins/core/backend/Config/routes/configs.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Path Traversal via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7EosTpS4ABfZuSYKG&open=AaF7EosTpS4ABfZuSYKG&pullRequest=1139

Check warning on line 151 in API/logger.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Log Injection via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I34ivqXLKMkNpJqh&open=AaF7I34ivqXLKMkNpJqh&pullRequest=1139

Check warning on line 147 in plugins/core/backend/Stac/routes/stac.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Server-Side Request Forgery via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I5aOvqXLKMkNpJq1&open=AaF7I5aOvqXLKMkNpJq1&pullRequest=1139

Check failure on line 50 in scripts/middleware.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Path Traversal via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I5rWvqXLKMkNpJq6&open=AaF7I5rWvqXLKMkNpJq6&pullRequest=1139

Check warning on line 21 in plugins/core/backend/Stac/routes/stac.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Server-Side Request Forgery via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I5aOvqXLKMkNpJq2&open=AaF7I5aOvqXLKMkNpJq2&pullRequest=1139

Check warning on line 142 in API/logger.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Log Injection via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I34ivqXLKMkNpJqg&open=AaF7I34ivqXLKMkNpJqg&pullRequest=1139

Check warning on line 1409 in plugins/core/backend/Config/routes/configs.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Filesystem Oracle via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I5B1vqXLKMkNpJqr&open=AaF7I5B1vqXLKMkNpJqr&pullRequest=1139

Check failure on line 226 in scripts/middleware.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Path Traversal via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I5rWvqXLKMkNpJq7&open=AaF7I5rWvqXLKMkNpJq7&pullRequest=1139

Check warning on line 104 in plugins/core/backend/Sightline/routes/visibility.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Command Argument Tampering via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I4_MvqXLKMkNpJqp&open=AaF7I4_MvqXLKMkNpJqp&pullRequest=1139

Check failure on line 330 in plugins/core/backend/Geodatasets/routes/geodatasets.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Prototype Pollution via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I4xvvqXLKMkNpJqj&open=AaF7I4xvvqXLKMkNpJqj&pullRequest=1139

Check warning on line 454 in plugins/core/backend/Utils/routes/utils.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Command Argument Tampering via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I5PsvqXLKMkNpJqu&open=AaF7I5PsvqXLKMkNpJqu&pullRequest=1139

Check warning on line 147 in plugins/core/backend/Stac/routes/stac.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

API Traversal via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I5aOvqXLKMkNpJq4&open=AaF7I5aOvqXLKMkNpJq4&pullRequest=1139

Check failure on line 440 in plugins/core/backend/Geodatasets/routes/geodatasets.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Prototype Pollution via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I4xvvqXLKMkNpJql&open=AaF7I4xvvqXLKMkNpJql&pullRequest=1139

Check warning on line 38 in plugins/core/backend/Sightline/routes/horizonprofile.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Command Argument Tampering via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I49FvqXLKMkNpJqo&open=AaF7I49FvqXLKMkNpJqo&pullRequest=1139

Check warning on line 416 in plugins/core/backend/Utils/routes/utils.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Command Argument Tampering via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I5PsvqXLKMkNpJqt&open=AaF7I5PsvqXLKMkNpJqt&pullRequest=1139

Check warning on line 263 in plugins/core/backend/Utils/routes/utils.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Command Argument Tampering via unsanitized user input 

See more on https://sonarcloud.io/project/issues?id=NASA-AMMOS_MMGIS&issues=AaF7I5PsvqXLKMkNpJqw&open=AaF7I5PsvqXLKMkNpJqw&pullRequest=1139
View more details on SonarQubeCloud