Skip to content

Conversation

@namedgraph
Copy link
Member

No description provided.

namedgraph and others added 30 commits September 12, 2025 13:46
… path (#243)

* The admin app moved to the `admin.` subdomain instead of the `admin/` path

`ldh:origin` replaces `ldt:base` in config

* `RemoveIpValve` config params

Also fixed `Connector` proxy params

* Separated Docker build and run stages in the CI

* CI debug logs

* Debug CI

* Debug

* Debug CI

* Hardcoded `${HTTP_PORT}` value in `HEALTHCHECK`

* atomgraph/letsencrypt-tomcat base image bump

* Debug server.xml

* Replaced `ldh:base` with `ldh:origin`

Moved RDF data with relative URIs out from admin.trig
Removed origin output

* Fixed `ADMIN_BASE_URL`

* Undo http-tests workflow chnages

* `ADMIN_BASE_URL` fix in HTTP test

* Replacing the last `ldt:base` usages in XSLT with `ldh:origin`

`make-public` CLI script fix

* Whitespace

* Javadoc

* New `Application::normalizeOrigin` method
* Updated ACL queries to only retrieve authorizations for the current dataspace

That is done by injecting `$base` into the queries and adding `FILTER(strstarts(str(?g), str($base)))`

* Adding fake cross-dataspace authorizations to test dataset

* Throw `NotFoundException` when non dataspace (application) is matched

Inject `Optional<Application>` instead of just `Application`

* Set `-f` on curl calls in tests

* Refactor agent metadata and authorization handling

Introduces separate templates for owner and secretary authorizations, updates entrypoint.sh to extract and manage agent metadata and authorizations per app, and adds a SPARQL query for agent metadata extraction. Updates Dockerfile and test configurations to support new dataset and metadata handling. Refactors Java `ValidatingModelProvider` to improve application presence checks and mbox processing. Also improves XSLT title rendering and test scripts for non-existent dataspaces.

* Test fix

* Error flags in CLI scripts
Entrypoint cleanup
Response filter that adds CORS (Cross-Origin Resource Sharing) headers to allow cross-origin access.
Closes #73
Excluded the indirect Xerces dependency and now the JDK internal Xerces is the default XML parser
* Validate whether IP address is internal in `ProxyResourceBase`

Added new `ForbiddenExceptionMapper`

* New tests for IP address blocking

* Allow `localhost` proxying
`Content-Security-Policy` response header is now set when serving uploaded files
…d localhost

The filter now uses baseURI.getHost() to determine which URLs to rewrite,
allowing it to work correctly on production deployments (e.g., linkeddatahub.com)
instead of only on localhost.

This fixes a performance regression introduced in the admin subdomain refactor
where internal requests would go through external network instead of Docker network.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>
* CLI script cleanup

* Script fix

* CLI script fixes
Removed debug output from entrypoint
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants