Merge branch 'development' into f034_merge_dev

Reviewed-on: #16

Dockerfile.dev

@@ -0,0 +1,17 @@
+# --- Build stage ---
+FROM node:22 AS build
+ENV NODE_ENV=production
+ENV ORIGIN=https://tatort-dev.innovation-hub-niedersachsen.de
+WORKDIR /app
+COPY package*.json ./
+RUN npm ci
+COPY . ./
+COPY config_dev.json ./config.json
+RUN npm run build
+
+# --- Production stage ---
+FROM node:22-alpine3.20
+COPY --from=build /app .
+ENV HOST=0.0.0.0
+EXPOSE 3000
+CMD ["sh", "-c", "ORIGIN=https://tatort-dev.innovation-hub-niedersachsen.de node build/index.js"]

Dockerfile.prod

@@ -6,6 +6,7 @@ WORKDIR /app
 COPY package*.json ./
 RUN npm ci
 COPY . ./
+COPY config_prod.json ./config.json
 RUN npm run build
 
 # --- Production stage ---
@@ -14,4 +15,3 @@ COPY --from=build /app .
 ENV HOST=0.0.0.0
 EXPOSE 3000
 CMD ["sh", "-c", "ORIGIN=https://tatort.innovation-hub-niedersachsen.de node build/index.js"]
-

Jenkinsfile

@@ -1,3 +1,8 @@
+/* groovylint-disable-next-line UnusedVariable */
+@Library('InnoHub-Library') _
+
+Boolean didRun = false
+
 pipeline {
     agent any
 
@@ -7,9 +12,13 @@ pipeline {
 
     environment {
         REGISTRY = 'https://gitea.innovation-hub-niedersachsen.de/'
-        IMAGE = 'tatort-app'
-        USER = 'jared'
-        TOKEN = credentials('c661e484bb4f032f8a0a5b02cda6f3344ca584b5')
+        USER = 'jenkins'
+        TOKEN = credentials('JenkinsGitea')
+    }
+
+    parameters {
+        string(name: 'REPO_NAME', defaultValue: '', description: 'Repo Name')
+        string(name: 'GIT_REF', defaultValue: '', description: 'Git Ref')
     }
 
     options {
@@ -22,46 +31,73 @@ pipeline {
     }
 
     stages {
+        stage('Validate Repository') {
+            steps {
+                script {
+                    checkRepoName(params.REPO_NAME, true)
+                }
+            }
+        }
+
         stage('Install Dependencies') {
             steps {
+                script {
+                    didRun = true
+                }
                 sh 'npm ci'
             }
         }
 
         stage('Test & Security Audit') {
             steps {
+                script {
+                    didRun = true
+                }
                 echo 'Start checking security vulnerabilities in npm packages'
-                sh 'npm audit'
+                sh 'npm audit --audit-level=moderate'
             }
         }
 
-        // stage('Build') {
-        //     when {
-        //         branch 'development'
-        //     }
-        //     steps {
-        //         sh 'npm run build'
-        //     }
-        // }
+        stage('SonarQube Analysis') {
+            steps {
+                withSonarQubeEnv('sonarqube') {
+                    sh 'sonar-scanner -Dsonar.projectKey=tatort -Dsonar.sources=src'
+                }
+            }
+        }
 
-    // stage('Push image in gitea registry') {
-    //     steps {
-    //         echo 'Start Pushing'
-    //         script {
-    //             docker.withRegistry('https://gitea.innovation-hub-niedersachsen.de', 'JenkinsGitea') {
-    //                 docker.build('innohub/tatort-app').push('latest')
-    //             }
-    //         }
-    //     }
-    // }
+        stage('Push image to gitea registry') {
+            when {
+                branch 'development'
+            }
+            steps {
+                script {
+                    didRun = true
+                    def tag = "innohub/tatort-dev:0.${env.BUILD_ID}"
+                    docker.withRegistry('https://gitea.innovation-hub-niedersachsen.de', 'JenkinsGitea') {
+                        docker.build(tag, '-f Dockerfile.dev .').push('latest')
+                    }
+                }
+            }
+        }
     }
 
     post {
         success {
-            echo 'Pipeline erfolgreich!'
+            script {
+                if (didRun) {
+                    echo 'Pipeline erfolgreich!'
+                    discordSend description: "Running ${env.BUILD_ID} on ${env.JENKINS_URL}, ${params.GIT_REF}", footer: 'Pipeline succeeded', link: env.BUILD_URL, result: currentBuild.currentResult, title: env.JOB_NAME, webhookURL: 'https://discordapp.com/api/webhooks/1389470542691831819/NdMO17sLBG2dplp_-oh6Ff0cbPOoADl0QwXKM9UzduxU44av_ZQkQjKTmpdK7YuwcZDc'
+                }
+            }
         }
         failure {
-            echo 'Pipeline fehlgeschlagen!'
+            script {
+                if (didRun) {
+                    echo 'Pipeline fehlgeschlagen!'
+                    discordSend description: "Running ${env.BUILD_ID} on ${env.JENKINS_URL}, ${params.GIT_REF}", footer: 'Pipeline failed', link: env.BUILD_URL, result: currentBuild.currentResult, title: env.JOB_NAME, webhookURL: 'https://discordapp.com/api/webhooks/1389470542691831819/NdMO17sLBG2dplp_-oh6Ff0cbPOoADl0QwXKM9UzduxU44av_ZQkQjKTmpdK7YuwcZDc'
+                }
+            }
         }
     }
 }

config_dev.json

@@ -0,0 +1,17 @@
+{
+	"minio": {
+		"endPoint": "sws3.innovation-hub-niedersachsen.de",
+		"port": 443,
+		"useSSL": true,
+		"accessKey": "wjpKrmaqXra99rX3D61H",
+		"secretKey": "fTPi0u0FR6Lv9Y9IKydWv6WM0EA5XrsK008HCt9u"
+	},
+	"jwt": {
+		"secret": "@S2!q@@wXz$dCQ8JoVsHLpzaJ6JCfB",
+		"expiresIn": 3600
+	},
+	"auth": {
+		"admin": { "password": "A-InnoHUB_2025!", "admin": true },
+		"user": { "password": "U-InnoHUB_2025!", "admin": false }
+	}
+}

config_prod.json

@@ -8,10 +8,10 @@
 	},
 	"jwt": {
 		"secret": "@S2!q@@wXz$dCQ8JoVsHLpzaJ6JCfB",
-		"expiresIn": 36000
+		"expiresIn": 3600
 	},
 	"auth": {
 		"admin": { "password": "A-InnoHUB_2025!", "admin": true },
 		"user": { "password": "U-InnoHUB_2025!", "admin": false }
 	}
-}
+}

package.json

@@ -44,9 +44,12 @@
 		"@sveltejs/adapter-node": "^5.2.12",
 		"@tailwindcss/forms": "^0.5.10",
 		"autoprefixer": "^10.4.21",
+		"crypto": "^1.0.1",
 		"jsonwebtoken": "^9.0.2",
+		"jssha": "^3.3.1",
 		"minio": "^8.0.5",
 		"postcss": "^8.5.4",
+		"sqlite3": "^5.1.7",
 		"tailwindcss": "^3.4.17"
 	}
 }

src/init/init_db.js

@@ -0,0 +1,42 @@
+import sqlite3 from 'sqlite3';
+import jsSHA from 'jssha';
+
+const db = new sqlite3.Database('./src/lib/data/tatort.db');
+
+db.serialize(() => {
+    // users table
+
+    let create_stmt = `CREATE TABLE IF NOT EXISTS users
+            (id INTEGER PRIMARY KEY AUTOINCREMENT,
+             name TEXT NOT NULL,
+             pw TEXT NOT NULL)`;
+    db.run(create_stmt);
+
+    // check if there are any users; if not add one default admin one
+    let pw = 'pass-123';
+    let hashed_pw = new jsSHA('SHA-512', 'TEXT').update(pw).getHash('HEX');
+
+    let check_ins_stmt = `INSERT INTO users (name, pw) SELECT 'admin', '${hashed_pw}'
+                        WHERE NOT EXISTS (SELECT * FROM users);`;
+
+    db.run(check_ins_stmt);
+
+    let users_stmt = `SELECT * FROM USERS`;
+    db.each(users_stmt, (err, row) => {
+        console.log(`xxx ${row.name} + ${row.pw}`)
+    });
+
+    // cases table
+
+    create_stmt = `CREATE TABLE IF NOT EXISTS cases
+            (id INTEGER PRIMARY KEY AUTOINCREMENT,
+             token TEXT NOT NULL UNIQUE,
+             name TEXT NOT NULL,
+             pw TEXT NOT NULL,
+             created_by INTEGER NOT NULL,
+             FOREIGN KEY(created_by) REFERENCES users(id))`;
+
+    db.run(create_stmt);
+});
+
+db.close();

src/routes/(token-based)/list/[vorgang]/+page.svelte

@@ -208,7 +208,7 @@
 												url.pathname += `/${filename}`;
 
 												try {
-													const response = await fetch(`api/${url}`, { method: 'DELETE' });
+													const response = await fetch(`/api${url.pathname}`, { method: 'DELETE' });
 													if (response.status == 204) {
 														setTimeout(() => {
 															window.location.reload();