Skip to content

Various Sentinel found fixes 1 - #2947

Merged
simonredfern merged 30 commits into
OpenBankProject:developfrom
simonredfern:develop
Oct 19, 2026
Merged

simonredfern merged 30 commits into
OpenBankProject:developfrom
simonredfern:develop

Conversation

@simonredfern

Copy link
Copy Markdown
Member

No description provided.

DecodeRawTx now throws IllegalArgumentException and the connector wraps
the decode in tryons + adds unit and v6.0.0 endpoint tests.
reading the user from the Lift-era SS thread-global. v4.0.0 routes drop
their SS.init wrappers and the unused SS object is removed.
exclude that tag by default in pom.xml, so they run only when included
explicitly.
…nsent that belongs to the logged-in user (return 404 if not)
 view the user has on the account, and revokes nothing when the user is
 an account holder with owner view access or the only user with owner
 view access (OBP-20110 OwnerViewAccessMustRemain, 403); it used to
 delete only one of the user's views and still answer 204.
 user, also from an account holder or the only user with owner access
 (the canRevokeOwnerAccess rule that refused this is removed, and with
 it a revoked consent no longer keeps its owner access to an account),
 but a user cannot revoke their own access: the v1.2.1, v4.0.0 and
 v5.1.0 revoke endpoints refuse that with OBP-20111
 CannotRevokeOwnAccountAccess (403).
…bodies or returned warehouse rows to the INFO log
…ttribute of the product in the path, at the bank in the path
…ves an endpoint of the caller's own collection, and only if the endpoint is in the collection in the path
…ath, where the Role is checked, not at the bank_id in the body
…e of the product in the path, at the bank in the path
… of the customer in the path, at the bank in the path
@sonarqubecloud

Copy link
Copy Markdown

@simonredfern
simonredfern merged commit fd392a6 into OpenBankProject:develop Oct 19, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant