artin/OBP-API
1
0
Fork 0
mirror of https://github.com/OpenBankProject/OBP-API.git synced 2026-02-06 11:06:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

show warning at boot for Super admin users.

Browse Source
This commit is contained in:
simonredfern 2026-01-28 21:46:49 +01:00
parent af36601d76
commit 2731a4954b
1 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
obp-api/src/main/scala/bootstrap/liftweb/Boot.scala
View File

@ -328,6 +328,8 @@ class Boot extends MdcLoggable {
createBootstrapSuperUser()
warnAboutSuperAdminUsers()
//launch the scheduler to clean the database from the expired tokens and nonces, 1 hour
DataBaseCleanerScheduler.start(intervalInSeconds = 60*60)
@ -1026,6 +1028,33 @@ class Boot extends MdcLoggable {
}
/**
* Warn about Super Admin Users
* Super admin is intended for bootstrapping only. Users should grant themselves
* proper roles (e.g. CanCreateEntitlementAtAnyBank) and then remove their user_id
* from the super_admin_user_ids props setting.
*/
private def warnAboutSuperAdminUsers(): Unit = {
APIUtil.getPropsValue("super_admin_user_ids") match {
case Full(v) if v.trim.nonEmpty =>
val userIds = v.split(",").map(_.trim).filter(_.nonEmpty).toList
if (userIds.nonEmpty) {
logger.warn("========================================================================")
logger.warn("WARNING: super_admin_user_ids is configured with the following user IDs:")
userIds.foreach(userId => logger.warn(s" - $userId"))
logger.warn("")
logger.warn("Super admin is intended for BOOTSTRAPPING ONLY.")
logger.warn("These users bypass normal role checks.")
logger.warn("Please:")
logger.warn(" 1. Login as a super admin user")
logger.warn(" 2. Grant yourself CanCreateEntitlementAtAnyBank (and other required roles)")
logger.warn(" 3. Remove your user_id from super_admin_user_ids in props")
logger.warn("========================================================================")
}
case _ => // No super admin users configured, nothing to warn about
}
}
LiftRules.statelessDispatch.append(aliveCheck)
}