From 52b25184e9bce199b1f24ccafd8cc8947a788d7d Mon Sep 17 00:00:00 2001 From: Thomasr Date: Mon, 26 May 2025 15:58:28 -0400 Subject: [PATCH 1/2] Fix issue which public app is not viewable by anonymous user --- .../api/application/ApplicationController.java | 15 ++++++--------- 1 file changed, 6 insertions(+), 9 deletions(-) diff --git a/server/api-service/lowcoder-server/src/main/java/org/lowcoder/api/application/ApplicationController.java b/server/api-service/lowcoder-server/src/main/java/org/lowcoder/api/application/ApplicationController.java index bff1fff99..b1dd5c556 100644 --- a/server/api-service/lowcoder-server/src/main/java/org/lowcoder/api/application/ApplicationController.java +++ b/server/api-service/lowcoder-server/src/main/java/org/lowcoder/api/application/ApplicationController.java @@ -97,31 +97,28 @@ public Mono> getEditingApplication(@PathVariable S @Override public Mono> getPublishedApplication(@PathVariable String applicationId, @RequestParam(required = false) Boolean withDeleted) { return gidService.convertApplicationIdToObjectId(applicationId).flatMap(appId -> - applicationApiService.getEditingApplication(appId, true).flatMap(originalApplicationView -> applicationApiService.getPublishedApplication(appId, ApplicationRequestType.PUBLIC_TO_ALL, withDeleted) .delayUntil(applicationView -> applicationApiService.updateUserApplicationLastViewTime(appId)) - .delayUntil(applicationView -> businessEventPublisher.publishApplicationCommonEvent(originalApplicationView, applicationView, APPLICATION_VIEW)) - .map(ResponseView::success))); + .delayUntil(applicationView -> businessEventPublisher.publishApplicationCommonEvent(applicationView, applicationView, APPLICATION_VIEW)) + .map(ResponseView::success)); } @Override public Mono> getPublishedMarketPlaceApplication(@PathVariable String applicationId) { return gidService.convertApplicationIdToObjectId(applicationId).flatMap(appId -> - applicationApiService.getEditingApplication(appId, true).flatMap(originalApplicationView -> applicationApiService.getPublishedApplication(appId, ApplicationRequestType.PUBLIC_TO_MARKETPLACE, false) .delayUntil(applicationView -> applicationApiService.updateUserApplicationLastViewTime(appId)) - .delayUntil(applicationView -> businessEventPublisher.publishApplicationCommonEvent(originalApplicationView, applicationView, APPLICATION_VIEW)) - .map(ResponseView::success))); + .delayUntil(applicationView -> businessEventPublisher.publishApplicationCommonEvent(applicationView, applicationView, APPLICATION_VIEW)) + .map(ResponseView::success)); } @Override public Mono> getAgencyProfileApplication(@PathVariable String applicationId) { return gidService.convertApplicationIdToObjectId(applicationId).flatMap(appId -> - applicationApiService.getEditingApplication(appId, true).flatMap(originalApplicationView -> applicationApiService.getPublishedApplication(appId, ApplicationRequestType.AGENCY_PROFILE, false) .delayUntil(applicationView -> applicationApiService.updateUserApplicationLastViewTime(appId)) - .delayUntil(applicationView -> businessEventPublisher.publishApplicationCommonEvent(originalApplicationView, applicationView, APPLICATION_VIEW)) - .map(ResponseView::success))); + .delayUntil(applicationView -> businessEventPublisher.publishApplicationCommonEvent(applicationView, applicationView, APPLICATION_VIEW)) + .map(ResponseView::success)); } @Override From 04512b17c1952bee51ed940f691313cfdbc6a178 Mon Sep 17 00:00:00 2001 From: Thomasr Date: Mon, 26 May 2025 16:00:53 -0400 Subject: [PATCH 2/2] Add Node payload encryption salt and password to excluded list of serversettings api --- .../serversetting/service/ServerSettingServiceImpl.java | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/server/api-service/lowcoder-domain/src/main/java/org/lowcoder/domain/serversetting/service/ServerSettingServiceImpl.java b/server/api-service/lowcoder-domain/src/main/java/org/lowcoder/domain/serversetting/service/ServerSettingServiceImpl.java index d016c2960..ab8ae5fd2 100644 --- a/server/api-service/lowcoder-domain/src/main/java/org/lowcoder/domain/serversetting/service/ServerSettingServiceImpl.java +++ b/server/api-service/lowcoder-domain/src/main/java/org/lowcoder/domain/serversetting/service/ServerSettingServiceImpl.java @@ -31,7 +31,9 @@ public class ServerSettingServiceImpl implements ServerSettingService { "LOWCODER_SUPERADMIN_PASSWORD", "LOWCODER_SUPERADMIN_USERNAME", "LOWCODER_SUPERUSER_PASSWORD", - "LOWCODER_SUPERUSER_USERNAME"); + "LOWCODER_SUPERUSER_USERNAME", + "LOWCODER_DB_ENCRYPTION_SALT", + "LOWCODER_DB_ENCRYPTION_PASSWORD"); @Autowired public ServerSettingServiceImpl(ServerSettingRepository repository) {