Ghostwriter v2.3.0-rc2

[chrismaddalena]

Merging code for v2.3.0-rc2:

[2.3.0-rc2] - 3 June 2022

Added

• New options to generate and revoke API tokens with a set expiry date
• Added Hasura GraphQL engine to production environments
• Usernames are now clickable and open the user's profile page for viewing
• Added a generateReport mutation to the GraphQL API capable of returning the JSON report data as a base64 string
• Added user controls for generating and revoking API tokens from the user profile page
• Added checkoutDomain and checkoutServer actions to the GraphQL API that validate checkouts
• Added deleteDomainCheckout, deleteServerCheckout, deleteTemplate, and deleteEvidence actions to the GraphQL schema that clean-up the filesystem and database after deletions

Changed

• Updated the Nginx configuration to incorporate the Hasura container
• Updated style of the finding preview pages for the finding library
• Updated style of notes to make them cleaner and easier to manage
• Project dashboard's "Objectives" tab will now show the current number of incomplete objectives and update when toggling objectives
• Updated keyword reference panel displayed when editing findings
• Subtask forms for objectives will now default to the objective's deadline date instead of "today"
• Objective deadlines will now be automatically adjusted when the parent objective's deadline changes
• Database migrations now set default values for timestamps (current time), timezones ("America/Los_Angeles"), and boolean values (False)
  • Enables easier creation of new entries via the GraphQL API

Deprecated

• None

Removed

• Removed unnecessary status badges on tabs in the project dashboard that were confusing and not very helpful
• Revoked direct insert permissions for History and ServerHistory tables used for tracking domain and server checkouts

Fixed

• Upgraded django-bleach dependency to fix error with latest python-bleach (Fixes Template error when viewing clients in v2.2.3 #208)
• Fixed error that blocked creation of default BlockQuote style in the report template
• Fixed domain age column not sorting correctly in domain library table
• Checkbox in server form will no longer appear way bigger than intended
• Fixed issue where <em> tags could cause report generation to fail

Security

• Upgraded pyjwt to v2.4.0 to address CVE-2022-29217

[codecov-commenter]

Codecov Report

Merging #215 (2ca59e7) into master (6258ca9) will increase coverage by 0.28%.
The diff coverage is 96.56%.

@@            Coverage Diff             @@
##           master     #215      +/-   ##
==========================================
+ Coverage   82.24%   82.52%   +0.28%     
==========================================
  Files          41       41              
  Lines        5311     5454     +143     
==========================================
+ Hits         4368     4501     +133     
- Misses        943      953      +10     

Impacted Files	Coverage Δ
ghostwriter/api/views.py	97.12% <96.52%> (-2.88%)	⬇️
ghostwriter/rolodex/models.py	100.00% <100.00%> (ø)
ghostwriter/api/utils.py	98.43% <0.00%> (-1.57%)	⬇️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 6258ca9...2ca59e7. Read the comment docs.