fix(jans-linux-setup): use sqlconnection instead of mysqlconnection

[devrimyatar]

Closes #10160

• I confirm that there is no impact on the docs due to the code changes in this PR.

[dryrunsecurity]

DryRun Security Summary

The provided code changes are related to the installation and configuration of a Relational Database Management (RDBM) system, such as MySQL or PostgreSQL, for the Jans application, with a more generic approach to handle different RDBM types and good security practices.

Expand for full summary

Summary:

The provided code changes are related to the installation and configuration of a Relational Database Management (RDBM) system, such as MySQL or PostgreSQL, for the Jans application. The changes introduce a more generic approach to handle different RDBM types, with specific implementation details for MySQL and PostgreSQL. The code follows good security practices, including the generation of random passwords, the creation of unique indexes to maintain data integrity, the use of parameterized SQL queries to prevent SQL injection vulnerabilities, and the handling of the PostgreSQL configuration file to allow access from the local host. Additionally, the code obscures the RDBM password before storing it in the configuration file, which is a good security practice to protect sensitive information.

Files Changed:

• jans-linux-setup/jans_setup/setup_app/installers/rdbm.py: This file contains the code changes related to the installation and configuration of the RDBM system for the Jans application. The key changes include:
  • Updating the database connection method from mysqlconnection() to sqlconnection() to handle different RDBM types.
  • Implementing the local_install() method to handle the installation and setup of MySQL or PostgreSQL, including creating the database, user, granting privileges, and updating the PostgreSQL configuration file.
  • Generating the necessary SQL commands to create tables based on the Jans schema files, adding comments to the PostgreSQL columns, and creating indexes and unique indexes.
  • Implementing the import_ldif() method to import the LDIF files into the RDBM.
  • Generating the RDBM-specific properties file (e.g., jans-mysql.properties) based on a template.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[sonarqubecloud]

Quality Gate passed for 'jans-linux-setup'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud