pmatisic / stem2024

Overview

In this project, we prioritize security and code quality by employing several tools and practices to ensure robustness and maintainability.

SolarLint

We utilize SolarLint as our primary linter to enforce code style conventions and identify potential issues in our codebase. SolarLint not only provides clean code tips but also offers security analysis, thereby enhancing our code quality and security posture. Example of SolarLint providing clean code tips:

Synk

For static application security testing and software composition analysis, we rely on Synk. Synk is integrated into our continuous integration pipeline, running on every commit pushed to GitHub. It helps us identify and address code vulnerabilities promptly, ensuring the integrity and security of our application.

ZAP Automated Scan

As a final security measure, we conduct a ZAP Automated Scan on our frontend. This scan helps us identify any potential security vulnerabilities in our application. During our last scan, we received only a single warning, which we promptly investigated. Upon review, we found no cloud metadata that could be exploited for a potential attack, ensuring the robustness of our application.

Access Credentials

To access our application, please use the following login credentials:

• Username: [email protected]
• Password: admin123

Security Measures

In the development of our frontend and backend systems, we have adhered strictly to industry-standard best practices to ensure the highest levels of security and resilience against various types of cyber threats.

Organization

We used github issues to document tasks and progress on our work

stem2024's Issues

Create endpoint for searching

Create endpoint for registration

Create event page and event component to show on page

Create endpoint for login

Add angular material designs to already existing login and registration page

Setup database

Setup a postgresql database with the following entities:

• User
• Event
• Event Comments
• Event keywords
• DNS records

Create endpoint for forgot my password

Create login page and design

Create login page with the following fields:

• Email address
• Password
• Link to forgot my password
• Link to registration

Create UI for login

Created UI for events

Setup backend

Setup java backend for communication with frontend and database

Create endpoints for managing events

Create registration page and design

Create a registration page compontent with the following fields:

• First name
• Last name
• Email address
• Password (Minimal 6 charachters)