U4-7769 - Models builder 3.0 Visual Studio extension + security

Created by Claus Jensen 18 Jan 2016, 14:30:15 Updated by Shannon Deminick 04 Feb 2016, 10:36:48

Tags: ModelsBuilder

need to release vs ext with mb 3


Stephan 25 Jan 2016, 17:23:14

The Visual Studio extension (and the Console tool) requires that the API is working. I ''do'' have the API working with ASP.NET Identity (only with local Umbraco identity/user though, no idea what happens if your identity comes from Google or Facebook--but we could ''demand'' a local account for the API, I guess). So, the code exits and works. However, it requires that Umbraco can deliver oauth tokens, ie that the Identity Extensions package is installed in Umbraco. => we need to discuss how we want this to work.

Shannon Deminick 01 Feb 2016, 12:40:49

For this sprint - we want to have a separate package for MB API Server so we can release 7.4 final without it

Shannon Deminick 03 Feb 2016, 10:52:30

To confirm what we need to do:

  • Move all of the Umbraco.ModelsBuilder/Api stuff into a different assembly or into the Umbraco.ModelsBuilder.CustomTool
  • Create a new nuspec for nuget package for the Visual Studio plugin - this is lower priority, we need to have this nuget package ready this week but we need to the standard MB package we will be shipping with ready with the removed Api code ** Then review the security part of that

Stephan 03 Feb 2016, 15:14:48

PR: https://github.com/zpqrtbnk/Zbu.ModelsBuilder/pull/88

This moves the API server to an independent NuGet package that explicitely needs to be installed for the API server to exist + the API server will only run if compilation debug="true" ie if it is a dev site, not live.

It would be recommended that the ModelsBuilder.Api.dll never goes to production, as well as the EnableApi appSettings.

Also, this restores the API with (temp, basic) auth - tested with the Visual Studio extension and the console tool.

Shannon Deminick 04 Feb 2016, 10:36:44

changes look good to me

Priority: Normal

Type: Bug

State: Fixed




Backwards Compatible: True

Fix Submitted:

Affected versions:

Due in version:

Sprint: Sprint 8

Story Points: