Dynamic CORS Filter

[lorthirk]

Introducing Dynamic CORS Filter

This is a refactoring of the existing CORS filter, that is currently allowing all Cross Origins requests responding with Access-Control-Allow-Origin: * to any REST request. From now on, the CORS Filter will only allow calls from specific Origins that can be configured per-account or for the whole system.

Related Issue
No related issues

Description of the solution adopted
The filter leverages the Endpoints feature to register allowed Origins for any given account.

A new tab will appear under the Settings menu item, named CORS. Here you can add HTTP Origins that will be allowed for a given account. Since those items are actually leveraging the Endpoints feature, the same inheritance rules will apply (i.e. if not CORS Origins are found in a given account, the account hierarchy will be traversed up until the root account until a CORS Origin definition will be found).

System-wide CORS Origins can also be configured via the api.cors.origins.allow system property.

Screenshots
New Add Endpoint Dialog:

Any side note on the changes made
The Endpoints registered as valid CORS Origins will have the cors Endpoint Type. Regular Endpoints will have the resource Endpoint Type.

[codecov]

Codecov Report

Merging #3278 (e1ca772) into develop (e1a8e1d) will increase coverage by 1.39%.
The diff coverage is 19.60%.

❗ Current head e1ca772 differs from pull request most recent head 4b18a33. Consider uploading reports for the commit 4b18a33 to get more accurate results

@@              Coverage Diff              @@
##             develop    #3278      +/-   ##
=============================================
+ Coverage      52.71%   54.10%   +1.39%     
- Complexity       782      786       +4     
=============================================
  Files           1470     1475       +5     
  Lines          30031    30150     +119     
  Branches        2508     2520      +12     
=============================================
+ Hits           15832    16314     +482     
+ Misses         13306    12920     -386     
- Partials         893      916      +23     

Impacted Files	Coverage Δ	Complexity Δ
...eclipse/kapua/app/api/core/CORSResponseFilter.java	0.00% <0.00%> (ø)	0.00 <0.00> (ø)
...g/eclipse/kapua/service/endpoint/EndpointInfo.java	0.00% <ø> (ø)	0.00 <0.00> (?)
...kapua/service/endpoint/EndpointInfoAttributes.java	0.00% <ø> (ø)	0.00 <0.00> (?)
...ua/service/endpoint/internal/EndpointInfoImpl.java	62.50% <66.66%> (+62.50%)	0.00 <0.00> (ø)
...ice/endpoint/internal/EndpointInfoServiceImpl.java	75.22% <73.33%> (+75.22%)	0.00 <0.00> (ø)
...app/api/core/settings/KapuaApiCoreSettingKeys.java	100.00% <100.00%> (ø)	0.00 <0.00> (ø)
...ice/endpoint/internal/EndpointInfoCreatorImpl.java	77.27% <100.00%> (+77.27%)	0.00 <0.00> (ø)
...pua/service/endpoint/internal/EndpointInfoDAO.java	86.66% <100.00%> (+86.66%)	0.00 <0.00> (ø)
...ransport/mqtt/pooling/PooledMqttClientFactory.java	61.90% <0.00%> (-9.53%)	0.00% <0.00%> (ø%)
...a/org/eclipse/kapua/transport/mqtt/MqttClient.java	56.09% <0.00%> (-6.10%)	0.00% <0.00%> (ø%)
... and 63 more