Skip to content

DAST Site validation - Hook up Profile Validation - Frontend

What does this MR do?

This hooks up the frontend validation components to actual API calls for validating DAST sites.

How to test this?

  1. Enable the feature flag.
echo "Feature.enable(:security_on_demand_scans_site_validation)" | rails c
  1. Install and setup graphql-vue-apollo-playground locally. Checkout the mock-dast-site-profiles branch and run the mock server.

  2. Use the local mock server in the Apollo provider.

diff --git a/ee/app/assets/javascripts/dast_site_profiles_form/graphql/provider.js b/ee/app/assets/javascripts/dast_site_profiles_form/graphql/provider.js
index ef96b443da8..993a7cefb5c 100644
--- a/ee/app/assets/javascripts/dast_site_profiles_form/graphql/provider.js
+++ b/ee/app/assets/javascripts/dast_site_profiles_form/graphql/provider.js
@@ -5,5 +5,10 @@ import createDefaultClient from '~/lib/graphql';
 Vue.use(VueApollo);
 
 export default new VueApollo({
-  defaultClient: createDefaultClient(),
+  defaultClient: createDefaultClient(
+    {},
+    {
+      baseUrl: 'http://localhost:4000',
+    },
+  ),
 });
  1. Navigate to the DAST Site profile form in your GDK: /:namespace/:project/-/on_demand_scans/profiles/dast_site_profiles/new

Screenshots

Error when validation status can not be retrieved
Screen_Shot_2020-09-08_at_5.19.28_PM
Error when validation token can not be created
Screen_Shot_2020-09-08_at_5.18.29_PM

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Edited by Paul Gascou-Vaillancourt

Merge request reports