feat(Rest): New endpoint allow load SPDX license info from attachment of release (ISR, CLX, CLI)

[hoangnt2]

New endpoint allow load SPDX license info from attachment of release (ISR, CLX, CLI)

How To Test?

1. Upload Attachment with type is Component license information (XML), Component license information (Combined) or Initial Scan Report.
2. Send GET request to: http://localhost:8080/resource/api/releases/{releaseId}/spdxLicensesInfo?attachmentId={attachmentId}
3. Example Response:

• Attachment Type is Initial Scan Report

{
  "otherLicense": "Other License Ids",
  "otherLicenseIds": [
    "MIT",
    "RSA-Security"
  ],
  "license": "Possible Main License Ids",
  "totalFileCount": 4,
  "MIT": [
    "test-3.2.tar.gz/test-3.2/support/sys/cron",
    "test-3.2.tar.gz/test-3.2/support/README",
    "test-3.2.tar.gz/test-3.2/sample"
  ],
  "RSA-Security": [
    "test-3.2.tar.gz/test-3.2/support/md5.h"
  ]
}

• Attachment Type is Component license information (XML) or Component license information (Combined)

{
  "license": "Concluded License Ids",
  "licenseIds": [
    "BSD-3-Clause",
    "GPL"
  ],
  "otherLicense": "Other License Ids",
  "otherLicenseIds": [
    "MIT",
    "RSA-Security"
  ]
}

Refer to Rest doc for more information: http://localhost:8080/resource/docs/api-guide.html#resources-load-SPDX-license-info-from-attachment-of-release

[nikkuma7]

Test successful.

AttachmentType: ISR (Initial Scan Report)

[afsahsyeda]

Hi, found this test in the Rest API Docs...not sure it belongs there

[hoangnt2]

Hi, found this test in the Rest API Docs...not sure it belongs there

Hi @afsahsyeda, there are 2 response's formats for this API with ISR attachment and CLX(CLI) attachment. In your image, it's response for CLX or CLI file type

[afsahsyeda]

@hoangnt2 is it supposed to be a part of the response for CLX attachment?

[hoangnt2]

@hoangnt2 is it supposed to be a part of the response for CLX attachment?

@afsahsyeda Yes it's response for CLX attachment. Actually, I'm not clearly about this feature, I'm trying to do the same as Portlet is doing. So if you find out any problems please let me know