feat(jans-orm): add search support in json path

[yurem]

closes #9754

• I confirm that there is no impact on the docs due to the code changes in this PR.

[dryrunsecurity]

DryRun Security Summary

The code change in this pull request is a minor bugfix or improvement to the SqlFilterConverter class, which is responsible for converting LDAP filters to SQL filters, and does not introduce any obvious security concerns.

Expand for full summary

Summary:

The code change in this pull request is part of the SqlFilterConverter class, which is responsible for converting LDAP filters to SQL filters. The specific change is in the resolveAttributeName() method, which is used to determine the attribute name for a given filter.

The change is to return the filter's attribute name directly if the tableMapping or the filter itself is null. This is likely a defensive change to handle cases where the attribute name cannot be resolved from the tableMapping. From an application security perspective, this change does not introduce any obvious security concerns, as it appears to be a minor bugfix or improvement to the existing functionality.

Overall, the code change seems reasonable and does not raise any immediate security red flags. However, it's always important to review the entire codebase and consider the broader context of the application to ensure that there are no other security vulnerabilities or concerns.

Files Changed:

• jans-orm/sql/src/main/java/io/jans/orm/sql/impl/SqlFilterConverter.java: The changes in this file are focused on the resolveAttributeName() method of the SqlFilterConverter class. The method now returns the filter's attribute name directly if the tableMapping or the filter itself is null. This is likely a defensive change to handle cases where the attribute name cannot be resolved from the tableMapping.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[sonarqubecloud]

Quality Gate passed for 'jans-linux-setup'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[sonarqubecloud]

Quality Gate passed for 'Jans-Keycloak-Link'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[sonarqubecloud]

Quality Gate passed for 'jans-config-api-parent'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[sonarqubecloud]

Quality Gate passed for 'Fido2 API'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[sonarqubecloud]

Quality Gate passed for 'SCIM API'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[sonarqubecloud]

Quality Gate failed for 'orm'

Failed conditions
2 Security Hotspots
37 New Code Smells (required ≤ 8)
1 New Bugs (required ≤ 0)

See analysis details on SonarCloud

Catch issues before they fail your Quality Gate with our IDE extension SonarLint