jira_scan 0.0.5 → 0.0.6

checksums.yaml

@@ -1,15 +1,7 @@
 ---
-!binary "U0hBMQ==":
-  metadata.gz: !binary |-
-    YzE1OTJiNTg5NzIxMzdhYjgwZGU1NzQzZDY2ZTJhOWYzNjA1NTgzZA==
-  data.tar.gz: !binary |-
-    YzBkOGJlMzkwNzlkMjU5OWJhN2RmYTIwNzA2YTNlMzQ4OTI3NGE2Ng==
+SHA256:
+  metadata.gz: 694f95d2a4df4f67588a35cce083c44568ab6fd6411cad9be7b778f86fdc74f7
+  data.tar.gz: a52b797b7810b69b20921a6ae539aebc070df18968ed41fb002319fce71db47b
 SHA512:
-  metadata.gz: !binary |-
-    OTA2NjY0NjdiYzY0YjQzNGE0OTgzZDNkYjM4MzA0OGFhY2VkNGIzNmYzN2Y1
-    YjNmZGE2MjRhNzZhZDUzMTZmMjA3YjkwMDEyZThiYWRlYzRhOTA5MGEyMTRj
-    Y2ZkN2U0NWM0YjFlNDRhMDI5NzJmNTJiNGVhNGU3MGMxZDA4Yzc=
-  data.tar.gz: !binary |-
-    MTQxMzE2ODI2MzAxZDA5MjA3N2QxNzkyNGNjMWI1NGE0ZWQ5Y2EwN2I2NzUy
-    ZmIxYzZmZTgyYmQ4MTcxYjNmZDY1YTQ2ZjA0ZDNmYjkwMzU0ZTRlM2FjNWJk
-    ODRjMTM0ZmVhMzg2Yjk4MDJkOTRiMzBhYmYwYmU0OGEyYjNkZWQ=
+  metadata.gz: c9f02c01c0b3aff58e99d484a09eef8c30c594706d08bbb0d3197411dc038ff07dfcd6bf0ae3074eec3d7e8ac40d375a51e2ab6f8b20c5bde986e3e63fffe5cf
+  data.tar.gz: 39cdb3fa320f6e3dca07bf9bb3b5926eb9a1c2adfbc5ca735a05fbcd89632443d9939c51b49f8657a6f5e37f1e9cfa2b1e4d78901cd10e22b6eec461448398df

data/bin/jira-scan

@@ -17,7 +17,7 @@ def banner
   _   | | | '__/ _` |\\___ \\ / __/ _` | '_ \\ 
  | |__| | | | | (_| |____) | (_| (_| | | | |
   \\____/|_|_|  \\__,_|_____/ \\___\\__,_|_| |_|
-                               version 0.0.5"
+                               version #{JiraScan::VERSION}"
   puts
   puts '-' * 60
 end
@@ -117,16 +117,16 @@ def scan(url, check: true, insecure: false, verbose: false)
   end
 
   # Dev mode enabled
-  dev_mode = JiraScan::devMode(url)
-  puts '+ Dev mode is enabled' if dev_mode
+  puts '+ Dev mode is enabled' if JiraScan::devMode(url)
 
   # User registration enabled
-  register = JiraScan::userRegistration(url)
-  puts '+ User registration is enabled' if register
+  puts '+ User registration is enabled' if JiraScan::userRegistration(url)
+
+  # Service Desk user registration enabled
+  puts '+ Service Desk user registration is enabled' if JiraScan::userServiceDeskRegistration(url)
 
   # Check if User Picker Browser is accessible
-  user_picker = JiraScan::userPickerBrowser(url)
-  if user_picker
+  if JiraScan::userPickerBrowser(url)
     puts '+ User Picker Browser is available'
     # Retrieve list of first 1,000 users 
     users = JiraScan::getUsersFromUserPickerBrowser(url)
@@ -138,20 +138,16 @@ def scan(url, check: true, insecure: false, verbose: false)
   end
 
   # Check if REST User Picker is accessible
-  rest_user_picker = JiraScan::restUserPicker(url)
-  puts "+ REST UserPicker is available" if rest_user_picker
+  puts "+ REST UserPicker is available" if JiraScan::restUserPicker(url)
 
   # Check if REST Group User Picker is accessible
-  rest_group_user_picker = JiraScan::restGroupUserPicker(url)
-  puts "+ REST GroupUserPicker is available" if rest_group_user_picker
+  puts "+ REST GroupUserPicker is available" if JiraScan::restGroupUserPicker(url)
 
   # Check if ViewUserHover.jspa is accessible
-  view_user_hover = JiraScan::viewUserHover(url)
-  puts "+ ViewUserHover.jspa is available" if view_user_hover
+  puts "+ ViewUserHover.jspa is available" if JiraScan::viewUserHover(url)
 
   # Check if META-INF contents are accessible
-  meta_inf = JiraScan::metaInf(url)
-  puts '+ META-INF directory contents are accessible' if meta_inf
+  puts '+ META-INF directory contents are accessible' if JiraScan::metaInf(url)
 
   # Retrieve list of dashboards
   dashboards = JiraScan::getDashboards(url)

data/lib/jira_scan.rb

@@ -9,9 +9,10 @@ require 'json'
 require 'logger'
 require 'net/http'
 require 'openssl'
+require 'stringio'
 
 class JiraScan
-  VERSION = '0.0.5'.freeze
+  VERSION = '0.0.6'.freeze
 
   def self.logger
     @logger
@@ -154,6 +155,7 @@ class JiraScan
 
   #
   # Check if account registration is enabled
+  # https://docs.atlassian.com/jira/jsd-docs-045/Configuring+public+signup
   #
   # @param [String] URL
   #
@@ -169,6 +171,25 @@ class JiraScan
     res.body.to_s.include?('<h1>Sign up</h1>')
   end
 
+  #
+  # Check if Jira Service Desk (part of Jira Service Management) account registration is enabled
+  # https://docs.atlassian.com/jira/jsd-docs-045/Configuring+public+signup
+  # https://support.atlassian.com/jira-service-management-cloud/docs/customer-permissions-for-your-service-project-and-jira-site/
+  #
+  # @param [String] URL
+  #
+  # @return [Boolean]
+  #
+  def self.userServiceDeskRegistration(url)
+    url += '/' unless url.to_s.end_with? '/'
+    res = sendHttpRequest("#{url}servicedesk/customer/user/signup")
+
+    return false unless res
+    return false unless res.code.to_i == 200
+
+    res.body.to_s.include?('serviceDeskVersion') || res.body.to_s.include?('com.atlassian.servicedesk')
+  end
+
   #
   # Check if unauthenticated access to UserPickerBrowser.jspa is allowed
   #

metadata

@@ -1,41 +1,41 @@
 --- !ruby/object:Gem::Specification
 name: jira_scan
 version: !ruby/object:Gem::Version
-  version: 0.0.5
+  version: 0.0.6
 platform: ruby
 authors:
 - Brendan Coles
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-08-10 00:00:00.000000000 Z
+date: 2023-01-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: terminal-table
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '3.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '3.0'
 - !ruby/object:Gem::Dependency
   name: logger
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '1.4'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '1.4'
 description: A simple remote scanner for Atlassian Jira
@@ -51,25 +51,23 @@ homepage: https://github.com/bcoles/jira_scan
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ! '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: 2.0.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ! '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.2.2
-signing_key: 
+rubygems_version: 3.3.15
+signing_key:
 specification_version: 4
 summary: Jira scanner
 test_files: []
-has_rdoc: