account-lookup-service 15.6.0-snapshot.4 → 16.1.0-iso.1

package/CHANGELOG.md

@@ -2,6 +2,31 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+### [16.0.2](https://github.com/mojaloop/account-lookup-service/compare/v16.0.1...v16.0.2) (2025-01-07)
+
+
+### Chore
+
+* dependency updates pi26 ([#516](https://github.com/mojaloop/account-lookup-service/issues/516)) ([08ef522](https://github.com/mojaloop/account-lookup-service/commit/08ef5226aacf5e7c0967f6912be9eec8480eecd8))
+
+### [16.0.1](https://github.com/mojaloop/account-lookup-service/compare/v16.0.0...v16.0.1) (2024-12-20)
+
+
+### Chore
+
+* dependency and vulnerability updates pi26 ([#513](https://github.com/mojaloop/account-lookup-service/issues/513)) ([46d245a](https://github.com/mojaloop/account-lookup-service/commit/46d245ae04e6305408845ccd32d6abc07be6a5a8))
+
+## [16.0.0](https://github.com/mojaloop/account-lookup-service/compare/v15.3.4...v16.0.0) (2024-12-11)
+
+
+### ⚠ BREAKING CHANGES
+
+* fx and interscheme implementation (#492)
+
+### Features
+
+* fx and interscheme implementation ([#492](https://github.com/mojaloop/account-lookup-service/issues/492)) ([c44e5e0](https://github.com/mojaloop/account-lookup-service/commit/c44e5e019fb3092b789cfb07d37dbe087142a37d)), closes [#482](https://github.com/mojaloop/account-lookup-service/issues/482) [#483](https://github.com/mojaloop/account-lookup-service/issues/483)
+
 ### [15.3.4](https://github.com/mojaloop/account-lookup-service/compare/v15.3.3...v15.3.4) (2024-06-11)
 
 

package/LICENSE.md

@@ -2,9 +2,8 @@
 
 Copyright © 2020-2024 Mojaloop Foundation
 
-The Mojaloop files are made available by the Mojaloop Foundation under the Apache License, Version 2.0
-(the "License") and you may not use these files except in compliance with the [License](http://www.apache.org/licenses/LICENSE-2.0). 
+The Mojaloop files are made available by the Mojaloop Foundation under the Apache License, Version 2.0 (the "License") and you may not use these files except in compliance with the License.
 
-You may obtain a copy of the License at [http://www.apache.org/licenses/LICENSE-2.0](http://www.apache.org/licenses/LICENSE-2.0)
+You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
 
-Unless required by applicable law or agreed to in writing, the Mojaloop files are distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the [License](http://www.apache.org/licenses/LICENSE-2.0).
+Unless required by applicable law or agreed to in writing, the Mojaloop files are distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

package/README.md

@@ -10,6 +10,8 @@
 - [Documentation](http://docs.mojaloop.io/documentation/mojaloop-technical-overview/account-lookup-service/)
 - [API Swagger Reference](/src/interface/api-swagger.yaml)
 - [Admin Swagger Referemce](/src/interface/admin-swagger.yaml)
+- [Discovery flow diagram using proxy](./docs/Proxy/Discovery.md)
+- [Proxy implementation details](./docs/Proxy/Readme.md)
 
 ## Database initialisation
 

package/audit-ci.jsonc

@@ -3,31 +3,6 @@
   // audit-ci supports reading JSON, JSONC, and JSON5 config files.
   // Only use one of ["low": true, "moderate": true, "high": true, "critical": true]
   "moderate": true,
-  "allowlist": [ // NOTE: Please add as much information as possible to any items added to the allowList
-    // Currently no fixes available for the following
-    "GHSA-2p57-rm9w-gvfp", // socks>ip
-    "GHSA-v88g-cgmw-v5xw",
-    "GHSA-phwq-j96m-2c2q",
-    "GHSA-282f-qqgm-c34q",
-    "GHSA-6vfc-qv3f-vr6c",
-    "GHSA-wc69-rhjr-hc9g",
-    "GHSA-g954-5hwp-pp24",
-    "GHSA-rjqq-98f6-6j3r",
-    "GHSA-mjxr-4v3x-q3m4",
-    "GHSA-qgmg-gppg-76g5",
-    "GHSA-p9pc-299p-vxgp",
-    "GHSA-8cf7-32gw-wr33",
-    // The following issues are related to central-services-shared upgrade skip
-    // Issue to resolve this: https://github.com/mojaloop/project/issues/3260
-    "GHSA-hjrf-2m68-5959",
-    "GHSA-qwph-4952-7xr6",
-    "GHSA-4jv9-3563-23j3",
-    "GHSA-h755-8qp9-cq85",
-    "GHSA-f9xv-q969-pqx4",
-    "GHSA-7fh5-64p2-3v2j",
-    "GHSA-rm97-x556-q36h", // https://github.com/advisories/GHSA-rm97-x556-q36h
-    "GHSA-rv95-896h-c2vc", // https://github.com/advisories/GHSA-rv95-896h-c2vc
-    "GHSA-952p-6rrq-rcjv", // https://github.com/advisories/GHSA-952p-6rrq-rcjv
-    "GHSA-3xgq-45jj-v275" // https://github.com/advisories/GHSA-3xgq-45jj-v275
-  ]
+  // NOTE: Please add as much information as possible to any items added to the allowList
+  "allowlist": []
 }

package/config/default.json

@@ -15,6 +15,7 @@
     "DATABASE": "account_lookup",
     "POOL_MIN_SIZE": 10,
     "POOL_MAX_SIZE": 10,
+    "MAX_PENDING_ACQUIRE": null,
     "ACQUIRE_TIMEOUT_MILLIS": 30000,
     "CREATE_TIMEOUT_MILLIS": 30000,
     "DESTROY_TIMEOUT_MILLIS": 5000,

package/docker/mock-proxy/README.md

@@ -0,0 +1,21 @@
+## mock-proxy
+
+This is a simple mock proxy server that can be used to emulate 
+`inter-scheme-proxy-adatper` functionality in integration tests
+
+#### Routes
+ - `GET /history` - returns and array of requests made to the proxy.
+It's used to assert some tests scenarios
+ - `DELETE /history` - cleans up history
+ - `ALL /echo` - returns request method, body, headers for testing purposes. Inject also some additional headers
+ - `GET /health` - Returns a JSON object indicating the health status of the server.
+ - `GET /parties/:type/:id` - Handles requests for party information. Responds with a 202 status and the request headers modified for the hub callback.
+ - `PUT /parties/:type/:id/error` - Handles error responses for party information. Responds with a 200 status and the request headers modified for the DFSP callback.
+ - `GET /oracle*` - Returns a JSON object with an empty party list.
+
+#### Usage in integration tests
+ 1. In _docker-compose.yml_ file there's a service `proxy` defined. Some env vars are passed using [./test/integration/.env](../../test/integration/.env) file.
+ 2. Before running tests, we onboard some participants, including `proxy`, using [./test/integration/prepareTestParticipants.js](../../test/integration/prepareTestParticipants.js) script.
+ 3. Run tests and validate `proxy` calls (using _/history_ endpoint) according test scenarios.
+
+

package/docker/mock-proxy/src/config.ts

@@ -9,6 +9,13 @@ export const {
   CL_PORT = 3001,
 } = process.env;
 
+console.log({
+  PROXY_PORT,
+  PROXY_NAME,
+  CL_HOST,
+  CL_PORT
+})
+
 export const ROUTES = {
   history: '/history',
 } as const;

package/docs/Proxy/Discovery.md

@@ -0,0 +1,20 @@
+# On Demand Discovery
+
+The discovery flows are summarized as follows:
+1. On Demand loading of cross network identifiers - using Oracles for identifier lookups in local scheme
+2. On Demand loading for all identifiers
+
+## On Demand Discovery using local oracles
+- Scheme uses Oracles to map local identifiers to participants of the scheme
+- Identifiers for other schemes are discovered via a depth first search, but asking all participants. Proxy participant then forward the request to the connected scheme
+- This diagram shows two connected schemes, but this design work for any number of connected schemes.
+
+![Proxy pattern - On Demand Discovery with Oracles](./Proxy%20pattern%20-%20Lazy%20Discovery%20-%20Oracles.png)
+
+
+## On Demand Discover with incorrectly cached results
+- When an identifier moved to another dfsp provider, then the store cache for that participant will route to an unsuccessful get \parties call.
+
+Here is a sequence diagram show how that gets updated.
+### Sequence Diagram
+![Invalid Cache](Proxy%20pattern%20-%20Lazy%20Discovery%20Identifier%20Cache%20Invalid.png)