-
Notifications
You must be signed in to change notification settings - Fork 146
TerminalCommonNameValidator: Update validation regex #1564
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
TerminalCommonNameValidator: Update validation regex #1564
Conversation
Summary of ChangesHello @gcatanese, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request refines the validation mechanism for Common Names within terminal API certificates. The primary goal is to accommodate a broader range of certificate naming conventions by allowing alphanumeric characters in a specific part of the CN, which was previously restricted to numerical values. This change ensures future compatibility and strengthens the robustness of certificate validation, complemented by improved code documentation. Highlights
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Code Review
This pull request updates the regex for validating the Common Name of a terminal API certificate to support a new format. The change itself is correct and is accompanied by a new test case. My review focuses on improving the code quality and performance. The changes in the test file include significant formatting adjustments (indentation changes) which create some noise in the diff; this is something to be mindful of for future changes.
I've identified a few areas for improvement in TerminalCommonNameValidator.java:
- The Javadoc formatting can be cleaned up by removing some unusual characters and making parameter descriptions more conventional.
- There's a performance concern with how the validation regex is used. It's being recompiled on every validation check. I've suggested a caching strategy to pre-compile the patterns for each environment, which will improve efficiency, especially if this validation is performed frequently.
src/main/java/com/adyen/terminal/security/TerminalCommonNameValidator.java
Outdated
Show resolved
Hide resolved
src/main/java/com/adyen/terminal/security/TerminalCommonNameValidator.java
Outdated
Show resolved
Hide resolved
src/main/java/com/adyen/terminal/security/TerminalCommonNameValidator.java
Outdated
Show resolved
Hide resolved
f5acdea to
d611399
Compare
PR to update the regex validation of the
Common Nameof a terminal API certificate.The updated validation regex supports a new format
CN={letters or numbers}-{letters or numbers}.{environent}.terminal.adyen.com, for example to allow:CN=TG300-G10M123M12345.test.terminal.adyen.com