Add admin UI for custom vulnerability ID generation

src/App.vue

@@ -23,21 +23,34 @@
       }
     };
 
+    const preloadCustomizationIfAuthenticated = (jwt) => {
+      if (
+        jwt &&
+        this.$customization &&
+        typeof this.$customization.preloadAll === 'function'
+      ) {
+        this.$customization.preloadAll();
+      }
+    };
+
     EventBus.$on('authenticated', (jwt) => {
       if (jwt) {
         sessionStorage.setItem('token', jwt);
       } else {
         sessionStorage.removeItem('token');
       }
       setJwtForAjax(jwt);
+      preloadCustomizationIfAuthenticated(jwt);
     });
 
     // ensure $.ajaxSettings.headers exists
     $.ajaxSetup({
       headers: {},
     });
 
-    setJwtForAjax(getToken());
+    const existingToken = getToken();
+    setJwtForAjax(existingToken);
+    preloadCustomizationIfAuthenticated(existingToken);
 
     // Send XHR cross-site cookie credentials
     if (this.$api.WITH_CREDENTIALS) {
@@ -84,7 +97,7 @@
           error.response.headers['content-type'] === 'application/json' &&
           error.response.data &&
           Array.isArray(error.response.data) &&
           error.response.data[0].hasOwnProperty('invalidValue')
         ) {
           let validationError = error.response.data
             .map((failure) => `${failure.path}: ${failure.message}`)

src/i18n/locales/de.json

@@ -78,6 +78,7 @@
     "create_team": "Team erstellen",
     "create_template": "Vorlage erstellen",
     "create_user": "Benutzer erstellen",
+    "customization": "Customization",
     "default": "Standard",
     "default_language": "Standardsprache",
     "default_language_desc": "Standardsprache, die für alle verwendet wird, wenn sie keine angegeben haben. \nWenn dies deaktiviert ist, wird die Sprache des Browsers verwendet.",
@@ -200,6 +201,8 @@
     "oidc_groups": "OpenID Connect-Gruppen",
     "oidc_users": "OpenID Connect-Benutzer",
     "old_key_format": "Dieser API -Schlüssel ist veraltet und sollte bald für fortgesetzte Funktionen aktualisiert werden!",
+    "organization_code": "Organization Name",
+    "organization_code_required": "Organization Name is required.",
     "oss_index": "Sonatype OSS-Index",
     "osv_advisories": "Google OSV Advisories (Beta)",
     "password": "Passwort (oder Zugriffstoken)",
@@ -213,7 +216,9 @@
     "portfolio_access_control": "Portfolio-Zugriffskontrolle",
     "preferences": "Einstellungen",
     "preview": "Vorschau",
+    "preview_id": "Preview Vulnerability ID",
     "project_access": "Projektzugriff",
+    "project_code": "Project Name",
     "publisher": "Publisher",
     "publisher_class": "Publisher-Klasse",
     "python": "Python",
@@ -242,6 +247,11 @@
     "required_password": "Passwort wird benötigt",
     "required_team_name": "Teamname ist erforderlich",
     "required_username": "Benutzername wird benötigt",
+    "reset_policy_daily": "Daily",
+    "reset_policy_monthly": "Monthly",
+    "reset_policy_never": "Never",
+    "reset_policy_yearly": "Yearly",
+    "reset_to_defaults": "Reset to defaults",
     "restore_default_template": "Standardvorlagen wiederherstellen",
     "scope": "Scope",
     "select_ecosystem": "Ökosysteme auswählen",
@@ -251,6 +261,10 @@
     "select_project": "Projekt auswählen",
     "select_team": "Team auswählen",
     "select_team_as_recipient": "Team als Empfänger auswählen",
+    "sequence_padding": "Sequence Padding",
+    "sequence_padding_help": "Minimum number of digits for the sequence number (e.g. 4 → 0001).",
+    "sequence_reset_policy": "Sequence Reset Policy",
+    "sequence_reset_policy_help": "Defines when the numeric sequence resets to 1.",
     "snyk": "Snyk (Beta)",
     "subject_identifier": "Betreffkennung",
     "submit": "Einreichen",
@@ -289,11 +303,17 @@
     "token": "Token",
     "trivy": "Trivy",
     "url": "URL",
+    "use_custom_id_generator": "Use custom sequential ID generator",
+    "use_custom_id_generator_off_help": "Disabled: IDs use the default Dependency-Track format (e.g. INT-xxxx-xxxx-xxxx).",
+    "use_custom_id_generator_on_help": "Enabled: IDs are generated using your configured template and sequence.",
     "user_created": "Benutzer erstellt",
     "user_deleted": "Benutzer gelöscht",
     "username": "Benutzername",
     "vuln_sources": "Schwachstellenquellen",
     "vulndb": "VulnDB",
+    "vulnerability_id_generation": "Internal Vulnerability ID Generation",
+    "vulnerability_id_template": "Vulnerability ID Template",
+    "vulnerability_id_template_placeholder": "Select placeholders to define your vulnerability ID format",
     "vulnsource_alias_sync_enable": "Synchronisierung von Schwachstellenaliasen aktivieren",
     "vulnsource_alias_sync_enable_tooltip": "Alias-Daten können dabei helfen, identische Schwachstellen in mehreren Datenbanken zu identifizieren. Wenn die Quelle diese Daten bereitstellt, synchronisieren Sie sie mit der Datenbank von Dependency-Track.",
     "vulnsource_github_advisories_desc": "GitHub Advisories (GHSA) ist eine Datenbank mit CVEs und von GitHub stammenden Sicherheitshinweisen, die die Open-Source-Welt betreffen. Dependency-Track integriert sich in GHSA, indem Hinweise über die öffentliche GraphQL-API von GitHub gespiegelt werden. Der Spiegel wird täglich oder beim Neustart der Dependency-Track-Instanz aktualisiert. Zur Authentifizierung bei GitHub ist ein persönlicher Zugriffstoken (PAT) erforderlich, ihm müssen jedoch keine Bereiche zugewiesen werden.",

src/i18n/locales/en.json

@@ -78,6 +78,7 @@
     "create_team": "Create Team",
     "create_template": "Create Template",
     "create_user": "Create User",
+    "customization": "Customization",
     "default": "Default",
     "default_language": "Default Language",
     "default_language_desc": "Default language, which is used for everyone, when they didn't specify one. Language from Browser will be used, when this is disabled.",
@@ -200,6 +201,8 @@
     "oidc_groups": "OpenID Connect Groups",
     "oidc_users": "OpenID Connect Users",
     "old_key_format": "This API key is outdated and should be updated soon for continued functionality!",
+    "organization_code": "Organization Name",
+    "organization_code_required": "Organization Name is required.",
     "oss_index": "Sonatype OSS Index",
     "osv_advisories": "Google OSV Advisories (Beta)",
     "password": "Password (or access token)",
@@ -213,7 +216,9 @@
     "portfolio_access_control": "Portfolio Access Control",
     "preferences": "Preferences",
     "preview": "Preview",
+    "preview_id": "Preview Vulnerability ID",
     "project_access": "Project access",
+    "project_code": "Project Name",
     "publisher": "Publisher",
     "publisher_class": "Publisher class",
     "python": "Python",
@@ -242,6 +247,11 @@
     "required_password": "Password is required",
     "required_team_name": "Team name is required",
     "required_username": "Username is required",
+    "reset_policy_daily": "Daily",
+    "reset_policy_monthly": "Monthly",
+    "reset_policy_never": "Never",
+    "reset_policy_yearly": "Yearly",
+    "reset_to_defaults": "Reset to defaults",
     "restore_default_template": "Restore default templates",
     "scope": "Scope",
     "select_ecosystem": "Select Ecosystems",
@@ -251,6 +261,10 @@
     "select_project": "Select Project",
     "select_team": "Select Team",
     "select_team_as_recipient": "Select team as recipient",
+    "sequence_padding": "Sequence Padding",
+    "sequence_padding_help": "Minimum number of digits for the sequence number (e.g. 4 → 0001).",
+    "sequence_reset_policy": "Sequence Reset Policy",
+    "sequence_reset_policy_help": "Defines when the numeric sequence resets to 1.",
     "snyk": "Snyk (Beta)",
     "subject_identifier": "Subject Identifier",
     "submit": "Submit",
@@ -289,11 +303,17 @@
     "token": "Token",
     "trivy": "Trivy",
     "url": "URL",
+    "use_custom_id_generator": "Use custom sequential ID generator",
+    "use_custom_id_generator_off_help": "Disabled: IDs use the default Dependency-Track format (e.g. INT-xxxx-xxxx-xxxx).",
+    "use_custom_id_generator_on_help": "Enabled: IDs are generated using your configured template and sequence.",
     "user_created": "User created",
     "user_deleted": "User deleted",
     "username": "Username",
     "vuln_sources": "Vulnerability Sources",
     "vulndb": "VulnDB",
+    "vulnerability_id_generation": "Internal Vulnerability ID Generation",
+    "vulnerability_id_template": "Vulnerability ID Template",
+    "vulnerability_id_template_placeholder": "Select placeholders to define your vulnerability ID format",
     "vulnsource_alias_sync_enable": "Enable vulnerability alias synchronization",
     "vulnsource_alias_sync_enable_tooltip": "Alias data can help in identifying identical vulnerabilities across multiple databases. If the source provides this data, synchronize it with Dependency-Track's database.",
     "vulnsource_github_advisories_desc": "GitHub Advisories (GHSA) is a database of CVEs and GitHub-originated security advisories affecting the open source world. Dependency-Track integrates with GHSA by mirroring advisories via GitHub's public GraphQL API. The mirror is refreshed daily, or upon restart of the Dependency-Track instance. A personal access token (PAT) is required in order to authenticate with GitHub, but no scopes need to be assigned to it.",

src/i18n/locales/es.json

@@ -78,6 +78,7 @@
     "create_team": "Crear equipo",
     "create_template": "Crear plantilla",
     "create_user": "Crear usuario",
+    "customization": "Customization",
     "default": "Por defecto",
     "default_language": "Idioma predeterminado",
     "default_language_desc": "Idioma predeterminado, que se usa para todos, cuando no especificaron uno. \nSe utilizará el idioma del navegador cuando esté deshabilitado.",
@@ -200,6 +201,8 @@
     "oidc_groups": "Grupos de conexión OpenID",
     "oidc_users": "Usuarios de OpenID Connect",
     "old_key_format": "¡Esta clave API está desactualizada y debe actualizarse pronto para una funcionalidad continua!",
+    "organization_code": "Organization Name",
+    "organization_code_required": "Organization Name is required.",
     "oss_index": "Índice Sonatype OSS",
     "osv_advisories": "Avisos de OSV de Google (Beta)",
     "password": "Contraseña (o token de acceso)",
@@ -213,7 +216,9 @@
     "portfolio_access_control": "Control de acceso al portafolio",
     "preferences": "Preferencias",
     "preview": "Avance",
+    "preview_id": "Preview Vulnerability ID",
     "project_access": "Acceso al proyecto",
+    "project_code": "Project Name",
     "publisher": "Editor",
     "publisher_class": "Clase de editor",
     "python": "Python",
@@ -242,6 +247,11 @@
     "required_password": "se requiere contraseña",
     "required_team_name": "El nombre del equipo es obligatorio.",
     "required_username": "Se requiere nombre de usuario",
+    "reset_policy_daily": "Daily",
+    "reset_policy_monthly": "Monthly",
+    "reset_policy_never": "Never",
+    "reset_policy_yearly": "Yearly",
+    "reset_to_defaults": "Reset to defaults",
     "restore_default_template": "Restaurar plantillas predeterminadas",
     "scope": "Alcance",
     "select_ecosystem": "Seleccionar ecosistemas",
@@ -251,6 +261,10 @@
     "select_project": "Seleccionar Proyecto",
     "select_team": "Selecciona un equipo",
     "select_team_as_recipient": "Seleccionar equipo como destinatario",
+    "sequence_padding": "Sequence Padding",
+    "sequence_padding_help": "Minimum number of digits for the sequence number (e.g. 4 → 0001).",
+    "sequence_reset_policy": "Sequence Reset Policy",
+    "sequence_reset_policy_help": "Defines when the numeric sequence resets to 1.",
     "snyk": "Snyk (Beta)",
     "subject_identifier": "Identificador de sujeto",
     "submit": "Entregar",
@@ -289,11 +303,17 @@
     "token": "Simbólico",
     "trivy": "Trivy",
     "url": "URL",
+    "use_custom_id_generator": "Use custom sequential ID generator",
+    "use_custom_id_generator_off_help": "Disabled: IDs use the default Dependency-Track format (e.g. INT-xxxx-xxxx-xxxx).",
+    "use_custom_id_generator_on_help": "Enabled: IDs are generated using your configured template and sequence.",
     "user_created": "Usuario creado",
     "user_deleted": "Usuario eliminado",
     "username": "Nombre de usuario",
     "vuln_sources": "Fuentes de vulnerabilidad",
     "vulndb": "VulnDB",
+    "vulnerability_id_generation": "Internal Vulnerability ID Generation",
+    "vulnerability_id_template": "Vulnerability ID Template",
+    "vulnerability_id_template_placeholder": "Select placeholders to define your vulnerability ID format",
     "vulnsource_alias_sync_enable": "Habilitar la sincronización de alias de vulnerabilidad",
     "vulnsource_alias_sync_enable_tooltip": "Los datos de alias pueden ayudar a identificar vulnerabilidades idénticas en múltiples bases de datos. Si la fuente proporciona estos datos, sincronícelos con la base de datos de Dependency-Track.",
     "vulnsource_github_advisories_desc": "GitHub Advisories (GHSA) es una base de datos de CVE y avisos de seguridad originados en GitHub que afectan al mundo del código abierto. Dependency-Track se integra con GHSA reflejando avisos a través de la API pública GraphQL de GitHub. El espejo se actualiza diariamente o al reiniciar la instancia de Dependency-Track. Se requiere un token de acceso personal (PAT) para autenticarse con GitHub, pero no es necesario asignarle ámbitos.",

src/i18n/locales/fr.json

@@ -78,6 +78,7 @@
     "create_team": "Créer une équipe",
     "create_template": "Créer un modèle",
     "create_user": "Créer un utilisateur",
+    "customization": "Customization",
     "default": "Défaut",
     "default_language": "Langue par défaut",
     "default_language_desc": "Langue par défaut, qui est utilisée par tout le monde, lorsqu'ils n'en ont pas spécifié. \nLa langue du navigateur sera utilisée lorsqu'elle est désactivée.",
@@ -200,6 +201,8 @@
     "oidc_groups": "Groupes OpenID Connect",
     "oidc_users": "Utilisateurs d'OpenID Connect",
     "old_key_format": "Cette clé API est obsolète et devrait être mise à jour bientôt pour les fonctionnalités continues!",
+    "organization_code": "Organization Name",
+    "organization_code_required": "Organization Name is required.",
     "oss_index": "Index Sonatype OSS",
     "osv_advisories": "Google OSV Advisories (bêta)",
     "password": "Mot de passe (ou jeton d'accès)",
@@ -213,7 +216,9 @@
     "portfolio_access_control": "Contrôle d'accès au portefolio",
     "preferences": "Préférences",
     "preview": "Aperçu",
+    "preview_id": "Preview Vulnerability ID",
     "project_access": "Accès au projet",
+    "project_code": "Project Name",
     "publisher": "Éditeur",
     "publisher_class": "Classe d'éditeur",
     "python": "Python",
@@ -242,6 +247,11 @@
     "required_password": "Mot de passe requis",
     "required_team_name": "Le nom de l'équipe est requis",
     "required_username": "Nom d'utilisateur est nécessaire",
+    "reset_policy_daily": "Daily",
+    "reset_policy_monthly": "Monthly",
+    "reset_policy_never": "Never",
+    "reset_policy_yearly": "Yearly",
+    "reset_to_defaults": "Reset to defaults",
     "restore_default_template": "Restaurer les modèles par défaut",
     "scope": "Périmètre",
     "select_ecosystem": "Sélectionner les écosystèmes",
@@ -251,6 +261,10 @@
     "select_project": "Sélectionner un projet",
     "select_team": "Sélectionner une équipe",
     "select_team_as_recipient": "Sélectionner une équipe comme destinataire",
+    "sequence_padding": "Sequence Padding",
+    "sequence_padding_help": "Minimum number of digits for the sequence number (e.g. 4 → 0001).",
+    "sequence_reset_policy": "Sequence Reset Policy",
+    "sequence_reset_policy_help": "Defines when the numeric sequence resets to 1.",
     "snyk": "Snyk (bêta)",
     "subject_identifier": "Identifiant du sujet",
     "submit": "Soumettre",
@@ -289,11 +303,17 @@
     "token": "Jeton",
     "trivy": "Trivy",
     "url": "URL",
+    "use_custom_id_generator": "Use custom sequential ID generator",
+    "use_custom_id_generator_off_help": "Disabled: IDs use the default Dependency-Track format (e.g. INT-xxxx-xxxx-xxxx).",
+    "use_custom_id_generator_on_help": "Enabled: IDs are generated using your configured template and sequence.",
     "user_created": "Utilisateur créé",
     "user_deleted": "Utilisateur supprimé",
     "username": "Nom d'utilisateur",
     "vuln_sources": "Sources de vulnérabilité",
     "vulndb": "VulnDB",
+    "vulnerability_id_generation": "Internal Vulnerability ID Generation",
+    "vulnerability_id_template": "Vulnerability ID Template",
+    "vulnerability_id_template_placeholder": "Select placeholders to define your vulnerability ID format",
     "vulnsource_alias_sync_enable": "Activer la synchronisation des alias de vulnérabilité",
     "vulnsource_alias_sync_enable_tooltip": "Les données d'alias peuvent aider à identifier des vulnérabilités identiques dans plusieurs bases de données. Si la source fournit ces données, synchronisez-les avec la base de données de Dependency-Track.",
     "vulnsource_github_advisories_desc": "GitHub Advisories (GHSA) est une base de données de CVE et d'avis de sécurité provenant de GitHub affectant le monde open source. Dependency-Track s'intègre à GHSA en reflétant les avis via l'API publique GraphQL de GitHub. Le miroir est actualisé quotidiennement ou au redémarrage de l'instance Dependency-Track. Un jeton d'accès personnel (PAT) est requis pour s'authentifier auprès de GitHub, mais aucun périmètre ne doit lui être attribuée.",