HXSecurity / DongTai-Plugin-IDEA

Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions such as vulnerability detection and code audit during application development, enabling developers to find application vulnerabilities more intuitively, quickly and in real time during application development.
https://hxsecurity.github.io/DongTaiDoc
Apache License 2.0
23 stars 18 forks source link

[Bug]: IDEA插件1.1.0版本和服务端1.3.0版本无法对接 #13

Open gemmi opened 2 years ago

gemmi commented 2 years ago

Preflight Checklist

Version

1.3.0

Installation Type

Official Docker Compose

Service Name

DongTai-WebAPI

Describe the details of the bug and the steps to reproduce it

1.打开maven工程,点击Run with IAST,提示配置云端,填入: openapi: http://mydomain.com/openapi

web: http://mydomain.com/openapi/api/v1/agent/download?url=http://mydomain.com/openapi&language=java 或http://mydomain.com/openapi/api/v1/agent/download 或http://mydomain.com 都不行

Token: 从agent部署页面拷贝token粘贴,带/不带"Token"字符串都不行

2.报错: 请求未发送成功,请检查 DongTai IAST 配置云端 中的配置是否正确

3,控制台显示: Error occurred during initialization of VM agent library failed to init: instrument Error opening zip file or JAR manifest missing : C:\xxx\xxx\Library\iastagent\agent.jar

Additional Information

参考官网插件页面,只提到一句"agentUrl, url: 若使用洞态 IAST Server 端 SaaS 版,此栏位将预设自动输入。自动部署, 需要 自行填入。" 不知道怎么填入,而且字段名也跟插件对不上,安装的插件三个字段是openapi、web、token,教程页面里是agenturl、url、token字段,不知如何对应的?

Logs

No response

CieloHX commented 2 years ago

@gemmi

文档上的信息较久,已安排更新。

openapi = https://yourdomain.com/openapi web = https://yourdomain.com token = 如下图绿框内的,不带字符串

image

师傅请您检查一下配置,如果配置错误会下载不到 agent.jar 导致控制台显示无法找到或解压档案的错误信息。

gemmi commented 2 years ago

@gemmi

文档上的信息较久,已安排更新。

openapi = https://yourdomain.com/openapi web = https://yourdomain.com token = 如下图绿框内的,不带字符串

image

师傅请您检查一下配置,如果配置错误会下载不到 agent.jar 导致控制台显示无法找到或解压档案的错误信息。

多谢,经过排查,是IDEA设置了proxy,将mydomain.com设置为例外解决问题。