danielmarschall / oidplus

OIDplus 2.0 - An OpenSource online Registration Authority for OIDs and other Object Types
https://www.oidplus.com
Apache License 2.0
10 stars 7 forks source link

Bundle plugin "WTF" #76

Open danielmarschall opened 2 weeks ago

danielmarschall commented 2 weeks ago

Commit https://github.com/danielmarschall/oidplus/commit/8a3efecdc17a8fdf5d8ea412d3e939f4bf0f7d0c was accidentally added to production without proper verification. It introduces a new 3rd party plugin "WTF".

I will now perform a very quick certification of the plugin in order to see if it fulfills the requirements.

danielmarschall commented 2 weeks ago

@wehowski

Unfortunately, I have to reject the code from production for now, because there are severe errors which cause OIDplus to get bricked.

Here is the report which lists the errors I have found: https://1drv.ms/w/s!Aq8PcXiGvLchipFaq3slFiDddC11ig?e=0nXRFZ

I will now remove your commit from the core (force-push from current SVN build)

Next steps:

Still, thank you very much for your contribution to OIDplus, and I am looking forward to the updated plugin!

wehowski commented 1 week ago

Hallo @danielmarschall Sorry please excuse my commit fail. Maybe I must create a diffrent branch first?!?

The repo link is https://github.com/frdl/frdl-oidplus-wtf-plugin but I do not know what is the attribute for the manifest.json? Like "homepage" or "repository"? I mentioned it in the description so far.

oidplus-functions.php was renamed to oidplus-functions.inc.php and the INSIDE_OIDPLUS check was added

"wtf-plugin.php should actually be called wtf-plugin.inc.php" : This was discussed before and the decision was wtf-plugin.php so the INSIDE_OIDPLUS check was added!??

The missing functions parameter in WPHooksFunctions.class.php where added

...

I will fix the other issues and notify you, or ask if I have questions...

Viele Grüße Melanie

danielmarschall commented 1 week ago

Danke. Ja, "description" ist der richtige Ort für einen Link zum Upstream Repro.

Ich müsste dich bei OIDplus als Collaborator entfernen, denn die haben Schreibrechte. Ich denke dann würdest du automatisch pullrequests machen, anstelle direkt zu committen. Ich hasse GIT, das ist sowas von verkompliziert...

Neue Branches sind glaube ich auch nicht gut, denn das stört den svn-to-git Prozess möglicherweise auch.

Hier ist übrigens der aktuelle Plan wie der Arbeitsflow läuft: https://raw.githubusercontent.com/danielmarschall/oidplus/d14325ccfa46c76282bc92681d556db1991eb951/plugins/viathinksoft/adminPages/900_software_update/private/oidplus_release_flow.png

wehowski commented 1 week ago

@danielmarschall Neue Version: https://github.com/frdl/frdl-oidplus-wtf-plugin/releases/tag/v0.1.2 Es kommt aber noch vl. was dazu in dieser Woche, ggf. aber in anderen Plugins.

v0.1.2

...

Viele Grüße Melanie

wehowski commented 1 week ago

https://github.com/frdl/frdl-oidplus-wtf-plugin/releases/tag/v0.1.3

danielmarschall commented 1 week ago

@wehowski I changed plans and did a very quick re-certification:

https://1drv.ms/w/s!Aq8PcXiGvLchipFaq3slFiDddC11ig?e=0nXRFZ

Current status:

You have solved some PHP-Storm problems but also reintroduced a few new problems. I have updated the errror list for PHP-Storm and PHP-Stan in the document.

I hope this helps!

wehowski commented 1 week ago

Ich arbeite dran, am Plugin und werde die Probleme beheben.

Habe noch einen längeren Text mit Ideen und Anmerkungen notiert. "Plugins dürfen keine Klassen aus dem Vendorverzeichnis benutzen." Das macht es EXTREM aufwendig für OIDplus zu entwickeln!!! Das wtf Plugin soll da einiges vereinfachen, so wie das IO4 Plugin, aber halt OIDplus konform ohne externe Abhängigkeiten. Habe dazu ein Blatt mit Notizen angelegt, auch mit weiteren Roadmaps und ToDos für das RDAP Plugin, es kommen auch noch neue Versionen des wft Plugin. Ich melde mich... mit neuen Infos bzw. wenn Du eine erneute Prüfung vornehmen kannst...

danielmarschall commented 1 week ago

Habe noch einen längeren Text mit Ideen und Anmerkungen notiert. "Plugins dürfen keine Klassen aus dem Vendorverzeichnis benutzen." Das macht es EXTREM aufwendig für OIDplus zu entwickeln!!!

Regarding 3rd party libs and composer there are the following rules for plugin vendors:

(1) You are free to use an own composer.json and vendor directory for your plugin. This is done here:

So your plugin has its own vendor directory and autoloader. But you just must not use the vendor directory of OIDplus itself. This is property of OIDplus.

(2) Your plugin at GitHub does not need to have a populated vendor directory. It is enough to have a composer.json file. However, when I bundle your plugin into the OIDplus repository, then I will call "composer update" in order to deliver a fully populated vendor directory via the three distribution channels (GIT/SVN/TAR.GZ) allowing easy installation without composer.

wehowski commented 1 week ago

Ok, this will help a lot! 👍