[ease-dev] GSoC Sign and Verify Script

[Varun Raval <vraval48@xxxxxxxxx>]

Hi,

Since this is my last GSoC weekly report, I would like to say a thank you to all of you.

Specially, I would like to thank Christian for his great help and awesome code reviews from which I learned a lot and got chance to contribute to EASE Eclipse.

I would also like to thank Jonah for his help in various topics.

I will keep contributing to EASE in improving its features after completing GSoC.

This week I worked on decorators, Unit Tests, and adding signature checks.

Decorator:

Decorators are now merged to master you can see how they look like by using following scripts [1] and [2]. Specifically, this week I worked on improving decorators and setting listener for decorator in preference changes.

Gerrit change:https://git.eclipse.org/r/#/c/77819/ status: merged

Unit Tests:

Added unit tests for SignatureHelper and VerifySignature class.

Since I cannot add unit tests for PerformSignature class since it involves user interaction to much extent for performing signature using their private keys, I have ensured that they are without any flaw. If anyone finds any, ping me and I will solve that immediately.

Implementation of PerformSignature library is within patch that is complete and just needs to be merged. After that, you will be able to apply signature to IFile instances.

Unit test gerrit change: https://git.eclipse.org/r/#/c/79403/ status: open

Perform Signature gerrit change: https://git.eclipse.org/r/#/c/76997/ status: open

Signature Checks before execution:

Signature will be checked before execution for every file except for IFile.

Those scripts will be checked for signature whose ScriptType instance can be retrieved. If ScriptType cannot be obtained, we cannot parse script for signature check and hence, for now, these scripts will be executed.

I am unable to get script type for include(URL) command and any similar script that gets executed directly without any title.

1. One solution to this can be that we add script checks to every such entry points.
2. Another solution is to parse script without taking into consideration the language specific comment codes.
   

To implement the second one, we would need to move getSignatureInfo method from AbstractCodeParser to SignatureHelper.

Gerrit change: https://git.eclipse.org/r/#/c/79396/3 status:open

[1]: https://github.com/VarunRaval48/SignCode/blob/master/java.sign/TestScripts/Valid/_javascript_/test1.js
[2]: https://github.com/VarunRaval48/SignCode/blob/master/java.sign/TestScripts/Valid/_javascript_/test2.js

--

Varun Raval