Add support for spring boot

.dockerignore

@@ -0,0 +1,3 @@
+build
+.gradle
+Dockerfile

.editorconfig

@@ -0,0 +1,8 @@
+root = true
+
+[*]
+indent_style = tab
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = false
+insert_final_newline = false

.github/workflows/ci.yml

@@ -15,6 +15,8 @@ jobs:
         java-version: ${{ matrix.java }}
         java-package: jdk
         architecture: x64
+    - name: Setup Gradle
+      uses: gradle/gradle-build-action@v3
     - name: Run tests
-      run: mvn -B package
+      run: ./gradlew assemble
 

.gitignore

@@ -1,9 +1,13 @@
 .project
 .settings
 .classpath
+.gradle
 target
+build
 build.xml
 /.apt_generated/
 /.apt_generated_tests/
 agent.config
 hdivAgentLog.hlg
+hdiv-ee-agent.jar
+license.hdiv

Dockerfile

@@ -1,26 +1,27 @@
-FROM gradle:7.3.1-jdk17 AS builder
+FROM gradle:7.3.1-jdk17 AS log4j
 LABEL maintainer="Hdiv Security"
 
 COPY --chown=gradle:gradle ./log4j-cve-2021-44228 /home/gradle/src
 WORKDIR /home/gradle/src
 RUN gradle :malicious-server:bootJar --no-daemon
 
-FROM openjdk:8u181-jdk-alpine
+FROM gradle:8.7-jdk17 AS app
+LABEL maintainer="Hdiv Security"
 
-RUN mkdir /app
-COPY --from=builder /home/gradle/src/malicious-server/build/libs/*.jar /app/malicious-server.jar
+COPY --chown=gradle:gradle . /home/gradle/src
+WORKDIR /home/gradle/src
+RUN gradle :bootWar --no-daemon
 
-RUN mkdir -p /usr/local/tomcat/
+FROM tomcat:8.5.100-jre8
 
-WORKDIR /usr/local/tomcat
-RUN wget --no-check-certificate http://dlcdn.apache.org/tomcat/tomcat-8/v8.5.73/bin/apache-tomcat-8.5.73.tar.gz
-RUN tar xvfz apache*.tar.gz
-RUN mv apache-tomcat-8.5.73/* /usr/local/tomcat/.
+RUN mkdir /app
+COPY --from=log4j /home/gradle/src/malicious-server/build/libs/*.jar /app/malicious-server.jar
 
+WORKDIR /usr/local/tomcat
 ADD start.sh /usr/local/tomcat/
 
 # Copy the application to tomcat
-ADD target/insecure-bank.war /usr/local/tomcat/webapps
+COPY --from=app /home/gradle/src/build/libs/*.war /usr/local/tomcat/webapps/insecure-bank.war
 
 # Copy the license file
 ADD license.hdiv /usr/local/tomcat/hdiv/

README.md

@@ -6,12 +6,11 @@
 
         $ git clone https://github.com/hdiv/insecure-bank.git
 
-2. Run the application using an embedded Tomcat:
+2. Run the application locally:
 
-	    $ mvn clean package
-	    $ mvn cargo:run
-
-3. You can then access the bank application here: http://localhost:8080/insecure-bank/
+	    $ ./gradlew bootRun
+
+3. You can then access the bank application here: http://localhost:8080/
 
 ## Running with Docker
 

build.gradle.kts

@@ -0,0 +1,45 @@
+plugins {
+	java
+	war
+	id("org.springframework.boot") version "2.7.18"
+	id("io.spring.dependency-management") version "1.0.15.RELEASE"
+}
+
+group = "org.hdivsamples"
+version = "0.0.1-SNAPSHOT"
+
+sourceSets {
+	main {
+		resources.srcDir("src/main/webapp")
+	}
+}
+
+java {
+	sourceCompatibility = JavaVersion.VERSION_1_8
+}
+
+repositories {
+	mavenCentral()
+}
+
+dependencies {
+	implementation("org.springframework.boot:spring-boot-starter-jdbc")
+	implementation("org.springframework.boot:spring-boot-starter-web")
+	implementation("org.springframework.boot:spring-boot-starter-security")
+	implementation("org.springframework.boot:spring-boot-starter-validation")
+	implementation("org.springframework.ldap:spring-ldap-core")
+	implementation("com.unboundid:unboundid-ldapsdk")
+	implementation("commons-fileupload:commons-fileupload:1.5")
+	implementation("commons-io:commons-io:2.13.0")
+	implementation("com.google.guava:guava:30.0-jre")
+
+	runtimeOnly("javax.servlet:jstl")
+	runtimeOnly("org.apache.tomcat.embed:tomcat-embed-jasper")
+	runtimeOnly("org.hsqldb:hsqldb")
+
+	providedRuntime("org.springframework.boot:spring-boot-starter-tomcat")
+}
+
+tasks.withType<Test> {
+	useJUnitPlatform()
+}

gradle/wrapper/gradle-wrapper.properties

@@ -0,0 +1,6 @@
+distributionBase=GRADLE_USER_HOME
+distributionPath=wrapper/dists
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.7-bin.zip
+networkTimeout=10000
+zipStoreBase=GRADLE_USER_HOME
+zipStorePath=wrapper/dists