- GET /api/v1/mitre/tactics, /techniques?tactic=&q=, /subtechniques?technique=&q=
(paginated, ILIKE search on name + external_id, @require_auth only — MITRE
is public reference material).
- GET /api/v1/mitre/status: last_sync, version, source_url + the pinned
defaults (default_url, default_version) for the SPA badge.
- POST /api/v1/mitre/sync: @require_perm("mitre.sync"). Body supports
{source, expected_sha256, allow_unverified} — defaults inherit the pin.
- /diag/reset now also TRUNCATEs the mitre_* tables alongside settings so a
freshly-reset stack has GET /mitre/status and GET /mitre/tactics agree
("no data, no last_sync"). Previously the catalogue persisted while the
metadata was wiped, leaving status to lie. The e2e suite re-syncs in
beforeAll.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
27 lines
892 B
Python
27 lines
892 B
Python
"""Aggregate v1 blueprint. Future blueprints (missions, ...) register here."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from flask import Blueprint
|
|
|
|
from app.api.auth import bp as auth_bp
|
|
from app.api.diag import bp as diag_bp
|
|
from app.api.groups import bp as groups_bp
|
|
from app.api.health import bp as health_bp
|
|
from app.api.invitations import bp as invitations_bp
|
|
from app.api.mitre import bp as mitre_bp
|
|
from app.api.permissions import bp as permissions_bp
|
|
from app.api.setup import bp as setup_bp
|
|
from app.api.users import bp as users_bp
|
|
|
|
bp = Blueprint("v1", __name__, url_prefix="/api/v1")
|
|
bp.register_blueprint(health_bp)
|
|
bp.register_blueprint(diag_bp)
|
|
bp.register_blueprint(setup_bp)
|
|
bp.register_blueprint(auth_bp)
|
|
bp.register_blueprint(invitations_bp)
|
|
bp.register_blueprint(users_bp)
|
|
bp.register_blueprint(groups_bp)
|
|
bp.register_blueprint(permissions_bp)
|
|
bp.register_blueprint(mitre_bp)
|