Improved Password Security

See issue #2 for details. Passwords are now secured using multiple iterations of PBKDF2WITHHMACSHA512 based on recent guidelines like those of OWASP and PKCS #5 v2.1/rfc8018 for protecting passwords and private keys. This will make it more difficult to brute force break passwords if the encoded value is found out.

There is also an upgrade process for passwords such that if you have a database from before version v1.0.2 users passwords will be re-encoded on login or update to the newer more secure format. Future releases will use the upgrade process as better methods become available.

To run the app, pass in the database setting parameters like this:

• jdbc url --spring.datasource.url=<url>
• username --spring.datasource.username=<username>
• password --spring.datasource.password=<password>

Optionally pass the service port like this:

• port --server.port=<portnumber>

Example command

java -jar Requel-1.0.2.jar --spring.datasource.url=jdbc:mysql://localhost:3306/requeldb?createDatabaseIfNotExist=true --spring.datasource.username=root --spring.datasource.password=password --server.port=8081

Then access the app http://localhost:8081/

login to the application as admin user with password admin.

New Executable Jar for Easy Running

New Executable Jar for Easy Running

This release replicates the functionality of the original release from 2009, but as an executable jar file that is easier to configure and run. It has an embedded tomcat web server so you only need to have a MySQL database running. Just pass database settings and a port to listen on if 8080 is not available:

Pass in the database setting parameters like this:

• jdbc url --spring.datasource.url=<url>
• username --spring.datasource.username=<username>
• password --spring.datasource.password=<password>

Optionally pass the service port like this:

• port --server.port=<portnumber>

Example command

java -jar Requel-1.0.1.jar --spring.datasource.url=jdbc:mysql://localhost:3306/requeldb?createDatabaseIfNotExist=true --spring.datasource.username=root --spring.datasource.password=password --server.port=8081

Then access the app http://localhost:8081/

login to the application as admin user with password admin.

If You Use Docker

check out https://hub.docker.com/r/rreganjr/requel/

docker network create requel-net
docker run --name requelDB --net=requel-net -e MYSQL_ROOT_PASSWORD=pa33w0rd -d mysql:5.6.32
docker run --name requel --net=requel-net -p8181:8080 -d rreganjr/requel:1.0.1 --spring.datasource.url=jdbc:mysql://requelDB:3306/requeldb?createDatabaseIfNotExist=true --spring.datasource.password=pa33w0rd

Then access the app http://localhost:8181/

Move to Spring Boot and Maven

Most of the libraries (jars) that were included in the source are now pulled from maven repositories. Some of the Echo2 libraries are still included, even though patches were made to the projects on github they haven't been released yet so for now a bash script at the root is used to install the jars in the project into the local maven repo/cache for building.

Sorry for the big file

Using the Stanford CoreNLP 3.8.0 has doubled the size of this release jar file as the new English model that is 300 MBytes alone!