Upgrading STF for security reasons (#813)

* Upgrading STF for security reasons

Signed-off-by: Denis barbaron <denis.barbaron@orange.com>

* update semaphore files

Signed-off-by: Denis barbaron <denis.barbaron@orange.com>

* upgrading STF for security reasons v2

Signed-off-by: Denis barbaron <denis.barbaron@orange.com>

* update yarn.lock file

Signed-off-by: Denis barbaron <denis.barbaron@orange.com>

---------

Signed-off-by: Denis barbaron <denis.barbaron@orange.com>

lib/units/auth/ldap.js

@@ -1,5 +1,5 @@
 /**
-* Copyright © 2019 contains code contributed by Orange SA, authors: Denis Barbaron - Licensed under the Apache license 2.0
+* Copyright © 2019-2024 contains code contributed by Orange SA, authors: Denis Barbaron - Licensed under the Apache license 2.0
 **/
 
 var http = require('http')
@@ -56,6 +56,8 @@ module.exports = function(options) {
     next()
   })
 
+  app.disable('x-powered-by')
+
   app.get('/', function(req, res) {
     res.redirect('/auth/ldap/')
   })

lib/units/auth/mock.js

@@ -82,6 +82,8 @@ module.exports = function(options) {
     app.use(basicAuthMiddleware)
   }
 
+  app.disable('x-powered-by')
+
   app.get('/', function(req, res) {
     res.redirect('/auth/mock/')
   })

lib/units/auth/oauth2/index.js

@@ -1,3 +1,7 @@
+/**
+* Copyright © 2024 contains code contributed by Orange SA, authors: Denis Barbaron - Licensed under the Apache license 2.0
+**/
+
 var http = require('http')
 
 var express = require('express')
@@ -48,6 +52,8 @@ module.exports = function(options) {
   , session: false
   }))
 
+  app.disable('x-powered-by')
+
   function isEmailAllowed(email) {
     if (email) {
       if (options.domain) {

lib/units/auth/openid.js

@@ -1,3 +1,7 @@
+/**
+* Copyright © 2024 contains code contributed by Orange SA, authors: Denis Barbaron - Licensed under the Apache license 2.0
+**/
+
 var http = require('http')
 
 var openid = require('openid')
@@ -27,6 +31,8 @@ module.exports = function(options) {
   app.set('strict routing', true)
   app.set('case sensitive routing', true)
 
+  app.disable('x-powered-by')
+
   app.get('/', function(req, res) {
     res.redirect('/auth/openid/')
   })

lib/units/auth/saml2.js

@@ -1,3 +1,7 @@
+/**
+* Copyright © 2024 contains code contributed by Orange SA, authors: Denis Barbaron - Licensed under the Apache license 2.0
+**/
+
 var fs = require('fs')
 var http = require('http')
 
@@ -88,6 +92,8 @@ module.exports = function(options) {
   , session: false
   }))
 
+  app.disable('x-powered-by')
+
   app.post(
     '/auth/saml/callback'
   , function(req, res) {