Dockerization

Dockerfile

@@ -0,0 +1,7 @@
+FROM eclipse-temurin:17-jdk-focal
+
+COPY target/nosql-injection-vulnapp-mongodb-java-*.jar /app/niva.jar
+
+WORKDIR /app
+
+ENTRYPOINT [ "java","-jar", "niva.jar"]

README.md

@@ -8,6 +8,12 @@ This edition utilizes MongoDB as the NoSQL database and the official Java driver
 
 # Setup
 
+## Docker
+```
+docker pull aabashkin/niva
+docker run -p 8080:8080 aabashkin/niva
+```
+
 ## Maven
 
 ```
@@ -59,7 +65,7 @@ The app uses Basic Authentication. Three users are hardcoded:
 
 # Testing 
 Tests are located in the root of the web application:
-`http://localhost:8080/niva/`
+`http://localhost:8080/`
 
 The testing page contains a number of links to both secure and insecure endpoints, with options for both regular expected input as well as an example attack vector:
 

build-container-image.sh

@@ -0,0 +1,4 @@
+#!/bin/sh
+
+mvn clean install
+docker build --tag aabashkin/niva .

pom.xml

@@ -9,7 +9,7 @@
 	</parent>
 	<groupId>aabashkin</groupId>
 	<artifactId>nosql-injection-vulnapp-mongodb-java</artifactId>
-	<version>1.0.0</version>
+	<version>1.1.0</version>
 	<name>nosql-injection-vulnapp-mongodb-java</name>
 	<description>An app vulnerable to NoSQL injection built with a MongoDB database and the official Java driver</description>
 	<properties>

tag-push-container-image.sh

@@ -0,0 +1,12 @@
+#!/bin/sh
+
+if [ -z "$1" ]
+then
+    echo "Missing tag version"
+    exit
+fi 
+
+docker tag aabashkin/niva aabashkin/niva:$1
+
+docker push aabashkin/niva
+docker push aabashkin/niva:$1