Merge branch 'main' into dependabot/npm_and_yarn/mongodb-7.0.0

Author: madhavilosetty-intel

CHANGELOG.md

@@ -1,3 +1,10 @@
+## [2.22.5](https://github.com/device-management-toolkit/mps/compare/v2.22.4...v2.22.5) (2025-11-07)
+
+
+### Bug Fixes
+
+* loosens UUID check for API ([#2194](https://github.com/device-management-toolkit/mps/issues/2194)) ([f741380](https://github.com/device-management-toolkit/mps/commit/f741380937cfc8f69a26d2ca4ef13fccbafcff2e))
+
 ## [2.22.4](https://github.com/device-management-toolkit/mps/compare/v2.22.3...v2.22.4) (2025-11-06)
 
 ## [2.22.3](https://github.com/device-management-toolkit/mps/compare/v2.22.2...v2.22.3) (2025-10-14)

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-amt-cloud-toolkit/mps",
-  "version": "2.22.4",
+  "version": "2.22.5",
   "description": "Containerized MPS service for executing Intel® AMT features",
   "homepage": "https://github.com/device-management-toolkit/mps",
   "contributors": [
@@ -46,7 +46,7 @@
     "exponential-backoff": "^3.1.3",
     "express": "^4.21.2",
     "express-validator": "^7.3.0",
-    "got": "^14.6.2",
+    "got": "^14.6.3",
     "http-z": "^7.0.0",
     "jws": "^4.0.0",
     "mongodb": "^7.0.0",
@@ -80,7 +80,7 @@
     "ts-jest": "^29.4.4",
     "ts-node": "^10.9.2",
     "typescript": "^5.8.3",
-    "typescript-eslint": "8.46.3"
+    "typescript-eslint": "8.46.4"
   },
   "optionalDependencies": {
     "fsevents": "^2.3.3"

package.json

@@ -13,6 +13,6 @@ import { authorizeDevice } from './authorizeDevice.js'
 const authRouter: Router = Router()
 
 authRouter.post('/', authValidator(), login)
-authRouter.get('/redirection/:guid', param('guid').isUUID(), validateMiddleware, authorizeDevice)
+authRouter.get('/redirection/:guid', param('guid').isUUID('loose'), validateMiddleware, authorizeDevice)
 
 export default authRouter

src/routes/auth/index.ts

@@ -6,7 +6,7 @@
 import { check, query } from 'express-validator'
 
 export const validator = (): any => [
-  check('guid').isUUID().isString(),
+  check('guid').isUUID('loose').isString(),
   check('friendlyName').optional({ nullable: true }).isString(),
   check('hostname')
     .optional({ nullable: true })

src/routes/devices/deviceValidator.ts

@@ -24,17 +24,17 @@ const deviceRouter: Router = Router()
 deviceRouter.get('/', odataValidator(), metadataQueryValidator(), validateMiddleware, getAllDevices)
 deviceRouter.get('/stats', stats)
 deviceRouter.get('/tags', getDistinctTags)
-deviceRouter.get('/:guid', param('guid').isUUID(), validateMiddleware, getDevice)
-deviceRouter.get('/redirectstatus/:guid', param('guid').isUUID(), validateMiddleware, ciraMiddleware, getRedirStatus)
+deviceRouter.get('/:guid', param('guid').isUUID('loose'), validateMiddleware, getDevice)
+deviceRouter.get('/redirectstatus/:guid', param('guid').isUUID('loose'), validateMiddleware, ciraMiddleware, getRedirStatus)
 deviceRouter.post('/', validator(), validateMiddleware, insertDevice)
 deviceRouter.patch('/', validator(), validateMiddleware, updateDevice)
 deviceRouter.delete('/refresh/:guid', validator(), validateMiddleware, refreshDevice)
 deviceRouter.delete(
   '/:guid',
-  param('guid').isUUID(),
+  param('guid').isUUID('loose'),
   query('isSecretToBeDeleted').optional().isBoolean(),
   validateMiddleware,
   deleteDevice
 )
-deviceRouter.delete('/disconnect/:guid', param('guid').isUUID(), validateMiddleware, ciraMiddleware, disconnect)
+deviceRouter.delete('/disconnect/:guid', param('guid').isUUID('loose'), validateMiddleware, ciraMiddleware, disconnect)
 export default deviceRouter