acmeair / acmeair-nodejs Goto Github PK

To preface this: yes, I'm aware that this is a sample application that's not designed to be secure or anything like that (y'know, what with the auto-filled default values and everything). I just wanted to make sure that people who planned on using this application as inspiration for a real-world application would be aware of this issue.

By taking advantage of the sessionid cookie given to users, any user is able to access any other user's information. This is because the application doesn't associate sessions with users.

An example of exploiting this:

1. Log into the application as [email protected]
2. Grab the sessionid cookie given by the server
3. Send a request to /rest/api/customer/byid/[email protected] with the cookie (e.g. curl localhost:9080/rest/api/customer/byid/[email protected] --cookie "sessionid=<your sessionid cookie>", or just visit the page in your browser if it has the cookie)

The same technique can be used to modify any arbitrary user as well.

Hi all,

Is there any specific versions of node/mongo/nginx that will get this to work?
acmeair builds fine, and comes up fine. But everytime i tried to load the db, i get this error:
Error: Unable to load http://test.xyz.com/customer/acmeair-cs/rest/api/customer/config/countCustomers status:502

Can someone share the versions of mongo/node/nginx where they got this to work?

thanks a mil

docker build for document/workload no longer completes due to incorrect URL for json-simple-1.1.1.jar

https://github.com/SaifRehman/ICP-Airways

The following jar does not seemed to be maintained by googlecode in the link provided (https://json-simple.googlecode.com/files/json-simple-1.1.1.jar)

I was able to obtain it from the archive linked here: https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/json-simple/json-simple-1.1.1.jar

Hi, I'm trying to run and test AcmeAir-node code from command line. I've followed all the steps to setup jmeter (loaded the database, etc.), but when I start jmeter as following, I get following error,

$ JVM_ARGS="-Xms2048m -Xmx2048m -XX:MaxTenuringThreshold=4 -XX:NewRatio=2" jmeter -J jmeter.save.saveservice.output_format=csv -J jmeter.save.saveservice.print_field_names=true -J jmeter.save.saveservice.latency=true -DusePureIDs=true -n -t document/workload/jmeter/AcmeAir.jmx

com.acmeair.jmeter.functions.ExtractFlightsInfoFunction FlightsContext is null. This should not be null. FlightsContext should be created by FlightsPostProcessor.
FlightsPostProcessor - Last sample received an error. Response Code = Non HTTP response code: java.lang.IllegalArgumentException.
FlightsPostProcessor - Last sample received an error. Response Code = Non HTTP response code: java.lang.IllegalArgumentException.
FlightsPostProcessor - Last sample received an error. Response Code = Non HTTP response code: java.lang.IllegalArgumentException.
FlightsPostProcessor - Last sample received an error. Response Code = Non HTTP response code: java.lang.IllegalArgumentException.
FlightsPostProcessor - Last sample received an error. Response Code = Non HTTP response code: java.lang.IllegalArgumentException.
com.acmeair.jmeter.functions.ExtractFlightsInfoFunction FlightsContext is null. This should not be null. FlightsContext should be created by FlightsPostProcessor.

I am running AcmeAir on a Haswell server with 36 cores (Xeon E5-2699 @ 2.30GHz) with 64 bit Ubuntu 16.04. I'm using the JMeter driver with default options except I set the number of threads to 36, running for 10 minutes. On the server, if I run vmstat or sar I see approximately 8-9% CPU utilization by user, 1% by system, and 90-91% CPU idle.

Setting the number of threads down to 1 drastically lowers the throughput, but raising it to higher numbers seems to have no effect somewhere in the 5-10 thread range. Both vmstat and sar report the same numbers across different runs. Is is expected of the workload? If not, would this be caused by not setting certain options to raise the CPU utilization?

Provide support for Data Cache Service in IBM Bluemix. Should also integrate with WebSphere eXtreme Scale's REST Data Service. These services follow WCF Data Services REST API and should be extensible to other implementations.