fix: allow redirect

[ikrispin]

No description provided.

[github-actions]

Review Summary:

The changes in application.properties update Quarkus REST client configurations. The most significant issue is the continued use of insecure TLS settings, which should be addressed, especially for production environments.

---

File: src/main/resources/application.properties

• Issue: Security - Insecure TLS Configuration
  • quarkus.rest-client.osh-api.tls-trust-all=true and quarkus.rest-client.osh-api.verify-host=false disable critical SSL/TLS certificate validation. This makes the application vulnerable to Man-in-the-Middle (MITM) attacks and should never be used in a production environment.
  • Suggestion: For production, these properties must be removed or set to false (implicitly or explicitly) to enable proper certificate validation. If this is intended for a specific development or testing environment (e.g., self-signed certificates), consider moving these settings to an environment-specific profile (e.g., application-dev.properties) and adding a clear comment explaining the security implications.
• Clarity: The change from trust-all to tls-trust-all seems to be a key rename. Assuming this is a necessary Quarkus upgrade or correction, it's fine.
• Clarity: Adding quarkus.rest-client.osh-api.follow-redirects=true is generally a reasonable default for REST clients.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud