Skip to content

[backend/frontend] XTM One registration and ping mechanism (#14798)#14563

Merged
SamuelHassine merged 7 commits intomasterfrom
oob/one
Mar 5, 2026
Merged

[backend/frontend] XTM One registration and ping mechanism (#14798)#14563
SamuelHassine merged 7 commits intomasterfrom
oob/one

Conversation

@SamuelHassine
Copy link
Member

@SamuelHassine SamuelHassine commented Feb 23, 2026

Proposed changes

  • [backend/frontend] XTM One registration and ping mechanism

⚠️ This is a Proof of Concept (PoC) — validates the approach for XTM One registration before production hardening.

What this does

Implements a registration and periodic heartbeat between OpenCTI and XTM One:

  • New xtmOneRegistrationManager — scheduled manager (every 5 min) that registers the platform with XTM One via /api/v1/platform/register. Fires once at boot (30s delay), then on interval. The endpoint is an upsert so repeated calls are safe.
  • Registration payload includes platform metadata (URL, version, title, ID), enterprise license PEM/type, admin API key, and all platform users with dedicated XTM One API tokens (provisioned once per user, unlimited duration).
  • Response handling — stores the chat_web_token from XTM One for Copilot chat integration.
  • New config key xtm.xtm_one_token — both xtm_one_url and xtm_one_token must be set for the manager to activate.
  • Improved auth logging — token resolution errors now include token prefix, user-agent, and origin.
  • i18n — new manager label across all supported languages.

Related issues

Closes #14798

@codecov
Copy link

codecov bot commented Feb 23, 2026

Codecov Report

❌ Patch coverage is 0% with 166 lines in your changes missing coverage. Please review.
✅ Project coverage is 32.35%. Comparing base (ab4ac8e) to head (b7219ba).
⚠️ Report is 4 commits behind head on master.

Files with missing lines Patch % Lines
...orm/opencti-graphql/src/modules/xtm/one/xtm-one.ts 0.00% 82 Missing ⚠️
...i-graphql/src/manager/xtmOneRegistrationManager.ts 0.00% 45 Missing ⚠️
...ncti-graphql/src/modules/xtm/one/xtm-one-client.ts 0.00% 29 Missing ⚠️
...pencti-platform/opencti-graphql/src/domain/user.js 0.00% 9 Missing ⚠️
...ncti-platform/opencti-graphql/src/manager/index.ts 0.00% 1 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##           master   #14563      +/-   ##
==========================================
- Coverage   32.38%   32.35%   -0.03%     
==========================================
  Files        3108     3111       +3     
  Lines      211708   211873     +165     
  Branches    38391    38394       +3     
==========================================
  Hits        68554    68554              
- Misses     143154   143319     +165     
Flag Coverage Δ
opencti-client-python 45.53% <ø> (ø)
opencti-front 2.82% <ø> (ø)
opencti-graphql 67.55% <0.00%> (-0.13%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@aHenryJard aHenryJard added the filigran team use to identify PR from the Filigran team label Feb 24, 2026
@xfournet xfournet changed the base branch from release/current to master February 24, 2026 09:11
@SamuelHassine SamuelHassine removed the request for review from richard-julien March 5, 2026 14:26
@SamuelHassine SamuelHassine changed the title [backend/frontend] XTM Registration and ping mechanism [backend/frontend] XTM One registration and ping mechanism (#14798) Mar 5, 2026
@SamuelHassine SamuelHassine merged commit 6329d8f into master Mar 5, 2026
38 of 39 checks passed
@SamuelHassine SamuelHassine deleted the oob/one branch March 5, 2026 14:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

filigran team use to identify PR from the Filigran team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[backend/frontend] XTM One registration and ping mechanism (PoC)

2 participants