[{"_1":2,"_195":-5,"_196":-5},"loaderData",{"_3":4,"_17":18,"_25":26,"_168":169},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":21,"_23":11,"_24":21},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_98":-5,"_99":100,"_157":-5,"_158":11,"_159":21,"_160":11,"_161":-5,"_162":11,"_163":-5,"_164":165,"_166":101,"_167":-7},"canonicalUrl","https://hub.docker.com/r/emc2fma/emc2fma.com-api-gateway/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","emc2fma","reponame","emc2fma.com-api-gateway","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_53":54,"_56":57,"_58":59,"_60":11,"_61":62,"_63":64,"_65":66,"_43":35,"_32":33,"_68":69,"_70":55,"_71":72,"_73":74,"_75":76,"_77":-5,"_78":72,"_79":80,"_81":11,"_82":33,"_83":84,"_89":11,"_90":91,"_95":33,"_96":97},"categories",[42,47,50],{"_43":44,"_45":46},"name","Networking","slug","networking",{"_43":48,"_45":49},"Security","security",{"_43":51,"_45":52},"API management","api-management","content_types",[55],"image","date_registered","2026-03-24T08:19:51.211386Z","description","API-Gateway as (micro-)service application -JWT Auth, User Repo - Circuit- breaker, Rate limiter\n","is_private","last_updated","2026-03-26T13:41:52.534598Z","last_modified","2026-04-02T16:16:42.680283Z","media_types",[67],"application/vnd.oci.image.index.v1+json","pull_count",412,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# EMC2FMA Project Miiraji : API Gateway\n\nA Spring WebFlux-based API Gateway providing JWT authentication, dynamic route proxying, CORS enforcement, rate limiting, circuit breaking, and pluggable user management — configurable entirely through environment variables or `application.yml`.\n\nEnvironment variables are available in [.env](https://github.com/emc2fma-com/emc2fma-project-miiraji-api-gateway/blob/main/.env-file) or [application.properties](https://github.com/emc2fma-com/emc2fma-project-miiraji-api-gateway/blob/main/application.properties).\n\n---\n\n## Table of Contents\n\n1. [Features](#features)\n2. [User Repository — Internal vs External](#1-user-repository--internal-vs-external)\n3. [Service Discovery & Route Configuration](#2-service-discovery--route-configuration)\n4. [JWT Authentication](#3-jwt-authentication)\n5. [Rate Limiter](#4-rate-limiter)\n6. [Circuit Breaker](#5-circuit-breaker)\n7. [CORS](#6-cors)\n8. [Logging](#7-logging)\n9. [Actuator / Management](#8-actuator--management)\n10. [API Reference](#9-api-reference)\n11. [Quick-Start Configuration](#quick-start-configuration)\n\n---\n\n## Features\n\n| # | Feature | Status |\n|---|---------|--------|\n| 1 | Internal user repo (MySQL + Hibernate) or External User API | Configurable |\n| 2 | Dynamic route forwarding / proxying | Configurable |\n| 3 | JWT Auth — STRING / filesystem / AWS S3 / Azure Blob keys | Configurable |\n| 4 | Redis-based sliding-window rate limiter | Optional |\n| 5 | Resilience4j circuit breaker | Optional |\n| 6 | CORS enforcement | Configurable |\n| 7 | Structured logging with MDC (userId, correlationId) | Always on |\n| 8 | Spring Boot Actuator health & management endpoints | Always on |\n\n---\n\n## 1. User Repository — Internal vs External\n\nThe gateway can manage users from its own MySQL database (via Hibernate/JPA) **or** delegate all user lookups to an external User microservice.\n\n### Internal repo (MySQL + Hibernate)\n\nEnable Hibernate and configure the datasource:\n\n```yaml\nspring:\n datasource:\n url: jdbc:mysql://:3306/\n username: root\n password: secret\n driver-class-name: com.mysql.cj.jdbc.Driver\n jpa:\n hibernate:\n ddl-auto: validate # use 'validate' or 'none' in production\n show-sql: false\n```\n\nPass the JVM flag at startup:\n\n```bash\njava -Dhibernate.enabled=true -jar api-gateway-0.0.1-spring-boot.jar\n```\n\n```bash\ndocker run -p 8080:8080 -v :/app/files --env-file .env \\\n -e JDK_JAVA_OPTIONS=\"-Dhibernate.enabled=true\" \\\n emc2fma/emc2fma.com-api-gateway:\n```\n\nA default admin account is seeded on first startup:\n\n| Property | Default | Notes |\n|----------|---------|-------|\n| `user.default.userName` | `admin` | Change immediately |\n| `user.default.pwd` | `${USER_DEFAULT_PWD:admin123}` | **Override via env var before go-live** |\n| `user.default.roleName` | `admin` | |\n| `user.default.startDate` | `2026-01-19` | `yyyy-MM-dd` |\n| `user.default.endDate` | `2028-01-19` | `yyyy-MM-dd` |\n\n> **Production:** set the `USER_DEFAULT_PWD` environment variable before go-live and set `ddl-auto: validate`.\n\n### External User API\n\nDisable Hibernate and point the gateway at your User microservice:\n\n```bash\njava -Dhibernate.enabled=false -jar output/api-gateway-0.0.1-spring-boot.jar\n```\n\n```bash\ndocker run -p 8080:8080 -v :/app/files --env-file .env \\\n -e JDK_JAVA_OPTIONS=\"-Dhibernate.enabled=false\" \\\n emc2fma/emc2fma.com-api-gateway:\n```\n\n```yaml\nuser:\n service:\n api:\n url: # required\n path:\n name: # optional — path segment for name lookups\n id: # optional — path segment for id lookups\n query: \"\" # optional default query string\n headers: \"\" # optional forwarded headers (key=value)\n```\n\n---\n\n## 2. Service Discovery & Route Configuration\n\nThe gateway acts as a reverse proxy. Routes are declared as a map where **each key is an Ant-style path pattern** and the value is the **target upstream URL**.\n\n```yaml\nroutes:\n apis:\n /order/**: http://order-service:8081\n /inventory/**: http://inventory-service:8082\n```\n\nAll requests matching `/order/**` are forwarded to `http://order-service:8081`, preserving the path suffix.\n\n### JWT whitelist (unauthenticated paths)\n\nPaths that bypass JWT verification (e.g. login, docs, public health):\n\n```yaml\nsecurity:\n white:\n paths: /login, /actuator/health, /v3/api-docs/**, /swagger-ui/**\n```\n\n---\n\n## 3. JWT Authentication\n\n### Token issuance\n\nSend credentials to the login endpoint — no JWT is required for this call:\n\n```\nPOST /login\nContent-Type: application/json\n\n{\n \"userName\": \"admin\",\n \"passWord\": \"admin123\",\n \"organizationId\": \"optional-org-id\"\n}\n```\n\nA successful response returns a signed JWT. Pass it on all subsequent protected requests:\n\n```\nAuthorization: Bearer \n```\n\n### Token validation\n\nThe gateway validates the JWT on every non-whitelisted request. Signing keys are sourced by setting `security.jwt.public.type` and `security.jwt.private.type` (must be the same value).\n\n| Type | Description |\n|------|-------------|\n| `STRING` | Inline HMAC secret in config |\n| `X509_JKS_FILE` | RSA key pair (JKS / CER) |\n\nFor `X509_JKS_FILE`, the storage location is selected by `security.jwt.public.store` and `security.jwt.private.store`:\n\n| Store | Description |\n|-------|-------------|\n| `FILE` | RSA keys fetched from local file disk |\n| `AWS` | RSA keys fetched from Amazon S3 |\n| `AZURE` | RSA keys fetched from Azure Blob Storage |\n\nToken expiry is controlled by `security.jwt.token.expiration` (default: **10 minutes**).\n\n### STRING (HMAC)\n\n```yaml\nsecurity:\n jwt:\n token:\n expiration: 10 # minutes\n public:\n type: STRING\n private:\n type: STRING\n string:\n public.Key: your-public-hmac-secret\n private.Key: your-private-hmac-secret\n```\n\n### Filesystem RSA\n#### ⚠️ \"docker run -v\" should point container app to local folder containing path to keys.\n```yaml\nsecurity:\n jwt:\n token:\n expiration: 10 # minutes\n public:\n type: X509_JKS_FILE\n store: FILE\n private:\n type: X509_JKS_FILE\n store: FILE\n fs:\n public.path: /keys/public.cer\n private.path: /keys/private.jks\n rsa:\n fs:\n storepass: changeit\n keypass: changeit\n alias: my-key-alias\n```\n\n### AWS S3\n\n```yaml\nsecurity:\n jwt:\n token:\n expiration: 10 # minutes\n public:\n type: X509_JKS_FILE\n store: AWS\n private:\n type: X509_JKS_FILE\n store: AWS\n aws:\n public:\n region: \n access: \n secret: \n bucket: \n path: \n private:\n region: \n access: \n secret: \n bucket: \n path: \n```\n\n### Azure Blob Storage\n\n```yaml\nsecurity:\n jwt:\n token:\n expiration: 10 # minutes\n public:\n type: X509_JKS_FILE\n store: AZURE\n private:\n type: X509_JKS_FILE\n store: AZURE\n azure:\n public:\n connectionString: \n containerName: \n blobName: \n private:\n connectionString: \n containerName: \n blobName: \n```\n\n---\n\n## 4. Rate Limiter\n\nSliding-window rate limiting backed by **Redis**. When the limit is exceeded the gateway returns `429 Too Many Requests`. No `Retry-After` header is sent by default.\n\n```yaml\nsecurity:\n rl:\n enabled: true\n burstRate: 100 # max requests per window\n windowSeconds: 1 # window size in seconds\n header.key: X-Client-Id # header used to identify the caller\n redis:\n host: \n port: # default: 6379\n dbindex: 1\n uname: \n pwd: \n```\n\n> Set `enabled: false` to remove the Redis startup dependency entirely.\n\n---\n\n## 5. Circuit Breaker\n\nResilience4j circuit breaker wraps all upstream proxy calls. Disabled by default.\n\nThe breaker **opens** when the failure rate exceeds `failureRateThreshold`% across the last `slidingWindowSize` calls (at least `minimumNumberOfCalls` must have been made). While open, all calls are blocked immediately. After `waitDurationInOpenState` ms it transitions to **HALF_OPEN**, allows `permittedNumberOfCallsInHalfOpenState` probe calls, then returns to **CLOSED** on success or back to **OPEN** on failure.\n\n```yaml\nspring:\n cloud:\n circuitbreaker:\n resilience4j:\n enabled: true\n\nresilience4j:\n circuitbreaker:\n instances:\n default:\n minimumNumberOfCalls: 5\n failureRateThreshold: 50 # %\n slidingWindowType: COUNT_BASED\n slidingWindowSize: 10\n waitDurationInOpenState: 10000 # ms\n permittedNumberOfCallsInHalfOpenState: 3\n automaticTransitionFromOpenToHalfOpenEnabled: true\n```\n\nStates: **CLOSED** (normal) → **OPEN** (failing, blocks calls) → **HALF_OPEN** (probe) → back to CLOSED or OPEN.\n\n---\n\n## 6. CORS\n\nCross-origin request handling is configurable per environment. For production, replace wildcards with explicit values.\n\n```yaml\nsecurity:\n cors:\n enable: true\n allowed:\n origins: \"https://app.example.com\" # use \"*\" for local dev only\n methods: \"GET, POST, PUT, DELETE, OPTIONS\"\n headers: \"Authorization, Content-Type, X-Client-Id\"\n creds: false # set true only if cookies/auth headers are needed cross-origin\n maxAge: 3600 # seconds to cache preflight response\n```\n\n> **Production:** never combine `origins: \"*\"` with `creds: true` — browsers will reject the combination.\n\n---\n\n## 7. Logging\n\nLog levels follow Logback conventions. Every request is decorated with **MDC context** (`userId`, `correlationId`) automatically.\n\n```yaml\nlogging:\n level:\n root: INFO\n org.springframework: INFO\n org.springdoc: INFO\n pattern:\n console: \"%d{HH:mm:ss} [%X{correlationId}] [%X{userId}] %-5level %logger{36} - %msg%n\"\n file:\n path: /var/log/api-gateway # omit this key entirely to disable file logging\n```\n\nAvailable levels: `TRACE` / `DEBUG` / `INFO` / `WARN` / `ERROR`\n\n> **Note:** The `{...}` tokens in the console pattern (e.g. `%d{HH:mm:ss}`, `%X{correlationId}`) are **Logback syntax**, not config placeholders — copy them verbatim.\n\n## 7b. otel/otlp, prometheus and zipkin available for end-to-end tracing with metrics.\n\n---\n\n## 8. Actuator / Management\n\nSpring Boot Actuator is enabled by default. `env` and `beans` are excluded because they expose sensitive environment values and the full bean graph.\n\n```yaml\nmanagement:\n endpoints:\n web:\n exposure:\n include: \"*\"\n exclude: env, beans\n endpoint:\n health:\n show-details: always\n```\n\nKey endpoints:\n\n| Endpoint | Purpose |\n|----------|---------|\n| `GET /actuator/health` | Liveness / readiness probe |\n| `GET /actuator/info` | App metadata |\n| `GET /actuator/metrics` | Micrometer metrics |\n| `GET /actuator/loggers` | Runtime log-level inspection |\n\nThe Swagger UI (`/swagger-ui/index.html`) and raw API docs (`/v3/api-docs`) are whitelisted by default and do not require a JWT.\n\n---\n\n## 9. API Reference\n\nAll endpoints except `POST /login` require a valid JWT:\n\n```\nAuthorization: Bearer \n```\n\nSeveral write endpoints also accept an optional `X-User-Id` header, recorded as `createdBy` / `updatedBy` in the audit fields.\n\n### Response envelope\n\nEvery response — success or failure — uses the same wrapper:\n\n```json\n{\n \"value\": \"\",\n \"error\": {\n \"message\": \"human-readable description\",\n \"code\": 400\n }\n}\n```\n\n`error` is `null` on success; `value` is `null` on error.\n\n---\n\n### Auth\n\n#### `POST /login` — Authenticate and obtain a JWT\n\n> No `Authorization` header required.\n\n**Request body**\n\n| Field | Type | Required | Description |\n|-------|------|----------|-------------|\n| `userName` | string | yes | Account username |\n| `passWord` | string | yes | Account password |\n| `organizationId` | string | no | Optional tenant / org identifier |\n\n```json\n{\n \"userName\": \"admin\",\n \"passWord\": \"admin123\",\n \"organizationId\": \"my-org\"\n}\n```\n\n**Response `200 OK`**\n\n```json\n{ \"value\": true, \"error\": null }\n```\n\nThe signed JWT is returned in the `Authorization` response header. Use it as `Authorization: Bearer ` on all subsequent calls.\n\n---\n\n### Users\n\n#### `POST /user` — Create a user\n\n**Headers:** `X-User-Id` (optional, recorded as `createdBy`)\n\n**Request body**\n\n| Field | Type | Required | Description |\n|-------|------|----------|-------------|\n| `userName` | string | yes | Unique login name |\n| `password` | string | yes | Plain-text password (hashed server-side) |\n| `firstName` | string | no | Given name |\n| `lastName` | string | no | Family name |\n| `dob` | date-time | no | Date of birth — ISO 8601 e.g. `1990-06-15T00:00:00Z` |\n| `startDate` | date-time | no | Account activation date |\n| `expiredDate` | date-time | no | Account expiry date |\n| `userRoles` | string[] | no | Role names to assign (roles must already exist) |\n\n```json\n{\n \"userName\": \"alice\",\n \"password\": \"s3cr3t\",\n \"firstName\": \"Alice\",\n \"lastName\": \"Smith\",\n \"dob\": \"1990-06-15T00:00:00Z\",\n \"startDate\": \"2026-01-01T00:00:00Z\",\n \"expiredDate\": \"2028-01-01T00:00:00Z\",\n \"userRoles\": [\"admin\", \"viewer\"]\n}\n```\n\n**Response `200 OK`** — returns the new user's integer ID.\n\n```json\n{ \"value\": 42, \"error\": null }\n```\n\n---\n\n#### `PUT /user/{id}` — Update a user\n\n**Path params:** `id` (integer)\n\n**Headers:** `X-User-Id` (optional, recorded as `updatedBy`)\n\n**Request body** — same fields as `POST /user`. Include only the fields you want to change.\n\n**Response `200 OK`**\n\n```json\n{ \"value\": true, \"error\": null }\n```\n\n---\n\n#### `GET /user/id/{id}` — Get user by ID\n\n**Path params:** `id` (integer)\n\n**Response `200 OK`**\n\n```json\n{\n \"value\": {\n \"id\": 42,\n \"userName\": \"alice\",\n \"firstName\": \"Alice\",\n \"lastName\": \"Smith\",\n \"password\": \"\",\n \"dob\": \"1990-06-15T00:00:00Z\",\n \"startDate\": \"2026-01-01T00:00:00Z\",\n \"expiredDate\": \"2028-01-01T00:00:00Z\",\n \"userRoles\": [\"admin\"],\n \"createdAt\": \"2026-01-01T10:00:00Z\",\n \"createdBy\": \"admin\",\n \"updatedAt\": \"2026-03-01T09:00:00Z\",\n \"updatedBy\": \"admin\"\n },\n \"error\": null\n}\n```\n\n---\n\n#### `GET /user/name/{uname}` — Get user by username\n\n**Path params:** `uname` (string)\n\n**Response `200 OK`** — same shape as `GET /user/id/{id}`.\n\n---\n\n#### `POST /user/all` — List users (paginated)\n\n**Query params:**\n\n| Param | Type | Required | Description |\n|-------|------|----------|-------------|\n| `page` | integer | yes | Zero-based page number |\n| `pageSize` | integer | yes | Results per page |\n\n**Request body**\n\n```json\n{\n \"sort\": {\n \"userName\": \"asc\",\n \"createdAt\": \"desc\"\n }\n}\n```\n\n**Response `200 OK`**\n\n```json\n{\n \"value\": [\n {\n \"id\": 42,\n \"userName\": \"alice\",\n \"startDate\": \"2026-01-01T00:00:00Z\",\n \"expiredDate\": \"2028-01-01T00:00:00Z\",\n \"userRoles\": [\"admin\"]\n }\n ],\n \"error\": null\n}\n```\n\n---\n\n### Roles\n\n#### `POST /role` — Create a role\n\n**Headers:** `X-User-Id` (optional, recorded as `createdBy`)\n\n**Request body**\n\n| Field | Type | Required | Description |\n|-------|------|----------|-------------|\n| `roleName` | string | yes | Unique role name |\n\n```json\n{ \"roleName\": \"viewer\" }\n```\n\n**Response `200 OK`** — returns the new role's integer ID.\n\n```json\n{ \"value\": 7, \"error\": null }\n```\n\n---\n\n#### `PUT /role/{id}` — Update a role\n\n**Path params:** `id` (integer)\n\n**Headers:** `X-User-Id` (optional, recorded as `updatedBy`)\n\n**Request body**\n\n```json\n{ \"id\": 7, \"roleName\": \"editor\" }\n```\n\n**Response `200 OK`**\n\n```json\n{ \"value\": true, \"error\": null }\n```\n\n---\n\n#### `GET /role/id/{id}` — Get role by ID\n\n**Path params:** `id` (integer)\n\n**Response `200 OK`**\n\n```json\n{\n \"value\": {\n \"id\": 7,\n \"roleName\": \"viewer\",\n \"createdAt\": \"2026-01-01T10:00:00Z\",\n \"createdBy\": \"admin\",\n \"updatedAt\": \"2026-01-01T10:00:00Z\",\n \"updatedBy\": \"admin\"\n },\n \"error\": null\n}\n```\n\n---\n\n#### `GET /role/name/{uname}` — Get role by name\n\n**Path params:** `uname` (string)\n\n**Response `200 OK`** — same shape as `GET /role/id/{id}`.\n\n---\n\n#### `POST /role/all` — List roles (paginated)\n\n**Query params:** `page` (integer, required), `pageSize` (integer, required)\n\n**Request body**\n\n```json\n{\n \"sort\": { \"roleName\": \"asc\" }\n}\n```\n\n**Response `200 OK`**\n\n```json\n{\n \"value\": [\n {\n \"id\": 7,\n \"roleName\": \"viewer\",\n \"createdAt\": \"2026-01-01T10:00:00Z\",\n \"createdBy\": \"admin\",\n \"updatedAt\": \"2026-01-01T10:00:00Z\",\n \"updatedBy\": \"admin\"\n }\n ],\n \"error\": null\n}\n```\n\n---\n\n### HTTP status codes\n\n| Status | Meaning |\n|--------|---------|\n| `200` | Success |\n| `400` | Bad request — validation failed or missing required fields |\n| `401` | Unauthorized — missing or invalid JWT |\n| `403` | Forbidden — authenticated but insufficient role |\n| `404` | Not found — user or role ID does not exist |\n| `429` | Too many requests — rate limit exceeded |\n| `500` | Internal server error — check actuator logs |\n\nError body:\n\n```json\n{\n \"value\": null,\n \"error\": { \"message\": \"User not found\", \"code\": 404 }\n}\n```\n\n---\n\n## Quick-Start Configuration\n\nMinimal `application.yml` for local development:\n\n```yaml\nspring:\n application:\n name: api-gateway\n main:\n web-application-type: reactive\n datasource:\n url: jdbc:mysql://mysql-db-server:3306/gatewaydb\n username: root\n password: secret\n jpa:\n hibernate:\n ddl-auto: update\n\nserver:\n port: 8080\n\nsecurity:\n white:\n paths: /login, /actuator/health, /v3/api-docs/**, /swagger-ui/**\n cors:\n enable: true\n allowed:\n origins: \"*\"\n methods: \"*\"\n headers: \"*\"\n creds: false\n maxAge: 5\n jwt:\n token:\n expiration: 10 # minutes\n public:\n type: STRING\n private:\n type: STRING\n string:\n public.Key: dev-public-key\n private.Key: dev-private-key\n\nroutes:\n apis:\n /product/**: http://product-service:4001/product\n\nspringdoc:\n swagger-ui:\n path: /swagger-ui/index.html\n enabled: true\n api-docs:\n path: /v3/api-docs\n enabled: true\n```\n\nStart:\n\n```bash\njava -Dhibernate.enabled=true -jar api-gateway-0.0.1-spring-boot.jar\n```\n\n```bash\ndocker run -p 8080:8080 -v :/app/files --env-file .env \\\n -e JDK_JAVA_OPTIONS=\"-Dhibernate.enabled=true\" \\\n emc2fma/emc2fma.com-api-gateway:\n```\n\n---","has_starred","hub_user","immutable_tags_settings",{"_85":11,"_86":87},"enabled","rules",[88],".*","is_automated","permissions",{"_92":21,"_93":11,"_94":11},"read","write","admin","user","storage_size",335977134,"orgData","recentTags",[101],{"_102":55,"_103":104,"_105":106,"_107":108,"_109":110,"_111":112,"_61":146,"_147":104,"_148":33,"_149":67,"_43":150,"_151":152,"_153":120,"_154":146,"_155":76,"_156":21},"content_type","creator",40613543,"digest","sha256:48013cfe43f9ebddb53fd51b5d87b3858d0721e5b14ba46f58db5691e71d8a0c","full_size",169619932,"id",1112800819,"images",[113,129,136,142],{"_114":115,"_105":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":118,"_126":-5,"_127":108,"_73":76,"_128":-5},"architecture","amd64","sha256:bae88713b2423444800ca379566648f03718eded02368804e8a4c8558c065e79","features","","last_pulled","2026-10-06T04:25:43.830679786Z","last_pushed","2026-03-26T13:41:49.852116646Z","os","linux","os_features","os_version","size","variant",{"_114":130,"_105":131,"_117":118,"_119":132,"_121":133,"_123":124,"_125":118,"_126":-5,"_127":134,"_73":135,"_128":-5},"arm64","sha256:c6405379347cb11823d80dc85404d5068d04fbf4956bf346907dee5c03c864a7","2026-08-20T20:30:39.148160164Z","2026-03-26T13:41:40.88973508Z",168642699,"inactive",{"_114":137,"_105":138,"_117":118,"_119":139,"_121":140,"_123":137,"_125":118,"_126":-5,"_127":141,"_73":135,"_128":-5},"unknown","sha256:bc7442d8c428e5004ae6a3237d386d147b9c8f92cb7becd7aeae199527007db7","2026-08-20T20:30:39.196325204Z","2026-03-26T13:41:40.517793161Z",1276,{"_114":137,"_105":143,"_117":118,"_119":144,"_121":145,"_123":137,"_125":118,"_126":-5,"_127":141,"_73":135,"_128":-5},"sha256:5a73913eced96206167ae041f5c7e23406854e866d0497f0bd23a0290369d8b6","2026-08-20T20:30:39.121981839Z","2026-03-26T13:41:40.732219458Z","2026-03-26T13:41:51.30108Z","last_updater","last_updater_username","media_type","v0.0.1","repository",30531744,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":170,"_180":181,"_164":193,"_194":11},{"_40":171,"_53":175,"_56":57,"_58":59,"_60":11,"_61":62,"_63":64,"_65":176,"_43":35,"_32":33,"_68":69,"_70":55,"_71":72,"_73":74,"_75":76,"_77":-5,"_78":72,"_79":80,"_81":11,"_82":33,"_83":177,"_89":11,"_90":179,"_95":33,"_96":97},[172,173,174],{"_43":44,"_45":46},{"_43":48,"_45":49},{"_43":51,"_45":52},[55],[67],{"_85":11,"_86":178},[88],{"_92":21,"_93":11,"_94":11},"tags",{"_182":74,"_183":-5,"_184":-5,"_185":186},"count","next","previous","results",[187],{"_102":55,"_103":104,"_105":106,"_107":108,"_109":110,"_111":188,"_61":146,"_147":104,"_148":33,"_149":67,"_43":150,"_151":152,"_153":120,"_154":146,"_155":76,"_156":21},[189,190,191,192],{"_114":115,"_105":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":118,"_126":-5,"_127":108,"_73":76,"_128":-5},{"_114":130,"_105":131,"_117":118,"_119":132,"_121":133,"_123":124,"_125":118,"_126":-5,"_127":134,"_73":135,"_128":-5},{"_114":137,"_105":138,"_117":118,"_119":139,"_121":140,"_123":137,"_125":118,"_126":-5,"_127":141,"_73":135,"_128":-5},{"_114":137,"_105":143,"_117":118,"_119":144,"_121":145,"_123":137,"_125":118,"_126":-5,"_127":141,"_73":135,"_128":-5},[],"canDeleteTags","actionData","errors"]

Digest	OS/ARCH	Compressed size
bae88713b242	linux/amd64	161.76 MB
c6405379347c	linux/arm64	160.83 MB

emc2fma/emc2fma.com-api-gateway

Tags for emc2fma/emc2fma.com-api-gateway