Merge pull request #3574 from mprencipe/fix/2552-disable-automatic-te…

…am-apikey-generation

Disable automatic API key generation for teams. Fixes part of issue #2552.

docs/_docs/integrations/rest-api.md

@@ -15,7 +15,6 @@ FireFox extensions can be use to quickly use the Swagger UI Console.
 
 ![Swagger UI Console](/images/screenshots/swagger-ui-console.png)
 
-Prior to using the REST APIs, an API Key must be generated. By default, creating a team will also create a corresponding
-API key. A team may have multiple keys.
+Prior to using the REST APIs, an API Key must be generated. By default, creating a team will NOT create a an API key. A team may have multiple keys.
 
 ![Teams - API Key](/images/screenshots/teams.png)

src/main/java/org/dependencytrack/resources/v1/TeamResource.java

@@ -132,7 +132,7 @@ public Response createTeam(Team jsonTeam) {
         );
 
         try (QueryManager qm = new QueryManager()) {
-            final Team team = qm.createTeam(jsonTeam.getName(), true);
+            final Team team = qm.createTeam(jsonTeam.getName(), false);
             super.logSecurityEvent(LOGGER, SecurityMarkers.SECURITY_AUDIT, "Team created: " + team.getName());
             return Response.status(Response.Status.CREATED).entity(team).build();
         }

src/test/java/org/dependencytrack/resources/v1/TeamResourceTest.java

@@ -134,6 +134,7 @@ public void createTeamTest() {
         Assert.assertNotNull(json);
         Assert.assertEquals("My Team", json.getString("name"));
         Assert.assertTrue(UuidUtil.isValidUUID(json.getString("uuid")));
+        Assert.assertTrue(json.getJsonArray("apiKeys").isEmpty());
     }
 
     @Test