Architecture modifiée pour Frontend-Centric Authentication: 1. **Suppression des dépendances OIDC** - quarkus-oidc → quarkus-smallrye-jwt - quarkus-keycloak-authorization → quarkus-smallrye-jwt-build - Le backend ne gère plus l'authentification OAuth 2. **Configuration JWT simple** - Validation des tokens JWT envoyés par le frontend - mp.jwt.verify.publickey.location (JWKS de Keycloak) - mp.jwt.verify.issuer (Keycloak realm) - Authentification via Authorization: Bearer header 3. **Suppression configurations OIDC** - application.properties: Suppression %dev.quarkus.oidc.* - application.properties: Suppression %prod.quarkus.oidc.* - application-prod.properties: Remplacement par mp.jwt.* - Logging: io.quarkus.oidc → io.quarkus.smallrye.jwt 4. **Sécurité simplifiée** - quarkus.security.auth.proactive=false - @Authenticated sur les endpoints - CORS configuré pour le frontend - Endpoints publics: /q/*, /openapi, /swagger-ui/* Flux d'authentification: 1️⃣ Frontend → Keycloak (OAuth login) 2️⃣ Frontend ← Keycloak (access_token) 3️⃣ Frontend → Backend (Authorization: Bearer token) 4️⃣ Backend valide le token JWT (signature + issuer) 5️⃣ Backend → Frontend (données API) Avantages: ✅ Pas de secret backend à gérer ✅ Pas de client btpxpress-backend dans Keycloak ✅ Séparation claire frontend/backend ✅ Backend devient une API REST stateless ✅ Tokens gérés par le frontend (localStorage/sessionStorage) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
94 lines
3.6 KiB
Java
94 lines
3.6 KiB
Java
/*
|
|
* Licensed to the Apache Software Foundation (ASF) under one
|
|
* or more contributor license agreements. See the NOTICE file
|
|
* distributed with this work for additional information
|
|
* regarding copyright ownership. The ASF licenses this file
|
|
* to you under the Apache License, Version 2.0 (the
|
|
* "License"); you may not use this file except in compliance
|
|
* with the License. You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing,
|
|
* software distributed under the License is distributed on an
|
|
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
* KIND, either express or implied. See the License for the
|
|
* specific language governing permissions and limitations
|
|
* under the License.
|
|
*/
|
|
|
|
import java.io.IOException;
|
|
import java.io.InputStream;
|
|
import java.net.Authenticator;
|
|
import java.net.PasswordAuthentication;
|
|
import java.net.URI;
|
|
import java.net.URL;
|
|
import java.nio.file.Files;
|
|
import java.nio.file.Path;
|
|
import java.nio.file.Paths;
|
|
import java.nio.file.StandardCopyOption;
|
|
import java.util.concurrent.ThreadLocalRandom;
|
|
|
|
public final class MavenWrapperDownloader {
|
|
private static final String WRAPPER_VERSION = "3.3.2";
|
|
|
|
private static final boolean VERBOSE = Boolean.parseBoolean(System.getenv("MVNW_VERBOSE"));
|
|
|
|
public static void main(String[] args) {
|
|
log("Apache Maven Wrapper Downloader " + WRAPPER_VERSION);
|
|
|
|
if (args.length != 2) {
|
|
System.err.println(" - ERROR wrapperUrl or wrapperJarPath parameter missing");
|
|
System.exit(1);
|
|
}
|
|
|
|
try {
|
|
log(" - Downloader started");
|
|
final URL wrapperUrl = URI.create(args[0]).toURL();
|
|
final String jarPath = args[1].replace("..", ""); // Sanitize path
|
|
final Path wrapperJarPath = Paths.get(jarPath).toAbsolutePath().normalize();
|
|
downloadFileFromURL(wrapperUrl, wrapperJarPath);
|
|
log("Done");
|
|
} catch (IOException e) {
|
|
System.err.println("- Error downloading: " + e.getMessage());
|
|
if (VERBOSE) {
|
|
e.printStackTrace();
|
|
}
|
|
System.exit(1);
|
|
}
|
|
}
|
|
|
|
private static void downloadFileFromURL(URL wrapperUrl, Path wrapperJarPath)
|
|
throws IOException {
|
|
log(" - Downloading to: " + wrapperJarPath);
|
|
if (System.getenv("MVNW_USERNAME") != null && System.getenv("MVNW_PASSWORD") != null) {
|
|
final String username = System.getenv("MVNW_USERNAME");
|
|
final char[] password = System.getenv("MVNW_PASSWORD").toCharArray();
|
|
Authenticator.setDefault(new Authenticator() {
|
|
@Override
|
|
protected PasswordAuthentication getPasswordAuthentication() {
|
|
return new PasswordAuthentication(username, password);
|
|
}
|
|
});
|
|
}
|
|
Path temp = wrapperJarPath
|
|
.getParent()
|
|
.resolve(wrapperJarPath.getFileName() + "."
|
|
+ Long.toUnsignedString(ThreadLocalRandom.current().nextLong()) + ".tmp");
|
|
try (InputStream inStream = wrapperUrl.openStream()) {
|
|
Files.copy(inStream, temp, StandardCopyOption.REPLACE_EXISTING);
|
|
Files.move(temp, wrapperJarPath, StandardCopyOption.REPLACE_EXISTING);
|
|
} finally {
|
|
Files.deleteIfExists(temp);
|
|
}
|
|
log(" - Downloader complete");
|
|
}
|
|
|
|
private static void log(String msg) {
|
|
if (VERBOSE) {
|
|
System.out.println(msg);
|
|
}
|
|
}
|
|
|
|
}
|