refactoring
This commit is contained in:
@@ -30,11 +30,19 @@ ENV QUARKUS_PROFILE=prod
|
|||||||
ENV QUARKUS_HTTP_PORT=8080
|
ENV QUARKUS_HTTP_PORT=8080
|
||||||
ENV QUARKUS_HTTP_HOST=0.0.0.0
|
ENV QUARKUS_HTTP_HOST=0.0.0.0
|
||||||
|
|
||||||
|
# Proxy forwarding (SSL termination par l'ingress nginx K8s)
|
||||||
|
ENV QUARKUS_HTTP_PROXY_PROXY_ADDRESS_FORWARDING=true
|
||||||
|
ENV QUARKUS_HTTP_PROXY_ALLOW_X_FORWARDED=true
|
||||||
|
|
||||||
# Configuration Keycloak/OIDC (production)
|
# Configuration Keycloak/OIDC (production)
|
||||||
ENV QUARKUS_OIDC_AUTH_SERVER_URL=https://security.lions.dev/realms/lions-user-manager
|
ENV QUARKUS_OIDC_AUTH_SERVER_URL=https://security.lions.dev/realms/lions-user-manager
|
||||||
ENV QUARKUS_OIDC_CLIENT_ID=lions-user-manager-client
|
ENV QUARKUS_OIDC_CLIENT_ID=lions-user-manager-client
|
||||||
|
ENV KEYCLOAK_CLIENT_SECRET=oGCivOdgbNHroNsHS1MRBZJXX8VpRGk3
|
||||||
|
ENV QUARKUS_OIDC_CREDENTIALS_SECRET=oGCivOdgbNHroNsHS1MRBZJXX8VpRGk3
|
||||||
ENV QUARKUS_OIDC_ENABLED=true
|
ENV QUARKUS_OIDC_ENABLED=true
|
||||||
ENV QUARKUS_OIDC_TLS_VERIFICATION=required
|
ENV QUARKUS_OIDC_TLS_VERIFICATION=required
|
||||||
|
ENV QUARKUS_OIDC_AUTHENTICATION_COOKIE_SAME_SITE=lax
|
||||||
|
ENV OIDC_ENCRYPTION_SECRET=gbztZB3CYpou0vFL2LqOWJQdXnvwVQkhjrHpsZHOJPI=
|
||||||
|
|
||||||
# Configuration API Backend
|
# Configuration API Backend
|
||||||
ENV LIONS_USER_MANAGER_BACKEND_URL=https://api.lions.dev/lions-user-manager
|
ENV LIONS_USER_MANAGER_BACKEND_URL=https://api.lions.dev/lions-user-manager
|
||||||
|
|||||||
@@ -109,11 +109,11 @@
|
|||||||
<c:choose>
|
<c:choose>
|
||||||
<c:when test="#{not empty user.realmRoles and not user.realmRoles.isEmpty()}">
|
<c:when test="#{not empty user.realmRoles and not user.realmRoles.isEmpty()}">
|
||||||
<c:forEach var="role" items="#{user.realmRoles}" varStatus="status">
|
<c:forEach var="role" items="#{user.realmRoles}" varStatus="status">
|
||||||
<c:if test="#{status.index < 4}">
|
<c:if test="#{status.index lt 4}">
|
||||||
<p:tag value="#{role}" severity="info" styleClass="text-xs" />
|
<p:tag value="#{role}" severity="info" styleClass="text-xs" />
|
||||||
</c:if>
|
</c:if>
|
||||||
</c:forEach>
|
</c:forEach>
|
||||||
<c:if test="#{user.realmRoles.size() > 4}">
|
<c:if test="#{user.realmRoles.size() gt 4}">
|
||||||
<p:tag value="+#{user.realmRoles.size() - 4}" severity="secondary"
|
<p:tag value="+#{user.realmRoles.size() - 4}" severity="secondary"
|
||||||
styleClass="text-xs"
|
styleClass="text-xs"
|
||||||
title="#{user.realmRoles.size() - 4} rôle(s) supplémentaire(s)" />
|
title="#{user.realmRoles.size() - 4} rôle(s) supplémentaire(s)" />
|
||||||
|
|||||||
@@ -9,15 +9,19 @@
|
|||||||
# HTTP Configuration PROD
|
# HTTP Configuration PROD
|
||||||
# ============================================
|
# ============================================
|
||||||
quarkus.http.port=8080
|
quarkus.http.port=8080
|
||||||
|
# Respecter X-Forwarded-Proto de l'ingress nginx (SSL termination K8s)
|
||||||
|
quarkus.http.proxy.proxy-address-forwarding=true
|
||||||
|
quarkus.http.proxy.allow-x-forwarded=true
|
||||||
|
|
||||||
# ============================================
|
# ============================================
|
||||||
# OIDC Configuration PROD (Keycloak Production)
|
# OIDC Configuration PROD (Keycloak Production)
|
||||||
# ============================================
|
# ============================================
|
||||||
quarkus.oidc.auth-server-url=${KEYCLOAK_AUTH_SERVER_URL:https://security.lions.dev/realms/lions-user-manager}
|
quarkus.oidc.auth-server-url=${KEYCLOAK_AUTH_SERVER_URL:https://security.lions.dev/realms/lions-user-manager}
|
||||||
quarkus.oidc.client-id=${KEYCLOAK_CLIENT_ID:lions-user-manager-client}
|
quarkus.oidc.client-id=${KEYCLOAK_CLIENT_ID:lions-user-manager-client}
|
||||||
|
quarkus.oidc.credentials.secret=${KEYCLOAK_CLIENT_SECRET:oGCivOdgbNHroNsHS1MRBZJXX8VpRGk3}
|
||||||
quarkus.oidc.token.issuer=${KEYCLOAK_AUTH_SERVER_URL:https://security.lions.dev/realms/lions-user-manager}
|
quarkus.oidc.token.issuer=${KEYCLOAK_AUTH_SERVER_URL:https://security.lions.dev/realms/lions-user-manager}
|
||||||
quarkus.oidc.tls.verification=required
|
quarkus.oidc.tls.verification=required
|
||||||
quarkus.oidc.authentication.cookie-same-site=strict
|
quarkus.oidc.authentication.cookie-same-site=lax
|
||||||
quarkus.oidc.authentication.pkce-required=true
|
quarkus.oidc.authentication.pkce-required=true
|
||||||
quarkus.oidc.token-state-manager.encryption-secret=${OIDC_ENCRYPTION_SECRET:gbztZB3CYpou0vFL2LqOWJQdXnvwVQkhjrHpsZHOJPI=}
|
quarkus.oidc.token-state-manager.encryption-secret=${OIDC_ENCRYPTION_SECRET:gbztZB3CYpou0vFL2LqOWJQdXnvwVQkhjrHpsZHOJPI=}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user