c89377d12f
Module d'implémentation serveur pour lions-user-manager Contenu: - KeycloakAdminClient avec résilience (Circuit Breaker, Retry, Timeout) - UserServiceImpl (25+ méthodes) - RoleServiceImpl (20+ méthodes) - AuditServiceImpl (logging et statistiques) - UserResource, RoleResource (REST API) - Mappers (User, Role) - Health checks - Configurations dev/prod séparées Statut: 🔄 80% complété 🤖 Generated with Claude Code Co-Authored-By: Claude <noreply@anthropic.com>
101 lines
3.6 KiB
Properties
101 lines
3.6 KiB
Properties
# ============================================================================
|
|
# Lions User Manager - Server Implementation Configuration
|
|
# ============================================================================
|
|
|
|
# Application Info
|
|
quarkus.application.name=lions-user-manager-server
|
|
quarkus.application.version=1.0.0
|
|
|
|
# HTTP Configuration
|
|
quarkus.http.port=8081
|
|
quarkus.http.host=0.0.0.0
|
|
quarkus.http.cors=true
|
|
quarkus.http.cors.origins=*
|
|
quarkus.http.cors.methods=GET,POST,PUT,DELETE,PATCH,OPTIONS
|
|
quarkus.http.cors.headers=*
|
|
|
|
# Keycloak OIDC Configuration
|
|
quarkus.oidc.auth-server-url=https://security.lions.dev/realms/master
|
|
quarkus.oidc.client-id=lions-user-manager
|
|
quarkus.oidc.credentials.secret=${KEYCLOAK_CLIENT_SECRET:your-client-secret}
|
|
quarkus.oidc.tls.verification=none
|
|
quarkus.oidc.application-type=service
|
|
|
|
# Keycloak Admin Client Configuration
|
|
lions.keycloak.server-url=https://security.lions.dev
|
|
lions.keycloak.admin-realm=master
|
|
lions.keycloak.admin-client-id=admin-cli
|
|
lions.keycloak.admin-username=${KEYCLOAK_ADMIN_USERNAME:admin}
|
|
lions.keycloak.admin-password=${KEYCLOAK_ADMIN_PASSWORD:admin}
|
|
lions.keycloak.connection-pool-size=10
|
|
lions.keycloak.timeout-seconds=30
|
|
|
|
# Realms autorisés (séparés par virgule)
|
|
lions.keycloak.authorized-realms=btpxpress,master,lions-realm
|
|
|
|
# Circuit Breaker Configuration
|
|
quarkus.smallrye-fault-tolerance.enabled=true
|
|
|
|
# Retry Configuration (pour appels Keycloak)
|
|
lions.keycloak.retry.max-attempts=3
|
|
lions.keycloak.retry.delay-seconds=2
|
|
|
|
# Audit Configuration
|
|
lions.audit.enabled=true
|
|
lions.audit.log-to-database=false
|
|
lions.audit.log-to-file=true
|
|
lions.audit.retention-days=90
|
|
|
|
# Database Configuration (optionnel - pour logs d'audit)
|
|
# Décommenter si vous voulez persister les logs d'audit en DB
|
|
#quarkus.datasource.db-kind=postgresql
|
|
#quarkus.datasource.username=${DB_USERNAME:audit_user}
|
|
#quarkus.datasource.password=${DB_PASSWORD:audit_pass}
|
|
#quarkus.datasource.jdbc.url=jdbc:postgresql://${DB_HOST:localhost}:${DB_PORT:5432}/${DB_NAME:lions_audit}
|
|
#quarkus.hibernate-orm.database.generation=none
|
|
#quarkus.flyway.migrate-at-start=true
|
|
|
|
# Logging Configuration
|
|
quarkus.log.level=INFO
|
|
quarkus.log.category."dev.lions.user.manager".level=DEBUG
|
|
quarkus.log.category."org.keycloak".level=WARN
|
|
|
|
quarkus.log.console.enable=true
|
|
quarkus.log.console.format=%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c{3.}] (%t) %s%e%n
|
|
|
|
# File Logging pour Audit
|
|
quarkus.log.file.enable=true
|
|
quarkus.log.file.path=logs/lions-user-manager.log
|
|
quarkus.log.file.rotation.max-file-size=10M
|
|
quarkus.log.file.rotation.max-backup-index=10
|
|
|
|
# OpenAPI/Swagger Configuration
|
|
quarkus.swagger-ui.always-include=true
|
|
quarkus.swagger-ui.path=/swagger-ui
|
|
mp.openapi.extensions.smallrye.info.title=Lions User Manager API
|
|
mp.openapi.extensions.smallrye.info.version=1.0.0
|
|
mp.openapi.extensions.smallrye.info.description=API de gestion centralisée des utilisateurs Keycloak
|
|
mp.openapi.extensions.smallrye.info.contact.name=Lions Dev Team
|
|
mp.openapi.extensions.smallrye.info.contact.email=contact@lions.dev
|
|
|
|
# Health Check Configuration
|
|
quarkus.smallrye-health.root-path=/health
|
|
quarkus.smallrye-health.liveness-path=/health/live
|
|
quarkus.smallrye-health.readiness-path=/health/ready
|
|
|
|
# Metrics Configuration
|
|
quarkus.micrometer.enabled=true
|
|
quarkus.micrometer.export.prometheus.enabled=true
|
|
quarkus.micrometer.export.prometheus.path=/metrics
|
|
|
|
# Security Configuration
|
|
quarkus.security.jaxrs.deny-unannotated-endpoints=false
|
|
|
|
# Jackson Configuration
|
|
quarkus.jackson.fail-on-unknown-properties=false
|
|
quarkus.jackson.write-dates-as-timestamps=false
|
|
quarkus.jackson.serialization-inclusion=non_null
|
|
|
|
# Dev Services (désactivé en production)
|
|
quarkus.devservices.enabled=false
|