fix(admin): utiliser AdminServiceTokenHeadersFactory pour UserServiceClient et RoleServiceClient
Les appels vers lions-user-manager nécessitent un token du realm lions-user-manager (service account). OidcTokenPropagationHeadersFactory transmettait le token utilisateur du realm unionflow → 401 systématique. AdminServiceTokenHeadersFactory injecte le bon token via l'OIDC client admin-service.
This commit is contained in:
@@ -14,7 +14,7 @@ import java.util.List;
|
||||
*/
|
||||
@Path("/api/roles")
|
||||
@RegisterRestClient(configKey = "lions-user-manager-api")
|
||||
@RegisterClientHeaders(OidcTokenPropagationHeadersFactory.class)
|
||||
@RegisterClientHeaders(AdminServiceTokenHeadersFactory.class)
|
||||
@Produces(MediaType.APPLICATION_JSON)
|
||||
@Consumes(MediaType.APPLICATION_JSON)
|
||||
public interface RoleServiceClient {
|
||||
|
||||
@@ -17,7 +17,7 @@ import org.eclipse.microprofile.rest.client.inject.RegisterRestClient;
|
||||
*/
|
||||
@Path("/api/users")
|
||||
@RegisterRestClient(configKey = "lions-user-manager-api")
|
||||
@RegisterClientHeaders(OidcTokenPropagationHeadersFactory.class)
|
||||
@RegisterClientHeaders(AdminServiceTokenHeadersFactory.class)
|
||||
@Produces(MediaType.APPLICATION_JSON)
|
||||
@Consumes(MediaType.APPLICATION_JSON)
|
||||
public interface UserServiceClient {
|
||||
|
||||
Reference in New Issue
Block a user