fix(admin): utiliser AdminServiceTokenHeadersFactory pour UserServiceClient et RoleServiceClient
Les appels vers lions-user-manager nécessitent un token du realm lions-user-manager (service account). OidcTokenPropagationHeadersFactory transmettait le token utilisateur du realm unionflow → 401 systématique. AdminServiceTokenHeadersFactory injecte le bon token via l'OIDC client admin-service.
This commit is contained in:
@@ -14,7 +14,7 @@ import java.util.List;
|
|||||||
*/
|
*/
|
||||||
@Path("/api/roles")
|
@Path("/api/roles")
|
||||||
@RegisterRestClient(configKey = "lions-user-manager-api")
|
@RegisterRestClient(configKey = "lions-user-manager-api")
|
||||||
@RegisterClientHeaders(OidcTokenPropagationHeadersFactory.class)
|
@RegisterClientHeaders(AdminServiceTokenHeadersFactory.class)
|
||||||
@Produces(MediaType.APPLICATION_JSON)
|
@Produces(MediaType.APPLICATION_JSON)
|
||||||
@Consumes(MediaType.APPLICATION_JSON)
|
@Consumes(MediaType.APPLICATION_JSON)
|
||||||
public interface RoleServiceClient {
|
public interface RoleServiceClient {
|
||||||
|
|||||||
@@ -17,7 +17,7 @@ import org.eclipse.microprofile.rest.client.inject.RegisterRestClient;
|
|||||||
*/
|
*/
|
||||||
@Path("/api/users")
|
@Path("/api/users")
|
||||||
@RegisterRestClient(configKey = "lions-user-manager-api")
|
@RegisterRestClient(configKey = "lions-user-manager-api")
|
||||||
@RegisterClientHeaders(OidcTokenPropagationHeadersFactory.class)
|
@RegisterClientHeaders(AdminServiceTokenHeadersFactory.class)
|
||||||
@Produces(MediaType.APPLICATION_JSON)
|
@Produces(MediaType.APPLICATION_JSON)
|
||||||
@Consumes(MediaType.APPLICATION_JSON)
|
@Consumes(MediaType.APPLICATION_JSON)
|
||||||
public interface UserServiceClient {
|
public interface UserServiceClient {
|
||||||
|
|||||||
Reference in New Issue
Block a user