From aa285795cb22e4477d3833b38630700389b7b91b Mon Sep 17 00:00:00 2001
From: Russ Poetker <rpoetke1@jh.edu>
Date: Thu, 24 Oct 2024 10:53:40 -0400
Subject: [PATCH] Update pass-core config for local

---
 .eclipse-pass.local_env     | 13 +++++++++++--
 .env                        |  3 ---
 eclipse-pass.local.yml      |  2 ++
 pass-core/saml2/sp-cert.pem | 18 ++++++++++++++++++
 pass-core/saml2/sp-key.pem  | 28 ++++++++++++++++++++++++++++
 5 files changed, 59 insertions(+), 5 deletions(-)
 create mode 100644 pass-core/saml2/sp-cert.pem
 create mode 100644 pass-core/saml2/sp-key.pem

diff --git a/.eclipse-pass.local_env b/.eclipse-pass.local_env
index 02413432..50cbd646 100644
--- a/.eclipse-pass.local_env
+++ b/.eclipse-pass.local_env
@@ -5,7 +5,6 @@
 AWS_ACCESS_KEY_ID=test
 AWS_SECRET_ACCESS_KEY=test
 AWS_REGION=us-east-1
-AWS_SQS_ENDPOINT_OVERRIDE=http://localstack:4566
 
 ###################################################
 # PASS_CORE config ################################
@@ -19,7 +18,13 @@ PASS_CORE_DATABASE_URL=jdbc:postgresql://postgres:5432/pass
 PASS_CORE_DATABASE_USERNAME=pass
 PASS_CORE_DATABASE_PASSWORD=moo
 
+PASS_CORE_SP_ID=https://sp.pass/shibboleth
+PASS_CORE_SP_KEY=file:////saml2/sp-key.pem
+PASS_CORE_SP_CERT=file:////saml2/sp-cert.pem
+PASS_CORE_SP_ACS={baseUrl}/login/saml2/sso/{registrationId}
 PASS_CORE_IDP_METADATA=http://idp:8080/idp/shibboleth
+PASS_CORE_DEFAULT_LOGIN_SUCCESS=/app/
+PASS_CORE_LOGIN_PROCESSING_PATH=/login/saml2/sso/{registrationId}
 
 # Go back to the app on logout
 PASS_CORE_LOGOUT_SUCCESS=/app/
@@ -27,13 +32,17 @@ PASS_CORE_LOGOUT_SUCCESS=/app/
 # Delete IDP session cookie on logout so can login as another user
 PASS_CORE_LOGOUT_DELETE_COOKIES="JSESSIONID /,shib_idp_session /idp"
 
+PASS_CORE_USERTOKEN_KEY=
+
 # Postgres configuration
 POSTGRES_USER=postgres
 POSTGRES_PASSWORD=postgres
 
 PASS_CORE_FILE_SERVICE_TYPE=S3
 PASS_CORE_S3_BUCKET_NAME=passcorefilestest
-PASS_CORE_S3_ENDPOINT=http://localstack:4566
+
+# Override aws endpoints to use localstack
+PASS_CORE_JAVA_OPTS="-Daws.sqs.endpoint-override=http://localstack:4566 -Dpass.file-service.s3-endpoint=http://localstack:4566"
 
 ###################################################
 # PASS_DEPOSIT_SERVICES config ####################
diff --git a/.env b/.env
index 8959e550..1037e1aa 100644
--- a/.env
+++ b/.env
@@ -5,9 +5,6 @@ PASS_VERSION=1.12.0-SNAPSHOT
 ###################################################
 PASS_CORE_PORT=8080
 
-# PASS core configuration
-spring_profiles_active=production
-
 PASS_CORE_USE_SQS=true
 PASS_CORE_EMBED_JMS_BROKER=false
 
diff --git a/eclipse-pass.local.yml b/eclipse-pass.local.yml
index ea309724..eff2664d 100644
--- a/eclipse-pass.local.yml
+++ b/eclipse-pass.local.yml
@@ -21,6 +21,8 @@ services:
       - 8080:8080
     extra_hosts:
       - "host.docker.internal:host-gateway"
+    volumes:
+      - ./pass-core/saml2/:/saml2/
 
   pass-ui:
     env_file:
diff --git a/pass-core/saml2/sp-cert.pem b/pass-core/saml2/sp-cert.pem
new file mode 100644
index 00000000..71bd521c
--- /dev/null
+++ b/pass-core/saml2/sp-cert.pem
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----
+MIIC6zCCAdOgAwIBAgIJAOy0nki3WAOVMA0GCSqGSIb3DQEBBQUAMBcxFTATBgNV
+BAMTDDc5OTQzZmVlNzg2NTAeFw0xNTEyMTEwMzAwNDJaFw0yNTEyMDgwMzAwNDJa
+MBcxFTATBgNVBAMTDDc5OTQzZmVlNzg2NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+ADCCAQoCggEBALPBzAz0DTn+j2YsQKfqWI+m08lP5UzwVsE9ZKzLqO3PRHZqiOBm
+EaFmRrYCZCAOcJ0TXcxPGtNSo8HC4uw5/Y5lJGuI3jN7X7KB1VUQDpUSwfgOqtro
+uDoVRKrsaYZTnlNV8KbZ0WQz5s4Uw6CxKRB9RZ5iQMP1fuxc8B6GSOb3x69MiY6c
+1jlgVAc6rV4zGfpafacxOLM8qcYhY8u3TiSd0H+oiGEqi1mFLK8yp6FKzX8OUkQf
+We49YHz6wBxFOe+/p+7ziym1rBs/lGfenEo8ziCIMmjnoo257fz00bcz9rFl1rTx
+KLFfgy72xTlG72l6u+pB9VqK3YNJS52Ns5UCAwEAAaM6MDgwFwYDVR0RBBAwDoIM
+Nzk5NDNmZWU3ODY1MB0GA1UdDgQWBBRiDMNPjiAMC50WWubI3PMjP45S/DANBgkq
+hkiG9w0BAQUFAAOCAQEAYZM/iWgC93vAq0d98egEzvESKodxHffkDOagd4Kxt/S0
+AAHsVQCmAK/9kmRhsWzR3f1KIw98q4EX7nH/K68BFrerUvaL5+fEGE9W6Ki6QdW8
+bM17GQkLyRDKZzGPm/hsaG1Oxru2kDf7qSvv59aRZlZ8skrDEnx8+dZ8JKC02ZDU
+ClC+xWl1UPfO2BL4tJei/siSymGpiRqznQ2JMoTFu5CUUpoxyCVz1bl9lCVceoJ9
+FaL38knS0p5DnXcm+I8wqNEVGLDPbDalBQryhJT9fIMm1/B85gB3AWAvcu9PPfHK
+lQQUhxyEXTBJx3luLlpIjoloFKIute9K7pE5qAENjg==
+-----END CERTIFICATE-----
\ No newline at end of file
diff --git a/pass-core/saml2/sp-key.pem b/pass-core/saml2/sp-key.pem
new file mode 100644
index 00000000..8cd45e98
--- /dev/null
+++ b/pass-core/saml2/sp-key.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCzwcwM9A05/o9m
+LECn6liPptPJT+VM8FbBPWSsy6jtz0R2aojgZhGhZka2AmQgDnCdE13MTxrTUqPB
+wuLsOf2OZSRriN4ze1+ygdVVEA6VEsH4Dqra6Lg6FUSq7GmGU55TVfCm2dFkM+bO
+FMOgsSkQfUWeYkDD9X7sXPAehkjm98evTImOnNY5YFQHOq1eMxn6Wn2nMTizPKnG
+IWPLt04kndB/qIhhKotZhSyvMqehSs1/DlJEH1nuPWB8+sAcRTnvv6fu84sptawb
+P5Rn3pxKPM4giDJo56KNue389NG3M/axZda08SixX4Mu9sU5Ru9pervqQfVait2D
+SUudjbOVAgMBAAECggEBAK0pysTLsZYlmMSHar2XbjrsLecnVTA58ojy+HHRO2nj
+mgMs+7CYAvHlUcbyJLwQzQEz787qgWADowb8E5gXASBUZLJGxi738adHlVf9QN7w
+k/S/RG3fc+FYLa8uUTV6hfGnv00sVZ9etD/gFthM8c8VrqQ16EgdzWgq25G8MKx1
+dRHT7fRlehiwnuCvUc9dKEkeunaBfDp2QG+jI0aKrjeP+N/0zSyMDiySCr/yIwWn
+GmmYdDjNKXullZTDgRn25xfHsQJSVW+RbEFOwALt5+cqecN6NVI53u23XNov8liD
+YDkv8sGB1KlJYitGMTEuW21GwOgtjoUkBy83nmHoTAECgYEA5g6fQp3LCFN/c0W9
+Y68RwpQ1SHHCQXIJoajARzLzIqjou29Hgot/waYlFPbiqEI5pPy9cMBMu7LmVyEn
+evAPzVheeYrJGeJ1azhdIEQ0e+tLYAQKkVvTPjyfJmtz51g/tSnNzz4HEcOkW5K5
+jkt6UUel61d/JPGL9UbGEt3BtJUCgYEAyAcXn2TG1GOkriD2Q8PjN5tyhmEgJKI2
+LcHULclyJ+Gn2nNCg1EwAn7d/zptdwE+VoijW+VSbrRoZhsRUsh/doPZDtoaInFX
+fSsAY9LVeW7flavgliMz3I8zXcoIwOlTY8mZbrFv1jUX+GNRjmeIwpAqTuSOIS1w
+UG5P3yQlQwECgYBKHDvBwgM902gjQjwYeLVH8WaYx8zEOHBR24LVbNxWNgODHf3z
+V+z3/QXFEyNBANSBCcodIFWXwbHiL5QAToVIqUcF8GeIJyOcPrQBSPd/U/UcITEm
+UmZijjTWs5bK1+rt+WGLeXfdiSDRPxr3c+kbdfFFNxKGXCmyAfKc8UMNYQKBgGnG
+VleTkxD9IDh0dcWf8KeXLBijg7vbi4rm1KzhudwdGAYMrT+Dzz+ClyJAY2Jq5ewc
+lUYjHlQsUoisB50fKUgisMWJ0Agmp30pICupcfmlB9a97SV3uBUKJL+T9s0MlWxP
+TzOZ4OoFaYeP/bCwT0GTusu9UOt6e8oMi3AUTSABAoGAAKJh6VI/B4D6piPEKJmA
+dOvpDjQoqpKn3arWet6mcrP4ftcIpH/uj2Azp53cAtyszAHhluN7rbcBnXOLePQz
+AKAGupEsvFhlLUGoX1+lPfugzIukZKiMl8Koi/66Vf4Dfz4pWhc/oR2TOVZyzqhj
+HPxmTTEX5graPtXeDM3hz5A=
+-----END PRIVATE KEY-----