Add initial code

.github/changelog.yaml

@@ -0,0 +1,13 @@
+sections:
+  - title: Major changes
+    labels:
+      - "release/super-feature"
+  - title: Complete changelog
+    labels:
+      - "bug"
+      - "enhancement"
+      - "dependencies"
+template: |
+  {{ range $section := .Sections }}{{ if $section.Items }}### {{ $section.GetTitle }}{{ range $item := $section.Items }}
+  * [#{{ $item.GetID }}]({{ $item.GetURL }}) - {{ $item.GetTitle }}{{ end }}{{ end }}
+  {{ end }}

.github/dependabot.yaml

@@ -0,0 +1,14 @@
+version: 2
+updates:
+  - package-ecosystem: maven
+    directory: "/"
+    schedule:
+      interval: daily
+    labels:
+      - dependencies
+  - package-ecosystem: "docker"
+    directory: "/src/main/docker"
+    schedule:
+      interval: daily
+    labels:
+      - docker-image      

.github/workflows/build-branch.yml

@@ -0,0 +1,15 @@
+name: Build Feature Branch
+
+on:
+  push:
+    branches:
+      - '**'
+      - '!main'
+      - '!fix/[0-9]+.[0-9]+.x'
+
+jobs:
+  branch:
+    uses: onecx/ci-quarkus/.github/workflows/build-branch.yml@v1
+    secrets: inherit
+    with:
+      native: true

.github/workflows/build-pr.yml

@@ -0,0 +1,11 @@
+name: Build Pull Request
+
+on:
+  pull_request:
+
+jobs:
+  pr:
+    uses: onecx/ci-quarkus/.github/workflows/build-pr.yml@v1
+    secrets: inherit
+    with:
+      native: true

.github/workflows/build-release.yml

@@ -0,0 +1,11 @@
+name: Build Release
+on:
+  push:
+    tags:
+      - '**'
+jobs:
+  release:
+    uses: onecx/ci-quarkus/.github/workflows/build-release.yml@v1
+    secrets: inherit
+    with:
+      native: true

.github/workflows/build.yml

@@ -0,0 +1,17 @@
+name: Build
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'main'
+      - 'fix/[0-9]+.[0-9]+.x'
+
+jobs:
+  build:
+    uses: onecx/ci-quarkus/.github/workflows/build.yml@v1
+    secrets: inherit
+    with:
+      native: true
+      helmEventTargetRepository: onecx/onecx-bookmark
+

.github/workflows/create-fix-branch.yml

@@ -0,0 +1,7 @@
+name: Create Fix Branch
+on:
+  workflow_dispatch:
+jobs:
+  fix:
+    uses: onecx/ci-common/.github/workflows/create-fix-branch.yml@v1
+    secrets: inherit

.github/workflows/create-new-build.yml

@@ -0,0 +1,9 @@
+name: Create new build
+
+on:
+  workflow_dispatch:
+
+jobs:
+  build:
+    uses: onecx/ci-common/.github/workflows/create-new-build.yml@v1
+    secrets: inherit

.github/workflows/create-release.yml

@@ -0,0 +1,7 @@
+name: Create Release Version
+on:
+  workflow_dispatch:
+jobs:
+  release:
+    uses: onecx/ci-common/.github/workflows/create-release.yml@v1
+    secrets: inherit

.github/workflows/documentation.yml

@@ -0,0 +1,10 @@
+name: Update documentation
+on:
+  push:
+    branches: [ main ]
+    paths:
+      - 'docs/**'
+jobs:
+  release:
+    uses: onecx/ci-common/.github/workflows/documentation.yml@v1
+    secrets: inherit

.github/workflows/sonar-pr.yml

@@ -0,0 +1,12 @@
+name: Sonar Pull Request
+
+on:
+  workflow_run:
+    workflows: ["Build Pull Request"]
+    types:
+      - completed
+
+jobs:
+  pr:
+    uses: onecx/ci-quarkus/.github/workflows/quarkus-pr-sonar.yml@v1
+    secrets: inherit

.gitignore

@@ -0,0 +1,48 @@
+#Maven
+target/
+pom.xml.tag
+pom.xml.releaseBackup
+pom.xml.versionsBackup
+release.properties
+.flattened-pom.xml
+
+# Eclipse
+.project
+.classpath
+.settings/
+bin/
+
+# IntelliJ
+.idea
+*.ipr
+*.iml
+*.iws
+
+# NetBeans
+nb-configuration.xml
+
+# Visual Studio Code
+.vscode
+.factorypath
+
+# OSX
+.DS_Store
+
+# Vim
+*.swp
+*.swo
+
+# patch
+*.orig
+*.rej
+
+# Local environment
+.env
+*.sh
+
+# Plugin directory
+.quarkus/cli/plugins/
+
+# Charts dependencies
+Chart.lock
+src/main/helm/charts

docs/antora.yml

@@ -0,0 +1,3 @@
+name: onecx-bookmark
+title: Bookmark Management
+version: latest

docs/modules/onecx-bookmark-bff/nav.adoc

@@ -0,0 +1 @@
+* xref:onecx-bookmark-bff:index.adoc[Backend For Frontend]

docs/modules/onecx-bookmark-bff/pages/index.adoc

@@ -0,0 +1,8 @@
+include::onecx-bookmark-bff-attributes.adoc[opts=optional]
+
+== onecx-bookmark-bff
+
+include::docs.adoc[opts=optional]
+
+
+include::onecx-bookmark-bff-docs.adoc[opts=optional]

docs/modules/onecx-bookmark-bff/pages/onecx-bookmark-bff-attributes.adoc

@@ -0,0 +1,5 @@
+
+:docker-registry: https://github.com/onecx/onecx-bookmark-bff/pkgs/container/onecx-bookmark-bff
+:helm-registry: https://github.com/onecx/onecx-bookmark-bff/pkgs/container/charts%2Fonecx-bookmark-bff
+:properties-file: src/main/resources/application.properties
+:helm-file: src/main/helm/values.yaml

docs/modules/onecx-bookmark-bff/pages/onecx-bookmark-bff-docs.adoc

@@ -0,0 +1,108 @@
+
+include::onecx-bookmark-bff-attributes.adoc[opts=optional]
+
+=== Default properties
+
+.{properties-file}
+[%collapsible%open]
+====
+[source,properties,subs=attributes+]
+----
+quarkus.http.auth.permission.health.paths=/q/*
+quarkus.http.auth.permission.health.policy=permit
+quarkus.http.auth.permission.default.paths=/*
+quarkus.http.auth.permission.default.policy=authenticated
+onecx.permissions.application-id=${quarkus.application.name}
+org.eclipse.microprofile.rest.client.propagateHeaders=apm-principal-token
+%prod.quarkus.rest-client.onecx_bookmark_svc.url=http://onecx-bookmark-svc:8080
+%prod.quarkus.rest-client.onecx_product_store.url=http://onecx-product-store-svc:8080
+%prod.quarkus.rest-client.onecx_bookmark_svc.providers=io.quarkus.oidc.client.reactive.filter.OidcClientRequestReactiveFilter
+%prod.quarkus.rest-client.onecx_product_store.providers=io.quarkus.oidc.client.reactive.filter.OidcClientRequestReactiveFilter
+%prod.quarkus.oidc-client.client-id=${quarkus.application.name}
+quarkus.openapi-generator.codegen.input-base-dir=target/tmp/openapi
+quarkus.openapi-generator.codegen.spec.onecx_bookmark_svc_yaml.config-key=onecx_bookmark_svc
+quarkus.openapi-generator.codegen.spec.onecx_bookmark_svc_yaml.base-package=gen.org.tkit.onecx.bookmark.client
+quarkus.openapi-generator.codegen.spec.onecx_bookmark_svc_yaml.return-response=true
+quarkus.openapi-generator.codegen.spec.onecx_bookmark_svc_yaml.additional-api-type-annotations=@org.eclipse.microprofile.rest.client.annotation.RegisterClientHeaders;
+quarkus.openapi-generator.codegen.spec.onecx_bookmark_svc_yaml.additional-model-type-annotations=@io.quarkus.runtime.annotations.RegisterForReflection;
+quarkus.openapi-generator.codegen.spec.onecx_bookmark_svc_yaml.enable-security-generation=false
+quarkus.openapi-generator.onecx_bookmark_svc_yaml.auth.oauth2.token-propagation=false
+quarkus.openapi-generator.codegen.spec.onecx_product_store_svc_v1_yaml.config-key=onecx_product_store_svc
+quarkus.openapi-generator.codegen.spec.onecx_product_store_svc_v1_yaml.base-package=gen.org.tkit.onecx.product.store.client
+quarkus.openapi-generator.codegen.spec.onecx_product_store_svc_v1_yaml.return-response=true
+quarkus.openapi-generator.codegen.spec.onecx_product_store_svc_v1_yaml.type-mappings.File=byte[]
+quarkus.openapi-generator.codegen.spec.onecx_product_store_svc_v1_yaml.additional-api-type-annotations=@org.eclipse.microprofile.rest.client.annotation.RegisterClientHeaders;
+quarkus.openapi-generator.codegen.spec.onecx_product_store_svc_v1_yaml.additional-model-type-annotations=@io.quarkus.runtime.annotations.RegisterForReflection;
+quarkus.openapi-generator.codegen.spec.onecx_product_store_svc_v1_yaml.enable-security-generation=false
+quarkus.openapi-generator.onecx_product_store_svc_v1_yaml.auth.oauth2.token-propagation=false
+----
+====
+
+=== Extensions
+
+include::onecx-bookmark-bff-extensions.adoc[opts=optional]
+
+=== Container
+
+{docker-registry}[Docker registry]
+
+
+=== Helm
+
+{helm-registry}[Helm registry]
+
+Default values
+
+.{helm-file}
+[source,yaml]
+----
+app:
+  name: bff
+  image:
+    repository: "onecx/onecx-bookmark-bff"
+  operator:
+    # Permission
+    permission:
+      enabled: true
+      spec:
+        permissions:
+          bookmark:
+            read: permission on all GET requests and POST search
+            write: permission on PUT, POST, PATCH requests, where objects are saved or updated
+            delete: permission on all DELETE requests
+    keycloak:
+      client:
+        enabled: true
+        spec:
+          kcConfig:
+            defaultClientScopes: [ ocx-bm:all, ocx-pm:read ]
+
+----
+
+          defaultClientScopes: [ ocx-bm:all, ocx-pm:read ]
+
+----
+
+pm:read ]
+
+----
+
+ission:
+      enabled: true
+      spec:
+        permissions:
+          bookmark:
+            read: permission on all GET requests and POST search
+            write: permission on PUT, POST, PATCH requests, where objects are saved or updated
+            delete: permission on all DELETE requests
+          product:
+            read: permission on all GET requests and POST search
+    keycloak:
+      client:
+        enabled: true
+        spec:
+          kcConfig:
+            defaultClientScopes: [ ocx-hp:all, ocx-ps:read, ocx-pm:read ]
+
+----
+