feat: activated client security (#35)

Co-authored-by: Andrej Petras <[email protected]>
onecx · Jun 20, 2024 · bffda27 · bffda27
1 parent 2aed6b0
commit bffda27
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 8 deletions.
diff --git a/docs/modules/onecx-help-bff/pages/onecx-help-bff-docs.adoc b/docs/modules/onecx-help-bff/pages/onecx-help-bff-docs.adoc
@@ -15,8 +15,10 @@ quarkus.http.auth.permission.default.policy=authenticated
 onecx.permissions.application-id=${quarkus.application.name}
 %prod.quarkus.rest-client.onecx_help_svc.url=http://onecx-help-svc:8080
 %prod.quarkus.rest-client.onecx_product_store.url=http://onecx-product-store-svc:8080
-%prod.quarkus.oidc-client.client-id=${quarkus.application.name}
 org.eclipse.microprofile.rest.client.propagateHeaders=apm-principal-token
+%prod.quarkus.rest-client.onecx_help_svc_yaml.providers=io.quarkus.oidc.client.reactive.filter.OidcClientRequestReactiveFilter
+%prod.quarkus.rest-client.onecx_product_store_v1_yaml.providers=io.quarkus.oidc.client.reactive.filter.OidcClientRequestReactiveFilter
+%prod.quarkus.oidc-client.client-id=${quarkus.application.name}
 quarkus.openapi-generator.codegen.spec.onecx_help_svc_yaml.config-key=onecx_help_svc
 quarkus.openapi-generator.codegen.spec.onecx_help_svc_yaml.base-package=gen.org.tkit.onecx.help.client
 quarkus.openapi-generator.codegen.spec.onecx_help_svc_yaml.return-response=true
@@ -68,7 +70,6 @@ app:
     keycloak:
       client:
         enabled: true
-        password: "my-custom-password"
 
 ----
 
diff --git a/src/main/helm/values.yaml b/src/main/helm/values.yaml
@@ -17,4 +17,3 @@ app:
     keycloak:
       client:
         enabled: true
-        password: "my-custom-password"
diff --git a/src/main/resources/application.properties b/src/main/resources/application.properties
@@ -10,16 +10,14 @@ onecx.permissions.application-id=${quarkus.application.name}
 %prod.quarkus.rest-client.onecx_help_svc.url=http://onecx-help-svc:8080
 %prod.quarkus.rest-client.onecx_product_store.url=http://onecx-product-store-svc:8080
 
-%prod.quarkus.oidc-client.client-id=${quarkus.application.name}
 
 # propagate the apm-principal-token from requests we receive
 org.eclipse.microprofile.rest.client.propagateHeaders=apm-principal-token
 
 # OIDC
-#quarkus.rest-client.onecx_help_svc_yaml.providers=io.quarkus.oidc.client.reactive.filter.OidcClientRequestReactiveFilter
-#quarkus.oidc-client.client-id=${quarkus.application.name}
-#quarkus.oidc-client.credentials.secret=
-#quarkus.oidc-client.auth-server-url=${quarkus.oidc.auth-server-url}
+%prod.quarkus.rest-client.onecx_help_svc_yaml.providers=io.quarkus.oidc.client.reactive.filter.OidcClientRequestReactiveFilter
+%prod.quarkus.rest-client.onecx_product_store_v1_yaml.providers=io.quarkus.oidc.client.reactive.filter.OidcClientRequestReactiveFilter
+%prod.quarkus.oidc-client.client-id=${quarkus.application.name}
 
 # DEV
 %dev.quarkus.rest-client.onecx_help_svc.url=http://onecx-help-svc