Skip to content

Commit ac7766b

Browse files
jfernandezsqsjfernandezsqs
authored
Merge pull request #72 from International-Data-Spaces-Association/feature/57_using_docker_compose
Switch to docker-compose using IDS-testbed CA certificates
2 parents 502279a + bdebb4f commit ac7766b

File tree

3,229 files changed

+521
-368439
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

3,229 files changed

+521
-368439
lines changed

‎.env‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
COMPOSE_PROJECT_NAME=testbed
2+
3+
# Valid values include "development" and "production"
4+
# "production" requires TLS certificates! (See below)
5+
# Set the protocol to https when changing this
6+
OMEJDN_ENVIRONMENT="development"
7+
OMEJDN_PROTOCOL="http"
8+
9+
# Options for Omejdn itself
10+
# -------------------------
11+
12+
# The docker version to pull
13+
OMEJDN_VERSION="1.6.0"
14+
15+
# Your domain (e.g. sso.example.org)
16+
OMEJDN_DOMAIN="omejdn"
17+
18+
# The path to mount Omejdn at.
19+
# This should start but not end with '/'.
20+
# Can be used for versioning if there are several versions (e.g. '/v3')
21+
OMEJDN_PATH="/auth"
22+
23+
# Note that when you change the issuer identifier,
24+
# you will need to edit the NginX config to ensure that
25+
# the well-known server metadata endpoint for your new
26+
# identifier points to Omejdn's
27+
# /.well-known/oauth-authorization-server endpoint.
28+
# See RFC 8414 for more information
29+
OMEJDN_ISSUER="${OMEJDN_PROTOCOL}://${OMEJDN_DOMAIN}${OMEJDN_PATH}"
30+
31+
# Admin account
32+
# CHANGE THE PASSWORD, or we will "hack" you
33+
ADMIN_USERNAME="admin"
34+
ADMIN_PASSWORD="password"
35+
36+
# Options for the Admin Web UI
37+
# ----------------------------
38+
39+
# The docker version to pull
40+
UI_VERSION="dev"
41+
42+
# The path to mount the UI at.
43+
# This should never end in '/' and should not be equal to
44+
# the path of omejdn above. Edit the NginX config if you
45+
# really need them to be equal.
46+
UI_PATH=""
47+
48+
# TLS settings for production
49+
# ---------------------------
50+
51+
# These are necessary for production setups
52+
# You may want to consider getting a certificate from
53+
# a widely trusted certificate authority.
54+
TLS_KEY="${PWD}/dummy.key"
55+
TLS_CERT="${PWD}/dummy.cert"
56+

‎DAPS/config/clients.yml‎

Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
---
2+
- client_id: 66:07:ED:E5:80:E4:29:6D:1E:DD:F7:43:CA:0E:EB:38:32:C8:3A:43:keyid:07:FC:95:17:C4:95:B9:E4:AD:09:5F:07:1E:D2:20:75:2D:89:66:85
3+
client_name: testbed1
4+
grant_types: client_credentials
5+
token_endpoint_auth_method: private_key_jwt
6+
scope: idsc:IDS_CONNECTOR_ATTRIBUTES_ALL
7+
attributes:
8+
- key: idsc
9+
value: IDS_CONNECTOR_ATTRIBUTES_ALL
10+
- key: securityProfile
11+
value: idsc:BASE_SECURITY_PROFILE
12+
- key: referringConnector
13+
value: http://testbed1.demo
14+
- key: "@type"
15+
value: ids:DatPayload
16+
- key: "@context"
17+
value: https://w3id.org/idsa/contexts/context.jsonld
18+
- key: transportCertsSha256
19+
value: a1da7cfeac22ddffa4ebbe67b323d9af1c05e9d92a9d3dfbc098f6c45609caa9
20+
- client_id: 4B:4A:0E:81:99:6A:19:B9:3A:04:37:B6:7C:86:83:17:19:5A:6E:68:keyid:07:FC:95:17:C4:95:B9:E4:AD:09:5F:07:1E:D2:20:75:2D:89:66:85
21+
client_name: testbed2
22+
grant_types: client_credentials
23+
token_endpoint_auth_method: private_key_jwt
24+
scope: idsc:IDS_CONNECTOR_ATTRIBUTES_ALL
25+
attributes:
26+
- key: idsc
27+
value: IDS_CONNECTOR_ATTRIBUTES_ALL
28+
- key: securityProfile
29+
value: idsc:BASE_SECURITY_PROFILE
30+
- key: referringConnector
31+
value: http://testbed2.demo
32+
- key: "@type"
33+
value: ids:DatPayload
34+
- key: "@context"
35+
value: https://w3id.org/idsa/contexts/context.jsonld
36+
- key: transportCertsSha256
37+
value: cf0dd49a552008eacd0b82cbf7850cbaacbf9c2a8942e542801db9bf4c2f0f5a
38+
- client_id: B7:6D:DD:B3:FD:6E:41:52:A8:89:95:B0:0D:8E:4C:BA:0A:1F:72:FD:keyid:07:FC:95:17:C4:95:B9:E4:AD:09:5F:07:1E:D2:20:75:2D:89:66:85
39+
client_name: testbed3
40+
grant_types: client_credentials
41+
token_endpoint_auth_method: private_key_jwt
42+
scope: idsc:IDS_CONNECTOR_ATTRIBUTES_ALL
43+
attributes:
44+
- key: idsc
45+
value: IDS_CONNECTOR_ATTRIBUTES_ALL
46+
- key: securityProfile
47+
value: idsc:BASE_SECURITY_PROFILE
48+
- key: referringConnector
49+
value: http://testbed3.demo
50+
- key: "@type"
51+
value: ids:DatPayload
52+
- key: "@context"
53+
value: https://w3id.org/idsa/contexts/context.jsonld
54+
- key: transportCertsSha256
55+
value: 0d9eb3600540532c69c7345e7ab04e0f420434b693e26e415783875a93e9fc4b

‎DAPS/config/oauth_providers.yml‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
## You may configure additional OAuth Providers as follows
2+
#- name: 'Some OAuth Provider'
3+
# redirect_uri: 'http://localhost:4567/oauth_cb?provider=BFH'
4+
# client_id: 'our_client_id'
5+
# client_secret: 'our_secret'
6+
# scopes:
7+
# - 'email'
8+
# - 'profile'
9+
# - 'openid'
10+
# external_userid: 'nickname'
11+
# authorization_endpoint: 'https://authorize'
12+
# token_endpoint: 'https://token'
13+
# userinfo_endpoint: 'https://userinfo'
14+
# response_type: 'code'

‎DAPS/config/omejdn.yml‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
---
2+
plugins:
3+
user_db:
4+
yaml:
5+
location: config/users.yml
6+
claim_mapper:
7+
attribute:
8+
skip_access_token: false
9+
skip_id_token: true
10+
api:
11+
admin_v1:
12+
user_selfservice_v1:
13+
allow_deletion: false
14+
allow_password_change: true
15+
editable_attributes: []
16+
user_backend_default: yaml
17+
environment: development
18+
issuer: http://omejdn/auth
19+
front_url: http://omejdn/auth
20+
bind_to: 0.0.0.0:4567
21+
openid: true
22+
default_audience: idsc:IDS_CONNECTORS_ALL
23+
accept_audience: idsc:IDS_CONNECTORS_ALL
24+
access_token:
25+
expiration: 3600
26+
algorithm: RS256
27+
id_token:
28+
expiration: 3600
29+
algorithm: RS256

OmejdnDAPS/config/scope_description.yml renamed to DAPS/config/scope_description.yml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,9 @@
1+
# Human readable descriptions for each scope.
2+
# These are shown to a user before authorizing a client
13
profile: "Standard profile claims (e.g.: Name, picture, website, gender, birthdate, location)"
24
email: "Email-Address"
35
address: "Address"
46
phone: "Phone-number"
5-
omejdn:api: "Access to the Omejdn server API"
7+
omejdn:read: "Read access to the Omejdn server API"
8+
omejdn:write: "Write access to the Omejdn server API"
69
omejdn:admin: "Access to the Omejdn server admin API"

‎DAPS/config/scope_mapping.yml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
# Necessary IDS Claims to issue a DAT
2+
idsc:IDS_CONNECTOR_ATTRIBUTES_ALL:
3+
- securityProfile
4+
- referringConnector
5+
- "@type"
6+
- "@context"
7+
- transportCertsSha256
8+

‎DAPS/config/users.yml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
---
2+
- username: admin
3+
attributes:
4+
- key: omejdn
5+
value: admin
6+
password: "$2a$12$gigRDsS9jyjC/Kzgr1st6eoUb8RVofYXYmrz2ISsGdpddn8quIVwq"

‎DAPS/config/webfinger.yml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
---
2+
# Define a webfinger here
3+
#localhost.com:
4+
# name: test
5+
# website: http://localhost:4567

‎DAPS/keys/clients/.gitignore‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
#*.cert

‎DAPS/keys/clients/NEI6NEE6MEU6ODE6OTk6NkE6MTk6Qjk6M0E6MDQ6Mzc6QjY6N0M6ODY6ODM6MTc6MTk6NUE6NkU6Njg6a2V5aWQ6MDc6RkM6OTU6MTc6QzQ6OTU6Qjk6RTQ6QUQ6MDk6NUY6MDc6MUU6RDI6MjA6NzU6MkQ6ODk6NjY6ODU=.cert‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
-----BEGIN CERTIFICATE-----
2+
MIIC8jCCAnegAwIBAgIBAjAKBggqhkjOPQQDAjBNMQswCQYDVQQGEwJFUzEMMAoG
3+
A1UECgwDU1FTMRAwDgYDVQQLDAdUZXN0TGFiMR4wHAYDVQQDDBVSZWZlcmVuY2VU
4+
ZXN0YmVkU3ViQ0EwHhcNMjExMTI0MTEwNzEzWhcNMjQxMTIzMTEwNzEzWjBAMQsw
5+
CQYDVQQGEwJFUzEMMAoGA1UECgwDU1FTMRAwDgYDVQQLDAdUZXN0TGFiMREwDwYD
6+
VQQDDAh0ZXN0YmVkMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMUc
7+
m93i+OU/PYTfU9yfSDV8aQ/6G1DFMsoDLBzwpzc1JM/aNanSUYA5gf4yS6QS1Yjz
8+
N9x94lOOYePoOdSoUrXq4vbQAYBMEzL7f0yvKuXMFcQOAANZmpl0nykWI5gA9U2g
9+
Av8covr8affFE/hGzZOsNd8vWcmZvEv4WXkBMyawnyvcTHCtPQ+tvoS/IK2Gsh+x
10+
ZhqEDRFMqEKBaU7wW7pjXka5DietU9lMU+mI2hk0866753B+Q4arDFKxdWxBADgB
11+
LSs1GZU4IwyTcnPgxHt1YMpiA6/KDrrlO0Wk0AJpHXou9TDfNxZo9/ZMgH2zLzqq
12+
LjwLMCztsYvOMYS02x0CAwEAAaOBiTCBhjAMBgNVHRMBAf8EAjAAMCAGA1UdJQEB
13+
/wQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCA6gwIAYDVR0O
14+
AQH/BBYEFEtKDoGZahm5OgQ3tnyGgxcZWm5oMCIGA1UdIwEB/wQYMBaAFAf8lRfE
15+
lbnkrQlfBx7SIHUtiWaFMAoGCCqGSM49BAMCA2kAMGYCMQC/ccMjGhmNzaqM+7Ia
16+
XjhvHgrpvYrZuUVyJ2bw1IjCFxi8RCejZOUW+HwVHl3lpH4CMQCWd5M99qLgYiqE
17+
/9qJhlTbLTbomiXAwGaZVPlynZ1KgmAJIIeWn9OYybG/4ldTfUg=
18+
-----END CERTIFICATE-----

0 commit comments

Comments
 (0)