WIP : improved local dev setup

eahrold · eahrold · commit 4f2dd6465be3 · 2025-07-29T11:31:20.000-05:00
diff --git a/Makefile b/Makefile
@@ -0,0 +1,11 @@
+compose_api:
+	docker network create unity-network > /dev/null 2>&1 || true
+	docker compose -f ./docker-compose.local.yml up unity-auth-db unity-auth-api
+
+compose_ui:
+	docker network create unity-network > /dev/null 2>&1 || true
+	docker compose -f ./docker-compose.local.yml up unity-auth-db unity-auth-ui
+
+compose_all:
+	docker network create unity-network > /dev/null 2>&1 || true
+	docker compose -f ./docker-compose.local.yml up
diff --git a/README.md b/README.md
@@ -6,16 +6,36 @@ UnityAuth is a comprehensive authentication and authorization service built with
 
 To launch and be a pure consumer of the auth service, you can use the docker compose from the root:
 
+If running on mac/linux
+
+```sh
+docker network create unity-network > /dev/null 2>&1 || true
+```
+
+Or simply using compose.
+
 ```sh
+docker network create unity-network > /dev/null 2>&1 || true
 docker-compose -f docker-compose.local.yml up
 ```
 
 This will start:
 
 - **UnityAuth API** on port http://localhost:8081
-- **Frontend UI** on port http://localhost:3001
+- **UnityAuth UI** on port http://localhost:3001
 - **MySQL Database** for data persistence
 
+### Hosts File Updates
+
+For consistent internal-external service name resolution, add these to your `/etc/hosts` file
+
+```txt
+127.0.0.1 unity-auth-api
+127.0.0.1 unity-auth-ui
+127.0.0.1 libre311-api
+127.0.0.1 libre311-ui
+```
+
 You can log in with these accounts.
 **Password for all the following accounts is 'test'**
 
diff --git a/UnityAuth/bin/main/application-local.yml b/UnityAuth/bin/main/application-local.yml
@@ -0,0 +1,37 @@
+micronaut:
+  application:
+    name: unity-iam
+  server:
+    cors:
+      enabled: true
+      configurations:
+        web:
+          allowed-origins-regex: '^http:\/\/(.*?)(?:localhost|127\.0\.0\.1)(?::\d+)?$'
+          allowedOrigins:
+            - http://localhost:3000
+            - localhost:3000
+            - http://127.0.0.1:3000
+            - http://localhost:3001
+            - localhost:3001
+            - http://127.0.0.1:3001
+      localhost-pass-through: true
+    port: 8081
+  security:
+    authentication: bearer
+datasources:
+  default:
+    url: jdbc:mysql://localhost:13306/test?allowPublicKeyRetrieval=true&useSSL=false
+    driver-class-name: com.mysql.cj.jdbc.Driver
+    username: root
+    password: test
+    db-type: mysql
+flyway:
+  datasources:
+    default:
+      locations:
+        - classpath:db/migration
+        - classpath:local
+
+jwk:
+  primary: '{"p":"_OZyH1Mk3wR0oXw1C31t4kWOcaHFB6Njro1cYx52REnPiznn_JTtwvlAMpvV6LVCIZPgKMzdIEMY1gYs1LsO-5IFqWwegXmYJ0iKXbRrZshfWBCzRLK3QK5fER1le1XUBDhtDk7KIW_Xg-SZF4pf_LUEVKMnyUpspGI5F77jlJ8","kty":"RSA","q":"s9wvl7z8vkHQvo9xOUp-z0a2Z7LFBDil2uIjPh1FQzs34gFXH8dQPRox83TuN5d4KzdLPqQNQAfMXU9_KmxihNb_qDQahYugeELmcem04munxXqBdyZqWhWCy5YmujYqn44irwvoTbw6_RkMqjCmINPTPadptlPivsZ6RhKn8zk","d":"ok3wmhOy8NZEHAotnFiH6ecFD6xf_9x33_fMRkqa3_KE8NZM7vmvNgElox2UvcP_2K5E7jOdL2XQdJCTIW3Qlj66yE2a84SYlbvxIc4hDrIog0XNt4FhavvshxxUIfDQo6Q8qXDR5v7nwt6SCopYC3t3KVRdJh08GzKoVxysd7afJjxXxx178gY29uMRqnwxFN1OGnWaiBr-xGKb1frJ6jOI1zvuuCaljZ4aZjc9vOR4y9ZmobgrzkMFnpDAmQZ7MWcVMyodRMOA2dEOckywPhg-dIVNiVIqzJqe5Yg1ilNookjwtqj2TpNU7Z9gPqzYB73PmQ2p5LMDheAPxcOmEQ","e":"AQAB","use":"sig","kid":"e3be37177a7c42bcbadd7cc63715f216","qi":"r--nAtaYPAgJq_8R1-kynpd53E17n-loDUgtVWBCx_RmdORX4Auilv1S83dD1mbcnYCbV_LmxiEjOiz-4gS_E0qVGqakAqQrO1hVUvJa_Y2uftDgwFmuJNGbpRU-K4Td_uUzdm48za8yJCgOdYsWp6PNMCcmQgiInzkR3XYV83I","dp":"oQUcvmMSw8gzdin-IB2xW_MLecAVEgLu0dGBdD6N8HbKZQvub_xm0dAfFtnvvWXDAFwFyhR96i-uXX67Bos_Q9-6KSAE4E0KGmDucDESfPOw-QJREbl0QgOD1gLQfVGtVy6SCR0TR2zNXFWtP7bD3MNoSXdEOr5fI97CGSNaBWM","alg":"RS256","dq":"DM-WJDy10-dkMu6MpgQEXEcxHtnA5rgSODD7SaVUFaHWLSbjScQslu2SuUCO5y7GxG0_0spklzb2-356FE98BPI7a4Oqj_COEYLSXzLCS45XeN1s80utL5Vwp4eeYo0RJCQ_nDBA76iEmxp5qHWmn5f25-FQykfXUrdYZj1V8SE","n":"sa6m2i-iNvj6ZSTdSHZaBrnv6DId4AqAXhOyl0yA5fNWYe6r51h24SXqk7DsGYHHh74ii74tP1lTpmy6RD67tCK-tbN-d6yc4Z6FfM8R83v2QZUfaAixgHGtw0n2toqsiHf6EloDV-B8q4GYyKDD6cLecoaIuTmMBTY3kts59U2t9W10YoLGsmFqLSz8qNF5HkahzB6_--2DiBfVGUKAXHC-SICGZCi-8efOetv6pt9vFiWEgwU_DgjRNYzLFt1SEmbGFUU4kbjQ7tNTMkHfzfwcT6qLt4kVKy2FNYsEMk24keWtCvW_RyO_fisZc0W9smX7WtYjEXhcAjDeqHgEZw"}'
+  secondary: '{"p":"4qJ9RNlu6SuDT_MLArfzimvKEwmet_j12Z9EQeb5nMjZIOHTcWw__duebUytfWwxsRHhtSVXeMt-EryQAOulm2p1bfiVuparq93z9P5cPnb0oArFaw3eFNFEmX5U-lY8PzUTTsFxO4aVQYAKXD6DP7p5uPzuwpHFuNc71nNIXZE","kty":"RSA","q":"v4OhkWMbS_nq77HFanwZAT_obfJuQfOFOQBORL4ATAHGUXm2y4YqLNExZs7Wj1MA_6ya6Y00s2JBM7fWq_fPe4d9xo5aGrPdcp0G8W21kkfh9vuVPlHVQTgSP7FQ9qahvXxNwK_11yNr3p1HBmScJ5mHlMBpIJsFcvHA-uXe0Ps","d":"EunrjnQ1-jJPSCrt2L94PUpDrakup8a4pXys52YSkJY-W6XidM0roOS6kr06P3G6VQgc6AL_BkvTQ_XS0oXHbXVprDQ5Syam5p9oxHBhhW_vSqIMgUOfm28uyB3Mtw9rBxdUxW3yElHioaR8a-exYhhyVXb1QEhxL_rcnthmhAkM2NcHi2UnxGKFTsC0abQ2MuQc1OAuW5veDiIF2hfdC41qE0_d8vB6FDWbblgUpbwB6uSZaViPs15Buq2oX9dCCw54-PgzkfehDt7lyqgupktbV1psnVVhL86shzt4QFnhd3k7VpFbjCNFtiJTrufV-XBWT0pl2w3VR9wrHJ1bYQ","e":"AQAB","use":"sig","kid":"0794e938379540dc8eaa559508524a79","qi":"jy-TNyXVy_44_n4KGAwIbZO2C4r6uNWuEdehBfQKkPhiP90myG1KZVfOoKNOK9bCv2mvZJcBz4c1ArElgpuSCV4-KFac1ZzQo_ic5aoIej8Qa80y2ogc-_Yv6_ZLHC1S76M-lm4jayk2-rvuBpy2pUvHbW6Srhs_szwz7ZfSkLg","dp":"ApqdV9ortRAj7Ro8ySY17SQ56SgWI8T_hiWXUi6GNa_1FrShik8VGSSZ2GWmJKfGlmM_NaadL60e4LY77VbHy1ZYzQ-rIL60cEAXmnwFsU4Kl4AoLoe1QoX5BM53yXyOKqfAdgow898i_eKru82YEnZhCagWUjP8kpgefuNKNJE","alg":"RS256","dq":"bFF78WoXh0pMCdQHL2oPDnjh8kWa_OxKHmpA2nqIWnTqgSyRKd2xPvX2tgooqpmsx-8NEymNdCQPcrv4y_z2OgzxI3tiFRZEGs4bnjOJ7bmAYZv71mqcbi3TjHiyrT6j3jNPGrurFUpweVGFWWVQOMmKOKT3ELz9QPzhREb9Vj8","n":"qYvDpV8DRU5hx9eXpE4Ms8nUXicEwrxUUz5gb5gkXpIeY82mqfQKKCP6PSFnkKYtRFTOUSm9cgGGfOd7O4NFsIsxLwXCj34X7ORr19eXKBLvG3bZJLxqRlbYuQshDMkQOui1sDBxvYnj5p4iHne6l2btH5grHOCShUWG-bKps5Y8bKNHod1pIOOBabVCmn3sUVUkZw8nyXkQqZbv-c8x6z0TEfhNOPOIt2AmmlNgrE_8g7-dnCvqfJnhv0c7qkOJzsb7OMmvVwsQNiM59D6uaWZr-vdANo6NggiZmCKUS3tpUvdXW7ec9WMPJWhrVEkRcbWXQnZ_C7pXFrz7rLeNKw"}'
diff --git a/UnityAuth/bin/main/application-test.yml b/UnityAuth/bin/main/application-test.yml
@@ -0,0 +1,28 @@
+micronaut:
+  application:
+    name: unity-iam
+  server:
+    cors:
+      enabled: true
+      configurations:
+        web:
+          allowed-origins-regex: '^http:\/\/(.*?)localhost:3000$'
+  security:
+    authentication: bearer
+    enabled: true
+    token:
+      enabled: true
+      jwt:
+        enabled: true
+        signatures:
+          jwks:
+            unity:
+              url: http://localhost:8080/keys
+datasources:
+  default:
+    driver-class-name: com.mysql.cj.jdbc.Driver
+    db-type: mysql
+flyway:
+  datasources:
+    default:
+      enabled: true
diff --git a/UnityAuth/bin/main/application.yml b/UnityAuth/bin/main/application.yml
@@ -0,0 +1,32 @@
+micronaut:
+  application:
+    name: unity-iam
+  security:
+    endpoints:
+      logout:
+        path: /api/logout
+        get-allowed: true
+      login:
+        path: /api/login
+      introspection:
+        path: /api/token_info
+    intercept-url-map:
+      - pattern: /api/login
+        http-method: POST
+        access:
+          - isAnonymous()
+    authentication: bearer
+  server:
+    cors:
+      enabled: true
+      configurations:
+        web:
+          allowed-origins-regex: ${LIBRE311_UI_BASE_URL}
+datasources:
+  default:
+    driver-class-name: com.mysql.cj.jdbc.Driver
+    db-type: mysql
+flyway:
+  datasources:
+    default:
+      enabled: true
diff --git a/UnityAuth/bin/main/db/migration/V1__initial_schema.sql b/UnityAuth/bin/main/db/migration/V1__initial_schema.sql
@@ -0,0 +1,83 @@
+CREATE TABLE tenant
+(
+    id          bigint AUTO_INCREMENT PRIMARY KEY,
+    name        varchar(255) NOT NULL,
+    description text,
+    status      varchar(255) NOT NULL,
+    UNIQUE (name)
+);
+
+CREATE TABLE service
+(
+    id          bigint AUTO_INCREMENT PRIMARY KEY,
+    name        varchar(255) NOT NULL,
+    description text,
+    status      varchar(255),
+    UNIQUE (name)
+);
+
+CREATE TABLE tenant_service
+(
+    tenant_id  bigint NOT NULL,
+    service_id bigint NOT NULL,
+    status     varchar(255),
+    PRIMARY KEY (tenant_id, service_id)
+);
+ALTER TABLE tenant_service
+    ADD CONSTRAINT tenant_service_tenant_FK FOREIGN KEY (tenant_id) REFERENCES tenant (id);
+ALTER TABLE tenant_service
+    ADD CONSTRAINT tenant_service_service_FK FOREIGN KEY (service_id) REFERENCES service (id);
+
+CREATE TABLE permission
+(
+    id          bigint AUTO_INCREMENT PRIMARY KEY,
+    name        varchar(255) NOT NULL,
+    description text,
+    scope       varchar(255),
+    UNIQUE (name)
+);
+
+CREATE TABLE role
+(
+    id          bigint AUTO_INCREMENT PRIMARY KEY,
+    name        varchar(255) NOT NULL,
+    description text,
+    UNIQUE (name)
+);
+
+CREATE TABLE role_permission
+(
+    role_id       bigint NOT NULL,
+    permission_id bigint NOT NULL,
+    PRIMARY KEY (role_id, permission_id)
+);
+ALTER TABLE role_permission
+    ADD CONSTRAINT role_permission_permission_FK FOREIGN KEY (permission_id) REFERENCES permission (id);
+ALTER TABLE role_permission
+    ADD CONSTRAINT role_permission_role_FK FOREIGN KEY (role_id) REFERENCES role (id);
+
+
+CREATE TABLE user
+(
+    id       bigint AUTO_INCREMENT PRIMARY KEY,
+    email    varchar(255) NOT NULL,
+    password varchar(255),
+    status   varchar(255),
+    UNIQUE KEY unique_email (email)
+);
+
+CREATE TABLE user_role
+(
+    tenant_id bigint NOT NULL,
+    user_id   bigint NOT NULL,
+    role_id   bigint NOT NULL,
+    PRIMARY KEY (tenant_id, user_id, role_id)
+);
+ALTER TABLE user_role
+    ADD CONSTRAINT user_role_tenant_FK FOREIGN KEY (tenant_id) REFERENCES tenant (id);
+ALTER TABLE user_role
+    ADD CONSTRAINT user_role_user_FK FOREIGN KEY (user_id) REFERENCES user (id);
+ALTER TABLE user_role
+    ADD CONSTRAINT user_role_role_FK FOREIGN KEY (role_id) REFERENCES role (id);
+
+
diff --git a/UnityAuth/bin/main/db/migration/V2__add_user_first_and_last_names.sql b/UnityAuth/bin/main/db/migration/V2__add_user_first_and_last_names.sql
@@ -0,0 +1,2 @@
+ALTER TABLE user ADD COLUMN first_name varchar(255);
+ALTER TABLE user ADD COLUMN last_name varchar(255);
diff --git a/UnityAuth/bin/main/local/afterMigrate.sql b/UnityAuth/bin/main/local/afterMigrate.sql
@@ -0,0 +1,147 @@
+DELETE FROM user_role;
+DELETE FROM role_permission;
+DELETE FROM tenant_service;
+DELETE FROM user;
+DELETE FROM tenant;
+DELETE FROM service;
+DELETE FROM permission;
+DELETE FROM role;
+
+-- Create a tenant
+INSERT IGNORE INTO tenant (id, name, description, status) VALUES(1, 'stl', 'St. Louis Metro Area', 'ENABLED');
+-- Create Libre311 Service
+INSERT IGNORE INTO service (id, name, description, status) VALUES(1, 'Libre311', 'Libre311', 'ENABLED');
+
+-- Add Libre311 Service to stl tenant
+INSERT IGNORE INTO tenant_service (tenant_id, service_id, status) VALUES(1, 1, 'ENABLED');
+
+
+INSERT IGNORE INTO permission (id, name, description, scope)
+VALUES (1, 'AUTH_SERVICE_EDIT-SYSTEM', NULL, 'SYSTEM'),
+       (2, 'AUTH_SERVICE_VIEW-SYSTEM', NULL, 'SYSTEM'),
+       (3, 'AUTH_SERVICE_EDIT-TENANT', NULL, 'TENANT'),
+       (4, 'AUTH_SERVICE_VIEW-TENANT', NULL, 'TENANT'),
+       (5, 'LIBRE311_ADMIN_EDIT-SYSTEM', NULL, 'SYSTEM'),
+       (6, 'LIBRE311_ADMIN_VIEW-SYSTEM', NULL, 'SYSTEM'),
+       (7, 'LIBRE311_ADMIN_EDIT-TENANT', NULL, 'TENANT'),
+       (8, 'LIBRE311_ADMIN_VIEW-TENANT', NULL, 'TENANT'),
+       (9, 'LIBRE311_ADMIN_EDIT-SUBTENANT', NULL, 'SUBTENANT'),
+       (10, 'LIBRE311_ADMIN_VIEW-SUBTENANT', NULL, 'SUBTENANT'),
+       (11, 'LIBRE311_REQUEST_EDIT-SYSTEM', NULL, 'SYSTEM'),
+       (12, 'LIBRE311_REQUEST_VIEW-SYSTEM', NULL, 'SYSTEM'),
+       (13, 'LIBRE311_REQUEST_EDIT-TENANT', NULL, 'TENANT'),
+       (14, 'LIBRE311_REQUEST_VIEW-TENANT', NULL, 'TENANT'),
+       (15, 'LIBRE311_REQUEST_EDIT-SUBTENANT', NULL, 'SUBTENANT'),
+       (16, 'LIBRE311_REQUEST_VIEW-SUBTENANT', NULL, 'SUBTENANT');
+
+
+INSERT IGNORE INTO role (id, name, description)
+VALUES (1, 'Unity Administrator', 'An administrator of the Unity Platform. A user with this role can perform any operation.'),
+       (2, 'Tenant Administrator', 'An administrator for a tenant. A user with this role can perform any operation for the tenant.'),
+       (3, 'Libre311 Administrator', 'An administrator for Libre311. A user with this role can perform any operation in Libre311 on behalf of their tenant.'),
+       (4, 'Libre311 Request Manager', 'A service request manager for Libre311. A user with this role can update and manage service requests.'),
+       (5, 'Libre311 Jurisdiction Administrator', 'An administrator for Libre311 that is scoped to specific jurisdictions. Additional access must be granted in Libre311 to enable access for specific jurisdictions.'),
+       (6, 'Libre311 Jurisdiction Request Manager', 'A service request manager for Libre311 that is scoped to specific jurisdictions. A user with this role can update and manage service requests. Additional access must be granted in Libre311 to enable access for specific jurisdictions.');
+
+
+-- Unity Administrator
+INSERT IGNORE INTO role_permission (role_id, permission_id)
+VALUES (1, 1),  -- AUTH_SERVICE_EDIT-SYSTEM
+       (1, 2),  -- AUTH_SERVICE_VIEW-SYSTEM
+       (1, 5),  -- LIBRE311_ADMIN_EDIT-SYSTEM
+       (1, 6),  -- LIBRE311_ADMIN_VIEW-SYSTEM
+       (1, 11), -- LIBRE311_REQUEST_EDIT-SYSTEM
+       (1, 12); -- LIBRE311_REQUEST_VIEW-SYSTEM
+
+-- Tenant Administrator
+INSERT IGNORE INTO role_permission (role_id, permission_id)
+VALUES (2, 3),  -- AUTH_SERVICE_EDIT-TENANT
+       (2, 4),  -- AUTH_SERVICE_VIEW-TENANT
+       (2, 7),  -- LIBRE311_ADMIN_EDIT-TENANT
+       (2, 8),  -- LIBRE311_ADMIN_VIEW-TENANT
+       (2, 13), -- LIBRE311_REQUEST_EDIT-TENANT
+       (2, 14); -- LIBRE311_REQUEST_VIEW-TENANT
+
+-- Libre311 Administrator
+INSERT IGNORE INTO role_permission (role_id, permission_id)
+VALUES (3, 7),  -- LIBRE311_ADMIN_EDIT-TENANT
+       (3, 8),  -- LIBRE311_ADMIN_VIEW-TENANT
+       (3, 13), -- LIBRE311_REQUEST_EDIT-TENANT
+       (3, 14); -- LIBRE311_REQUEST_VIEW-TENANT
+
+-- Libre311 Request Manager
+INSERT IGNORE INTO role_permission (role_id, permission_id)
+VALUES (4, 13), -- LIBRE311_REQUEST_EDIT-TENANT
+       (4, 14); -- LIBRE311_REQUEST_VIEW-TENANT
+
+-- Libre311 Jurisdiction Administrator
+INSERT IGNORE INTO role_permission (role_id, permission_id)
+VALUES (5, 9),  -- LIBRE311_ADMIN_EDIT-SUBTENANT
+       (5, 10), -- LIBRE311_ADMIN_VIEW-SUBTENANT
+       (5, 15), -- LIBRE311_REQUEST_EDIT-SUBTENANT
+       (5, 16); -- LIBRE311_REQUEST_VIEW-SUBTENANT
+
+-- Libre311 Jurisdiction Request Manager
+INSERT IGNORE INTO role_permission (role_id, permission_id)
+VALUES (6, 15), -- LIBRE311_REQUEST_EDIT-SUBTENANT
+       (6, 16); -- LIBRE311_REQUEST_VIEW-SUBTENANT
+
+
+-- Password for all the following accounts is 'test'
+-- Unity Administrator
+INSERT IGNORE INTO user (id, email, first_name, last_name, password, status) VALUES
+    (1, 'unity_admin@example.com', 'Unity', 'Admin', '$2a$10$YJetsyoS.EzlVlb249w07uBR8uSqgtlqVH9Hl7bsHtvvwdKAhJp82', 'ENABLED');
+
+-- Tenant Administrator
+INSERT IGNORE INTO user (id, email, first_name, last_name, password, status) VALUES
+    (2, 'tenant_admin@example.com', 'Tenant', 'Admin', '$2a$10$YJetsyoS.EzlVlb249w07uBR8uSqgtlqVH9Hl7bsHtvvwdKAhJp82', 'ENABLED');
+
+-- Libre311 Administrator
+INSERT IGNORE INTO user (id, email, first_name, last_name, password, status) VALUES
+    (3, 'libre311_admin@example.com', 'Libre', 'Admin', '$2a$10$YJetsyoS.EzlVlb249w07uBR8uSqgtlqVH9Hl7bsHtvvwdKAhJp82', 'ENABLED');
+
+-- Libre311 Request Manager
+INSERT IGNORE INTO user (id, email, first_name, last_name, password, status) VALUES
+    (4, 'libre311_request_manager@example.com', 'Request', 'Manager', '$2a$10$YJetsyoS.EzlVlb249w07uBR8uSqgtlqVH9Hl7bsHtvvwdKAhJp82', 'ENABLED');
+
+-- Libre311 Jurisdiction Administrator
+INSERT IGNORE INTO user (id, email, first_name, last_name, password, status) VALUES
+    (5, 'libre311_jurisdiction_admin@example.com', 'Jurisdiction', 'Admin', '$2a$10$YJetsyoS.EzlVlb249w07uBR8uSqgtlqVH9Hl7bsHtvvwdKAhJp82', 'ENABLED');
+
+-- Libre311 Jurisdiction Request Manager
+INSERT IGNORE INTO user (id, email, first_name, last_name, password, status) VALUES
+    (6, 'libre311_jurisdiction_request_manager@example.com', 'Jurisdiction', 'Request Manager', '$2a$10$YJetsyoS.EzlVlb249w07uBR8uSqgtlqVH9Hl7bsHtvvwdKAhJp82', 'ENABLED');
+
+-- Stl sub-tenant admin
+INSERT IGNORE INTO user (id, email, first_name, last_name, password, status) VALUES
+    (7, 'stl_subtenant_admin@example.com', 'Subtenant', 'Admin', '$2a$10$YJetsyoS.EzlVlb249w07uBR8uSqgtlqVH9Hl7bsHtvvwdKAhJp82', 'ENABLED');
+
+
+-- Unity Administrator
+INSERT IGNORE INTO user_role (tenant_id, user_id, role_id) VALUES
+    (1, 1, 1);
+
+-- Tenant Administrator
+INSERT IGNORE INTO user_role (tenant_id, user_id, role_id) VALUES
+    (1, 2, 2);
+
+-- Libre311 Administrator
+INSERT IGNORE INTO user_role (tenant_id, user_id, role_id) VALUES
+    (1, 3, 3);
+
+-- Libre311 Request Manager
+INSERT IGNORE INTO user_role (tenant_id, user_id, role_id) VALUES
+    (1, 4, 4);
+
+-- Libre311 Jurisdiction Administrator
+INSERT IGNORE INTO user_role (tenant_id, user_id, role_id) VALUES
+    (1, 5, 5);
+
+-- Libre311 Jurisdiction Request Manager
+INSERT IGNORE INTO user_role (tenant_id, user_id, role_id) VALUES
+    (1, 6, 6);
+
+
+-- Stl sub-tenant admin
+INSERT IGNORE INTO user_role (tenant_id, user_id, role_id) VALUES
+    (1, 7, 5);
diff --git a/UnityAuth/bin/main/logback.xml b/UnityAuth/bin/main/logback.xml
diff --git a/UnityAuth/bin/test/db/migration/afterMigrate.sql b/UnityAuth/bin/test/db/migration/afterMigrate.sql
diff --git a/UnityAuth/bin/test/db/migration/application-test.yml b/UnityAuth/bin/test/db/migration/application-test.yml

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+ALTER TABLE user ADD COLUMN first_name varchar(255);`
	`2`	`+ALTER TABLE user ADD COLUMN last_name varchar(255);`