Sorry, back to OpenID Connect, feels better.

Signed-off-by: Dennis Labordus <[email protected]>

Author: Dennis Labordus

app/pom.xml

@@ -61,10 +61,6 @@ SPDX-License-Identifier: Apache-2.0
             <groupId>io.quarkus</groupId>
             <artifactId>quarkus-resteasy</artifactId>
         </dependency>
-        <dependency>
-            <groupId>io.quarkus</groupId>
-            <artifactId>quarkus-smallrye-jwt</artifactId>
-        </dependency>
         <dependency>
             <groupId>io.quarkus</groupId>
             <artifactId>quarkus-smallrye-openapi</artifactId>
@@ -85,6 +81,10 @@ SPDX-License-Identifier: Apache-2.0
             <groupId>io.quarkus</groupId>
             <artifactId>quarkus-hibernate-validator</artifactId>
         </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-oidc</artifactId>
+        </dependency>
 
         <!-- Test Dependencies -->
         <dependency>
@@ -104,7 +104,7 @@ SPDX-License-Identifier: Apache-2.0
         </dependency>
         <dependency>
             <groupId>io.quarkus</groupId>
-            <artifactId>quarkus-test-security</artifactId>
+            <artifactId>quarkus-test-security-oidc</artifactId>
             <scope>test</scope>
         </dependency>
         <dependency>

app/src/main/resources/application.properties

@@ -22,11 +22,10 @@ basex.password  = ${BASEX_PASSWORD:admin}
 %dev.quarkus.log.level = DEBUG
 %dev.quarkus.log.category."org.lfenergy.compas.scl.data".level = DEBUG
 
-# Smallrye JWT Properties (Microprofile)
-smallrye.jwt.verify.key.location = ${JWT_VERIFY_KEY:http://localhost:8089/auth/realms/compas/protocol/openid-connect/certs}
-smallrye.jwt.path.groups         = ${JWT_GROUPS_PATH:resource_access/scl-data-service/roles}
-mp.jwt.verify.issuer             = ${JWT_VERIFY_ISSUER:http://localhost:8089/auth/realms/compas}
-mp.jwt.verify.audiences          = ${JWT_VERIFY_CLIENT_ID:scl-data-service}
+# Open ID Connect
+quarkus.oidc.auth-server-url  = ${AUTH_SERVER_URL:http://localhost:8089/auth/realms/compas}
+quarkus.oidc.client-id        = ${AUTH_CLIENT_ID:scl-data-service}
+quarkus.oidc.application-type = service
 
 quarkus.http.auth.permission.deny-default.paths=/*
 quarkus.http.auth.permission.deny-default.policy=deny