Decide to go for SmallRye JWT, less dependencies and more flexible to use.

Signed-off-by: Dennis Labordus <[email protected]>

Author: Dennis Labordus

app/pom.xml

@@ -61,6 +61,10 @@ SPDX-License-Identifier: Apache-2.0
             <groupId>io.quarkus</groupId>
             <artifactId>quarkus-resteasy</artifactId>
         </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-smallrye-jwt</artifactId>
+        </dependency>
         <dependency>
             <groupId>io.quarkus</groupId>
             <artifactId>quarkus-smallrye-openapi</artifactId>
@@ -81,10 +85,6 @@ SPDX-License-Identifier: Apache-2.0
             <groupId>io.quarkus</groupId>
             <artifactId>quarkus-hibernate-validator</artifactId>
         </dependency>
-        <dependency>
-            <groupId>io.quarkus</groupId>
-            <artifactId>quarkus-oidc</artifactId>
-        </dependency>
 
         <!-- Test Dependencies -->
         <dependency>
@@ -104,7 +104,7 @@ SPDX-License-Identifier: Apache-2.0
         </dependency>
         <dependency>
             <groupId>io.quarkus</groupId>
-            <artifactId>quarkus-test-security-oidc</artifactId>
+            <artifactId>quarkus-test-security</artifactId>
             <scope>test</scope>
         </dependency>
         <dependency>

app/src/main/resources/application.properties

@@ -6,8 +6,8 @@ quarkus.http.cors                 = false
 quarkus.http.root-path            = /compas-scl-data-service/
 quarkus.http.limits.max-body-size = 150M
 
-quarkus.log.level = DEBUG
-quarkus.log.category."org.lfenergy.compas.scl.data".level = DEBUG
+quarkus.log.level = INFO
+quarkus.log.category."org.lfenergy.compas.scl.data".level = INFO
 
 # BaseX configuration
 basex.host      = ${BASEX_HOST:localhost}
@@ -22,10 +22,11 @@ basex.password  = ${BASEX_PASSWORD:admin}
 %dev.quarkus.log.level = DEBUG
 %dev.quarkus.log.category."org.lfenergy.compas.scl.data".level = DEBUG
 
-# Open ID Connect
-quarkus.oidc.auth-server-url  = ${AUTH_SERVER_URL:http://localhost:8089/auth/realms/compas}
-quarkus.oidc.client-id        = ${AUTH_CLIENT_ID:scl-data-service}
-quarkus.oidc.application-type = service
+# Smallrye JWT Properties (Microprofile)
+smallrye.jwt.verify.key.location = ${JWT_VERIFY_KEY:http://localhost:8089/auth/realms/compas/protocol/openid-connect/certs}
+mp.jwt.verify.issuer             = ${JWT_VERIFY_ISSUER:http://localhost:8089/auth/realms/compas}
+mp.jwt.verify.audiences          = ${JWT_VERIFY_CLIENT_ID:scl-data-service}
+smallrye.jwt.path.groups         = ${JWT_GROUPS_PATH:resource_access/scl-data-service/roles}
 
 quarkus.http.auth.permission.deny-default.paths=/*
 quarkus.http.auth.permission.deny-default.policy=deny