Merge branch 'develop' into deployment-gate-test

Author: Dennis Labordus

app/pom.xml

@@ -61,6 +61,10 @@ SPDX-License-Identifier: Apache-2.0
             <groupId>io.quarkus</groupId>
             <artifactId>quarkus-resteasy</artifactId>
         </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-smallrye-jwt</artifactId>
+        </dependency>
         <dependency>
             <groupId>io.quarkus</groupId>
             <artifactId>quarkus-smallrye-openapi</artifactId>
@@ -81,10 +85,6 @@ SPDX-License-Identifier: Apache-2.0
             <groupId>io.quarkus</groupId>
             <artifactId>quarkus-hibernate-validator</artifactId>
         </dependency>
-        <dependency>
-            <groupId>io.quarkus</groupId>
-            <artifactId>quarkus-oidc</artifactId>
-        </dependency>
 
         <!-- Test Dependencies -->
         <dependency>
@@ -104,7 +104,7 @@ SPDX-License-Identifier: Apache-2.0
         </dependency>
         <dependency>
             <groupId>io.quarkus</groupId>
-            <artifactId>quarkus-test-security-oidc</artifactId>
+            <artifactId>quarkus-test-security</artifactId>
             <scope>test</scope>
         </dependency>
         <dependency>

app/src/main/java/org/lfenergy/compas/scl/data/rest/v1/CompasCommonResource.java

@@ -32,7 +32,7 @@ public class CompasCommonResource {
     @Path("/type/list")
     @Produces(MediaType.APPLICATION_XML)
     public TypeListResponse list() {
-        // Retrieve the roles the loggedin user has.
+        // Retrieve the roles the logged in user has.
         var roles = securityIdentity.getRoles();
 
         var response = new TypeListResponse();

app/src/main/resources/application.properties

@@ -22,10 +22,11 @@ basex.password  = ${BASEX_PASSWORD:admin}
 %dev.quarkus.log.level = DEBUG
 %dev.quarkus.log.category."org.lfenergy.compas.scl.data".level = DEBUG
 
-# Open ID Connect
-quarkus.oidc.auth-server-url  = ${AUTH_SERVER_URL:http://localhost:8080/auth/realms/compas}
-quarkus.oidc.client-id        = ${AUTH_CLIENT_ID:scl-data-service}
-quarkus.oidc.application-type = service
+# Smallrye JWT Properties (Microprofile)
+smallrye.jwt.verify.key.location = ${JWT_VERIFY_KEY:http://localhost:8089/auth/realms/compas/protocol/openid-connect/certs}
+smallrye.jwt.path.groups         = resource_access/scl-data-service/roles
+mp.jwt.verify.issuer             = ${JWT_VERIFY_ISSUER:http://localhost:8089/auth/realms/compas}
+mp.jwt.verify.audiences          = ${JWT_VERIFY_CLIENT_ID:scl-data-service}
 
 quarkus.http.auth.permission.deny-default.paths=/*
 quarkus.http.auth.permission.deny-default.policy=deny