Skip to content
Snippets Groups Projects
Commit d40a200c authored by Anders Harrisson's avatar Anders Harrisson
Browse files

Set security constraints based on HTTP method

parent 4db87c15
No related branches found
No related tags found
No related merge requests found
Pipeline #120208 failed
......@@ -5,12 +5,29 @@
version: '3.7'
services:
naming:
build: ./
build: .
ports:
- "8080:8083"
depends_on:
- postgres
- keycloak
command: "java -jar /naming/naming-backend.jar"
environment:
keycloak.auth-server-url: http://keycloak:8080
keycloak.realm: test
keycloak.resource: naming
keycloak.security-constraints[0].authRoles[0]: naming-user
keycloak.security-constraints[0].authRoles[1]: naming-admin
keycloak.security-constraints[0].securityCollections[0].patterns[0]: /api/v1/names
keycloak.security-constraints[0].securityCollections[0].methods[0]: GET
keycloak.security-constraints[1].authRoles[0]: naming-admin
keycloak.security-constraints[1].securityCollections[0].patterns[0]: /api/v1/names
keycloak.security-constraints[1].securityCollections[0].methods[0]: POST
keycloak.principal-attribute: preferred_username
keycloak.use-resource-role-mappings: "true"
keycloak.enabled: "true"
logging.level.root: INFO
logging.level.org.apache.catalina.realm: DEBUG
postgres:
container_name: "postgres"
......@@ -22,8 +39,17 @@ services:
POSTGRES_USER: discs_names
POSTGRES_PASSWORD: discs_names
PGDATA: /var/lib/postgresql/data/pgdata
volumes:
- naming-data:/var/lib/postgresql/data/pgdata
volumes:
naming-data:
keycloak:
image: quay.io/keycloak/keycloak:19.0.1
environment:
KEYCLOAK_ADMIN: admin
KEYCLOAK_ADMIN_PASSWORD: password
DB_VENDOR: h2
ports:
- "8088:8080"
command:
- start-dev
- --import-realm
volumes:
- ./src/test/resources/keycloak/test-realm.json:/opt/keycloak/data/import/test-realm.json
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment