vincentchalamon

variables:
    # Use TLS https://docs.gitlab.com/ee/ci/docker/using_docker_build.html#tls-enabled
    DOCKER_HOST: tcp://docker:2376
    DOCKER_TLS_CERTDIR: "/certs"
    DOCKER_DRIVER: overlay2

.bake:
    image: docker:latest
    services:
        - docker:dind

vincentchalamon

<?xml version="1.0" encoding="UTF-8"?>
<!--
  ~ Copyright 2019 Red Hat, Inc. and/or its affiliates
  ~ and other contributors as indicated by the @author tags.
  ~
  ~ Licensed under the Apache License, Version 2.0 (the "License");
  ~ you may not use this file except in compliance with the License.
  ~ You may obtain a copy of the License at
  ~
  ~ http://www.apache.org/licenses/LICENSE-2.0

vincentchalamon

FORMAT: 1A

# Mon API de librairie

Pour tester, sauvegarder ce document dans un fichier library.apib
Installer l'outil de test `npm install -g drakov`
puis lancer la commande `drakov -f library.apib`
Testez votre API avec Insomnia.

# Ouvrages

vincentchalamon

import { SessionProvider } from "next-auth/react"

export default function App({
  Component,
  pageProps: { session, ...pageProps },
}) {
  return (
    <SessionProvider session={session}>
      <Component {...pageProps} />
    </SessionProvider>

vincentchalamon

import NextAuth, { AuthOptions, SessionOptions } from "next-auth";
import { type TokenSet } from "next-auth/core/types";
import KeycloakProvider from "next-auth/providers/keycloak";

import { OIDC_CLIENT_ID, OIDC_SERVER_URL } from "../../../config/keycloak";

interface Session extends SessionOptions {
  accessToken: string
  error?: "RefreshAccessTokenError"
}

vincentchalamon

import NextAuth from "next-auth"
import KeycloakProvider from "next-auth/providers/keycloak"

export const authOptions = {
  // Configure one or more authentication providers
  providers: [
    KeycloakProvider({
      id: 'keycloak',
      clientId: process.env.OIDC_CLIENT_ID,
      issuer: process.env.OIDC_SERVER_URL,

vincentchalamon

security:
  firewalls:
    main:
      access_token:
        token_handler:
          # OIDC_SERVER_URL_INTERNAL: https://caddy/oidc/realms/demo
          oidc_user_info: '%env(OIDC_SERVER_URL_INTERNAL)%/protocol/openid-connect/userinfo'

vincentchalamon

# ...

# Matches requests for OIDC routes
@oidc expression path('/oidc/*')

route {
    # ...
    reverse_proxy @oidc http://{$OIDC_UPSTREAM}
}

vincentchalamon

version: "3.8"

services:
  # ...

  keycloak-config-cli:
    image: bitnami/keycloak-config-cli:5-debian-11
    environment:
      KEYCLOAK_URL: http://caddy/oidc/
      KEYCLOAK_USER: ${KEYCLOAK_USER:-admin}

vincentchalamon

# api/config/packages/security.yaml
security:
    firewalls:
        main:
            pattern: ^/
            access_token:
                token_handler:
                    oidc:
                        # Algorithm used to sign the JWS
                        algorithm: 'ES256'