Sprint 8 - update

.github/workflows/buildFrontend.yml

@@ -0,0 +1,27 @@
+name: Build Angular App
+
+on:
+    push:
+        branches: [ "main", "devel" ]
+    pull_request:
+        branches: [ "main",  "devel" ]
+
+jobs:
+    build:
+        runs-on: ubuntu-latest
+
+        steps:
+            -   uses: actions/checkout@v4
+
+            -   uses: actions/setup-node@v4
+                with:
+                    node-version: 20
+
+            -   name: Install dependencies
+                run: cd corn-frontend; npm install
+
+            -   name: Build Developer
+                run: cd corn-frontend; npm run ng build
+
+            -   name: Build production
+                run: cd corn-frontend; npm run ng build --configuration=production

.github/workflows/checkDockerDev.yml

@@ -0,0 +1,70 @@
+name: Check dockercompose.dev
+
+on:
+    push:
+        branches: [ "main", "devel" ]
+    pull_request:
+        branches: [ "main",  "devel" ]
+
+jobs:
+    build:
+        runs-on: ubuntu-latest
+
+        steps:
+            -   uses: actions/checkout@v4
+
+            -   name: Install jq
+                run: sudo apt-get install -y jq
+
+            -   name: Setup useful functions
+                run: |
+                    rc=/tmp/rcfile
+                    echo "lscontainers() { docker ps -qa | xargs --no-run-if-empty docker inspect; }" >> $rc
+                    echo "asserttrue() { [ \"\$(cat)\" = \"true\" ]; }" >> $rc
+                    echo "checkstatus() { lscontainers | jq -r '.[] | select(.Name == \"/'\"\$1\"'\").State.Status == \"'\"\$2\"'\"'; }" >> $rc
+                    echo "ishealthy() { lscontainers | jq -r '.[] | select(.Name == \"/'\"\$1\"'\").State.Health.Status == \"healthy\"'; }" >> $rc
+                    echo "fatal() { echo \"Check failed: \$@\" 1>&2; exit 1; }" >> $rc
+
+            -   name: Boot up containers
+                run: docker compose -f docker-compose.dev.yml up --build -d
+
+            -   name: Wait for transient states to disappear
+                run: sleep 200
+
+            -   name: Test backend
+                run: |
+                    source /tmp/rcfile
+                    checkstatus "corn-postgres" "running" | asserttrue || fatal "BackDb"
+                    checkstatus "corn-backend" "running" | asserttrue || fatal "BackSpring"
+
+            -   name: Test frontend
+                run: |
+                    source /tmp/rcfile
+                    checkstatus "corn-frontend" "running" | asserttrue || fatal "FrontNg"
+
+            -   name: Test nginx
+                run: |
+                    source /tmp/rcfile
+                    checkstatus "corn-nginx" "running" | asserttrue || fatal "NginxMain"
+
+            -   name: Test keycloak
+                run: |
+                    source /tmp/rcfile
+                    checkstatus "corn-keycloak" "running" | asserttrue || fatal "KcMain"
+                    ishealthy "corn-keycloak" | asserttrue || fatal "KcMainHealth"
+                    checkstatus "corn-keycloak-postgres" "running" | asserttrue || fatal "KcDb"
+                    ishealthy "corn-keycloak-postgres" | asserttrue || fatal "KcDbHealth"
+                    checkstatus "corn-keycloak-theme" "running" | asserttrue || fatal "KcTheme"
+                    checkstatus "corn-keycloak-initializer" "exited" | asserttrue || fatal "KcInit"
+
+            -   name: Test proxies connectivity
+                run: |
+                    source /tmp/rcfile
+                    curl -qo /dev/null -w "%{http_code}" 'http://localhost:4200/api/fallible' | grep -qP '^(502|503|504).*' || exit 0 && fatal "NginxBack"
+                    curl -qo /dev/null -w "%{http_code}" 'http://localhost:4200/' | grep -qP '^(502|503|504).*' || exit 0 && fatal "NginxFront"
+                    curl -qo /dev/null -w "%{http_code}" 'http://localhost:8081/realms/Corn' | grep -qP '^(502|503|504).*' || exit 0 && fatal "NginxKc"
+
+            -   name: Test existence of Corn realm
+                run: |
+                    source /tmp/rcfile
+                    curl 'http://localhost:8081/realms/Corn/' | jq -r '.error == null' | asserttrue || fatal "CornRealm"

.github/workflows/checkDockerProd.yml

@@ -0,0 +1,69 @@
+name: Check dockercompose.prod
+
+on:
+    push:
+        branches: [ "main", "devel" ]
+    pull_request:
+        branches: [ "main",  "devel" ]
+
+jobs:
+    build:
+        runs-on: ubuntu-latest
+
+        steps:
+            -   uses: actions/checkout@v4
+
+            -   name: Install jq
+                run: sudo apt-get install -y jq
+
+            -   name: Setup useful functions
+                run: |
+                    rc=/tmp/rcfile
+                    echo "lscontainers() { docker ps -qa | xargs --no-run-if-empty docker inspect; }" >> $rc
+                    echo "asserttrue() { [ \"\$(cat)\" = \"true\" ]; }" >> $rc
+                    echo "checkstatus() { lscontainers | jq -r '.[] | select(.Name == \"/'\"\$1\"'\").State.Status == \"'\"\$2\"'\"'; }" >> $rc
+                    echo "ishealthy() { lscontainers | jq -r '.[] | select(.Name == \"/'\"\$1\"'\").State.Health.Status == \"healthy\"'; }" >> $rc
+                    echo "fatal() { echo \"Check failed: \$@\" 1>&2; exit 1; }" >> $rc
+
+            -   name: Boot up containers
+                run: docker compose -f docker-compose.prod.yml up --build -d
+
+            -   name: Wait for transient states to disappear
+                run: sleep 200
+
+            -   name: Test backend
+                run: |
+                    source /tmp/rcfile
+                    checkstatus "corn-postgres" "running" | asserttrue || fatal "BackDb"
+                    checkstatus "corn-backend" "running" | asserttrue || fatal "BackSpring"
+
+            -   name: Test frontend
+                run: |
+                    source /tmp/rcfile
+                    checkstatus "corn-frontend" "running" | asserttrue || fatal "FrontNginx"
+
+            -   name: Test nginx
+                run: |
+                    source /tmp/rcfile
+                    checkstatus "corn-nginx" "running" | asserttrue || fatal "NginxMain"
+
+            -   name: Test keycloak
+                run: |
+                    source /tmp/rcfile
+                    checkstatus "corn-keycloak" "running" | asserttrue || fatal "KcMain"
+                    ishealthy "corn-keycloak" | asserttrue || fatal "KcMainHealth"
+                    checkstatus "corn-keycloak-postgres" "running" | asserttrue || fatal "KcDb"
+                    ishealthy "corn-keycloak-postgres" | asserttrue || fatal "KcDbHealth"
+                    checkstatus "corn-keycloak-initializer" "exited" | asserttrue || fatal "KcInit"
+
+            -   name: Test proxies connectivity
+                run: |
+                    source /tmp/rcfile
+                    curl -qo /dev/null -w "%{http_code}" 'http://localhost:4200/api/fallible' | grep -qP '^(502|503|504).*' || exit 0 && fatal "NginxBack"
+                    curl -qo /dev/null -w "%{http_code}" 'http://localhost:4200/' | grep -qP '^(502|503|504).*' || exit 0 && fatal "NginxFront"
+                    curl -qo /dev/null -w "%{http_code}" 'http://localhost:8081/realms/Corn' | grep -qP '^(502|503|504).*' || exit 0 && fatal "NginxKc"
+
+            -   name: Test existence of Corn realm
+                run: |
+                    source /tmp/rcfile
+                    curl 'http://localhost:8081/realms/Corn/' | jq -r '.error == null' | asserttrue || fatal "CornRealm"

.github/workflows/test.yml

@@ -2,7 +2,7 @@ name: Test Application with Gradle
 
 on:
     push:
-        branches: [ "main" ]
+        branches: [ "main", "devel" ]
     pull_request:
         branches: [ "main",  "devel" ]
 
@@ -45,4 +45,4 @@ jobs:
                 with:
                     gradle-version: '8.2'
                     arguments: build
-                    build-root-directory: corn-backend
+                    build-root-directory: corn-backend

auth-server/keycloak-initializer/src/main/java/keycloakinitializer/ExternalConfig.java

@@ -13,6 +13,8 @@ public final class ExternalConfig {
 
     private static final String KCCFG_OVERRIDE_EXISTING = System.getenv("KCCFG_OVERRIDE_EXISTING");
 
+    private static final String KCCFG_CREATE_PLACEHOLDER_USERS = System.getenv("KCCFG_CREATE_PLACEHOLDER_USERS");
+
     public static final String KCCFG_LOGIN_THEME_NAME = System.getenv("KCCFG_LOGIN_THEME_NAME");
 
     private static final String KC_SERVER_URL = System.getenv("KC_SERVER_URL");
@@ -43,6 +45,10 @@ static boolean shouldOverrideExistingConfiguration() {
         return "true".equalsIgnoreCase(KCCFG_OVERRIDE_EXISTING);
     }
 
+    public static boolean shouldCreatePlaceholderUsers() {
+        return "true".equalsIgnoreCase(KCCFG_CREATE_PLACEHOLDER_USERS);
+    }
+
     public static List<IdentityProviderRepresentation> getIdentityProviders() {
         List<IdentityProviderRepresentation> providers = new ArrayList<>(3);
 

auth-server/keycloak-initializer/src/main/java/keycloakinitializer/Main.java

@@ -18,15 +18,13 @@ public static void main(String[] args) {
                 .stream()
                 .filter(r -> r.getRealm().equals(realm.getRealm()))
                 .findFirst()
-                .ifPresentOrElse(
-                        r -> {
-                            if (!ExternalConfig.shouldOverrideExistingConfiguration()) {
-                                throw new UnsupportedOperationException("Configured not to override existing configuration => Exiting");
-                            }
-                            admin.realms().realm(r.getRealm()).remove();
-                        },
-                        () -> admin.realms().create(realm)
-                );
+                .ifPresent(r -> {
+                    if (!ExternalConfig.shouldOverrideExistingConfiguration()) {
+                        throw new UnsupportedOperationException("Configured not to override existing configuration => Exiting");
+                    }
+                    admin.realms().realm(r.getRealm()).remove();
+                });
+        admin.realms().create(realm);
     }
 
 }

auth-server/keycloak-initializer/src/main/java/keycloakinitializer/realm/corn/CornRealm.java

@@ -7,7 +7,6 @@
 
 public final class CornRealm extends RealmRepresentation {
     private static final String REALM_NAME = "Corn";
-    private static final String DEFAULT_SIGNATURE_ALGORITHM = "ES512";
 
     public CornRealm() {
         setRealm(REALM_NAME);
@@ -18,7 +17,10 @@ public CornRealm() {
         setRevokeRefreshToken(true);
         setRememberMe(true);
         setBruteForceProtected(true);
-        setDefaultSignatureAlgorithm(DEFAULT_SIGNATURE_ALGORITHM);
+
+        if(ExternalConfig.shouldCreatePlaceholderUsers()) {
+            setUsers(PlaceholderUsers.generate());
+        }
 
         if(ExternalConfig.KCCFG_LOGIN_THEME_NAME != null) {
             setLoginTheme(ExternalConfig.KCCFG_LOGIN_THEME_NAME);

auth-server/keycloak-initializer/src/main/java/keycloakinitializer/realm/corn/PlaceholderUsers.java

@@ -0,0 +1,46 @@
+package keycloakinitializer.realm.corn;
+
+import org.keycloak.representations.idm.CredentialRepresentation;
+import org.keycloak.representations.idm.UserRepresentation;
+
+import java.util.List;
+import java.util.stream.Stream;
+
+import static java.util.Collections.singletonList;
+
+public class PlaceholderUsers {
+
+    private static final String MAIL_SUFFIX = "@mail.pl";
+    private static final String DEFAULT_ROLE = "default-roles-corn";
+
+    public static List<UserRepresentation> generate() {
+        return Stream.of(
+                new SimpleUser("Jan", "Kowalski", "jan", "123"),
+                new SimpleUser("Andrzej", "Switch", "andrzej", "123"),
+                new SimpleUser("John", "Doe", "john", "123"),
+                new SimpleUser("Jane", "Doe", "jane", "123"),
+                new SimpleUser("Alice", "Smith", "alice", "123"),
+                new SimpleUser("Bob", "Johnson", "bob", "123")
+        ).map(SimpleUser::intoUserRepresentation).toList();
+    }
+
+    private record SimpleUser(String name, String surname, String username, String password) {
+
+        UserRepresentation intoUserRepresentation() {
+            return new UserRepresentation() {{
+                setUsername(username());
+                setFirstName(name);
+                setLastName(surname);
+                setEmail(username.toLowerCase()+MAIL_SUFFIX);
+                setEmailVerified(true);
+                setEnabled(true);
+                setRealmRoles(List.of(DEFAULT_ROLE));
+                setCredentials(singletonList(new CredentialRepresentation() {{
+                    setType(CredentialRepresentation.PASSWORD);
+                    setValue(password());
+                }}));
+            }};
+        }
+
+    }
+}

auth-server/keycloak-theme/Dockerfile.keycloak.prod

@@ -0,0 +1,21 @@
+FROM alpine:3.19.1 AS build
+
+WORKDIR /keycloak-theme
+
+RUN apk update --no-cache && apk add --no-cache nodejs npm zip
+
+COPY package*.json ./
+
+RUN npm install
+
+COPY . .
+
+RUN npm run build:corn:prod
+
+RUN mv themes theme
+
+RUN zip -r corn-theme.jar theme META-INF
+
+FROM quay.io/keycloak/keycloak:20.0.1
+
+COPY --from=build /keycloak-theme/corn-theme.jar /opt/keycloak/providers/

auth-server/keycloak-theme/META-INF/keycloak-themes.json

@@ -0,0 +1,6 @@
+{
+    "themes": [{
+        "name" : "corn",
+        "types": [ "login" ]
+    }]
+}