MicroProfile
- -Hello JAX-RS endpoint- - -
Config
-Injected config values-Config values by lookup
- - - -
Fault tolerance
-Fallback after timeout- - - -
Health
-Health status (with custom status ServiceHealthCheck)- - - -
Metrics
-Timed endpoint-Metrics page
- - - -
JWT Auth
-Look at readme.md on how to test protected endpoint. - - - -Open API
-Open API Documentation- - - -
Open Tracing
- - - -Rest Client
- - - - \ No newline at end of file diff --git a/src/main/resources/jwt-roles.properties b/src/main/resources/jwt-roles.properties deleted file mode 100755 index 8d3552f..0000000 --- a/src/main/resources/jwt-roles.properties +++ /dev/null @@ -1,2 +0,0 @@ - -#group=role \ No newline at end of file diff --git a/src/main/resources/project-defaults.yml b/src/main/resources/project-defaults.yml deleted file mode 100755 index c6f57aa..0000000 --- a/src/main/resources/project-defaults.yml +++ /dev/null @@ -1,30 +0,0 @@ -# A project defaults for use with MP-JWT auth-method that include additional role mapping -swarm: - bind: - address: localhost - # Example of passing in token verification information via project file - microprofile: - jwtauth: - token: - issuedBy: "https://server.example.com" - security: - security-domains: - # name matches realm name used with LoginConfig - jwt-jaspi: - jaspi-authentication: - login-module-stacks: - roles-lm-stack: - login-modules: - # This stack performs the token verification and group to role mapping - - login-module: rm - code: org.wildfly.swarm.microprofile.jwtauth.deployment.auth.jaas.JWTLoginModule - flag: required - module-options: - rolesProperties: jwt-roles.properties - auth-modules: - # This module integrates the MP-JWT custom authentication mechanism into the web container - http: - code: org.wildfly.extension.undertow.security.jaspi.modules.HTTPSchemeServerAuthModule - module: org.wildfly.extension.undertow - flag: required - login-module-stack-ref: roles-lm-stack diff --git a/src/main/webapp/.gitkeep b/src/main/webapp/.gitkeep deleted file mode 100755 index e69de29..0000000 diff --git a/src/main/webapp/WEB-INF/beans.xml b/src/main/webapp/WEB-INF/beans.xml deleted file mode 100755 index 2777559..0000000 --- a/src/main/webapp/WEB-INF/beans.xml +++ /dev/null @@ -1,6 +0,0 @@ - -MicroProfile
- -Hello JAX-RS endpoint- - -
Config
-Injected config values-Config values by lookup
- - - -
Fault tolerance
-Fallback after timeout- - - -
Health
-Health status (with custom status ServiceHealthCheck)- - - -
Metrics
-Timed endpoint-Metrics page
- - - -
JWT Auth
-Look at readme.md on how to test protected endpoint. - - - -Open API
-Open API Documentation- - - -
Open Tracing
- - - -Rest Client
- - - - \ No newline at end of file diff --git a/src/test/java/.gitkeep b/src/test/java/.gitkeep deleted file mode 100755 index e69de29..0000000 diff --git a/src/test/java/com/example/demo/JWTClient.java b/src/test/java/com/example/demo/JWTClient.java deleted file mode 100755 index 6b4eec9..0000000 --- a/src/test/java/com/example/demo/JWTClient.java +++ /dev/null @@ -1,89 +0,0 @@ -package com.example.demo; - -import com.nimbusds.jose.*; -import com.nimbusds.jose.crypto.RSASSASigner; -import org.bouncycastle.jce.provider.BouncyCastleProvider; -import org.bouncycastle.openssl.PEMKeyPair; -import org.bouncycastle.openssl.PEMParser; -import org.bouncycastle.openssl.jcajce.JcaPEMKeyConverter; - -import javax.ws.rs.client.ClientBuilder; -import javax.ws.rs.client.WebTarget; -import javax.ws.rs.core.Response; -import java.io.IOException; -import java.io.InputStream; -import java.io.InputStreamReader; -import java.security.KeyPair; -import java.security.PrivateKey; -import java.util.Arrays; -import java.util.UUID; - -/** - * - */ - -public class JWTClient { - - public static void main(String[] args) throws IOException { - // TODO Use Atbash JWT Support - PrivateKey key = readPrivateKey(); - - String jwt = generateJWT(key); - - System.out.println(jwt); - - WebTarget target = ClientBuilder.newClient().target("http://localhost:8080/data/protected"); - Response response = target.request().header("authorization", "Bearer " + jwt).buildGet().invoke(); - - System.out.println(response.getStatus()); - System.out.println(response.readEntity(String.class)); - - } - - private static String generateJWT(PrivateKey key) { - JWSHeader header = new JWSHeader.Builder(JWSAlgorithm.RS256) - .type(JOSEObjectType.JWT) - .keyID("theKeyId") - .build(); - - MPJWTToken token = new MPJWTToken(); - token.setAud("targetService"); - token.setIss("https://server.example.com"); // Must match the expected issues configuration values - token.setJti(UUID.randomUUID().toString()); - - token.setSub("Jessie"); // Sub is required for WildFly Swarm - token.setUpn("Jessie"); - - token.setIat(System.currentTimeMillis()); - token.setExp(System.currentTimeMillis() + 30000); // 30 Seconds expiration! - - token.addAdditionalClaims("custom-value", "Jessie specific value"); - - token.setGroups(Arrays.asList("user", "protected")); - - JWSObject jwsObject = new JWSObject(header, new Payload(token.toJSONString())); - - // Apply the Signing protection - JWSSigner signer = new RSASSASigner(key); - - try { - jwsObject.sign(signer); - } catch (JOSEException e) { - e.printStackTrace(); - } - - return jwsObject.serialize(); - } - - public static PrivateKey readPrivateKey() throws IOException { - - InputStream inputStream = JWTClient.class.getResourceAsStream("/privateKey.pem"); - - PEMParser pemParser = new PEMParser(new InputStreamReader(inputStream)); - JcaPEMKeyConverter converter = new JcaPEMKeyConverter().setProvider(new BouncyCastleProvider()); - Object object = pemParser.readObject(); - KeyPair kp = converter.getKeyPair((PEMKeyPair) object); - return kp.getPrivate(); - } - -} diff --git a/src/test/java/com/example/demo/MPJWTToken.java b/src/test/java/com/example/demo/MPJWTToken.java deleted file mode 100755 index e2fbec1..0000000 --- a/src/test/java/com/example/demo/MPJWTToken.java +++ /dev/null @@ -1,162 +0,0 @@ -package com.example.demo; - -import net.minidev.json.JSONArray; -import net.minidev.json.JSONObject; - -import java.util.ArrayList; -import java.util.HashMap; -import java.util.List; -import java.util.Map; - -/** - * Represent the MP Auth token - */ - -public class MPJWTToken { - - private String iss; // issuer - private String aud; // audience - private String jti; // Unique identifier - private Long exp; // expiration time - private Long iat; // issued at - private String sub; // subject - private String upn; // value for name in Principal - private String preferredUsername; // value for name in Principal - private List
+
+
+
+
+
+
+
+
+
+
+
diff --git a/web/src/main/resources/META-INF/resources/keycloak.json b/web/src/main/resources/META-INF/resources/keycloak.json
new file mode 100644
index 0000000..233c234
--- /dev/null
+++ b/web/src/main/resources/META-INF/resources/keycloak.json
@@ -0,0 +1,8 @@
+{
+ "realm": "quarkus-quickstart",
+ "auth-server-url": "http://localhost:8180/auth",
+ "ssl-required": "external",
+ "resource": "microprofile-jwt-client",
+ "public-client": true,
+ "confidential-port": 0
+}
\ No newline at end of file
diff --git a/web/src/main/resources/META-INF/resources/script/app.js b/web/src/main/resources/META-INF/resources/script/app.js
new file mode 100644
index 0000000..61ca854
--- /dev/null
+++ b/web/src/main/resources/META-INF/resources/script/app.js
@@ -0,0 +1,149 @@
+
+$(document).ready(function(){
+ $('a[data-toggle="pill"]').on('show.bs.tab', function(e) {
+ localStorage.setItem('activeTab', $(e.target).attr('href'));
+ });
+ var activeTab = localStorage.getItem('activeTab');
+ if(activeTab){
+ $('#v-pills-tab a[href="' + activeTab + '"]').tab('show');
+ }
+});
+
+function refreshToken(minValidity) {
+ keycloak.updateToken(minValidity).success(function(refreshed) {
+ if (refreshed) {
+ //output(keycloak.tokenParsed);
+ } else {
+ output('Token not refreshed, valid for ' + Math.round(keycloak.tokenParsed.exp + keycloak.timeSkew - new Date().getTime() / 1000) + ' seconds');
+ }
+ }).error(function() {
+ output('Failed to refresh token');
+ });
+}
+
+
+function output(data) {
+ if (typeof data === 'object') {
+ data = JSON.stringify(data, null, ' ');
+ }
+ document.getElementById('output').innerHTML = data;
+}
+
+function event(event) {
+ document.getElementById('output').innerHTML = event;
+}
+
+var keycloak = Keycloak();
+var authorization;
+keycloak.onAuthSuccess = function () {
+ event('Auth Success');
+};
+
+keycloak.onAuthError = function (errorData) {
+ event("Auth Error: " + JSON.stringify(errorData) );
+};
+
+keycloak.onAuthRefreshSuccess = function () {
+ event('Auth Refresh Success');
+ document.getElementById('token64').innerHTML = keycloak.token;
+ document.getElementById('refreshToken').innerHTML = JSON.stringify(keycloak.refreshTokenParsed, null, 4);
+ document.getElementById('idToken').innerHTML = JSON.stringify(keycloak.idTokenParsed,null, 4);
+ document.getElementById('token').innerHTML = JSON.stringify(keycloak.tokenParsed,null, 4);
+
+};
+
+keycloak.onAuthRefreshError = function () {
+ event('Auth Refresh Error');
+};
+
+keycloak.onAuthLogout = function () {
+ event('Logout');
+};
+
+keycloak.onTokenExpired = function () {
+ event('Access token expired.');
+ if(document.getElementById("refresh").checked) {
+ refreshToken();
+ }
+};
+
+// Flow can be changed to 'implicit' or 'hybrid', but then client must enable implicit flow in admin console too
+var initOptions = {
+ responseMode: 'fragment',
+ flow: 'standard',
+ onload: 'check-sso'
+};
+
+function startTimer(duration, display) {
+ var timer = duration, minutes, seconds;
+ setInterval(function () {
+ minutes = parseInt(timer / 60, 10)
+ seconds = parseInt(timer % 60, 10);
+
+ minutes = minutes < 10 ? "0" + minutes : minutes;
+ seconds = seconds < 10 ? "0" + seconds : seconds;
+
+ display.textContent = minutes + ":" + seconds;
+
+ if (--timer < 0) {
+ timer = duration;
+ }
+ }, 1000);
+}
+
+function loginChange(radio) {
+console.log("loginChange, %o", radio);
+ if(radio.id == "login" && !keycloak.authenticated) {
+ console.log("Loging IN");
+ keycloak.login();
+ } else {
+ console.log("Loging OUT");
+ keycloak.logout();
+ }
+}
+
+/**
+*/
+function secureRequest(port, path) {
+ var oReq = new XMLHttpRequest();
+ var url = "http://" + location.hostname +":"+port+"/" + path;
+ console.log("secureRequest, hostname=%s, base=%s, path=%s, url=%s", location.hostname, port, path, url);
+ oReq.open('GET', url, true);
+ oReq.setRequestHeader('Authorization', 'Bearer ' + keycloak.token);
+ oReq.onload = function () {
+ console.log("secureRequest.onLoad, %o", oReq);
+ if (oReq.readyState === oReq.DONE) {
+ if (oReq.status === 200) {
+ var contentWindow = document.getElementById('reply-content').contentWindow;
+ contentWindow.document.write("
+ 
+
+
+
+
+ Quarkusd MicroProfile Demo
+A demo illustrating the MicroProfile 2.2 features in the Quarkus runtime.
++
+
+
+
+
+
+
+
+
+
+
+ Hello JAX-RS endpoint
+ curl http://localhost:8080/demo1/hello +
+
+
+
+
+
+
+
+ Config injected.value test
+ curl http://localhost:8080/demo1/config/injected +Injected Pi value
+ demo1/config/injectedPi+
Config values by lookup
+ demo1/config/lookup+
+
+
+
+
+
+ RestClient access WorldClockApi
+ demo1/time/now+
RestClient WorldClockApi Service on Demo2
+ Using Authentication: Bearer MP-JWT token...+
RestClient proxy to WorldClockApi Service on Demo2
+ Using Authentication: Bearer MP-JWT token...+
+
+
+
+ Access Endpoint Without JWT
+ demo1/jwt/openHello+
Access Endpoint With JWT
+ Using Authentication: Bearer MP-JWT token...+
+
+
+
+
+
+
+
+
+
+
+
+
+ Refresh ? before token refresh
+
+
+
+
+
+
+
+
+
+
+
+ + +
+
+
+
+
+
+
+
+ Access Token
+
+
+
+
+
+
+
+ + +
+
+
+
+
+
+
+
+
+
+
+
+
+ \n"); + contentWindow.document.write(oReq.responseText); + } + } + }; + console.log("Send request, %s", url); + oReq.send(); +} + +keycloak.init(initOptions).success(function(authenticated) { + authorization = new KeycloakAuthorization(keycloak); + /* + document.getElementById('refreshToken').innerHTML = JSON.stringify(keycloak.refreshTokenParsed, null, 4); + document.getElementById('idToken').innerHTML = JSON.stringify(keycloak.idTokenParsed,null, 4); + */ + document.getElementById('token').innerHTML = JSON.stringify(keycloak.tokenParsed,null, 4); + document.getElementById('token64').innerHTML = keycloak.token; + output('Init Success (' + (authenticated ? 'Authenticated' : 'Not Authenticated') + ')'); + var fiveMinutes = Math.round(keycloak.tokenParsed.exp + keycloak.timeSkew - new Date().getTime() / 1000); + display = document.querySelector('#time'); + startTimer(fiveMinutes, display); + if(!authenticated) { + console.log("Not authenticated, selected Logout button"); + document.getElementById("logout").select(); + } + else { + console.log("Authenticated, selected Login button"); + document.getElementById("login").select(); + } +}).error(function() { + output('ERROR: Failed to initialize KeyCloak'); +}); \ No newline at end of file diff --git a/web/src/main/resources/META-INF/resources/style/grid.css b/web/src/main/resources/META-INF/resources/style/grid.css new file mode 100644 index 0000000..83f7317 --- /dev/null +++ b/web/src/main/resources/META-INF/resources/style/grid.css @@ -0,0 +1,45 @@ +* {box-sizing: border-box;} + + +.jumbotron { + /*background: #00FFFF*/ + background: blue; + color: white; +} + +.wrapper > div { + border: 2px solid rgb(54, 54, 54); + border-radius: 10px; + + padding: 1em; + word-wrap: break-word; + font-size: 10px; + overflow-y: scroll; +} +.wrapper { + display: grid; + height:75%; + grid-template-columns: 600px 400px 350px; + grid-gap: 10px; + grid-auto-rows: auto; + overflow-y: scroll; + } + +.one { + grid-column: 1 ; + grid-row: 1 ; +} +.two { + grid-column: 2; + grid-row: 1 ; +} +.three { + grid-column: 3; + grid-row: 1 ; +} + +pre.prettyprint { + border: none !important; + overflow: hidden; + text-align: -webkit-auto +} diff --git a/web/src/main/resources/application.properties b/web/src/main/resources/application.properties new file mode 100755 index 0000000..744bdcd --- /dev/null +++ b/web/src/main/resources/application.properties @@ -0,0 +1,41 @@ +quarkus.http.port=8080 + +# MP Config values for ConfigTestController +injected.value=Injected value +injected.piValue=3.1415926532 +lookup.value=A Lookup value + +# MP-JWT Config +mp.jwt.verify.publickey.location=http://localhost:8180/auth/realms/quarkus-quickstart/protocol/openid-connect/certs +mp.jwt.verify.issuer=http://localhost:8180/auth/realms/quarkus-quickstart +quarkus.smallrye-jwt.auth-mechanism=MP-JWT +quarkus.smallrye-jwt.enabled=true + +# Diskspace health check properties +health.pathToMonitor=/Users/starksm +health.freeSpaceThreshold=1073741824 + +# This would override the WorldClockApi baseUri. +com.example.demo.restclient.WorldClockApi/mp-rest/url=http://worldclockapi.com/api/json +com.example.demo.restclient.UserTimeService/mp-rest/url=http://localhost:8081/demo/protected +# Propagate Authentication and OpenTracing headers +org.eclipse.microprofile.rest.client.propagateHeaders=Authorization,X-B3-TraceId,X-B3-ParentSpanId,X-B3-SpanId,X-B3-Sampled + +# OpenTracing +quarkus.jaeger.service-name=QuarkusMPDemo +quarkus.jaeger.sampler-type=const +quarkus.jaeger.sampler-param=1 +quarkus.jaeger.endpoint=http://localhost:14268/api/traces + +# Root logger at DEBUG +quarkus.log.level=DEBUG +# INFO console logging +quarkus.log.console.format=%d{HH:mm:ss} %-5p [%c{2.}]] (%t) %s%e%n +quarkus.log.console.level=INFO + +# Debug log file +quarkus.log.file.enable=true +quarkus.log.file.path=target/trace.log +quarkus.log.file.level=TRACE +quarkus.log.category."io.quarkus.smallrye".level=TRACE +quarkus.log.category."org.jboss.resteasy.core".level=TRACE \ No newline at end of file diff --git a/web/src/test/java/com/example/demo/WorldClockApiTest.java b/web/src/test/java/com/example/demo/WorldClockApiTest.java new file mode 100644 index 0000000..69d979b --- /dev/null +++ b/web/src/test/java/com/example/demo/WorldClockApiTest.java @@ -0,0 +1,39 @@ +package com.example.demo; + +import java.io.StringReader; +import java.net.HttpURLConnection; +import java.net.URISyntaxException; + +import javax.json.Json; +import javax.json.JsonObject; +import javax.json.JsonReader; + +import com.example.demo.restclient.Now; +import io.quarkus.test.junit.QuarkusTest; +import io.restassured.response.Response; +import org.junit.jupiter.api.Assertions; +import org.junit.jupiter.api.Disabled; +import org.junit.jupiter.api.Test; + +import static io.restassured.RestAssured.given; + +@QuarkusTest +@Disabled +public class WorldClockApiTest { + @Test + @Disabled + public void testNow() throws URISyntaxException { + Response response = given() + .when() + .get("/data/time/now") + .andReturn(); + + Assertions.assertEquals(HttpURLConnection.HTTP_OK, response.getStatusCode()); + String replyString = response.body().asString(); + JsonReader jsonReader = Json.createReader(new StringReader(replyString)); + JsonObject reply = jsonReader.readObject(); + System.out.println(reply); + Now numbers = response.as(Now.class); + System.out.println(numbers); + } +}