17 | * This configurer is run only when following properties are set in application.properties. 18 | *
19 | * 20 | *rest.security.enabled=true
21 | * security.oauth2.client.grant-type=client_credentials
22 | *
23 | */
24 | @Configuration
25 | @Conditional(value = {ServiceAccountEnabled.class})
26 | public class OAuth2RestTemplateConfigurer {
27 |
28 | private static final Logger LOG = LoggerFactory.getLogger(OAuth2RestTemplateConfigurer.class);
29 |
30 | @Bean
31 | public OAuth2RestTemplate oauth2RestTemplate(OAuth2ProtectedResourceDetails details) {
32 | OAuth2RestTemplate oAuth2RestTemplate = new OAuth2RestTemplate(details);
33 |
34 | LOG.debug("Begin OAuth2RestTemplate: getAccessToken");
35 | /* To validate if required configurations are in place during startup */
36 | oAuth2RestTemplate.getAccessToken();
37 | LOG.debug("End OAuth2RestTemplate: getAccessToken");
38 | return oAuth2RestTemplate;
39 | }
40 |
41 | /**
42 | * Condition class to configure OAuth2RestTemplate when both security is enabled and
43 | * client credentials property is set for secured micro-com.microservices.apigateway.security.service
44 | * to micro-com.microservices.apigateway.security.service call.
45 | */
46 | static class ServiceAccountEnabled extends AllNestedConditions {
47 |
48 | ServiceAccountEnabled() {
49 | super(ConfigurationPhase.PARSE_CONFIGURATION);
50 | }
51 |
52 | @ConditionalOnProperty(prefix = "rest.security", value = "enabled", havingValue = "true")
53 | static class SecurityEnabled {}
54 |
55 | @ConditionalOnProperty(prefix = "security.oauth2.client", value = "grant-type", havingValue = "client_credentials")
56 | static class ClientCredentialConfigurationExists {}
57 |
58 | }
59 | }
60 |
--------------------------------------------------------------------------------
/product/src/main/java/com/microservices/apigateway/security/configuration/security/SecurityContextUtils.java:
--------------------------------------------------------------------------------
1 | package com.microservices.apigateway.security.configuration.security;
2 |
3 | import java.util.HashSet;
4 | import java.util.Set;
5 | import org.slf4j.Logger;
6 | import org.slf4j.LoggerFactory;
7 | import org.springframework.security.core.Authentication;
8 | import org.springframework.security.core.context.SecurityContext;
9 | import org.springframework.security.core.context.SecurityContextHolder;
10 | import org.springframework.security.core.userdetails.UserDetails;
11 | import org.springframework.stereotype.Component;
12 |
13 | /**
14 | * SecurityContextUtils is used to get username and roles to set created by, last updated by fields.
15 | */
16 | @Component
17 | public class SecurityContextUtils {
18 |
19 | private static final Logger LOGGER = LoggerFactory.getLogger(SecurityContextUtils.class);
20 |
21 | private static final String ANONYMOUS = "anonymous";
22 |
23 | private SecurityContextUtils() { }
24 |
25 | public static String getUserName() {
26 | SecurityContext securityContext = SecurityContextHolder.getContext();
27 | Authentication authentication = securityContext.getAuthentication();
28 | String username = ANONYMOUS;
29 |
30 | if (null != authentication) {
31 | if (authentication.getPrincipal() instanceof UserDetails) {
32 | UserDetails springSecurityUser = (UserDetails) authentication.getPrincipal();
33 | username = springSecurityUser.getUsername();
34 |
35 | } else if (authentication.getPrincipal() instanceof String) {
36 | username = (String) authentication.getPrincipal();
37 |
38 | } else {
39 | LOGGER.debug("User details not found in Security Context");
40 | }
41 | } else {
42 | LOGGER.debug("Request not authenticated, hence no user name available");
43 | }
44 |
45 | return username;
46 | }
47 |
48 | public static Set17 | * This configurer is run only when following properties are set in application.properties. 18 | *
19 | * 20 | *rest.security.enabled=true
21 | * security.oauth2.client.grant-type=client_credentials
22 | *
23 | */
24 | @Configuration
25 | @Conditional(value = {ServiceAccountEnabled.class})
26 | public class OAuth2RestTemplateConfigurer {
27 |
28 | private static final Logger LOG = LoggerFactory.getLogger(OAuth2RestTemplateConfigurer.class);
29 |
30 | @Bean
31 | public OAuth2RestTemplate oauth2RestTemplate(OAuth2ProtectedResourceDetails details) {
32 | OAuth2RestTemplate oAuth2RestTemplate = new OAuth2RestTemplate(details);
33 |
34 | LOG.debug("Begin OAuth2RestTemplate: getAccessToken");
35 | /* To validate if required configurations are in place during startup */
36 | oAuth2RestTemplate.getAccessToken();
37 | LOG.debug("End OAuth2RestTemplate: getAccessToken");
38 | return oAuth2RestTemplate;
39 | }
40 |
41 | /**
42 | * Condition class to configure OAuth2RestTemplate when both security is enabled and
43 | * client credentials property is set for secured micro-com.microservices.apigateway.security.service
44 | * to micro-com.microservices.apigateway.security.service call.
45 | */
46 | static class ServiceAccountEnabled extends AllNestedConditions {
47 |
48 | ServiceAccountEnabled() {
49 | super(ConfigurationPhase.PARSE_CONFIGURATION);
50 | }
51 |
52 | @ConditionalOnProperty(prefix = "rest.security", value = "enabled", havingValue = "true")
53 | static class SecurityEnabled {}
54 |
55 | @ConditionalOnProperty(prefix = "security.oauth2.client", value = "grant-type", havingValue = "client_credentials")
56 | static class ClientCredentialConfigurationExists {}
57 |
58 | }
59 | }
60 |
--------------------------------------------------------------------------------
/supplier/src/main/java/com/microservices/apigateway/security/configuration/security/SecurityContextUtils.java:
--------------------------------------------------------------------------------
1 | package com.microservices.apigateway.security.configuration.security;
2 |
3 | import org.slf4j.Logger;
4 | import org.slf4j.LoggerFactory;
5 | import org.springframework.security.core.Authentication;
6 | import org.springframework.security.core.context.SecurityContext;
7 | import org.springframework.security.core.context.SecurityContextHolder;
8 | import org.springframework.security.core.userdetails.UserDetails;
9 | import org.springframework.stereotype.Component;
10 |
11 | import java.util.HashSet;
12 | import java.util.Set;
13 |
14 | /**
15 | * SecurityContextUtils is used to get username and roles to set created by, last updated by fields.
16 | */
17 | @Component
18 | public class SecurityContextUtils {
19 |
20 | private static final Logger LOGGER = LoggerFactory.getLogger(SecurityContextUtils.class);
21 |
22 | private static final String ANONYMOUS = "anonymous";
23 |
24 | private SecurityContextUtils() { }
25 |
26 | public static String getUserName() {
27 | SecurityContext securityContext = SecurityContextHolder.getContext();
28 | Authentication authentication = securityContext.getAuthentication();
29 | String username = ANONYMOUS;
30 |
31 | if (null != authentication) {
32 | if (authentication.getPrincipal() instanceof UserDetails) {
33 | UserDetails springSecurityUser = (UserDetails) authentication.getPrincipal();
34 | username = springSecurityUser.getUsername();
35 |
36 | } else if (authentication.getPrincipal() instanceof String) {
37 | username = (String) authentication.getPrincipal();
38 |
39 | } else {
40 | LOGGER.debug("User details not found in Security Context");
41 | }
42 | } else {
43 | LOGGER.debug("Request not authenticated, hence no user name available");
44 | }
45 |
46 | return username;
47 | }
48 |
49 | public static Set
3 |
5 |
8 |
9 |
--------------------------------------------------------------------------------
/webapp/src/app/app.component.ts:
--------------------------------------------------------------------------------
1 | import { Component } from '@angular/core';
2 |
3 | @Component({
4 | selector: 'app-root',
5 | templateUrl: './app.component.html'
6 | })
7 | export class AppComponent { }
8 |
--------------------------------------------------------------------------------
/webapp/src/app/app.module.ts:
--------------------------------------------------------------------------------
1 | import { BrowserModule } from '@angular/platform-browser';
2 | import { NgModule, APP_INITIALIZER } from '@angular/core';
3 | import { AppComponent } from './app.component';
4 | import { FormsModule } from '@angular/forms';
5 | import { HttpClientModule } from '@angular/common/http';
6 | import { RouterModule } from '@angular/router';
7 | import { AppRoutes } from './app.routes';
8 | import { ModalModule } from 'ngx-bootstrap/modal';
9 | import { BsDropdownModule } from 'ngx-bootstrap/dropdown';
10 | import { ProductComponent } from './product/product.component';
11 | import { HeaderComponent } from './header/header.component';
12 | import { HomeComponent } from './home/home.component';
13 | import { FontAwesomeModule } from '@fortawesome/angular-fontawesome';
14 | import { ToastrModule } from 'ngx-toastr';
15 | import { BrowserAnimationsModule } from '@angular/platform-browser/animations';
16 | import { CommonModule } from '@angular/common';
17 | import { ChartsModule } from 'ng2-charts';
18 | import { DataTablesModule } from 'angular-datatables';
19 | import { BreadcrumbComponent } from './breadcrumb/breadcrumb.component';
20 | import { SidebarComponent } from './sidebar/sidebar.component';
21 | import { StatusComponent } from './status/status.component';
22 | import { KeycloakAngularModule } from 'keycloak-angular';
23 | import { AppInitService } from './app-init.service';
24 | import { JsonDatePipe } from './product/json-date.pipe';
25 | import { MaintenanceComponent } from './maintenance/maintenance.component';
26 |
27 | const pipes = [
28 | JsonDatePipe
29 | ];
30 |
31 | export function init(appInitService: AppInitService) {
32 | return () => appInitService.init();
33 | }
34 |
35 | @NgModule({
36 | declarations: [
37 | AppComponent,
38 | ProductComponent,
39 | HomeComponent,
40 | HeaderComponent,
41 | BreadcrumbComponent,
42 | SidebarComponent,
43 | StatusComponent,
44 | MaintenanceComponent,
45 | pipes
46 | ],
47 | imports: [
48 | BrowserModule,
49 | FormsModule,
50 | FontAwesomeModule,
51 | HttpClientModule,
52 | RouterModule.forRoot(AppRoutes),
53 | BsDropdownModule.forRoot(),
54 | ModalModule.forRoot(),
55 | CommonModule,
56 | BrowserAnimationsModule,
57 | ChartsModule,
58 | DataTablesModule,
59 | ToastrModule.forRoot({
60 | maxOpened: 2,
61 | positionClass: 'toast-bottom-center',
62 | autoDismiss: true
63 | }),
64 | KeycloakAngularModule
65 | ],
66 | exports: pipes,
67 | providers: [
68 | {
69 | provide: APP_INITIALIZER,
70 | useFactory: init,
71 | multi: true,
72 | deps: [AppInitService]
73 | }
74 | ],
75 | bootstrap: [AppComponent]
76 | })
77 | export class AppModule {}
78 |
--------------------------------------------------------------------------------
/webapp/src/app/app.routes.ts:
--------------------------------------------------------------------------------
1 | import { Routes } from '@angular/router';
2 | import { HomeComponent } from './home/home.component';
3 | import { ProductComponent } from './product/product.component';
4 | import { StatusComponent } from './status/status.component';
5 | import {MaintenanceComponent} from './maintenance/maintenance.component';
6 |
7 | export const AppRoutes: Routes = [
8 | {
9 | path: 'home',
10 | component: HomeComponent,
11 | data: {
12 | breadcrumb: 'Home'
13 | },
14 | children: [
15 | {
16 | path: 'status',
17 | component: StatusComponent,
18 | data: {
19 | breadcrumb: 'Status'
20 | }
21 | },
22 | {
23 | path: 'maintenance',
24 | component: MaintenanceComponent,
25 | data: {
26 | breadcrumb: 'Maintenance'
27 | }
28 | },
29 | {
30 | path: 'product',
31 | component: ProductComponent,
32 | data: {
33 | breadcrumb: 'Product'
34 | }
35 | }
36 | ]
37 | },
38 | { path: '', redirectTo: 'home', pathMatch: 'full' },
39 | { path: '**', redirectTo: 'home' }
40 | ];
41 |
--------------------------------------------------------------------------------
/webapp/src/app/auth.ts:
--------------------------------------------------------------------------------
1 | import { KeycloakProfile, KeycloakInstance } from 'keycloak-js';
2 |
3 | export class Auth {
4 | isLoggedIn?: boolean;
5 | instance?: KeycloakInstance;
6 | logoutUrl?: string;
7 | accountUrl?: string;
8 | profile?: KeycloakProfile;
9 | }
10 |
--------------------------------------------------------------------------------
/webapp/src/app/breadcrumb/breadcrumb.component.html:
--------------------------------------------------------------------------------
1 |
17 |
--------------------------------------------------------------------------------
/webapp/src/app/breadcrumb/breadcrumb.component.ts:
--------------------------------------------------------------------------------
1 | import {Component, OnInit, ViewEncapsulation} from '@angular/core';
2 | import {ActivatedRoute, NavigationEnd, Router} from '@angular/router';
3 | import {BreadCrumb} from './breadcrumb';
4 | import {distinctUntilChanged, filter, map} from 'rxjs/operators';
5 |
6 | @Component({
7 | selector: 'app-breadcrumb',
8 | templateUrl: './breadcrumb.component.html',
9 | encapsulation: ViewEncapsulation.None
10 | })
11 | export class BreadcrumbComponent implements OnInit {
12 | breadcrumbs = this.router.events.pipe(
13 | filter(event => event instanceof NavigationEnd),
14 | distinctUntilChanged(),
15 | map(event => this.buildBreadCrumb(this.activatedRoute.firstChild))
16 | );
17 | title = '';
18 |
19 | // Build your breadcrumb starting with the root route of your current activated route
20 | constructor(private activatedRoute: ActivatedRoute,
21 | private router: Router) {
22 | }
23 |
24 | ngOnInit() { }
25 |
26 | buildBreadCrumb(route: ActivatedRoute, url: string = '',
27 | breadcrumbs: Array
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
41 |
2 |
50 |
3 |
33 |
34 |
4 |
15 |
16 | 
17 |
32 |
18 |
31 | Runtime Frameworks
19 |20 | This application runs natively on the 21 | Openshift Container Platform as a 22 | Node.js application 23 |
24 |
25 |
26 | 
27 |
28 | 
29 |
35 | 36 |
37 | 38 |
39 |
48 |
49 |
40 |
47 | Use Case Scenarios
41 |
42 |
46 |
43 | 
44 |
45 |
44 |
2 |
44 |
45 |
3 |
22 |
23 | Stock Maintenance
4 |
5 |
21 |
6 |
20 | Call stock-api maintenance
7 |ROLE: STOCK_MAINTAINER
8 |
9 | Secured by Auth Integration API? true
10 | Has it's own 3scale com.microservices.apigateway.security.service? (needs additional 3scale authentication) false
11 | Is managed by Keycloak? false
12 |
24 |
43 | Supplier Maintenance
25 |
26 |
42 |
27 |
41 | Call supplier-api maintenance
28 |ROLE: SUPPLIER_MAINTAINER
29 |
30 | Secured by Auth Integration API? true
31 | Has it's own 3scale com.microservices.apigateway.security.service? (needs additional 3scale authentication) true
32 | Is managed by Keycloak? true
33 |
46 |
61 |
--------------------------------------------------------------------------------
/webapp/src/app/maintenance/maintenance.service.ts:
--------------------------------------------------------------------------------
1 | import {Injectable} from '@angular/core';
2 | import {HttpClient, HttpHeaders, HttpResponse} from '@angular/common/http';
3 | import {MessageService} from '../message/message.service';
4 | import {Observable, of} from 'rxjs';
5 | import {catchError} from 'rxjs/operators';
6 | import {Config} from 'codelyzer';
7 |
8 | @Injectable({
9 | providedIn: 'root'
10 | })
11 | export class MaintenanceService {
12 | private maintenanceAPI = window['_env'].integration_uri + '/api/v1';
13 |
14 | constructor(private messageService: MessageService, private http: HttpClient) { }
15 |
16 | getStockMaintenance(): Observable
47 |
60 | HTTP Response
54 |
55 |
59 |
56 |
58 | {{ response | json }}
57 |