OZG-164 OZG-216 add spring java configuration

goofy-client/libs/environment-shared/test/environment.ts

@@ -6,7 +6,9 @@ const baseUrl = faker.internet.url();
 
 const environment: Environment = {
 	production: false,
-	remoteHost: baseUrl
+	remoteHost: baseUrl,
+	authServier: faker.internet.url(),
+	realm: faker.random.word()
 };
 
 export function createEnvironment(): Environment {

goofy-server/pom.xml

@@ -52,6 +52,11 @@
 			<groupId>de.codecentric</groupId>
 			<artifactId>spring-boot-admin-starter-client</artifactId>
 		</dependency>
+		
+ 		<dependency> 
+ 			<groupId>org.springframework.boot</groupId> -->
+ 			<artifactId>spring-boot-starter-security</artifactId> -->
+ 		</dependency> 
 		<dependency>
 		    <groupId>org.keycloak</groupId>
 		    <artifactId>keycloak-spring-boot-starter</artifactId>
@@ -92,6 +97,11 @@
 				</exclusion>
 			</exclusions>
 		</dependency>
+		<dependency>
+			<groupId>org.springframework.security</groupId>
+			<artifactId>spring-security-test</artifactId>
+			<scope>test</scope>
+		</dependency>
 		<dependency>
 			<groupId>org.junit.jupiter</groupId>
 			<artifactId>junit-jupiter-engine</artifactId>
@@ -118,18 +128,6 @@
 		</dependency>
 	</dependencies>
 	
-	<dependencyManagement>
-	    <dependencies>
-	        <dependency>
-	            <groupId>org.keycloak.bom</groupId>
-	            <artifactId>keycloak-adapter-bom</artifactId>
-	            <version>12.0.2</version>
-	            <type>pom</type>
-	            <scope>import</scope>
-	        </dependency>
-	    </dependencies>
-	</dependencyManagement>
-
 	<build>
 		<finalName>${project.artifactId}</finalName>
 		<plugins>

goofy-server/src/main/java/de/itvsh/goofy/SecurityConfiguration.java

+package de.itvsh.goofy;
+
+import org.keycloak.adapters.KeycloakConfigResolver;
+import org.keycloak.adapters.springboot.KeycloakSpringBootConfigResolver;
+import org.keycloak.adapters.springsecurity.KeycloakConfiguration;
+import org.keycloak.adapters.springsecurity.config.KeycloakWebSecurityConfigurerAdapter;
+import org.springframework.context.annotation.Bean;
+import org.springframework.http.HttpMethod;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.http.SessionCreationPolicy;
+import org.springframework.security.web.authentication.session.NullAuthenticatedSessionStrategy;
+import org.springframework.security.web.authentication.session.SessionAuthenticationStrategy;
+
+@KeycloakConfiguration
+public class SecurityConfiguration extends KeycloakWebSecurityConfigurerAdapter {
+
+	@Override
+	protected void configure(HttpSecurity http) throws Exception {
+		super.configure(http);
+		http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS) //
+				.and().authorizeRequests()//
+				.antMatchers(HttpMethod.GET, "/api/environment").permitAll()//
+				.antMatchers(HttpMethod.GET, "/assets/**").permitAll()//
+				.antMatchers("/api").authenticated()//
+				.antMatchers("/api/**").authenticated()//
+				.anyRequest().denyAll();
+	}
+
+	@Bean
+	public KeycloakConfigResolver keyCloakConfigResolver() {
+		return new KeycloakSpringBootConfigResolver();
+	}
+
+	@Override
+	protected SessionAuthenticationStrategy sessionAuthenticationStrategy() {
+		return new NullAuthenticatedSessionStrategy();
+	}
+
+}
\ No newline at end of file

pom.xml

@@ -17,7 +17,7 @@
 	<properties>
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 		<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
-		<java.version>11</java.version>
+		<java.version>15</java.version>
 
 		<spring.boot.version>2.4.2</spring.boot.version>
 
@@ -45,6 +45,14 @@
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
+			<!-- keycloak -->
+	        <dependency>
+	            <groupId>org.keycloak.bom</groupId>
+	            <artifactId>keycloak-adapter-bom</artifactId>
+	            <version>12.0.2</version>
+	            <type>pom</type>
+	            <scope>import</scope>
+	        </dependency>
 
 			<dependency>
 				<groupId>de.codecentric</groupId>