Александр Зимин
6ee7a70ad1
Новый модуль ordinis-auth:
- OrdinisAuthProperties — public-key, issuer, requireAuthentication, allowQueryScope
- ScopeContext — резолвит current scopes из JWT claim 'scopes' (приоритет),
потом legacy ?as_scope=, потом anonymous=PUBLIC
- SecurityConfig — Spring Security OAuth2 Resource Server + RSA public-key
decoder. Если public-key пуст — JWT validation отключён (permissive
fallback); rollout без auth-сервера не ломает API.
Read controller теперь делегирует scope resolution в ScopeContext вместо
прямого парсинга ?as_scope=. Backward compat: legacy query параметр
работает пока ordinis.auth.allow-query-scope=true (по умолчанию true в
dev/staging, false в prod после интеграции с @nstart/auth).
Vault: public-key читается из secret/ordinis/cuod/jwt-public-key (key=key).
Spring Cloud Vault flatten'ит в property 'key', resolved в
ordinis.auth.public-key=${key:}.
146 lines
5.1 KiB
XML
146 lines
5.1 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<project xmlns="http://maven.apache.org/POM/4.0.0"
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
|
|
<modelVersion>4.0.0</modelVersion>
|
|
|
|
<groupId>cloud.nstart.terravault.ordinis</groupId>
|
|
<artifactId>ordinis-parent</artifactId>
|
|
<version>0.1.0-SNAPSHOT</version>
|
|
<packaging>pom</packaging>
|
|
|
|
<name>Ordinis (parent)</name>
|
|
<description>MDM сервис для НСИ ЦУОД ОДХ. Часть линейки Terravault.</description>
|
|
|
|
<parent>
|
|
<groupId>org.springframework.boot</groupId>
|
|
<artifactId>spring-boot-starter-parent</artifactId>
|
|
<version>3.4.2</version>
|
|
<relativePath/>
|
|
</parent>
|
|
|
|
<modules>
|
|
<module>ordinis-domain</module>
|
|
<module>ordinis-validation</module>
|
|
<module>ordinis-events-api</module>
|
|
<module>ordinis-outbox</module>
|
|
<module>ordinis-auth</module>
|
|
<module>ordinis-rest-api</module>
|
|
<module>ordinis-app</module>
|
|
<module>ordinis-read-api</module>
|
|
<module>ordinis-projection-writer</module>
|
|
<module>ordinis-cuod-bundle</module>
|
|
<module>ordinis-migrations</module>
|
|
</modules>
|
|
|
|
<properties>
|
|
<java.version>21</java.version>
|
|
<maven.compiler.source>21</maven.compiler.source>
|
|
<maven.compiler.target>21</maven.compiler.target>
|
|
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
|
|
|
|
<spring-cloud.version>2024.0.0</spring-cloud.version>
|
|
<spring-cloud-vault.version>4.2.0</spring-cloud-vault.version>
|
|
<hypersistence-utils.version>3.9.0</hypersistence-utils.version>
|
|
<json-schema-validator.version>1.5.4</json-schema-validator.version>
|
|
<postgis-jdbc.version>2024.1.0</postgis-jdbc.version>
|
|
<logstash-logback.version>8.0</logstash-logback.version>
|
|
<opentelemetry-instrumentation.version>2.10.0</opentelemetry-instrumentation.version>
|
|
</properties>
|
|
|
|
<dependencyManagement>
|
|
<dependencies>
|
|
<dependency>
|
|
<groupId>org.springframework.cloud</groupId>
|
|
<artifactId>spring-cloud-dependencies</artifactId>
|
|
<version>${spring-cloud.version}</version>
|
|
<type>pom</type>
|
|
<scope>import</scope>
|
|
</dependency>
|
|
|
|
<!-- Internal modules -->
|
|
<dependency>
|
|
<groupId>cloud.nstart.terravault.ordinis</groupId>
|
|
<artifactId>ordinis-domain</artifactId>
|
|
<version>${project.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>cloud.nstart.terravault.ordinis</groupId>
|
|
<artifactId>ordinis-validation</artifactId>
|
|
<version>${project.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>cloud.nstart.terravault.ordinis</groupId>
|
|
<artifactId>ordinis-events-api</artifactId>
|
|
<version>${project.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>cloud.nstart.terravault.ordinis</groupId>
|
|
<artifactId>ordinis-outbox</artifactId>
|
|
<version>${project.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>cloud.nstart.terravault.ordinis</groupId>
|
|
<artifactId>ordinis-auth</artifactId>
|
|
<version>${project.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>cloud.nstart.terravault.ordinis</groupId>
|
|
<artifactId>ordinis-rest-api</artifactId>
|
|
<version>${project.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>cloud.nstart.terravault.ordinis</groupId>
|
|
<artifactId>ordinis-cuod-bundle</artifactId>
|
|
<version>${project.version}</version>
|
|
</dependency>
|
|
|
|
<!-- External -->
|
|
<dependency>
|
|
<groupId>io.hypersistence</groupId>
|
|
<artifactId>hypersistence-utils-hibernate-63</artifactId>
|
|
<version>${hypersistence-utils.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>com.networknt</groupId>
|
|
<artifactId>json-schema-validator</artifactId>
|
|
<version>${json-schema-validator.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>net.postgis</groupId>
|
|
<artifactId>postgis-jdbc</artifactId>
|
|
<version>${postgis-jdbc.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>net.logstash.logback</groupId>
|
|
<artifactId>logstash-logback-encoder</artifactId>
|
|
<version>${logstash-logback.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>io.opentelemetry.instrumentation</groupId>
|
|
<artifactId>opentelemetry-spring-boot-starter</artifactId>
|
|
<version>${opentelemetry-instrumentation.version}</version>
|
|
</dependency>
|
|
</dependencies>
|
|
</dependencyManagement>
|
|
|
|
<build>
|
|
<pluginManagement>
|
|
<plugins>
|
|
<plugin>
|
|
<groupId>org.springframework.boot</groupId>
|
|
<artifactId>spring-boot-maven-plugin</artifactId>
|
|
<configuration>
|
|
<excludes>
|
|
<exclude>
|
|
<groupId>org.projectlombok</groupId>
|
|
<artifactId>lombok</artifactId>
|
|
</exclude>
|
|
</excludes>
|
|
</configuration>
|
|
</plugin>
|
|
</plugins>
|
|
</pluginManagement>
|
|
</build>
|
|
</project>
|