Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

✨ Implement OIDC based auth with Keycloak #147

Merged
merged 17 commits into from
May 16, 2023
Merged

✨ Implement OIDC based auth with Keycloak #147

merged 17 commits into from
May 16, 2023

Commits on May 11, 2023

  1. 🔒 Assign FHIR client superuser on successful auth

    @znatty22
    znatty22 committed May 11, 2023
    Configuration menu
    Copy the full SHA
    57a4beb View commit details
    Browse the repository at this point in the history

  2. ✨ Add config for local keycloak service

    @znatty22
    znatty22 committed May 11, 2023
    Configuration menu
    Copy the full SHA
    f461864 View commit details
    Browse the repository at this point in the history

  3. ✨ Web API for getting tokens from keycloak when in local dev

    @znatty22
    znatty22 committed May 11, 2023
    Configuration menu
    Copy the full SHA
    5662450 View commit details
    Browse the repository at this point in the history

  4. 🔒 Configure server for OIDC based auth

    @znatty22
    znatty22 committed May 11, 2023
    Configuration menu
    Copy the full SHA
    d1f6798 View commit details
    Browse the repository at this point in the history

  5. 🐳 Update docker-compose w keycloak and web API

    @znatty22
    znatty22 committed May 11, 2023
    Configuration menu
    Copy the full SHA
    6613897 View commit details
    Browse the repository at this point in the history

  6. 👷 Add OIDC config to dockerfile

    @znatty22
    znatty22 committed May 11, 2023
    Configuration menu
    Copy the full SHA
    154f75b View commit details
    Browse the repository at this point in the history

  7. 🔇 Turn off audit logging until bug is fixed 

    If setup for OIDC and the issuer url is > 100 chars the db errors and
cannot create the entry in the audit log upon authentication

Submitted a ticket for it here: https://support.smilecdr.com/portal/11/SMILE-6737
    @znatty22
    znatty22 committed May 11, 2023
    Configuration menu
    Copy the full SHA
    70bbbf4 View commit details
    Browse the repository at this point in the history

  8. 📌 Pin all requirements to a version

    @znatty22
    znatty22 committed May 11, 2023
    Configuration menu
    Copy the full SHA
    eb7d443 View commit details
    Browse the repository at this point in the history

Commits on May 15, 2023

  1. ⬆️ Add pytest to dev req

    @znatty22
    znatty22 committed May 15, 2023
    Configuration menu
    Copy the full SHA
    b944921 View commit details
    Browse the repository at this point in the history

  2. ✅ Convert test.sh to pytest suite

    @znatty22
    znatty22 committed May 15, 2023
    Configuration menu
    Copy the full SHA
    198e766 View commit details
    Browse the repository at this point in the history

  3. 🔥 Rm old test.sh

    @znatty22
    znatty22 committed May 15, 2023
    Configuration menu
    Copy the full SHA
    45859be View commit details
    Browse the repository at this point in the history

  4. ✨ Create real keycloak proxy endpoint for testing

    @znatty22
    znatty22 committed May 15, 2023
    Configuration menu
    Copy the full SHA
    a3d4af2 View commit details
    Browse the repository at this point in the history

  5. ✅ Test OIDC auth

    @znatty22
    znatty22 committed May 15, 2023
    Configuration menu
    Copy the full SHA
    348cbcd View commit details
    Browse the repository at this point in the history

Commits on May 16, 2023

  1. ⚡ Force inline storage for resource JSON < 10K chars 

    See https://smilecdr.com/docs/fhir_storage_relational/resource_storage_mode.html#resource-body-storage
    @znatty22
    znatty22 committed May 16, 2023
    Configuration menu
    Copy the full SHA
    92645cd View commit details
    Browse the repository at this point in the history

  2. 🐳 Set ulimit nofiles to 5000 per smilecdr prd checklist 

    See https://smilecdr.com/docs/installation/production_checklist.html#host-server-setup
    @znatty22
    znatty22 committed May 16, 2023
    Configuration menu
    Copy the full SHA
    ed445cc View commit details
    Browse the repository at this point in the history

  3. 🔧 Increase timeout for intg test gh workflow

    @znatty22
    znatty22 committed May 16, 2023
    Configuration menu
    Copy the full SHA
    cb2a980 View commit details
    Browse the repository at this point in the history

  4. 🐛 Change 10K to 4K to match db schema 

    Docs say set dao_config.inline_resource_storage_below_size to 10K but
the db schema only allows for 4K
    @znatty22
    znatty22 committed May 16, 2023
    Configuration menu
    Copy the full SHA
    d2577b5 View commit details
    Browse the repository at this point in the history