add express middleware

- added chain-service-calls example

.gitignore

@@ -63,3 +63,4 @@ Icon?
 .webpack/*
 .coverage/*
 .tgz
+.webpack

.npmignore

@@ -19,6 +19,7 @@ example/*
 .circleci/*
 .idea/*
 .coverage
+.webpack
 __mocks__
 __tests__
 keycloak-cloudfront-dynamodb

README.md

@@ -27,6 +27,7 @@ npm install keycloak-lambda-authorizer -S
 ```
 # Examples
  - [Serverless example (Api gateway with lambda authorizer)](example/keycloak-authorizer/README.md)
+ - [Example of calling a chain of micro services, where each service is protected by its secured client](example/chain-service-calls)
  - [CloudFront with Lambda:Edge example](example/keycloak-cloudfront/README.md)
  - [CloudFront with portal authorization (switching between security realms)](example/keycloak-cloudfront-portal)
 # How to use

example/chain-service-calls/README.md

@@ -0,0 +1,72 @@
+# Chain of service calls
+![](../../keycloak-cross-client-authentication3.png)
+
+## 1. Start Keycloak
+
+### Docker
+Using the image from https://hub.docker.com/r/jboss/keycloak/
+```
+docker run -p 8090:8080 -e JAVA_OPTS="-Dkeycloak.profile.feature.scripts=enabled -Dkeycloak.profile.feature.upload_scripts=enabled -server -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true" -e KEYCLOAK_USER=admin -e KEYCLOAK_PASSWORD=admin  -v `pwd`/example/chain-service-calls:/chain-service-calls  -e KEYCLOAK_IMPORT=/chain-service-calls/example-realm-export.json  jboss/keycloak
+```
+###  Standard
+```
+sh bin/standalone.sh  -c standalone.xml -b 0.0.0.0 -Djboss.bind.address.management=0.0.0.0 --debug 8190 -Djboss.http.port=8090
+```
+Open the Keycloak admin console, click on Add Realm, click on import 'Select file', select example-realm-export.json and click Create.
+
+## 2. Run Serverless offline (Client Id and Secret credential Type)
+
+```
+
+## 2. Run Services Locally
+- Service1
+```bash
+cd service1
+npm i
+npm run start
+```
+- Service2
+```bash
+cd service2
+npm i
+npm run offline
+```
+- Service3
+```bash
+cd service3
+npm i
+npm run offline
+```
+
+## 3. Run UI locally
+
+```bash
+cd frontend
+npm i
+npm run start
+```
+
+## 4. Open UI
+[http://localhost:3001](http://localhost:3001)
+
+users:
+
+| User      | Password   | Service 1 Role 1 | Service 1 Role 2 | Service 2 Role | Service 3 Role |
+|:----------|:-----------|:-----------------|:-----------------|:---------------|:---------------|
+| user      | user       | X                | X                | X              | X              |
+| user1     | user1      | -                | -                | X              | X              |
+| user2     | user2      | X                | -                | -              | X              |
+
+## 6. Results
+
+| User      | Password   | Service 1 Role 1 | Service 1 Role 2 | Service 2 Role | Service 3 Role |
+|:----------|:-----------|:-----------------|:-----------------|:---------------|:---------------|
+| user      | user       | X                | X                | X              | X              |
+| user1     | user1      | -                | -                | X              | X              |
+| user2     | user2      | X                | -                | -              | X              |
+
+| User      | Result                                                                                                 | Description                                           |
+|:----------|:-------------------------------------------------------------------------------------------------------|:------------------------------------------------------|
+| User      |  ![](../../docs/userChain.png)                                                                         | All Access                                            |
+| User1      |  ![](../../docs/user1Chain.png)                                                                       | FrontEnd->Service2 and FrontEnd->Service3->Service2   |                                           |
+| User1      |  ![](../../docs/user2Chain.png)                                                                       | FrontEnd->Service1->Service2 and FrontEnd->Service2   |