[WFLY-12901] Add a new quickstart covering MicroProfile JWT. #368

darranl · 2020-01-28T13:00:47Z

Includes a complete example and instructions to create the example from scratch.
Also contains a test case to enable testing the interaction with the example.

https://issues.redhat.com/browse/WFLY-12901

Analysis - wildfly/wildfly-proposals#273

Depends on wildfly/wildfly-archetypes#6

sschmiedleitner · 2020-01-30T14:45:08Z

After reviewing this PR I have some concerns...

I would have expected to get an idea, how to use Wildfly 19 with a deployed microprofile application, that just is secured by JWT. The JWT is not issued by this wildfly but rather by an external keycloak server (at least I have such a setup).

But your PR indicates, that there is a very special configuration of Elytron needed (issuer, keystore) which I don't have with an external authentication server like keycloak. It should rather use the settings of the microprofile.properties file:

mp.jwt.verify.issuer=
mp.jwt.verify.publickey[.location]=

How can I manage this?

darranl · 2020-01-30T14:54:09Z

The reason this as a quickstart is not using an external issuer is that it would be a lot of additional complexity just to get the quickstart running when the token issuing can be simplified.

Overall the aim of this quickstart is to demonstrate how to enable MicroProfile JWT authentication for a deployment deployed to WildFly it was not about setting up the complete environment, projects such as KeyCloak would then provide their own getting started material to start to use them as an issuer.

I am not really sure what you mean with this line: -

But your PR indicates, that there is a very special configuration of Elytron needed (issuer, keystore)

This pull request does not mention Elytron once, this quickstart exclusively makes use of microprofile config properties for configuration.

sschmiedleitner · 2020-01-30T15:08:03Z

Hm, Elytron is mentioned in the chapter "Configure the Server" serveral times and also refers to configure-elytron.cli.

I can follow the approach that a quickstart should not have too much external dependencies - I aggree.

Still I would like to get my setup running somehow and I am searching for input how to configure Wildfly 19 properly to use my configuration from microprofile.properties and @LoginConfig

darranl · 2020-01-30T15:17:58Z

This may be a bit clearer now, the main files were missing from this pull request.

sschmiedleitner · 2020-01-30T15:38:12Z

I am really sorry, I was looking at the "jaxrs-jwt" quickstart, not your new one...

With the correct "microprofile-jwt" I was able to figure out that I need to set the "resteasy.role.based.security" configuration properly!

rhusar · 2020-03-06T10:22:28Z

Depends on wildfly/wildfly-archetypes#6

Might wanna update that since it was closed by @maeste.

darranl · 2020-03-06T10:25:55Z

@rhusar Yes that is the plan to rewrite using a generic archetype.

darranl · 2020-03-17T12:41:09Z

@emmartins This quickstart is now also updated so all of it's dependencies beyond "wildfly-jakartaee8-with-tools" are now included in it's pom without modifications to the parent pom.

rhusar · 2020-03-17T13:25:09Z

microprofile-jwt/README.adoc

+    @GET
+	@Path("/helloworld")
+	public String helloworld() {
+        return "Hello World";
+	}


Indentation is off here.

rhusar · 2020-03-17T13:25:51Z

microprofile-jwt/pom.xml

+
+    <artifactId>microprofile-jwt</artifactId>
+    <packaging>war</packaging>
+    <name>JBoss PRODUCT_TYPE Quickstart: MicroProfile JWT</name>


The standard module names are "Quickstart: artifactId", e.g. https://github.com/wildfly/quickstart/blob/master/contacts-jquerymobile/pom.xml#L33

This format comes directly from the template https://github.com/wildfly/quickstart/blob/master/template/pom.xml#L25

Yeah, looks like the template is outdated, i.e.

:-)

[INFO] ------------------------------------------------------------------------ [INFO] Reactor Summary for Quickstart: Parent 20.0.0.Beta1-SNAPSHOT: [INFO] [INFO] Quickstart: Parent ................................. SUCCESS [ 0.090 s] [INFO] Quickstart: app-client ............................. SUCCESS [ 0.002 s] [INFO] Quickstart: app-client - ejb ....................... SUCCESS [ 0.018 s] [INFO] Quickstart: app-client - client-simple ............. SUCCESS [ 0.010 s] [INFO] Quickstart: app-client - ear ....................... SUCCESS [ 0.029 s] [INFO] Quickstart: batch-processing ....................... SUCCESS [ 0.036 s] [INFO] Quickstart: bean-validation ........................ SUCCESS [ 0.017 s] ... [INFO] JBoss PRODUCT_TYPE Quickstart: MicroProfile JWT .... SUCCESS [ 0.002 s] [INFO] Quickstart: numberguess ............................ SUCCESS [ 0.010 s] [INFO] Quickstart: payment-cdi-event ...................... SUCCESS [ 0.015 s] [INFO] Quickstart: resteasy-jaxrs-client .................. SUCCESS [ 0.011 s] [INFO] Quickstart: security-domain-to-domain .............. SUCCESS [ 0.003 s] [INFO] Quickstart: security-domain-to-domain - ejb ........ SUCCESS [ 0.010 s] [INFO] Quickstart: security-domain-to-domain - web ........ SUCCESS [ 0.015 s] [INFO] Quickstart: security-domain-to-domain - ear ........ SUCCESS [ 0.005 s] [INFO] Quickstart: servlet-async .......................... SUCCESS [ 0.015 s] [INFO] Quickstart: servlet-filterlistener ................. SUCCESS [ 0.013 s] [INFO] Quickstart: servlet-security ....................... SUCCESS [ 0.013 s] [INFO] Quickstart: shopping-cart .......................... SUCCESS [ 0.001 s] [INFO] Quickstart: shopping-cart - server ................. SUCCESS [ 0.008 s] [INFO] Quickstart: shopping-cart - client ................. SUCCESS [ 0.008 s] [INFO] Quickstart: spring-greeter ......................... SUCCESS [ 0.019 s] [INFO] Quickstart: spring-kitchensink-basic ............... SUCCESS [ 0.025 s] [INFO] Quickstart: spring-kitchensink-springmvctest ....... SUCCESS [ 0.022 s] [INFO] Quickstart: spring-resteasy ........................ SUCCESS [ 0.012 s] [INFO] Quickstart: tasks-jsf .............................. SUCCESS [ 0.016 s] [INFO] Quickstart: tasks-rs ............................... SUCCESS [ 0.015 s] [INFO] Quickstart: temperature-converter .................. SUCCESS [ 0.012 s] [INFO] Quickstart: thread-racing .......................... SUCCESS [ 0.028 s] [INFO] Quickstart: websocket-client ....................... SUCCESS [ 0.013 s] [INFO] Quickstart: websocket-endpoint ..................... SUCCESS [ 0.014 s] [INFO] Quickstart: websocket-hello ........................ SUCCESS [ 0.009 s] [INFO] Quickstart: wicket-ear ............................. SUCCESS [ 0.001 s] [INFO] Quickstart: wicket-ear - ejb ....................... SUCCESS [ 0.009 s] [INFO] Quickstart: wicket-ear - war ....................... SUCCESS [ 0.019 s] [INFO] Quickstart: wicket-ear - ear ....................... SUCCESS [ 0.004 s] [INFO] Quickstart: wicket-war ............................. SUCCESS [ 0.019 s] [INFO] Quickstart: xml-jaxp ............................... SUCCESS [ 0.018 s] [INFO] Quickstart: jts .................................... SUCCESS [ 0.002 s] [INFO] Quickstart: jts - application-component-2 .......... SUCCESS [ 0.012 s] [INFO] Quickstart: jts - application-component-1 .......... SUCCESS [ 0.014 s] [INFO] Quickstart: ejb-remote ............................. SUCCESS [ 0.001 s] [INFO] Quickstart: ejb-remote - server-side ............... SUCCESS [ 0.007 s] [INFO] Quickstart: ejb-remote - client .................... SUCCESS [ 0.010 s] [INFO] Quickstart: jta-crash-rec .......................... SUCCESS [ 0.011 s] [INFO] Quickstart: wsat-simple ............................ SUCCESS [ 0.016 s] [INFO] Quickstart: wsba-coordinator-completion-simple ..... SUCCESS [ 0.012 s] [INFO] Quickstart: wsba-participant-completion-simple ..... SUCCESS [ 0.012 s] [INFO] ------------------------------------------------------------------------ [INFO] BUILD SUCCESS [INFO] ------------------------------------------------------------------------ [INFO] Total time: 3.461 s [INFO] Finished at: 2020-03-17T14:37:54+01:00 [INFO] ------------------------------------------------------------------------

Opened #392 with the template fix.

Includes a complete example and instructions to create the example from scratch. Also contains a test case to enable testing the interaction with the example.

darranl force-pushed the WFLY-12901 branch 2 times, most recently from 204c6e5 to 1f5cea7 Compare January 30, 2020 15:17

darranl force-pushed the WFLY-12901 branch 2 times, most recently from b0f37ed to ac1f27c Compare March 17, 2020 12:39

rhusar suggested changes Mar 17, 2020

View reviewed changes

darranl force-pushed the WFLY-12901 branch from ac1f27c to 0ab2d4a Compare March 17, 2020 13:28

rhusar mentioned this pull request Mar 17, 2020

Fix module name template in template's pom.xml #392

Merged

darranl force-pushed the WFLY-12901 branch from 0ab2d4a to bc54bca Compare March 17, 2020 13:58

[WFLY-12901] Add a new quickstart covering MicroProfile JWT.

182fca8

Includes a complete example and instructions to create the example from scratch. Also contains a test case to enable testing the interaction with the example.

darranl force-pushed the WFLY-12901 branch from bc54bca to 182fca8 Compare March 18, 2020 17:13

emmartins merged commit 820eebe into wildfly:master Mar 18, 2020

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[WFLY-12901] Add a new quickstart covering MicroProfile JWT. #368

[WFLY-12901] Add a new quickstart covering MicroProfile JWT. #368

darranl commented Jan 28, 2020

sschmiedleitner commented Jan 30, 2020

darranl commented Jan 30, 2020

sschmiedleitner commented Jan 30, 2020 •

edited

darranl commented Jan 30, 2020

sschmiedleitner commented Jan 30, 2020

rhusar commented Mar 6, 2020

darranl commented Mar 6, 2020

darranl commented Mar 17, 2020

rhusar Mar 17, 2020

darranl Mar 17, 2020

rhusar Mar 17, 2020

darranl Mar 17, 2020

rhusar Mar 17, 2020

rhusar Mar 17, 2020 •

edited

[WFLY-12901] Add a new quickstart covering MicroProfile JWT. #368

[WFLY-12901] Add a new quickstart covering MicroProfile JWT. #368

Conversation

darranl commented Jan 28, 2020

sschmiedleitner commented Jan 30, 2020

darranl commented Jan 30, 2020

sschmiedleitner commented Jan 30, 2020 • edited

darranl commented Jan 30, 2020

sschmiedleitner commented Jan 30, 2020

rhusar commented Mar 6, 2020

darranl commented Mar 6, 2020

darranl commented Mar 17, 2020

rhusar Mar 17, 2020

Choose a reason for hiding this comment

darranl Mar 17, 2020

Choose a reason for hiding this comment

rhusar Mar 17, 2020

Choose a reason for hiding this comment

darranl Mar 17, 2020

Choose a reason for hiding this comment

rhusar Mar 17, 2020

Choose a reason for hiding this comment

rhusar Mar 17, 2020 • edited

Choose a reason for hiding this comment

sschmiedleitner commented Jan 30, 2020 •

edited

rhusar Mar 17, 2020 •

edited