diff options
| author | Matthias Andreas Benkard <code@mail.matthias.benkard.de> | 2021-07-17 21:29:32 +0200 |
|---|---|---|
| committer | Matthias Andreas Benkard <code@mail.matthias.benkard.de> | 2021-07-17 21:29:32 +0200 |
| commit | 46022abb71e2038a145cf54916e709b262ad8b90 (patch) | |
| tree | 5522aa9f77107b0220fc471fcae91fa7ba4113af /src | |
| parent | 181286a0e97aebbc910f883530a53f5ff1048a4c (diff) | |
KB66 Upgrade to Quarkus 2.0.2, fix authentication.
Change-Id: I251fbdbe915e32aaeb8daa087691853da17f4799
Diffstat (limited to 'src')
| -rw-r--r-- | src/main/java/eu/mulk/mulkcms2/benki/login/RoleAugmentor.java | 2 | ||||
| -rw-r--r-- | src/main/resources/application.properties | 1 |
2 files changed, 2 insertions, 1 deletions
diff --git a/src/main/java/eu/mulk/mulkcms2/benki/login/RoleAugmentor.java b/src/main/java/eu/mulk/mulkcms2/benki/login/RoleAugmentor.java index 3aafc0e..37d865f 100644 --- a/src/main/java/eu/mulk/mulkcms2/benki/login/RoleAugmentor.java +++ b/src/main/java/eu/mulk/mulkcms2/benki/login/RoleAugmentor.java @@ -30,7 +30,6 @@ public class RoleAugmentor implements SecurityIdentityAugmentor { return augmentWithRoles(identity, context); } - @Transactional Uni<SecurityIdentity> augmentWithRoles( SecurityIdentity identity, AuthenticationRequestContext context) { return context.runBlocking( @@ -41,6 +40,7 @@ public class RoleAugmentor implements SecurityIdentityAugmentor { } @CacheResult(cacheName = "login-role-cache") + @Transactional Set<String> getUserLoginRoles(String userNickname) { var user = User.findByNicknameWithRoles(userNickname); return user.effectiveRoles.stream() diff --git a/src/main/resources/application.properties b/src/main/resources/application.properties index 53233ba..bbffd39 100644 --- a/src/main/resources/application.properties +++ b/src/main/resources/application.properties @@ -32,6 +32,7 @@ quarkus.liquibase.migrate-at-start = true quarkus.http.auth.proactive = true quarkus.oidc.auth-server-url = https://login.benkard.de/auth/realms/master +quarkus.oidc.authentication.force-redirect-https-scheme = true quarkus.oidc.client-id = mulkcms quarkus.oidc.application-type = web-app quarkus.oidc.token.principal-claim = preferred_username |