Skip to content

Commit 47b7e8c

Browse files
dmihalcik-virtrudmihalcik-virtru
committed
more fixes
1 parent 469d662 commit 47b7e8c

File tree

9 files changed

+155
-6
lines changed

9 files changed

+155
-6
lines changed

‎.github/workflows/roundtrip/demo-idp.sh

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -12,10 +12,8 @@ kcadm.sh config credentials --server http://localhost:65432/auth --realm master
1212
changeme
1313
EOF
1414

15-
# &response_type=code&scope=openid+profile+email+offline_access&state=XTM-A9nrcpX1p6rT88jsqg4iw30EmYdUq4Cqd1qEYOA
16-
1715
kcadm.sh create clients -r opentdf -s clientId=browsertest -s enabled=true -s 'redirectUris=["http://localhost:65432/"]' -s consentRequired=false -s standardFlowEnabled=true -s directAccessGrantsEnabled=true -s serviceAccountsEnabled=false -s publicClient=true -s protocol=openid-connect
1816
kcadm.sh create users -r opentdf -s username=user1 -s enabled=true
1917
kcadm.sh set-password -r opentdf --username user1 --new-password testuser123
2018

21-
go run ./platform/service start
19+
go run ./platform/service start

‎ecparams.tmp

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
-----BEGIN EC PARAMETERS-----
2+
BggqhkjOPQMBBw==
3+
-----END EC PARAMETERS-----

‎kas-cert.pem

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
-----BEGIN CERTIFICATE-----
2+
MIIC/TCCAeWgAwIBAgIUWEtllFrAoY4Dlkv0v1uD60xfoXkwDQYJKoZIhvcNAQEL
3+
BQAwDjEMMAoGA1UEAwwDa2FzMB4XDTI0MDQxOTE5NDcxOVoXDTI1MDQxOTE5NDcx
4+
OVowDjEMMAoGA1UEAwwDa2FzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
5+
AQEAyaz9o1IP1Yfexvesq5hUzalJZIYxhnA1iFNnMgB/akjo1Otmzgp9zTTQ16oR
6+
GDcfGA+1O8NUGQPlPTh9j6TIKzFiBi2rNZybzcipS8VE37lfhE4HESOaFEE4M7bM
7+
5sgXUDvMrFYhErSUEG/kov21iv5A3IMOSBjRLSCWolnFRlS77QSyMoEORpf5J6Ey
8+
M2ULe23aDF7WS6fIVE9YycM0zwPbq3M+ls8IhwCPzAuXjf/R/6HxX4zXyDBy6yma
9+
0V7FT4F0gxwu7/KwLyMOMkQiUXelEZDpDkNlDyHkOE8L1wgI/l3cdVQW5qm3Sarg
10+
x/r0SskWg6YH56QtKFNY5Aqk5QIDAQABo1MwUTAdBgNVHQ4EFgQUt+lyAasVamTi
11+
QyXRFzpWsed/0xIwHwYDVR0jBBgwFoAUt+lyAasVamTiQyXRFzpWsed/0xIwDwYD
12+
VR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEACR1dpTKw375qqvNwE+MF
13+
gZDyavPFkaNqXyMzbyZbiFnKHBrqWF+Fa++aC6zZcqQ8dbpy3WFGrrCI1mbdlLst
14+
NUdAu0mhuvmLM58quUoEW1YT2sdQBNk3by6ssKXrbvmtAivP9e2Lpy3MtN0YR0w5
15+
M4PAzZROuD45o7Yj6Agphg6OhIQiBloNeMFC3FZ2+lOAg6uYM55gkOWNrfPNSi0j
16+
5nBdZQNOEiW5/IrPnjLcTFJR6zmi9fZWiVZoortlVbIBTyclr9hnGiajsEjRK81c
17+
ruMQQYQBoEwBbVFvXQ1np6S0OwpfijmIC5Kwxa5EnnKFppyhQc/usI0zgQr8bT9d
18+
yA==
19+
-----END CERTIFICATE-----

‎kas-ec-cert.pem

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
-----BEGIN CERTIFICATE-----
2+
MIIBcDCCARegAwIBAgIUIFGwwyjriZ+3LJjK/ZD8I/zJIMYwCgYIKoZIzj0EAwIw
3+
DjEMMAoGA1UEAwwDa2FzMB4XDTI0MDQxOTE5NDcxOVoXDTI1MDQxOTE5NDcxOVow
4+
DjEMMAoGA1UEAwwDa2FzMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEf7HLWYKG
5+
+pPzwi7ivTu9YjQ40mvJtUHAF8V8O5PyLtNGa1XE2FP3M921ufTKcop9oeUL3Blp
6+
mCMxJUG1tlEyFqNTMFEwHQYDVR0OBBYEFBqVa076DR49kuYwlUei4kv8oh5oMB8G
7+
A1UdIwQYMBaAFBqVa076DR49kuYwlUei4kv8oh5oMA8GA1UdEwEB/wQFMAMBAf8w
8+
CgYIKoZIzj0EAwIDRwAwRAIgbOFBSSg/GJ9BD5jGU09nbHLIfaUbks8kB2U0THyA
9+
zLECIGyzbADomr7wJXMElEmffxiW17xAX3kup6CyaIO6XttO
10+
-----END CERTIFICATE-----

‎kas-ec-private.pem

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
-----BEGIN PRIVATE KEY-----
2+
MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgqhc8ZGVXPkugpygf
3+
82+Nc+HuLMH78tnaxWWY+N19xwChRANCAAR/sctZgob6k/PCLuK9O71iNDjSa8m1
4+
QcAXxXw7k/Iu00ZrVcTYU/cz3bW59Mpyin2h5QvcGWmYIzElQbW2UTIW
5+
-----END PRIVATE KEY-----

‎kas-private.pem

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
-----BEGIN PRIVATE KEY-----
2+
MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDJrP2jUg/Vh97G
3+
96yrmFTNqUlkhjGGcDWIU2cyAH9qSOjU62bOCn3NNNDXqhEYNx8YD7U7w1QZA+U9
4+
OH2PpMgrMWIGLas1nJvNyKlLxUTfuV+ETgcRI5oUQTgztszmyBdQO8ysViEStJQQ
5+
b+Si/bWK/kDcgw5IGNEtIJaiWcVGVLvtBLIygQ5Gl/knoTIzZQt7bdoMXtZLp8hU
6+
T1jJwzTPA9urcz6WzwiHAI/MC5eN/9H/ofFfjNfIMHLrKZrRXsVPgXSDHC7v8rAv
7+
Iw4yRCJRd6URkOkOQ2UPIeQ4TwvXCAj+Xdx1VBbmqbdJquDH+vRKyRaDpgfnpC0o
8+
U1jkCqTlAgMBAAECggEAYIZqkyuopnO0XZiXTT3IgPKgTPupYoX8KTZ58sWoNi+V
9+
OKs+dikxUvEPb9lW+zcOq86A2IzBiIODyYxrFEAzCfFF0F01T6CYNaLv3HMbZtTr
10+
cYCDA2H90enxQ1cftOlZty4X5PgINlK1dzSGwrgZlt/gHWqggENYgnfRgPzkXadA
11+
zW4x0DeA3Fnl9jb9BJvhFCMKBtmYHozzhJXFx3xOaeq8pKlnOJCU1UeibHz848eN
12+
vq4KEQbgqwnhGFIgYeAjKEGxdpMf9cfBppTlHVlZpD1hRjqGxceXFUBF1YWu5V/n
13+
z4UXIFWmgJqzTRyrghBAW8xgITq91KTi8yWuoGBG9QKBgQDvEuTaKmHHl0+AdDws
14+
YJkSm/WvPyV81M+gUjMzWRTQwo+0lKF2egCNvXWIu8+JgTYzFXCCy41rZ8OO0ofc
15+
ldxrlgocdrQz7kQh7U42wN0gxsytw2C3D1ecgH53l6xlse3RtZGfoMAYxg4qzMYW
16+
BpBYSvpHy7D4FyvBfTiT2LAElwKBgQDX9EYP2kbZroBmOOqO8nbJGpcGNv3DVVMh
17+
4f4HDZFk3wJzeAWZgs0+d5kulIMMVoOyiHQSe91kgnyb3aWyFpUjSueCSjdVfC/8
18+
CLJlBH4FeH3776foR3T8kC2QcQqwC1aeBnqNeFsJCYJSkVBa0tGQAnqS5f89FSz8
19+
2Ac1ZPFl4wKBgQCkkZP5Xb1LQCwY12pofeJA/hykEsrCYFfAG3VlPkfm4Fc9ziZL
20+
QPZKm4Vhpy7Yj5p4laSKVIY3zgi+ssuVG4/Me07ggxHOwZAi7pCtfht5qX9RibF0
21+
sdn0QDtOJZkls9JqThs9D9HL++HasnUUylXogUxBycQ7MvAK1CDzHPElZwKBgD8e
22+
W3f4sWqgcVDvY8dCIOvohKnBWuxDvReTKR9AnPVhpSLAuspCi+CtLi2KJL9vbfC5
23+
p0tbvrrI1MjtwKdLqG13UDEppgCrWo8Mr6+M35STwibnxijC8fN75IVqNNh9h+SK
24+
OjmtKtZ6XAfsBxN0uOGhh9f1t2NQFCUWswytI01HAoGBAKVjegFJu1Geq5l3xMNx
25+
ngSRo68jEinY1aEOc+ioeD4XLz0YBjZwI9SgUha+7sNVZ11gbw+guqKpLtbjdH6j
26+
1yt+IRRmorBUPGorbs11xXMc82l4VfLUOcTu1US+qks3tb4R08lckHGc8EZMH7v3
27+
FN0UfdJOBVHZpfAprfpRBlp2
28+
-----END PRIVATE KEY-----

‎opentdf.yaml

Lines changed: 86 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,86 @@
1+
logger:
2+
level: debug
3+
type: text
4+
output: stdout
5+
# DB and Server confgurations are defaulted for local development
6+
# db:
7+
# host: localhost
8+
# port: 5432
9+
# user: postgres
10+
# password: changeme
11+
services:
12+
kas:
13+
enabled: true
14+
policy:
15+
enabled: true
16+
authorization:
17+
enabled: true
18+
url: http://localhost:8888
19+
client: "tdf-entity-resolution"
20+
secret: "secret"
21+
realm: "opentdf"
22+
legacy: true
23+
server:
24+
auth:
25+
enabled: true
26+
audience: "http://localhost:8080"
27+
issuer: http://localhost:8888/auth/realms/opentdf
28+
clients:
29+
- "opentdf"
30+
- "opentdf-sdk"
31+
policy:
32+
## Default policy for all requests
33+
default: #"role:readonly"
34+
## Dot notation is used to access nested claims (i.e. realm_access.roles)
35+
claim: # realm_access.roles
36+
## Maps the external role to the opentdf role
37+
## Note: left side is used in the policy, right side is the external role
38+
map:
39+
# readonly: opentdf-readonly
40+
# admin: opentdf-admin
41+
# org-admin: opentdf-org-admin
42+
43+
## Custom policy (see examples https://github.com/casbin/casbin/tree/master/examples)
44+
csv: #|
45+
# p, role:org-admin, policy:attributes, *, *, allow
46+
# p, role:org-admin, policy:subject-mappings, *, *, allow
47+
# p, role:org-admin, policy:resource-mappings, *, *, allow
48+
# p, role:org-admin, policy:kas-registry, *, *, allow
49+
## Custom model (see https://casbin.org/docs/syntax-for-models/)
50+
model: #|
51+
# [request_definition]
52+
# r = sub, res, act, obj
53+
#
54+
# [policy_definition]
55+
# p = sub, res, act, obj, eft
56+
#
57+
# [role_definition]
58+
# g = _, _
59+
#
60+
# [policy_effect]
61+
# e = some(where (p.eft == allow)) && !some(where (p.eft == deny))
62+
#
63+
# [matchers]
64+
# m = g(r.sub, p.sub) && globOrRegexMatch(r.res, p.res) && globOrRegexMatch(r.act, p.act) && globOrRegexMatch(r.obj, p.obj)
65+
66+
grpc:
67+
reflectionEnabled: true # Default is false
68+
cryptoProvider:
69+
hsm:
70+
enabled: false
71+
pin:
72+
standard:
73+
rsa:
74+
123:
75+
privateKeyPath: kas-private.pem
76+
publicKeyPath: kas-cert.pem
77+
456:
78+
privateKeyPath: kas-private.pem
79+
publicKeyPath: kas-cert.pem
80+
ec:
81+
123:
82+
privateKeyPath: kas-ec-private.pem
83+
publicKeyPath: kas-ec-cert.pem
84+
port: 8080
85+
opa:
86+
embedded: true # Only for local development

‎scripts/demo-evironment.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,13 +8,13 @@ ROOT_DIR="$(cd "${APP_DIR}/.." >/dev/null && pwd)"
88
_run_platform() {
99
git clone https://github.com/opentdf/platform.git
1010
docker compose -f .github/workflows/roundtrip/docker-compose.yaml up -d --wait --wait-timeout 240
11-
11+
1212
cd platform
1313
.github/scripts/init-temp-keys.sh
1414
cp opentdf-example.yaml opentdf.yaml
1515
go run ./service provision keycloak
16+
go run ./service start
1617
cd ..
17-
1818
}
1919

2020
_wait-for() {

‎web-app/vite.config.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ export default defineConfig({
1515
server: {
1616
port: 65432,
1717
proxy: {
18-
'/kas': 'http://localhost:5432',
18+
'/kas': 'http://localhost:8080',
1919
'/auth': 'http://localhost:8888',
2020
},
2121
},

0 commit comments

Comments
 (0)