diff --git a/.eclipse-pass.local_env b/.eclipse-pass.local_env index 02413432..50cbd646 100644 --- a/.eclipse-pass.local_env +++ b/.eclipse-pass.local_env @@ -5,7 +5,6 @@ AWS_ACCESS_KEY_ID=test AWS_SECRET_ACCESS_KEY=test AWS_REGION=us-east-1 -AWS_SQS_ENDPOINT_OVERRIDE=http://localstack:4566 ################################################### # PASS_CORE config ################################ @@ -19,7 +18,13 @@ PASS_CORE_DATABASE_URL=jdbc:postgresql://postgres:5432/pass PASS_CORE_DATABASE_USERNAME=pass PASS_CORE_DATABASE_PASSWORD=moo +PASS_CORE_SP_ID=https://sp.pass/shibboleth +PASS_CORE_SP_KEY=file:////saml2/sp-key.pem +PASS_CORE_SP_CERT=file:////saml2/sp-cert.pem +PASS_CORE_SP_ACS={baseUrl}/login/saml2/sso/{registrationId} PASS_CORE_IDP_METADATA=http://idp:8080/idp/shibboleth +PASS_CORE_DEFAULT_LOGIN_SUCCESS=/app/ +PASS_CORE_LOGIN_PROCESSING_PATH=/login/saml2/sso/{registrationId} # Go back to the app on logout PASS_CORE_LOGOUT_SUCCESS=/app/ @@ -27,13 +32,17 @@ PASS_CORE_LOGOUT_SUCCESS=/app/ # Delete IDP session cookie on logout so can login as another user PASS_CORE_LOGOUT_DELETE_COOKIES="JSESSIONID /,shib_idp_session /idp" +PASS_CORE_USERTOKEN_KEY= + # Postgres configuration POSTGRES_USER=postgres POSTGRES_PASSWORD=postgres PASS_CORE_FILE_SERVICE_TYPE=S3 PASS_CORE_S3_BUCKET_NAME=passcorefilestest -PASS_CORE_S3_ENDPOINT=http://localstack:4566 + +# Override aws endpoints to use localstack +PASS_CORE_JAVA_OPTS="-Daws.sqs.endpoint-override=http://localstack:4566 -Dpass.file-service.s3-endpoint=http://localstack:4566" ################################################### # PASS_DEPOSIT_SERVICES config #################### diff --git a/.env b/.env index 8959e550..1037e1aa 100644 --- a/.env +++ b/.env @@ -5,9 +5,6 @@ PASS_VERSION=1.12.0-SNAPSHOT ################################################### PASS_CORE_PORT=8080 -# PASS core configuration -spring_profiles_active=production - PASS_CORE_USE_SQS=true PASS_CORE_EMBED_JMS_BROKER=false diff --git a/eclipse-pass.local.yml b/eclipse-pass.local.yml index ea309724..eff2664d 100644 --- a/eclipse-pass.local.yml +++ b/eclipse-pass.local.yml @@ -21,6 +21,8 @@ services: - 8080:8080 extra_hosts: - "host.docker.internal:host-gateway" + volumes: + - ./pass-core/saml2/:/saml2/ pass-ui: env_file: diff --git a/pass-core/saml2/sp-cert.pem b/pass-core/saml2/sp-cert.pem new file mode 100644 index 00000000..71bd521c --- /dev/null +++ b/pass-core/saml2/sp-cert.pem @@ -0,0 +1,18 @@ +-----BEGIN CERTIFICATE----- +MIIC6zCCAdOgAwIBAgIJAOy0nki3WAOVMA0GCSqGSIb3DQEBBQUAMBcxFTATBgNV +BAMTDDc5OTQzZmVlNzg2NTAeFw0xNTEyMTEwMzAwNDJaFw0yNTEyMDgwMzAwNDJa +MBcxFTATBgNVBAMTDDc5OTQzZmVlNzg2NTCCASIwDQYJKoZIhvcNAQEBBQADggEP +ADCCAQoCggEBALPBzAz0DTn+j2YsQKfqWI+m08lP5UzwVsE9ZKzLqO3PRHZqiOBm +EaFmRrYCZCAOcJ0TXcxPGtNSo8HC4uw5/Y5lJGuI3jN7X7KB1VUQDpUSwfgOqtro +uDoVRKrsaYZTnlNV8KbZ0WQz5s4Uw6CxKRB9RZ5iQMP1fuxc8B6GSOb3x69MiY6c +1jlgVAc6rV4zGfpafacxOLM8qcYhY8u3TiSd0H+oiGEqi1mFLK8yp6FKzX8OUkQf +We49YHz6wBxFOe+/p+7ziym1rBs/lGfenEo8ziCIMmjnoo257fz00bcz9rFl1rTx +KLFfgy72xTlG72l6u+pB9VqK3YNJS52Ns5UCAwEAAaM6MDgwFwYDVR0RBBAwDoIM +Nzk5NDNmZWU3ODY1MB0GA1UdDgQWBBRiDMNPjiAMC50WWubI3PMjP45S/DANBgkq +hkiG9w0BAQUFAAOCAQEAYZM/iWgC93vAq0d98egEzvESKodxHffkDOagd4Kxt/S0 +AAHsVQCmAK/9kmRhsWzR3f1KIw98q4EX7nH/K68BFrerUvaL5+fEGE9W6Ki6QdW8 +bM17GQkLyRDKZzGPm/hsaG1Oxru2kDf7qSvv59aRZlZ8skrDEnx8+dZ8JKC02ZDU +ClC+xWl1UPfO2BL4tJei/siSymGpiRqznQ2JMoTFu5CUUpoxyCVz1bl9lCVceoJ9 +FaL38knS0p5DnXcm+I8wqNEVGLDPbDalBQryhJT9fIMm1/B85gB3AWAvcu9PPfHK +lQQUhxyEXTBJx3luLlpIjoloFKIute9K7pE5qAENjg== +-----END CERTIFICATE----- \ No newline at end of file diff --git a/pass-core/saml2/sp-key.pem b/pass-core/saml2/sp-key.pem new file mode 100644 index 00000000..8cd45e98 --- /dev/null +++ b/pass-core/saml2/sp-key.pem @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCzwcwM9A05/o9m +LECn6liPptPJT+VM8FbBPWSsy6jtz0R2aojgZhGhZka2AmQgDnCdE13MTxrTUqPB +wuLsOf2OZSRriN4ze1+ygdVVEA6VEsH4Dqra6Lg6FUSq7GmGU55TVfCm2dFkM+bO +FMOgsSkQfUWeYkDD9X7sXPAehkjm98evTImOnNY5YFQHOq1eMxn6Wn2nMTizPKnG +IWPLt04kndB/qIhhKotZhSyvMqehSs1/DlJEH1nuPWB8+sAcRTnvv6fu84sptawb +P5Rn3pxKPM4giDJo56KNue389NG3M/axZda08SixX4Mu9sU5Ru9pervqQfVait2D +SUudjbOVAgMBAAECggEBAK0pysTLsZYlmMSHar2XbjrsLecnVTA58ojy+HHRO2nj +mgMs+7CYAvHlUcbyJLwQzQEz787qgWADowb8E5gXASBUZLJGxi738adHlVf9QN7w +k/S/RG3fc+FYLa8uUTV6hfGnv00sVZ9etD/gFthM8c8VrqQ16EgdzWgq25G8MKx1 +dRHT7fRlehiwnuCvUc9dKEkeunaBfDp2QG+jI0aKrjeP+N/0zSyMDiySCr/yIwWn +GmmYdDjNKXullZTDgRn25xfHsQJSVW+RbEFOwALt5+cqecN6NVI53u23XNov8liD +YDkv8sGB1KlJYitGMTEuW21GwOgtjoUkBy83nmHoTAECgYEA5g6fQp3LCFN/c0W9 +Y68RwpQ1SHHCQXIJoajARzLzIqjou29Hgot/waYlFPbiqEI5pPy9cMBMu7LmVyEn +evAPzVheeYrJGeJ1azhdIEQ0e+tLYAQKkVvTPjyfJmtz51g/tSnNzz4HEcOkW5K5 +jkt6UUel61d/JPGL9UbGEt3BtJUCgYEAyAcXn2TG1GOkriD2Q8PjN5tyhmEgJKI2 +LcHULclyJ+Gn2nNCg1EwAn7d/zptdwE+VoijW+VSbrRoZhsRUsh/doPZDtoaInFX +fSsAY9LVeW7flavgliMz3I8zXcoIwOlTY8mZbrFv1jUX+GNRjmeIwpAqTuSOIS1w +UG5P3yQlQwECgYBKHDvBwgM902gjQjwYeLVH8WaYx8zEOHBR24LVbNxWNgODHf3z +V+z3/QXFEyNBANSBCcodIFWXwbHiL5QAToVIqUcF8GeIJyOcPrQBSPd/U/UcITEm +UmZijjTWs5bK1+rt+WGLeXfdiSDRPxr3c+kbdfFFNxKGXCmyAfKc8UMNYQKBgGnG +VleTkxD9IDh0dcWf8KeXLBijg7vbi4rm1KzhudwdGAYMrT+Dzz+ClyJAY2Jq5ewc +lUYjHlQsUoisB50fKUgisMWJ0Agmp30pICupcfmlB9a97SV3uBUKJL+T9s0MlWxP +TzOZ4OoFaYeP/bCwT0GTusu9UOt6e8oMi3AUTSABAoGAAKJh6VI/B4D6piPEKJmA +dOvpDjQoqpKn3arWet6mcrP4ftcIpH/uj2Azp53cAtyszAHhluN7rbcBnXOLePQz +AKAGupEsvFhlLUGoX1+lPfugzIukZKiMl8Koi/66Vf4Dfz4pWhc/oR2TOVZyzqhj +HPxmTTEX5graPtXeDM3hz5A= +-----END PRIVATE KEY-----