Initial conversion to OIDC

Author: chrissearle

backend/src/main/kotlin/no/java/cupcake/Application.kt

@@ -5,15 +5,13 @@ import io.ktor.server.application.ApplicationEnvironment
 import io.ktor.server.cio.EngineMain
 import no.java.cupcake.bring.BringService
 import no.java.cupcake.clients.bringClient
-import no.java.cupcake.clients.slackBotClient
 import no.java.cupcake.clients.sleepingPillClient
+import no.java.cupcake.plugins.configureAuth
 import no.java.cupcake.plugins.configureHTTP
 import no.java.cupcake.plugins.configureMonitoring
 import no.java.cupcake.plugins.configureRouting
-import no.java.cupcake.plugins.configureSecurity
 import no.java.cupcake.plugins.configureSerialization
-import no.java.cupcake.plugins.slackProvider
-import no.java.cupcake.slack.SlackService
+import no.java.cupcake.plugins.configureUserInfoRoute
 import no.java.cupcake.sleepingpill.SleepingPillService
 
 fun main(args: Array<String>) {
@@ -34,31 +32,16 @@ fun Application.module() {
     configureSerialization()
     configureMonitoring()
     configureHTTP()
-    configureSecurity(
-        provider = slackProvider(),
-        callback = environment.str("slack.callback"),
-        slackService = slackService(),
-        channelName = environment.str("slack.channel_name"),
-        jwtConfig = environment.jwtConfig(),
+    configureAuth(
+        oidcConfig = environment.oidcConfig(),
     )
+    configureUserInfoRoute(oidcConfig = environment.oidcConfig())
     configureRouting(
         sleepingPillService = sleepingPillService(bringService()),
         securityOptional = !environment.bool("jwt.enabled"),
     )
 }
 
-private fun Application.slackService(): SlackService =
-    SlackService(
-        botClient =
-            slackBotClient(
-                slackBotToken = environment.config.property("slack.bot").getString(),
-            ),
-        channel = environment.str("slack.channel"),
-        membersUrl = environment.str("slack.members_url"),
-    )
-
-private fun Application.slackProvider() = slackProvider(environment.slackConfig())
-
 private fun Application.sleepingPillService(bringService: BringService): SleepingPillService {
     val config = environment.sleepingPillConfig()
 

backend/src/main/kotlin/no/java/cupcake/EnvironmentExtensions.kt

@@ -2,8 +2,7 @@ package no.java.cupcake
 
 import io.ktor.server.application.ApplicationEnvironment
 import no.java.cupcake.config.BringConfig
-import no.java.cupcake.config.JwtConfig
-import no.java.cupcake.config.SlackConfig
+import no.java.cupcake.config.OidcConfig
 import no.java.cupcake.config.SleepingPillConfig
 
 fun ApplicationEnvironment.bringConfig() =
@@ -20,21 +19,8 @@ fun ApplicationEnvironment.sleepingPillConfig() =
         cacheTtlSeconds = long("sleepingpill.cache_ttl_seconds"),
     )
 
-fun ApplicationEnvironment.jwtConfig() =
-    JwtConfig(
-        realm = str("jwt.realm"),
-        audience = str("jwt.audience"),
-        secret = str("jwt.secret"),
-        issuer = str("jwt.issuer"),
-        redirect = str("jwt.redirect"),
-        accessTokenLifetimeMinutes = long("jwt.access_token_lifetime_minutes"),
-        refreshTokenLifetimeMinutes = long("jwt.refresh_token_lifetime_minutes"),
-    )
-
-fun ApplicationEnvironment.slackConfig() =
-    SlackConfig(
-        clientId = str("slack.client"),
-        clientSecret = str("slack.secret"),
-        authUrl = str("slack.authorize_url"),
-        accessTokenUrl = str("slack.accesstoken_url"),
+fun ApplicationEnvironment.oidcConfig() =
+    OidcConfig(
+        wellKnownUrl = str("oidc.well_known_url"),
+        expectedAzp = str("oidc.expected_azp"),
     )

backend/src/main/kotlin/no/java/cupcake/config/JwtConfig.kt

@@ -0,0 +1,6 @@
+package no.java.cupcake.config
+
+data class OidcConfig(
+    val wellKnownUrl: String,
+    val expectedAzp: String,
+)

backend/src/main/kotlin/no/java/cupcake/config/OidcConfig.kt

@@ -25,8 +25,8 @@ fun Application.configureRouting(
     }
 
     routing {
-        authenticate(JWT_AUTH, optional = securityOptional) {
-            route("/api") {
+        route("/api") {
+            authenticate("javaBin", optional = securityOptional) {
                 route("/conferences") {
                     get {
                         either {