Implement Intra-Organization Group Management APIs in auth-service #25

add config properties, adapt setup from clevermicro/identity-management#9
replace role-based forward auth with UMA ticket
add pass-through config
implement unit tests for the change.

ISSUES CLOSED: clevermicro/user-management#28

src/main/java/com/cleverthis/authservice/controller/AuthController.java

@@ -179,8 +179,7 @@ public class AuthController {
           RequestMethod.PUT, RequestMethod.DELETE,
           RequestMethod.PATCH})
     public Mono<ResponseEntity<?>> forwardAuth(
-          @RequestHeader(value = HttpHeaders.AUTHORIZATION, required = false)
-          String authorizationHeader,
+          @RequestHeader(HttpHeaders.AUTHORIZATION) String authorizationHeader,
           @RequestHeader(HEADER_X_FORWARDED_METHOD) String originalMethod,
           @RequestHeader(HEADER_X_FORWARDED_URI) String originalUriString
     ) {
@@ -200,9 +199,6 @@ public class AuthController {
         if (shouldPassThrough(targetServiceClientId, serviceRelativePath)) {
             return Mono.just(ResponseEntity.status(HttpStatus.NO_CONTENT).build());
         }
-        if (authorizationHeader == null) {
-            return Mono.just(ResponseEntity.status(HttpStatus.BAD_REQUEST).build());
-        }
         // no pass-through, check permission
         final var accessToken = extractBearerToken(authorizationHeader);
         if (accessToken == null) {

src/main/resources/application.yml

@@ -15,8 +15,7 @@ spring:
 
 # Keycloak Configuration (adjust values as needed)
 keycloak:
-  keycloak-host: ${KEYCLOAK_AUTH_SERVER_URL:http://localhost:9100} # Base URL of your Keycloak instance (NO trailing slash)
-  keycloak-admin-host: ${KEYCLOAK_AUTH_ADMIN_SERVER_URL:http://localhost:9100} # Base URL of your Keycloak instance (NO trailing slash)
+  server-url: ${KEYCLOAK_AUTH_SERVER_URL:http://localhost:9100} # Base URL of your Keycloak instance (NO trailing slash)
   realm: ${KEYCLOAK_AUTH_REALM:clevermicro-dev} # The realm name you are using
   client-id: ${KEYCLOAK_AUTH_SERVICE_CLIENT:auth-service}        # Client ID created in Keycloak for this service
   client-secret: ${KEYCLOAK_AUTH_SERVICE_SECRET:UJ1sMcWciIRREfjjAGoLHUDynLT4aYdD} # Client Secret from Keycloak (use secrets management!)