- backend: switch from OAuth2 Resource Server to OAuth2 Client (spring-boot-starter-oauth2-client) - backend: configure Spring Security oauth2Login() with session cookie (JSESSIONID HttpOnly) - backend: add UserController exposing /api/user to report authenticated user info - backend: configure GET /logout with RP-initiated end-session support - backend: update HelloController to use @AuthenticationPrincipal OAuth2User - backend: update all tests to use .with(oidcLogin()) mock - backend: explicitly configure OIDC provider endpoints to bypass discovery at test time - frontend: remove angular-oauth2-oidc and @ngx-env/builder dependencies - frontend: revert angular.json builders to standard @angular/build:* - frontend: replace client-side OIDC flow with /api/user check + window.location redirects - frontend: update app.config.ts and config.service.ts to remove OIDC configuration - frontend: rewrite all unit tests to mock /api/user endpoint instead of OAuthService - compose: move OIDC_CLIENT_ID and OIDC_CLIENT_SECRET to backend environment variables - compose/dockerfile: remove frontend build-time OIDC ARG/ENV secrets
28 lines
674 B
Docker
28 lines
674 B
Docker
# ==========================================
|
|
# Stage 1: Build using Node.js + Bun
|
|
# ==========================================
|
|
FROM node:26-alpine AS build
|
|
WORKDIR /app
|
|
|
|
RUN npm install -g bun
|
|
|
|
COPY package.json bun.lockb* ./
|
|
RUN bun install --frozen-lockfile
|
|
|
|
COPY . .
|
|
|
|
ENV CI=true
|
|
ENV NG_CLI_ANALYTICS=false
|
|
|
|
RUN bun run build
|
|
|
|
# ==========================================
|
|
# Stage 2: Serve the app using Nginx
|
|
# ==========================================
|
|
FROM nginx:alpine
|
|
RUN rm -rf /usr/share/nginx/html/*
|
|
COPY --from=build /app/dist/lmnp-frontend/browser /usr/share/nginx/html
|
|
COPY nginx.conf /etc/nginx/conf.d/default.conf
|
|
|
|
EXPOSE 80
|
|
CMD ["nginx", "-g", "daemon off;"] |