Orlowskiwojciech314/ecm 51 add roles and permissions to jwt token in user service

.env

@@ -0,0 +1,31 @@
+CART_SERVICE_PORT=8100
+CART_SERVICE_DB_PORT=9100
+
+PAYMENT_SERVICE_PORT=8200
+PAYMENT_SERVICE_DB_PORT=9200
+
+ORDER_SERVICE_PORT=8300
+ORDER_SERVICE_DB_PORT=9300
+
+PRODUCT_SERVICE_PORT=8400
+PRODUCT_SERVICE_DB_PORT=9400
+
+USER_SERVICE_PORT=8500
+USER_SERVICE_DB_PORT=9500
+
+GATEWAY_SERVICE_PORT=8600
+
+#######################################
+
+# intentionally left blank (it is automatically set to 'compose' profile)
+PAYMENT_SERVICE_SPRING_PROFILES_ACTIVE=
+ORDER_SERVICE_SPRING_PROFILES_ACTIVE=
+PRODUCT_SERVICE_SPRING_PROFILES_ACTIVE=
+CART_SERVICE_SPRING_PROFILES_ACTIVE=
+USER_SERVICE_SPRING_PROFILES_ACTIVE=
+GATEWAY_SERVICE_SPRING_PROFILES_ACTIVE=
+
+#######################################
+
+COMPOSE_PROFILES=payment-service,order-service,cart-service,product-service,gateway-service,kafka
+

.github/workflows/build-java-push-gcp-registry.yaml

@@ -0,0 +1,68 @@
+name: Build and deploy Docker images to GCP Artifact Registry
+
+on:
+    push:
+        branches:
+            - main
+    workflow_dispatch:
+
+env:
+    GCP_REGISTRY: ${{ secrets.ECMSP_GCP_ARTIFACT_REGISTRY }}
+    IMAGE_TAG: ${{ github.sha }}
+    IMAGE_NAME: ${{ github.event.repository.name }}
+
+jobs:
+    build_deploy:
+        runs-on: ubuntu-latest
+
+        steps:
+            - 
+                name: Check out code
+                uses: actions/checkout@v3
+
+            - 
+                name: Set up JDK 21
+                uses: actions/setup-java@v3
+                with:
+                    java-version: '21'
+                    distribution: 'temurin'
+                    cache: 'maven'
+
+            -
+                name: Update Maven snapshots
+                run: mvn -U dependency:resolve
+
+            - 
+                name: Authenticate to Google Cloud
+                uses: google-github-actions/auth@v1
+                with:
+                    credentials_json: ${{ secrets.ECMSP_REGISTRY_PUSHER_GCP_SA_KEY }}
+
+            - 
+                name: Setup gcloud CLI
+                uses: google-github-actions/setup-gcloud@v2
+                with:
+                    version: "latest"
+                    project_id: ecmsp
+
+            - 
+                name: Install gcloud auth
+                run: gcloud components install gke-gcloud-auth-plugin
+
+            -
+                name: Configure Docker for Artifact Registry
+                run: gcloud auth configure-docker europe-west1-docker.pkg.dev
+
+            - 
+                name: Build, tag, and push backend Docker image to GCP Artifact Registry
+                run: |
+                    docker build \
+                      -t $GCP_REGISTRY/$IMAGE_NAME:$IMAGE_TAG \
+                      -t $GCP_REGISTRY/$IMAGE_NAME:latest \
+                      -f ./Dockerfile .
+
+                    docker push $GCP_REGISTRY/$IMAGE_NAME:$IMAGE_TAG
+                    docker push $GCP_REGISTRY/$IMAGE_NAME:latest
+
+
+

.github/workflows/build-test-java-project.yaml

@@ -0,0 +1,45 @@
+name: Build and test Java project
+
+on:
+    pull_request:
+    workflow_dispatch:
+
+jobs:
+    build_test:
+        runs-on: ubuntu-latest
+        steps:
+            -
+                name: Checkout repository
+                uses: actions/checkout@v2
+
+            - 
+                name: Set up JDK 21 
+                uses: actions/setup-java@v3
+                with:
+                    java-version: '21'
+                    distribution: 'temurin'
+                    cache: 'maven'
+
+            -
+                name: Run tests with Maven 
+                run: mvn clean test -U
+
+#             -
+#                 name: Build Docker image for Trivy
+#                 if: github.event_name == 'push' && (github.event.pull_request.base.ref == 'test' || github.event.pull_request.base.ref == 'development')
+#                 run: |
+#                     docker build \
+#                         -t service:latest \
+#                         -f ./Dockerfile .
+#
+#             -
+#                 name: Run Trivy vulnerability scanner
+#                 if: github.event_name == 'push' && (github.event.pull_request.base.ref == 'test' || github.event.pull_request.base.ref == 'development')
+#                 uses: aquasecurity/trivy-action@0.28.0
+#                 with:
+#                     image-ref: "service:latest"
+#                     format: table
+#                     exit-code: 1
+#                     ignore-unfixed: true
+#                     vuln-type: os,library
+#                     severity: CRITICAL,HIGH

.gitignore

@@ -3,7 +3,7 @@ target/
 .mvn/wrapper/maven-wrapper.jar
 !**/src/main/**/target/
 !**/src/test/**/target/
-
+**/src/main/resources/local/secrets
 ### STS ###
 .apt_generated
 .classpath

Dockerfile

@@ -0,0 +1,11 @@
+FROM maven:3.9-eclipse-temurin-21 AS builder
+WORKDIR /app
+COPY pom.xml .
+COPY src ./src
+RUN mvn clean package
+
+FROM eclipse-temurin:21-jdk AS runtime
+WORKDIR /app
+
+COPY --from=builder /app/target/*.jar ./app.jar
+CMD ["java", "-jar", "app.jar"]