Fix authentication (#398)

* remove test flags for disabling authentication

2 files changed, 10 insertions, 13 deletions

diff --git a/opendc-web/opendc-web-server/src/main/resources/application-docker.properties b/opendc-web/opendc-web-server/src/main/resources/application-docker.properties
index f0b3e7dc..f85e9185 100644
--- a/opendc-web/opendc-web-server/src/main/resources/application-docker.properties
+++ b/opendc-web/opendc-web-server/src/main/resources/application-docker.properties
@@ -30,23 +30,18 @@ quarkus.datasource.jdbc.url=${OPENDC_DB_URL}
 quarkus.hibernate-orm.dialect=org.hibernate.dialect.PostgreSQLDialect
 
 # Security
-opendc.security.enabled=true
-quarkus.oidc.auth-server-url=https://${OPENDC_AUTH0_DOMAIN}
-quarkus.oidc.client-id=${OPENDC_AUTH0_AUDIENCE}
-quarkus.oidc.token.audience=${quarkus.oidc.client-id}
+quarkus.oidc.auth-server-url=${OPENDC_AUTH0_DOMAIN}
+quarkus.oidc.application-type=service
+quarkus.oidc.client-id=${OPENDC_AUTH0_CLIENT_ID}
+quarkus.oidc.token.audience=${OPENDC_AUTH0_AUDIENCE}
 quarkus.oidc.roles.role-claim-path=scope
 
 # Swagger UI
-quarkus.swagger-ui.oauth-client-id=${OPENDC_AUTH0_DOCS_CLIENT_ID:}
-quarkus.swagger-ui.oauth-additional-query-string-params={"audience":"${OPENDC_AUTH0_AUDIENCE:https://api.opendc.org/v2/}"}
-
-quarkus.smallrye-openapi.security-scheme=oidc
-quarkus.smallrye-openapi.security-scheme-name=Auth0
-quarkus.smallrye-openapi.oidc-open-id-connect-url=https://${OPENDC_AUTH0_DOMAIN:opendc.eu.auth0.com}/.well-known/openid-configuration
-quarkus.smallrye-openapi.servers=https://api.opendc.org
+quarkus.swagger-ui.oauth-client-id=${OPENDC_AUTH0_CLIENT_ID}
+quarkus.swagger-ui.oauth-additional-query-string-params={"audience":"${OPENDC_AUTH0_AUDIENCE:https://opendc.org}"}
 
 # Enable the settings below if you want to test the docker-compose deployment locally
 #quarkus.hibernate-orm.database.generation=drop-and-create
-#quarkus.resteasy.path=/api
-#quarkus.oidc.enabled=false
+quarkus.resteasy.path=/api
+quarkus.oidc.enabled=true
 #opendc.security.enabled=false
diff --git a/opendc-web/opendc-web-server/src/main/webui/auth.js b/opendc-web/opendc-web-server/src/main/webui/auth.js
index 8c88f526..89e8c0d7 100644
--- a/opendc-web/opendc-web-server/src/main/webui/auth.js
+++ b/opendc-web/opendc-web-server/src/main/webui/auth.js
@@ -83,6 +83,8 @@ export function AuthProvider({ children }) {
                 clientId={authConfig.clientId}
                 redirectUri={authConfig.redirectUri}
                 audience={authConfig.audience}
+                cacheLocation="localstorage"
+                useRefreshTokens={true}
             >
                 {children}
             </Auth0Provider>