feat: first commit

2026-07-06 22:31:15 +08:00
commit a0ebf1dd07
56 changed files with 2784 additions and 0 deletions
@@ -0,0 +1,74 @@
+server:
+  port: 8080
+  servlet:
+    context-path: /violin-iam
+  shutdown: graceful
+
+spring:
+  application:
+    name: violin-iam
+  profiles:
+    active: ${SPRING_PROFILES_ACTIVE:local}
+  jackson:
+    default-property-inclusion: non_null
+    date-format: yyyy-MM-dd HH:mm:ss
+    time-zone: Asia/Shanghai
+  lifecycle:
+    timeout-per-shutdown-phase: 30s
+
+violin:
+  jwt:
+    issuer: ${VIOLIN_JWT_ISSUER:violin-iam}
+    audience: ${VIOLIN_JWT_AUDIENCE:violin-services}
+    expiration-ms: ${VIOLIN_JWT_EXPIRATION_MS:86400000}
+    key-id: ${VIOLIN_JWT_KEY_ID:violin-iam-1}
+    private-key-path: ${VIOLIN_JWT_PRIVATE_KEY_PATH:}
+    public-key-path: ${VIOLIN_JWT_PUBLIC_KEY_PATH:}
+    jwks-url: ${VIOLIN_JWT_JWKS_URL:http://localhost:8080/violin-iam/.well-known/jwks.json}
+    refresh-seconds: ${VIOLIN_JWT_REFRESH_SECONDS:300}
+    clock-skew-seconds: ${VIOLIN_JWT_CLOCK_SKEW_SECONDS:30}
+    profile: ${SPRING_PROFILES_ACTIVE:local}
+  auth:
+    exclude-paths: /error
+    anonymous-message-code: AUTHORIZATION_MISSING
+  iam:
+    service-id: ${VIOLIN_IAM_SERVICE_ID:violin-caller}
+    url: ${VIOLIN_IAM_URL:http://localhost:8080}
+    context-path: ${VIOLIN_IAM_CONTEXT_PATH:/violin-iam}
+    service-token-secret: ${VIOLIN_IAM_SERVICE_TOKEN_SECRET:}
+    service-allowlist: ${VIOLIN_IAM_SERVICE_ALLOWLIST:}
+    profile: ${SPRING_PROFILES_ACTIVE:local}
+
+authentik:
+  issuer: ${AUTHENTIK_ISSUER:}
+  client-id: ${AUTHENTIK_CLIENT_ID:}
+  client-secret: ${AUTHENTIK_CLIENT_SECRET:}
+  redirect-uri: ${AUTHENTIK_REDIRECT_URI:}
+  scope: ${AUTHENTIK_SCOPE:openid profile email}
+
+management:
+  endpoints:
+    web:
+      exposure:
+        include: health,prometheus
+  endpoint:
+    health:
+      show-details: never
+      probes:
+        enabled: true
+      group:
+        liveness:
+          include: livenessState
+        readiness:
+          include: readinessState,db
+    info:
+      enabled: false
+  info:
+    env:
+      enabled: false
+      keys: []
+
+info:
+  app:
+    name: "@project.name@"
+    version: "@project.version@"