Skip to content

Add default OIDC scopes and auto-configuration for new applications#31

Draft
Copilot wants to merge 2 commits intomasterfrom
copilot/enhance-user-configuration
Draft

Add default OIDC scopes and auto-configuration for new applications#31
Copilot wants to merge 2 commits intomasterfrom
copilot/enhance-user-configuration

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Nov 10, 2025

Implements user-friendly enhancements to reduce manual configuration and improve OpenID Connect compliance. Addresses requirements 2-4 from the problem statement; requirement 1 (site settings management for default app members) requires new infrastructure and is deferred.

Changes

Database initialization

  • Added standard OIDC scopes: openid, profile, email to data.sql

Auto-configuration for new clients

Modified DefaultClientService.create() to automatically include default grant types and scopes if present in system:

  • Grant types: authorization_code, refresh_token
  • Scopes: openid, profile, email

User-provided values are preserved; defaults supplement rather than replace.

// New helper methods query by name and merge with user input
private Collection<Long> enhanceScopesWithDefaults(Collection<Long> scopes) {
    Set<Long> result = new HashSet<>(scopes != null ? scopes : Collections.emptyList());
    Collection<DefaultScope> defaults = scopeMapper.selectScopesByNames(
        Arrays.asList("openid", "profile", "email"));
    defaults.forEach(s -> result.add(s.getSid()));
    return result;
}

Mapper enhancements

  • ScopeMapper.selectScopesByNames() - query scopes by name
  • GrantTypeMapper.selectGrantTypesByNames() - query grant types by name

Documentation

Added OpenID Connect endpoints table to README with Discovery, UserInfo, Token, and JWK endpoints. Documented standard OIDC scopes and auto-configuration behavior.

Deferred

Site settings management (logo, title, homepage, navigation, banners) requires:

  • New settings schema and storage
  • Backend API layer
  • Frontend UI components
  • Permission system extensions

Better addressed as dedicated feature work.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • kubernetes.default.svc
    • Triggering command: /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -Dspring.application.admin.enabled=true -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.port=9001 -Dcom.sun.management.jmxremote.authenticate=false -Dcom.sun.management.jmxremote.ssl=false -Djava.rmi.server.hostname=127.0.0.1 -cp /home/REDACTED/work/auth/auth/auth-service/target/classes:/home/REDACTED/work/auth/auth/auth-core/target/auth-core-1.2.0-alpha-3.jar:/home/REDACTED/.m2/repository/org/springframework/security/oauth/spring-security-oauth2/2.3.6.RELEASE/spring-security-oauth2-2.3.6.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-beans/5.2.10.RELEASE/spring-beans-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-core/5.2.10.RELEASE/spring-core-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-context/5.2.10.RELEASE/spring-context-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/security/spring-security-core/5.3.5.RELEASE/spring-security-core-5.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/security/spring-security-config/5.3.5.RELEASE/spring-security-config-5.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/security/spring-security-web/5.3.5.RELEASE/spring-security-web-5.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/commons-codec/commons-codec/1.14/commons-codec-1.14.jar:/home/REDACTED/.m2/repository/org/codehaus/jackson/jackson-mapper-asl/1.9.13/jackson-mapper-asl-1.9.13.jar:/home/REDACTED/.m2/repository/org/codehaus/jackson/jackson-core-asl/1.9.13/jackson-core-asl-1.9.13.jar:/home/REDACTED/.m2/repository/org/springdoc/springdoc-openapi-common/1.5.4/springdoc-openapi-common-1.5.4.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-autoconfigure/2.3.5.RELEASE/spring-boot-autoconfigure-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/io/swagger/core/v3/swagger-models/2.1.6/swagger-models-2.1.6.jar:/home/REDACTED/.m2/repository/io/swagger/core/v3/swagger-annotations/2.1.6/swagger-annotations-2.1.6.jar:/home/REDACTED/.m2/repository/io/swagger/core/v3/swagger-integration/2.1.6/swagger-integration-2.1.6.jar:/home/REDACTED/.m2/repository/io/swagger/core/v3/swagger-core/2.1.6/swagger-core-2.1.6.jar:/home/REDACTED/.m2/repository/jakarta/validation/jakarta.validation-api/2.0.2/jakarta.validation-api-2.0.2.jar:/home/REDACTED/.m2/repository/io/github/classgraph/classgraph/4.8.69/classgraph-4.8.69.jar:/home/REDACTED/.m2/repository/org/apache/commons/commons-lang3/3.10/commons-lang3-3.10.jar:/home/REDACTED/.m2/repository/cn/dustlight/storage/tencent-cloud-object-storage/0.0.5/tencent-cloud-object-storage-0.0.5.jar:/home/REDACTED/.m2/repository/com/qcloud/cos_api/5.6.37/cos_api-5.6.37.jar:/home/REDACTED/.m2/repository/org/apache/httpcomponents/httpclient/4.5.13/httpclient-4.5.13.jar:/home/REDACTED/.m2/repository/org/apache/httpcomponents/httpcore/4.4.13/httpcore-4.4.13.jar:/home/REDACTED/.m2/repository/org/slf4j/slf4j-api/1.7.30/slf4j-api-1.7.30.jar:/home/REDACTED/.m2/repository/joda-time/joda-time/2.9.9/joda-time-2.9.9.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.11.3/jackson-databind-2.11.3.jar:/home/REDACTED/.m2/repository/com/tencentcloudapi/tencentcloud-sdk-java-kms/3.1.213/tencentcloud-sdk-java-kms-3.1.213.jar:/home/REDACTED/.m2/repository/com/tencentcloudapi/tencentcloud-sdk-java-common/3.1.213/tencentcloud-sdk-java-common-3.1.213.jar:/home/REDACTED/.m2/repository/log4j/log4j/1.2.17/log4j-1.2.17.jar:/home/REDACTED/.m2/repository/org/bouncycastle/bcprov-jdk15on/1.64/bcprov-jdk15on-1.64.jar:/home/REDACTED/.m2/repository/cn/dustlight/storage/storage-core/0.0.5/storage-core-0.0.5.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter/2.3.5.RELEASE/spring-boot-starter-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot/2.3.5.RELEASE/spring-boot-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-logging/2.3.5.RELEASE/spring-boot-starter-logging-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/ch/qos/logback/logback-classic/1.2.3/logback-classic-1.2.3.jar:/home/REDACTED/.m2/repository/ch/qos/logback/logback-core/1.2.3/logback-core-1.2.3.jar:/home/REDACTED/.m2/repository/org/apache/logging/log4j/log4j-to-slf4j/2.13.3/log4j-to-slf4j-2.13.3.jar:/home/REDACTED/.m2/repository/org/apache/logging/log4j/log4j-api/2.13.3/log4j-api-2.13.3.jar:/home/REDACTED/.m2/repository/org/slf4j/jul-to-slf4j/1.7.30/jul-to-slf4j-1.7.30.jar:/home/REDACTED/.m2/repository/jakarta/annotation/jakarta.annotation-api/1.3.5/jakarta.annotation-api-1.3.5.jar:/home/REDACTED/.m2/repository/org/yaml/snakeyaml/1.26/snakeyaml-1.26.jar:/home/REDACTED/.m2/repository/cn/dustlight/storage/alibaba-cloud-object-storage/0.0.5/alibaba-cloud-object-storage-0.0.5.jar:/home/REDACTED/.m2/repository/com/aliyun/oss/aliyun-sdk-oss/3.10.2/aliyun-sdk-oss-3.10.2.jar:/home/REDACTED/.m2/repository/org/jdom/jdom2/2.0.6/jdom2-2.0.6.jar:/home/REDACTED/.m2/repository/org/codehaus/jettison/jettison/1.1/jettison-1.1.jar:/home/REDACTED/.m2/repository/stax/stax-api/1.0.1/stax-api-1.0.1.jar:/home/REDACTED/.m2/repository/com/aliyun/aliyun-java-sdk-core/3.4.0/aliyun-java-sdk-core-3.4.0.jar:/home/REDACTED/.m2/repository/com/aliyun/aliyun-java-sdk-ram/3.0.0/aliyun-java-sdk-ram-3.0.0.jar:/home/REDACTED/.m2/repository/com/aliyun/aliyun-java-sdk-sts/3.0.0/aliyun-java-sdk-sts-3.0.0.jar:/home/REDACTED/.m2/repository/com/aliyun/aliyun-java-sdk-ecs/4.2.0/aliyun-java-sdk-ecs-4.2.0.jar:/home/REDACTED/.m2/repository/com/aliyun/aliyun-java-sdk-kms/2.7.0/aliyun-java-sdk-kms-2.7.0.jar:/home/REDACTED/.m2/repository/cn/dustlight/captcha/captcha-core/1.0.1/captcha-core-1.0.1.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-aop/2.3.5.RELEASE/spring-boot-starter-aop-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-aop/5.2.10.RELEASE/spring-aop-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/aspectj/aspectjweaver/1.9.6/aspectjweaver-1.9.6.jar:/home/REDACTED/.m2/repository/org/springframework/spring-web/5.2.10.RELEASE/spring-web-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/apache/tomcat/embed/tomcat-embed-core/9.0.39/tomcat-embed-core-9.0.39.jar:/home/REDACTED/.m2/repository/org/apache/tomcat/tomcat-annotations-api/9.0.39/tomcat-annotations-api-9.0.39.jar:/home/REDACTED/.m2/repository/cn/dustlight/captcha/recaptcha/1.0.1/recaptcha-1.0.1.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/core/jackson-annotations/2.11.3/jackson-annotations-2.11.3.jar:/home/REDACTED/.m2/repository/cn/dustlight/captcha/redis-store/1.0.1/redis-store-1.0.1.jar:/home/REDACTED/.m2/repository/cn/dustlight/captcha/email-sender/1.0.1/email-sender-1.0.1.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-mail/2.3.5.RELEASE/spring-boot-starter-mail-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-context-support/5.2.10.RELEASE/spring-context-support-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/com/sun/mail/jakarta.mail/1.6.5/jakarta.mail-1.6.5.jar:/home/REDACTED/.m2/repository/com/sun/activation/jakarta.activation/1.2.2/jakarta.activation-1.2.2.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-freemarker/2.3.5.RELEASE/spring-boot-starter-freemarker-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/freemarker/freemarker/2.3.30/freemarker-2.3.30.jar:/home/REDACTED/.m2/repository/cn/dustlight/captcha/tencent-sms/1.0.1/tencent-sms-1.0.1.jar:/home/REDACTED/.m2/repository/com/tencentcloudapi/tencentcloud-sdk-java/3.1.304/tencentcloud-sdk-java-3.1.304.jar:/home/REDACTED/.m2/repository/commons-logging/commons-logging/1.2/commons-logging-1.2.jar:/home/REDACTED/.m2/repository/com/squareup/okio/okio/1.12.0/okio-1.12.0.jar:/home/REDACTED/.m2/repository/com/squareup/okhttp/okhttp/2.7.5/okhttp-2.7.5.jar:/home/REDACTED/.m2/repository/com/google/code/gson/gson/2.8.6/gson-2.8.6.jar:/home/REDACTED/.m2/repository/javax/xml/bind/jaxb-api/2.3.1/jaxb-api-2.3.1.jar:/home/REDACTED/.m2/repository/javax/activation/javax.activation-api/1.2.0/javax.activation-api-1.2.0.jar:/home/REDACTED/.m2/repository/com/squareup/okhttp/logging-interceptor/2.7.5/logging-interceptor-2.7.5.jar:/home/REDACTED/.m2/repository/cn/dustlight/captcha/aliyun-sms/1.0.1/aliyun-sms-1.0.1.jar:/home/REDACTED/.m2/repository/com/aliyun/dysmsapi20170525/2.0.4/dysmsapi20170525-2.0.4.jar:/home/REDACTED/.m2/repository/com/aliyun/tea-util/0.2.11/tea-util-0.2.11.jar:/home/REDACTED/.m2/repository/com/aliyun/endpoint-util/0.0.6/endpoint-util-0.0.6.jar:/home/REDACTED/.m2/repository/com/aliyun/tea/1.3.3/tea-1.3.3.jar:/home/REDACTED/.m2/repository/com/squareup/okhttp3/okhttp/3.14.9/okhttp-3.14.9.jar:/home/REDACTED/.m2/repository/com/aliyun/tea-openapi/0.0.16/tea-openapi-0.0.16.jar:/home/REDACTED/.m2/repository/com/aliyun/credentials-java/0.2.4/credentials-java-0.2.4.jar:/home/REDACTED/.m2/repository/org/ini4j/ini4j/0.5.4/ini4j-0.5.4.jar:/home/REDACTED/.m2/repository/org/jacoco/org.jacoco.agent/0.8.3/org.jacoco.agent-0.8.3-runtime.jar:/home/REDACTED/.m2/repository/com/sun/xml/bind/jaxb-core/2.3.0/jaxb-core-2.3.0.jar:/home/REDACTED/.m2/repository/com/sun/xml/bind/jaxb-impl/2.3.0/jaxb-impl-2.3.0.jar:/home/REDACTED/.m2/repository/com/aliyun/openapiutil/0.1.6/openapiutil-0.1.6.jar:/home/REDACTED/.m2/repository/org/mybatis/spring/boot/mybatis-spring-boot-starter/2.1.3/mybatis-spring-boot-starter-2.1.3.jar:/home/REDACTED/.m2/repository/org/mybatis/spring/boot/mybatis-spring-boot-autoconfigure/2.1.3/mybatis-spring-boot-autoconfigure-2.1.3.jar:/home/REDACTED/.m2/repository/org/mybatis/mybatis/3.5.5/mybatis-3.5.5.jar:/home/REDACTED/.m2/repository/org/mybatis/mybatis-spring/2.0.5/mybatis-spring-2.0.5.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-jdbc/2.3.5.RELEASE/spring-boot-starter-jdbc-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/com/zaxxer/HikariCP/3.4.5/HikariCP-3.4.5.jar:/home/REDACTED/.m2/repository/org/springframework/spring-jdbc/5.2.10.RELEASE/spring-jdbc-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-tx/5.2.10.RELEASE/spring-tx-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/mysql/mysql-connector-java/8.0.22/mysql-connector-java-8.0.22.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-data-redis/2.3.5.RELEASE/spring-boot-starter-data-redis-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/data/spring-data-redis/2.3.5.RELEASE/spring-data-redis-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/data/spring-data-keyvalue/2.3.5.RELEASE/spring-data-keyvalue-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/data/spring-data-commons/2.3.5.RELEASE/spring-data-commons-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-oxm/5.2.10.RELEASE/spring-oxm-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/io/lettuce/lettuce-core/5.3.5.RELEASE/lettuce-core-5.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/io/netty/netty-common/4.1.53.Final/netty-common-4.1.53.Final.jar:/home/REDACTED/.m2/repository/io/netty/netty-handler/4.1.53.Final/netty-handler-4.1.53.Final.jar:/home/REDACTED/.m2/repository/io/netty/netty-resolver/4.1.53.Final/netty-resolver-4.1.53.Final.jar:/home/REDACTED/.m2/repository/io/netty/netty-buffer/4.1.53.Final/netty-buffer-4.1.53.Final.jar:/home/REDACTED/.m2/repository/io/netty/netty-codec/4.1.53.Final/netty-codec-4.1.53.Final.jar:/home/REDACTED/.m2/repository/io/netty/netty-transport/4.1.53.Final/netty-transport-4.1.53.Final.jar:/home/REDACTED/.m2/repository/io/projectreactor/reactor-core/3.3.11.RELEASE/reactor-core-3.3.11.RELEASE.jar:/home/REDACTED/.m2/repository/org/reactivestreams/reactive-streams/1.0.3/reactive-streams-1.0.3.jar:/home/REDACTED/.m2/repository/org/springframework/session/spring-session-data-redis/2.3.1.RELEASE/spring-session-data-redis-2.3.1.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/session/spring-session-core/2.3.1.RELEASE/spring-session-core-2.3.1.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-jcl/5.2.10.RELEASE/spring-jcl-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/springdoc/springdoc-openapi-ui/1.5.4/springdoc-openapi-ui-1.5.4.jar:/home/REDACTED/.m2/repository/org/springdoc/springdoc-openapi-webmvc-core/1.5.4/springdoc-openapi-webmvc-core-1.5.4.jar:/home/REDACTED/.m2/repository/org/webjars/swagger-ui/3.42.0/swagger-ui-3.42.0.jar:/home/REDACTED/.m2/repository/org/webjars/webjars-locator-core/0.45/webjars-locator-core-0.45.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.11.3/jackson-core-2.11.3.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-configuration-processor/2.3.5.RELEASE/spring-boot-configuration-processor-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-web/2.3.5.RELEASE/spring-boot-starter-web-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-json/2.3.5.RELEASE/spring-boot-starter-json-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.11.3/jackson-datatype-jdk8-2.11.3.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.11.3/jackson-datatype-jsr310-2.11.3.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/module/jackson-module-parameter-names/2.11.3/jackson-module-parameter-names-2.11.3.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-tomcat/2.3.5.RELEASE/spring-boot-starter-tomcat-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/glassfish/jakarta.el/3.0.3/jakarta.el-3.0.3.jar:/home/REDACTED/.m2/repository/org/apache/tomcat/embed/tomcat-embed-websocket/9.0.39/tomcat-embed-websocket-9.0.39.jar:/home/REDACTED/.m2/repository/org/springframework/spring-webmvc/5.2.10.RELEASE/spring-webmvc-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-expression/5.2.10.RELEASE/spring-expression-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-actuator/2.3.5.RELEASE/spring-boot-starter-actuator-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-actuator-autoconfigure/2.3.5.RELEASE/spring-boot-actuator-autoconfigure-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-actuator/2.3.5.RELEASE/spring-boot-actuator-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/io/micrometer/micrometer-core/1.5.6/micrometer-core-1.5.6.jar:/home/REDACTED/.m2/repository/org/hdrhistogram/HdrHistogram/2.1.12/HdrHistogram-2.1.12.jar:/home/REDACTED/.m2/repository/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar:/home/REDACTED/.m2/repository/org/springframework/cloud/spring-cloud-starter-kubernetes/1.1.7.RELEASE/spring-cloud-starter-kubernetes-1.1.7.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/cloud/spring-cloud-kubernetes-core/1.1.7.RELEASE/spring-cloud-kubernetes-core-1.1.7.RELEASE.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-client/4.10.3/kubernetes-client-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-core/4.10.3/kubernetes-model-core-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-common/4.10.3/kubernetes-model-common-4.10.3.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/module/jackson-module-jaxb-annotations/2.11.3/jackson-module-jaxb-annotations-2.11.3.jar:/home/REDACTED/.m2/repository/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-rbac/4.10.3/kubernetes-model-rbac-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-admissionregistration/4.10.3/kubernetes-model-admissionregistration-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-apps/4.10.3/kubernetes-model-apps-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-autoscaling/4.10.3/kubernetes-model-autoscaling-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-apiextensions/4.10.3/kubernetes-model-apiextensions-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-batch/4.10.3/kubernetes-model-batch-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-certificates/4.10.3/kubernetes-model-certificates-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-coordination/4.10.3/kubernetes-model-coordination-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-discovery/4.10.3/kubernetes-model-discovery-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-events/4.10.3/kubernetes-model-events-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-extensions/4.10.3/kubernetes-model-extensions-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-networking/4.10.3/kubernetes-model-networking-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-metrics/4.10.3/kubernetes-model-metrics-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-policy/4.10.3/kubernetes-model-policy-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-scheduling/4.10.3/kubernetes-model-scheduling-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-settings/4.10.3/kubernetes-model-settings-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-storageclass/4.10.3/kubernetes-model-storageclass-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/openshift-model/4.10.3/openshift-model-4.10.3.jar:/home/REDACTED/.m2/repository/com/squareup/okhttp3/logging-interceptor/3.14.9/logging-interceptor-3.14.9.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.11.3/jackson-dataformat-yaml-2.11.3.jar:/home/REDACTED/.m2/repository/io/fabric8/zjsonpatch/0.3.0/zjsonpatch-0.3.0.jar:/home/REDACTED/.m2/repository/com/github/mifmif/generex/1.0.2/generex-1.0.2.jar:/home/REDACTED/.m2/repository/dk/brics/automaton/automaton/1.11-8/automaton-1.11-8.jar:/home/REDACTED/.m2/repository/org/springframework/cloud/spring-cloud-context/2.2.6.RELEASE/spring-cloud-context-2.2.6.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/security/spring-security-crypto/5.3.5.RELEASE/spring-security-crypto-5.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/cloud/spring-cloud-kubernetes-discovery/1.1.7.RELEASE/spring-cloud-kubernetes-discovery-1.1.7.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/cloud/spring-cloud-commons/2.2.6.RELEASE/spring-cloud-commons-2.2.6.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/cloud/spring-cloud-starter-kubernetes-config/1.1.7.RELEASE/spring-cloud-starter-kubernetes-config-1.1.7.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/cloud/spring-cloud-kubernetes-config/1.1.7.RELEASE/spring-cloud-kubernetes-config-1.1.7.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/security/spring-security-rsa/1.0.9.RELEASE/spring-security-rsa-1.0.9.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/security/spring-security-jwt/1.1.1.RELEASE/spring-security-jwt-1.1.1.RELEASE.jar:/home/REDACTED/.m2/repository/org/bouncycastle/bcpkix-jdk15on/1.64/bcpkix-jdk15on-1.64.jar:/home/REDACTED/.m2/repository/com/nimbusds/nimbus-jose-jwt/8.19/nimbus-jose-jwt-8.19.jar:/home/REDACTED/.m2/repository/com/github/stephenc/jcip/jcip-annotations/1.0-1/jcip-annotations-1.0-1.jar:/home/REDACTED/.m2/repository/net/minidev/json-smart/2.3/json-smart-2.3.jar:/home/REDACTED/.m2/repository/net/minidev/accessors-smart/1.2/accessors-smart-1.2.jar:/home/REDACTED/.m2/repository/org/ow2/asm/asm/5.0.4/asm-5.0.4.jar:/home/REDACTED/.m2/repository/jakarta/xml/bind/jakarta.xml.bind-api/2.3.2/jakarta.xml.bind-api-2.3.2.jar:/home/REDACTED/.m2/repository/jakarta/activation/jakarta.activation-api/1.2.2/jakarta.activation-api-1.2.2.jar:/home/REDACTED/.m2/repository/org/glassfish/jaxb/jaxb-runtime/2.3.2/jaxb-runtime-2.3.2.jar:/home/REDACTED/.m2/repository/org/glassfish/jaxb/txw2/2.3.3/txw2-2.3.3.jar:/home/REDACTED/.m2/repository/com/sun/istack/istack-commons-runtime/3.0.8/istack-commons-runtime-3.0.8.jar:/home/REDACTED/.m2/repository/org/jvnet/staxex/stax-ex/1.8.1/stax-ex-1.8.1.jar:/home/REDACTED/.m2/repository/com/sun/xml/fastinfoset/FastInfoset/1.2.16/FastInfoset-1.2.16.jar:/home/REDACTED/.m2/repository/org/projectlombok/lombok/1.18.34/lombok-1.18.34.jar cn.dustlight.auth.AuthServiceApplication --spring.application.admin.enabled=true --spring.application.admin.jmx-name=org.springframework.boot:type=Admin,name=SpringApplication (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Original prompt

用户友好

这个项目是一个身份认证提供服务,功能齐全,但是如果用户真的要使用的话,需要魔改的地方太多了,主要是没有进行配置化,以及简化使用,以下是我想到的点,如果你有更多补充的也可以提出来。

  1. 允许系统默认应用 default 的成员更改:站点 Logo 图标、站点 title、首页的启用与否、首页的内容、首页显示的链接导航、公告 Banner。
  2. 系统初始化的时候默认带有scope :openid profile email。
  3. 所有应用创建的时候,如果系统中有 authorization_code 或者 refresh_code 的时候,应用默认添加这两个授权模式。如果有 openid profile email 这几个 scope 也自动带上。
  4. README.md 加上支持 OpenID Connect 的说明以及相关接口地址。

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Co-authored-by: Hansin1997 <21296198+Hansin1997@users.noreply.github.com>
Copilot AI changed the title [WIP] Enhance user configuration for authentication service Add default OIDC scopes and auto-configuration for new applications Nov 10, 2025
Copilot AI requested a review from Hansin1997 November 10, 2025 03:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants