mirror of
https://github.com/bmlong137/alfresco-keycloak.git
synced 2025-05-12 21:24:43 +00:00
4b1b0cbd08
- add exact path match condition to allow selection of specific groups - add negative match conditions to exclude specific groups/users - support group names derived from attibutes
313 lines
13 KiB
XML
313 lines
13 KiB
XML
<?xml version='1.0' encoding='UTF-8'?>
|
|
<!--
|
|
Copyright 2019 - 2025 Acosix GmbH
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
-->
|
|
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
|
|
<modelVersion>4.0.0</modelVersion>
|
|
|
|
<parent>
|
|
<groupId>de.acosix.alfresco.keycloak</groupId>
|
|
<artifactId>de.acosix.alfresco.keycloak.parent</artifactId>
|
|
<version>1.2.0-rc1</version>
|
|
</parent>
|
|
|
|
<artifactId>de.acosix.alfresco.keycloak.share</artifactId>
|
|
<name>Acosix Alfresco Keycloak - Share Module</name>
|
|
|
|
<properties>
|
|
<docker.tests.keycloakPort>8380</docker.tests.keycloakPort>
|
|
<docker.tests.skipSearchImage>false</docker.tests.skipSearchImage>
|
|
</properties>
|
|
|
|
<dependencyManagement>
|
|
<dependencies>
|
|
|
|
<dependency>
|
|
<groupId>org.bouncycastle</groupId>
|
|
<artifactId>bcpkix-jdk18on</artifactId>
|
|
<version>1.80</version>
|
|
</dependency>
|
|
|
|
</dependencies>
|
|
</dependencyManagement>
|
|
|
|
<dependencies>
|
|
|
|
<dependency>
|
|
<groupId>org.alfresco</groupId>
|
|
<artifactId>share</artifactId>
|
|
<classifier>classes</classifier>
|
|
</dependency>
|
|
|
|
<dependency>
|
|
<groupId>jakarta.servlet</groupId>
|
|
<artifactId>jakarta.servlet-api</artifactId>
|
|
</dependency>
|
|
|
|
<dependency>
|
|
<groupId>org.keycloak</groupId>
|
|
<artifactId>keycloak-adapter-core</artifactId>
|
|
<exclusions>
|
|
<!-- don't include activation standalone JAR - rely on JDK inclusion since Java 6 -->
|
|
<exclusion>
|
|
<groupId>com.sun.activation</groupId>
|
|
<artifactId>*</artifactId>
|
|
</exclusion>
|
|
<exclusion>
|
|
<groupId>org.bouncycastle</groupId>
|
|
<artifactId>*</artifactId>
|
|
</exclusion>
|
|
</exclusions>
|
|
</dependency>
|
|
|
|
<dependency>
|
|
<groupId>org.keycloak</groupId>
|
|
<artifactId>keycloak-jakarta-servlet-adapter-spi</artifactId>
|
|
<exclusions>
|
|
<!-- don't include activation standalone JAR - rely on JDK inclusion since Java 6 -->
|
|
<exclusion>
|
|
<groupId>com.sun.activation</groupId>
|
|
<artifactId>*</artifactId>
|
|
</exclusion>
|
|
<exclusion>
|
|
<groupId>org.bouncycastle</groupId>
|
|
<artifactId>*</artifactId>
|
|
</exclusion>
|
|
<!-- use default from Alfresco Share -->
|
|
<exclusion>
|
|
<groupId>org.apache.httpcomponents</groupId>
|
|
<artifactId>httpcomponents-client</artifactId>
|
|
</exclusion>
|
|
</exclusions>
|
|
</dependency>
|
|
|
|
<dependency>
|
|
<groupId>org.keycloak</groupId>
|
|
<artifactId>keycloak-jakarta-servlet-filter-adapter</artifactId>
|
|
<exclusions>
|
|
<!-- don't include activation standalone JAR - rely on JDK inclusion since Java 6 -->
|
|
<exclusion>
|
|
<groupId>com.sun.activation</groupId>
|
|
<artifactId>*</artifactId>
|
|
</exclusion>
|
|
<exclusion>
|
|
<groupId>org.bouncycastle</groupId>
|
|
<artifactId>*</artifactId>
|
|
</exclusion>
|
|
</exclusions>
|
|
</dependency>
|
|
|
|
<dependency>
|
|
<groupId>org.keycloak</groupId>
|
|
<artifactId>keycloak-authz-client</artifactId>
|
|
<exclusions>
|
|
<exclusion>
|
|
<groupId>org.bouncycastle</groupId>
|
|
<artifactId>*</artifactId>
|
|
</exclusion>
|
|
</exclusions>
|
|
</dependency>
|
|
|
|
<!-- BouncyCastle cannot be made part of an uber-JAR -->
|
|
<dependency>
|
|
<groupId>org.bouncycastle</groupId>
|
|
<artifactId>bcpkix-jdk18on</artifactId>
|
|
</dependency>
|
|
|
|
<dependency>
|
|
<groupId>de.acosix.alfresco.utility</groupId>
|
|
<artifactId>de.acosix.alfresco.utility.core.share</artifactId>
|
|
</dependency>
|
|
|
|
<dependency>
|
|
<groupId>junit</groupId>
|
|
<artifactId>junit</artifactId>
|
|
</dependency>
|
|
|
|
</dependencies>
|
|
|
|
<build>
|
|
<pluginManagement>
|
|
<plugins>
|
|
|
|
<plugin>
|
|
<artifactId>maven-source-plugin</artifactId>
|
|
<configuration>
|
|
<classifier>sources-unshaded</classifier>
|
|
</configuration>
|
|
</plugin>
|
|
|
|
<plugin>
|
|
<artifactId>maven-shade-plugin</artifactId>
|
|
<executions>
|
|
<execution>
|
|
<phase>package</phase>
|
|
<goals>
|
|
<goal>shade</goal>
|
|
</goals>
|
|
<configuration>
|
|
<!-- generating using `sources` classifier, which conflicts with the main `sources` -->
|
|
<createSourcesJar>true</createSourcesJar>
|
|
<shadeSourcesContent>true</shadeSourcesContent>
|
|
<keepDependenciesWithProvidedScope>false</keepDependenciesWithProvidedScope>
|
|
<artifactSet>
|
|
<includes>
|
|
<include>org.keycloak:*</include>
|
|
<include>com.fasterxml.jackson.core:*</include>
|
|
<include>org.jboss.logging:*</include>
|
|
</includes>
|
|
</artifactSet>
|
|
<relocations>
|
|
<relocation>
|
|
<pattern>org.keycloak</pattern>
|
|
<shadedPattern>de.acosix.alfresco.keycloak.deps.keycloak</shadedPattern>
|
|
</relocation>
|
|
<relocation>
|
|
<pattern>com.fasterxml.jackson</pattern>
|
|
<shadedPattern>de.acosix.alfresco.keycloak.deps.jackson</shadedPattern>
|
|
</relocation>
|
|
<relocation>
|
|
<pattern>org.jboss.logging</pattern>
|
|
<shadedPattern>de.acosix.alfresco.keycloak.deps.jboss.logging</shadedPattern>
|
|
</relocation>
|
|
</relocations>
|
|
<transformers>
|
|
<transformer
|
|
implementation="org.apache.maven.plugins.shade.resource.ServicesResourceTransformer" />
|
|
<transformer
|
|
implementation="org.apache.maven.plugins.shade.resource.ApacheLicenseResourceTransformer" />
|
|
<transformer
|
|
implementation="org.apache.maven.plugins.shade.resource.ApacheNoticeResourceTransformer">
|
|
<addHeader>false</addHeader>
|
|
</transformer>
|
|
</transformers>
|
|
<filters>
|
|
<filter>
|
|
<artifact>org.keycloak:*</artifact>
|
|
<excludes>
|
|
<exclude>META-INF/MANIFEST.MF</exclude>
|
|
</excludes>
|
|
</filter>
|
|
<filter>
|
|
<artifact>org.jboss.logging:*</artifact>
|
|
<excludes>
|
|
<exclude>META-INF/MANIFEST.MF</exclude>
|
|
</excludes>
|
|
</filter>
|
|
<filter>
|
|
<artifact>com.fasterxml.jackson.core:*</artifact>
|
|
<excludes>
|
|
<exclude>META-INF/MANIFEST.MF</exclude>
|
|
<exclude>META-INF/versions/9/module-info.class</exclude>
|
|
</excludes>
|
|
</filter>
|
|
</filters>
|
|
</configuration>
|
|
</execution>
|
|
</executions>
|
|
</plugin>
|
|
|
|
<plugin>
|
|
<artifactId>maven-dependency-plugin</artifactId>
|
|
<executions>
|
|
<execution>
|
|
<id>unpack-shaded-jar</id>
|
|
<phase>package</phase>
|
|
<goals>
|
|
<goal>unpack</goal>
|
|
</goals>
|
|
<configuration>
|
|
<artifactItems>
|
|
<artifactItem>
|
|
<groupId>${project.groupId}</groupId>
|
|
<artifactId>${project.artifactId}</artifactId>
|
|
<version>${project.version}</version>
|
|
</artifactItem>
|
|
</artifactItems>
|
|
<outputDirectory>${project.build.outputDirectory}</outputDirectory>
|
|
</configuration>
|
|
</execution>
|
|
</executions>
|
|
</plugin>
|
|
|
|
<!-- need to exclude shaded class files from API validation -->
|
|
<plugin>
|
|
<groupId>de.thetaphi</groupId>
|
|
<artifactId>forbiddenapis</artifactId>
|
|
<configuration>
|
|
<excludes>
|
|
<exclude>de/acosix/alfresco/keycloak/deps/**/*.class</exclude>
|
|
</excludes>
|
|
</configuration>
|
|
</plugin>
|
|
|
|
<plugin>
|
|
<groupId>org.codehaus.mojo</groupId>
|
|
<artifactId>findbugs-maven-plugin</artifactId>
|
|
<configuration>
|
|
<onlyAnalyze>de.acosix.alfresco.keycloak.share.*</onlyAnalyze>
|
|
</configuration>
|
|
</plugin>
|
|
|
|
<plugin>
|
|
<artifactId>maven-assembly-plugin</artifactId>
|
|
<executions>
|
|
<execution>
|
|
<id>buildSpecificAMP-withBouncy</id>
|
|
<phase>package</phase>
|
|
<goals>
|
|
<goal>single</goal>
|
|
</goals>
|
|
<configuration>
|
|
<descriptors>
|
|
<descriptor>src/main/assembly/amp-withBouncy.xml</descriptor>
|
|
</descriptors>
|
|
<appendAssemblyId>true</appendAssemblyId>
|
|
<escapeString>\</escapeString>
|
|
<skipAssembly>false</skipAssembly>
|
|
<attach>true</attach>
|
|
</configuration>
|
|
</execution>
|
|
</executions>
|
|
</plugin>
|
|
|
|
</plugins>
|
|
</pluginManagement>
|
|
|
|
<plugins>
|
|
|
|
<plugin>
|
|
<groupId>net.alchim31.maven</groupId>
|
|
<artifactId>yuicompressor-maven-plugin</artifactId>
|
|
</plugin>
|
|
|
|
<plugin>
|
|
<artifactId>maven-shade-plugin</artifactId>
|
|
</plugin>
|
|
|
|
<plugin>
|
|
<artifactId>maven-dependency-plugin</artifactId>
|
|
</plugin>
|
|
|
|
<!-- explicitly listed to be ordered after dependency + shade -->
|
|
<plugin>
|
|
<artifactId>maven-assembly-plugin</artifactId>
|
|
</plugin>
|
|
|
|
</plugins>
|
|
</build>
|
|
|
|
</project> |