Production

How to build for production

Build the project

• Clone project
• Navigate to the cloned directory
• Run maven command for build mvn clean package -Dserver.url=https://somewhere.com
• Deploy to tomcat cp api/target/spreg.war /var/libtomcat8/webapps/.

Configure apache2 (OIDC protected)

• Install needed libraries

    wget https://github.com/zmartzone/mod_auth_openidc/releases/download/v2.3.0/libcjose0_0.5.1-1.stretch.1_amd64.deb
    wget https://github.com/zmartzone/mod_auth_openidc/releases/download/v2.3.3/libapache2-mod-auth-openidc_2.3.3-1.stretch.1_amd64.deb
    dpkg -i libcjose0_0.5.1-1.stretch.1_amd64.deb libapache2-mod-auth-openidc_2.3.3-1.stretch.1_amd64.deb
    a2enmod auth_openidc

• Modify configuration (000-default.conf)

    OIDCProviderMetadataURL https://login.cesnet.cz/oidc/.well-known/openid-configuration
    OIDCProviderMetadataRefreshInterval 3600
    OIDCClientID fill_yours
    OIDCClientSecret fill_yours
    OIDCScope "openid"
    OIDCRedirectURI /oauth2callback
    OIDCRemoteUserClaim "sub"
    OIDCCryptoPassphrase 1354684351364314
    OIDCHTTPTimeoutShort 10

    <Location /oauth2callback>
       #non-existent location for returning from OIDC server
       AuthType openid-connect
       Require valid-user
    </Location>
    <LocationMatch "^/spreg/auth.*">
	AuthType openid-connect
	Require valid-user
    </LocationMatch>

    ProxyPass                   /spreg    ajp://localhost:8009/spreg
    ProxyPassReverse            /spreg    ajp://localhost:8009/spreg
    ProxyPassReverseCookiePath  /spreg    /spreg