Merge pull request #454 from bcgov/feature/oidc-improvements

feat: authentication improvements

Author: kyle1morel

.github/environments/values.dev.yaml

@@ -26,8 +26,8 @@ config:
     SERVER_OBJECTSTORAGE_BUCKET: pcnsts
     SERVER_OBJECTSTORAGE_ENDPOINT: https://nrs.objectstore.gov.bc.ca
     SERVER_OBJECTSTORAGE_KEY: dev
+    SERVER_OIDC_AUDIENCE: nr-permit-connect-navigator-service-5188
     SERVER_OIDC_AUTHORITY: https://dev.loginproxy.gov.bc.ca/auth/realms/standard
-    SERVER_OIDC_PUBLICKEY: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy7zfh2ZgpDV5mH/aXyLDTddZK81rGakJcTy4KvCNOkDDxt1KAhW02lmbCo8YhHCOzjNZBp1+Vi6QiMRgBqAe2GTPZYEiV70aXfROGZe3Nvwcjbtki6HoyRte3SpqLJEIPL2F+hjJkw1UPGnjPTWZkEx9p74b9i3BjuE8RnjJ0Sza2MWw83zoQUZEJRGiopSL0yuVej6t2LO2btVdVf7QuZfPt9ehkcQYlPKpVvJA+pfeqPAdnNt7OjEIeYxinjurZr8Z04hz8UhkRefcWlSbFzFQYmL7O7iArjW0bsSvq8yNUd5r0KCOQkFduwZy26yTzTxj8OLFT91fEmbBBl4rQIDAQAB
     SERVER_OPENMAPS_APIPATH: https://openmaps.gov.bc.ca
     SERVER_PCNS_APPURL: https://pcns-dev-master.apps.silver.devops.gov.bc.ca
     SERVER_PCNS_NAVEMAIL: NRM.PermittingAndData@gov.bc.ca

.github/environments/values.prod.yaml

@@ -26,8 +26,8 @@ config:
     SERVER_OBJECTSTORAGE_BUCKET: pcnspr
     SERVER_OBJECTSTORAGE_ENDPOINT: https://nrs.objectstore.gov.bc.ca
     SERVER_OBJECTSTORAGE_KEY: shas
+    SERVER_OIDC_AUDIENCE: nr-permit-connect-navigator-service-5188
     SERVER_OIDC_AUTHORITY: https://loginproxy.gov.bc.ca/auth/realms/standard
-    SERVER_OIDC_PUBLICKEY: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHiuPKOkpkq4GXN1ktr23rJtDl6Vdu/Y37ZAd3PnQ8/IDfAODvy1Y81aAUZicKe9egolv+OTRANN3yOg+TAbRhkeXLE5p/473EK0aQ0NazTCuWo6Am3oDQ7Yt8x0pw56/qcLtkTuXNyo5EnVV2Z2BzCnnaL31JOhyitolku0DNT6GDoRBmT4o2ItqEVHk5nM25cf1t2zbwI2790W6if1B2qVRkxxivS8tbH7nYC61Is3XCPockKptkH22cm2ZQJmtYd5sZKuXaGsvtyzHmn8/l0Kd1xnHmUu4JNuQ67YiNZGu3hOkrF0Js3BzAk1Qm4kvYRaxbJFCs/qokLZ4Z0W9wIDAQAB
     SERVER_OPENMAPS_APIPATH: https://openmaps.gov.bc.ca
     SERVER_PCNS_APPURL: https://pcns-prod-master.apps.silver.devops.gov.bc.ca
     SERVER_PCNS_NAVEMAIL: Navigator.Service@gov.bc.ca

.github/environments/values.test.yaml

@@ -26,8 +26,8 @@ config:
     SERVER_OBJECTSTORAGE_BUCKET: pcnsts
     SERVER_OBJECTSTORAGE_ENDPOINT: https://nrs.objectstore.gov.bc.ca
     SERVER_OBJECTSTORAGE_KEY: shas
+    SERVER_OIDC_AUDIENCE: nr-permit-connect-navigator-service-5188
     SERVER_OIDC_AUTHORITY: https://test.loginproxy.gov.bc.ca/auth/realms/standard
-    SERVER_OIDC_PUBLICKEY: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFdv9GA83uHuy8Eu9yiZHGGF9j6J8t7FkbcpaN81GDjwbjsIJ0OJO9dKRAx6BAtTC4ubJTBJMPvQER5ikOhIeBi4o25fg61jpgsU6oRZHkCXc9gX6mrjMjbsPaf3/bjjYxP5jicBDJQeD1oRa24+tiGggoQ7k6gDEN+cRYqqNpzC/GQbkUPk8YsgroncEgu8ChMh/3ERsLV2zorchMANUq76max16mHrhtWIQxrb/STpSt4JuSlUzzBV/dcXjJe5gywZHe0jAutFhNqjHzHdgyaC4RAd3eYQo+Kl/JOgy2AZrnx+CiPmvOJKe9tAW4k4H087ng8aVE40v4HW/FEbnwIDAQAB
     SERVER_OPENMAPS_APIPATH: https://openmaps.gov.bc.ca
     SERVER_PCNS_APPURL: https://pcns-test-master.apps.silver.devops.gov.bc.ca
     SERVER_PCNS_NAVEMAIL: NRM.PermittingAndData@gov.bc.ca

.vscode/settings.json

@@ -25,6 +25,9 @@
   "eslint.format.enable": true,
   "files.eol": "\n",
   "files.insertFinalNewline": true,
+  "jest.nodeEnv": {
+    "NODE_OPTIONS": "--experimental-vm-modules"
+  },
   "scss.lint.unknownAtRules": "ignore",
   "yaml.schemas": {
     "openapi:v3": "./app/src/docs/v1.api-spec.yaml"

app/config/custom-environment-variables.json

@@ -76,10 +76,8 @@
       "secretAccessKey": "SERVER_OBJECTSTORAGE_SECRETACCESSKEY"
     },
     "oidc": {
-      "authority": "SERVER_OIDC_AUTHORITY",
-      "clientId": "SERVER_OIDC_CLIENTID",
-      "clientSecret": "SERVER_OIDC_CLIENTSECRET",
-      "publicKey": "SERVER_OIDC_PUBLICKEY"
+      "audience": "SERVER_OIDC_AUDIENCE",
+      "authority": "SERVER_OIDC_AUTHORITY"
     },
     "openMaps": {
       "apiPath": "SERVER_OPENMAPS_APIPATH"