feat(auth): add authentification with keycloak (#50)

Co-authored-by: Julien Bouquillon <[email protected]>

.dockerignore

@@ -3,4 +3,6 @@ Dockerfile
 node_modules
 npm-debug.log
 README.md
-.next
+.next
+.kube-workflow
+.github

.env.development

@@ -1,7 +1,10 @@
-NEXT_TELEMETRY_DISABLED=1
-NEXT_PUBLIC_SITE_URL=""
 NEXT_PUBLIC_SENTRY_DSN=""
 NEXT_PUBLIC_SENTRY_ENV=""
 NEXT_PUBLIC_MATOMO_URL=""
 NEXT_PUBLIC_MATOMO_SITE_ID=""
-NEXT_PUBLIC_APP_REPOSITORY_URL="https://github.com/SocialGouv/template"
+NEXT_PUBLIC_APP_REPOSITORY_URL="https://github.com/SocialGouv/template"
+KEYCLOAK_URL="http://localhost:8080/realms/app-realm"
+KEYCLOAK_CLIENT_SECRET="**********"
+KEYCLOAK_CLIENT_ID="app-client"
+NEXTAUTH_URL="http://localhost:3000"
+NEXTAUTH_SECRET="A+EQqudlGhqTLDnBbCvohHBfbhUjTXAbZYy1NKsSsys="

.env.production

@@ -1,5 +1,3 @@
-NEXT_TELEMETRY_DISABLED=1
-NEXT_PUBLIC_SITE_URL="https://template.fabrique.social.gouv.fr/"
 NEXT_PUBLIC_SENTRY_DSN="https://[email protected]/68"
 NEXT_PUBLIC_SENTRY_ENV="production"
 NEXT_PUBLIC_MATOMO_URL="https://matomo.fabrique.social.gouv.fr"

.env.staging

@@ -1,7 +1,5 @@
-NEXT_TELEMETRY_DISABLED=1
-NEXT_PUBLIC_SITE_URL="https://template.fabrique.social.gouv.fr/"
 NEXT_PUBLIC_SENTRY_DSN="https://[email protected]/68"
 NEXT_PUBLIC_SENTRY_ENV="development"
 NEXT_PUBLIC_MATOMO_URL=""
 NEXT_PUBLIC_MATOMO_SITE_ID=""
-NEXT_PUBLIC_APP_REPOSITORY_URL="https://github.com/SocialGouv/template"
+NEXT_PUBLIC_APP_REPOSITORY_URL="https://github.com/SocialGouv/template"

.github/CODEOWNERS

@@ -1,5 +1,4 @@
 # Protect workflow files
 .github/workflows/*.yml @socialgouv/sre
 .github/CODEOWNERS @socialgouv/sre
-.k8s/ @socialgouv/sre
-.socialgouv/  @socialgouv/sre
+.kontinuous/  @socialgouv/sre

.github/workflows/build.yml

@@ -8,7 +8,7 @@ concurrency:
 
 jobs:
   build:
-    name: Build and export
+    name: Build
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
@@ -26,6 +26,6 @@ jobs:
       - name: Install dependencies
         run: |
           yarn install --prefer-offline --frozen-lockfile
-      - name: Build and export
+      - name: Build
         run: |
-          yarn build:export
+          yarn build

.github/workflows/ks-preproduction.yaml

@@ -0,0 +1,20 @@
+name: Preproduction
+
+on:
+  push:
+    branches:
+      - master
+    tags-ignore:
+      - v*
+
+concurrency:
+  cancel-in-progress: true
+  group: preproduction
+
+jobs:
+  follow-deployment:
+    environment:
+      name: preproduction
+      url: https://template-preprod.dev.fabrique.social.gouv.fr
+    uses: SocialGouv/kontinuous/.github/workflows/workflow-logs.yaml@v1
+    secrets: inherit

.github/workflows/ks-production.yaml

@@ -0,0 +1,18 @@
+name: Production
+
+on:
+  push:
+    tags:
+      - v*
+
+concurrency:
+  group: production
+  cancel-in-progress: true
+
+jobs:
+  follow-deployment:
+    environment:
+      name: production
+      url: https://template.fabrique.social.gouv.fr
+    uses: SocialGouv/kontinuous/.github/workflows/workflow-logs.yaml@v1
+    secrets: inherit

.github/workflows/ks-review-deactivate.yaml

@@ -0,0 +1,13 @@
+name: Review Deactivate
+on:
+  pull_request:
+    types: [closed]
+
+concurrency:
+  cancel-in-progress: true
+  group: review-deactivate-${{ github.ref }}
+
+jobs:
+  follow-deactivation:
+    uses: SocialGouv/kontinuous/.github/workflows/workflow-logs.yaml@v1
+    secrets: inherit

.github/workflows/ks-review.yaml

@@ -0,0 +1,17 @@
+name: Review
+
+on:
+  push:
+    branches-ignore:
+      - master
+    tags-ignore:
+      - v*
+
+concurrency:
+  cancel-in-progress: true
+  group: review-${{ github.ref }}
+
+jobs:
+  follow-deployment:
+    uses: SocialGouv/kontinuous/.github/workflows/workflow-logs.yaml@v1
+    secrets: inherit

.gitignore

@@ -44,4 +44,7 @@ cypress/videos
 cypress/screenshots
 
 # Robots.txt
-robots.txt
+robots.txt
+
+# Keycloak extensions deployed
+*.jar.deployed

.kontinuous/Chart.yaml

@@ -0,0 +1,5 @@
+dependencies:
+  - name: keycloakx
+    repository: https://codecentric.github.io/helm-charts
+    version: 1.3.2
+    # condition: keycloak.enabled

.kontinuous/config.yaml

@@ -0,0 +1,3 @@
+dependencies:
+  fabrique:
+    import: SocialGouv/kontinuous/plugins/fabrique

.kontinuous/env/dev/templates/app.configmap.yaml

@@ -0,0 +1,8 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  name: app
+data:
+  NEXT_TELEMETRY_DISABLED: "1"
+  KEYCLOAK_URL: "https://keycloak-{{.Values.global.host}}/realms/app-realm"
+  NEXTAUTH_URL: "https://{{.Values.global.host}}"

.kontinuous/env/dev/templates/app.sealed.secret.yaml

@@ -0,0 +1,17 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: "true"
+  name: app
+spec:
+  encryptedData:
+    NEXTAUTH_SECRET: AgBdDOpKTwHKWU2g0+hGyGZpP0LC6f3sEtw1ejLkk72Rhip/Soia+/4gKzXHb938u0YE1FQsz8tntM2/mmCv6+hmtgvsE+aaNWEBqTMkOby/bbChrxhw50es06cWBK7ts0m6NGNvyNfdEWHWWrOTDmO7m/4f0oS9KAaXjeFdNlOEU8kq7Fe5W5/hdNpH7u8MF7MwWwGrQyO9QHHNp3Ojyc5i/PIEBjE4VgxnLlX/B3i+sPjymIQhI8bsd9HXwvqM3V8TK/AI5JceYodz7UkBlPipgS4Bg2ldmK8xgXkYuRrehh+sTo8faiuMwVAYmdFYJYRwhMMg04IZ4yGsHu0NxmFuVAUvQL+5ksoDoJTGjWxrwR4+LT7NiGPRma65ARpFD0iDj/n+pKODkXA/ol+2p9I4gEHzWVwECIEjKMXVuOGAfHVjklZWj6+qYY74w9yF/P+QsWsK68p2igjFb1RfXszeujAQyF25vhNB5MXCFkeuLaEyU1yNFULc6vyc0HJO1Y/8zNWXmqqDSUMlc/mGrO/TojkMKwDrfbMhIhegW0JcgcHJSpPnXpReYKp77PH8ElavbqmjVN1SXXlA1kCHX9QzERHvoIMzJFXCryOSXIVq3LkYiNeKCNJKEHpIB9exuOdwqJXBb/lnPponkZOh4JpyGgjARc6HoQsGr0mzpYkIIRYny/tSvW6vrIT1Yak+VWcNTlw+1+nu7av1dax7HDVkZ3AnepD6zsHSEnoNp0zy7ZkZPJZtN7E8vEEf8Q==
+    KEYCLOAK_CLIENT_ID: AgB8KATkspkNplsty+H4bBjm7Ce4pxmy3/s0h0KFnO69dFj5Xwy36nJ5H7g4oTE8xQBDEPWX/YyF5/rqFGTeN5Btybk3yRRQoS+j5OyMruUOdvwthN2RQlma6IMeHp65UwIFuOrYn44w4kZBYbXM9teinH3qI/IvLs+8s5D3NxbD6TYTPcUVOxfiuI21atN35qgVCrMtWBy7w1VjcA9Trjwv3nc0fOUkKWZNNmc7S5zh/UneJJC0Wlf96x1OkYNbSm1GB6H5T80ayPDB1d5nT2598Hz1BFhsxbsqfoABQYcQIOULggMkQaAGHkgGk4lCF4U83b4m3lIb7il6W7UmANMW4ZdFUsftA3o37WUq2rfasIjHLrZuNka97SkU9ZJKm4axb5bNRz+xCxwv6FaWQTfvrI/qYUAsuFpgMPRphEyxngOoHLqyrBa2fN+ahNYyniIXBp2TmUhzfjybXt56QWwNUEDeMGesk9FTw3ssCAgu3PwrJv4REYpMKzdszuGlCd9v21XtWxnABDLIme9WxapM9AXZhWm+ftJTHbSSlHwDdJPHCulh05dLrJ63C3AtsnncyeMNl0nkMHqN51yB2cus6qeE4LL5zErK/f4fmp31HuzfAveR6zzZKJ+tXPvkg//mABaFhfMMHpvPo4oqU8wOyqKFZU6mDfA5DsYWgsMiU4kpePkaXbAUUxYw8N5CY/s7ic8+wT+lGWwO
+    KEYCLOAK_CLIENT_SECRET: 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
+  template:
+    metadata:
+      annotations:
+        sealedsecrets.bitnami.com/cluster-wide: "true"
+      name: app
+    type: Opaque

.kontinuous/env/dev/templates/franceconnect.sealed.secret.yaml

@@ -0,0 +1,16 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: "true"
+  name: franceconnect
+spec:
+  encryptedData:
+    FRANCE_CONNECT_CLIENT_ID: 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
+    FRANCE_CONNECT_CLIENT_SECRET: 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
+  template:
+    metadata:
+      annotations:
+        sealedsecrets.bitnami.com/cluster-wide: "true"
+      name: franceconnect
+    type: Opaque

.kontinuous/env/dev/templates/keycloak.sealed.secret.yaml

@@ -0,0 +1,16 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: "true"
+  name: keycloak-secrets
+spec:
+  encryptedData:
+    KEYCLOAK_ADMIN: AgBWye/9Iav1llY6ZLWgL4to/75FMWvu21ploogsvNSQoig2vUxNO9e9wpfSf2I8CJDic0RStCI65nvBcJr7UhaV3WXvutbV2JBMgqF6VPGJh1BYu7UERzaBFdfYaV8foFJsLHW5RvPRGALhhiovvR2mjNgNtBdhyf6bmOss+lj/UxN66/vmdBu2PwCRmuyDCCnIbzQw/31KZjA2v9OZC4PLtFB6TTITsZmG6MN5fbz4QFk6TGXDPfYVuN3voFOn1uICcRsk2WY/4N3RYqlhF1vxO974rphuObnzwWOWzfg7dZRx0CdvtbGZsWG4LcMekUHO8mj4gFM1GmS0hkKfQnALattYtfo0Lo42FRFFRm4CSc07BkjW6a/JzEyeYDV+wcZtvcEhLG6UyF9m9eW12ukZyS3K7o/UH/8VR1Z+G65L8KlIpg9gjIXxGyX/cCSFRYt/OvWj5fjpstdAvgcHt4sTlMPaqQpeH3FflRb2VhhXhgBFaXYc0kjl1vDgSV/dCu1OhLcIg1Z4V+z1BAoPESd7syOC9OFxqFacIoK7Uz/vR7svkvFfJrm7Iamnf/CklwuO0BRZrL67Tf1anT4A/WCsFEd/Ha0j9PaxP8UptkfLkDPNICE1qbUkf/vFOQA6d7V2PC+HYkwLrpYnc0Y5ze8gTB4GlOUfQNXGZpaEI9EGguHA7YbAyIXHhyUyYBEeCptdd83u3gaff7RW6Avo/75qT/oiVgUX08eXqp8xo/DRCB/h6JKiAwbpgzADuA==
+    KEYCLOAK_ADMIN_PASSWORD: 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
+  template:
+    metadata:
+      annotations:
+        sealedsecrets.bitnami.com/cluster-wide: "true"
+      name: keycloak-secrets
+    type: Opaque

.kontinuous/env/dev/templates/smtp.sealed.secret.yaml

@@ -0,0 +1,20 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: "true"
+  name: smtp
+spec:
+  encryptedData:
+    SMTP_USER: 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
+    SMTP_PASSWORD: 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
+    SMTP_HOST: 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
+    SMTP_PORT: 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
+    SMTP_FROM: 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
+    SMTP_SSL: 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
+  template:
+    metadata:
+      annotations:
+        sealedsecrets.bitnami.com/cluster-wide: "true"
+      name: smtp
+    type: Opaque