bserdar/jcliff

Trying to configure applicationRealm through Jcliff

Opened this issue · 1 comments

Hi,
I've been trying to configure ApplicationRealm with JCliff, but for some reason or another the configurations do not seem to change or be created. I have tried 2 different cases without success. It would be great if someone had some insight on this, that am I doing something wrong, or is this something that is not supported doing via JCliff. Just to clarify at this point, that no error message is presented as any point.

Case 1. Trying to change already existing ApplicationRealm's server identity secret value:
JCliff file content:
{ "security-realm" => { "ApplicationRealm" => { "server-identity" => { "secret" => { "value" => "MTIzNDU5" } } } } }

Case 2. Trying to create a whole new ApplicationRealm.
{ "security-realm" => { "ApplicationRealm" => { "map-groups-to-roles" => true, "authentication" => { "local" => { "allowed-users" => "*", "default-user" => "$local", "skip-group-loading" => "true" }, "properties" => { "path" => "application-users.properties", "plain-text" => "false", "relative-to" => "jboss.server.config.dir" } }, "authorization" => {"properties" => { "path" => "application-roles.properties", "relative-to" => "jboss.server.config.dir" }}, "plug-in" => undefined, "server-identity" => { "ssl" => { "alias" => "server", "enabled-cipher-suites" => undefined, "enabled-protocols" => [ "TLSv1", "TLSv1.1", "TLSv1.2" ], "generate-self-signed-certificate-host" => "localhost", "key-password" => "password", "key-password-credential-reference" => undefined, "keystore-password" => "password", "keystore-password-credential-reference" => undefined, "keystore-path" => "application.keystore", "keystore-provider" => "JKS", "keystore-relative-to" => "jboss.server.config.dir", "protocol" => "TLS" }, "secret" => { "credential-reference" => undefined, "value" => "MTIzNDU2" } } } } }

Looks like the security realm rules file (src/main/resources/security-realms) does not have any rules for ApplicationRealm,

@JayEl358 you can add those rules if you have the time and the will and submit a PR.