🔧(conf) add network to docker compose

In order to be able to test resource server we need to be able
to share a network between our docker compose stack. Let's add
a network to make it work.

Makefile

@@ -76,6 +76,10 @@ create-env-local-files:
 	@touch env.d/development/kc_postgresql.local
 .PHONY: create-env-local-files
 
+create-docker-network: ## create the docker network if it doesn't exist
+	@docker network create lasuite-network || true
+.PHONY: create-docker-network
+
 bootstrap: ## Prepare Docker images for the project
 bootstrap: \
 	data/media \
@@ -116,6 +120,7 @@ logs: ## display app-dev logs (follow mode)
 .PHONY: logs
 
 run-backend: ## start the backend container
+	@$(MAKE) create-docker-network
 	@$(COMPOSE) up --force-recreate -d celery-dev
 	@$(COMPOSE) up --force-recreate -d nginx
 	@$(MAKE) configure-wopi

compose.yaml

@@ -120,6 +120,9 @@ services:
     depends_on:
       - keycloak
       - app-dev
+    networks:
+      - lasuite
+      - default
 
   frontend-dev:
     user: "${DOCKER_USER:-1000}"
@@ -193,6 +196,9 @@ services:
       - "8080:8080"
     depends_on:
       - kc_postgresql
+    networks:
+      - lasuite
+      - default
 
   collabora:
     image: collabora/code:latest
@@ -228,3 +234,9 @@ services:
       - ./docker/onlyoffice/local-development.json:/etc/onlyoffice/documentserver/local-production-linux.json
       # Enable debug
       - ./docker/onlyoffice/log4js/production.json:/etc/onlyoffice/documentserver/log4js/production.json
+
+networks:
+  default: {}
+  lasuite:
+    name: lasuite-network
+    external: true

docker/auth/realm.json

@@ -1,9 +1,10 @@
-[{
+[
+  {
     "realm": "master",
     "sslRequired": "none",
-  "enabled" : true
-},
-{
+    "enabled": true
+  },
+  {
     "id": "ccf4fd40-4286-474d-854a-4714282a8bec",
     "realm": "drive",
     "notBefore": 0,
@@ -751,6 +752,80 @@
           "microprofile-jwt"
         ]
       },
+      {
+        "id": "869481d0-5774-4e64-bc30-fedc7c58958g",
+        "clientId": "deploycenter",
+        "name": "",
+        "description": "",
+        "rootUrl": "",
+        "adminUrl": "",
+        "baseUrl": "",
+        "surrogateAuthRequired": false,
+        "enabled": true,
+        "alwaysDisplayInConsole": false,
+        "clientAuthenticatorType": "client-secret",
+        "secret": "ThisIsAnExampleKeyForDevPurposeOnly",
+        "redirectUris": [
+          "http://localhost:8070/*",
+          "http://localhost:8071/*",
+          "http://localhost:3200/*",
+          "http://localhost:8088/*",
+          "http://localhost:3000/*",
+          "http://localhost:8961/*"
+        ],
+        "webOrigins": [
+          "http://localhost:3200",
+          "http://localhost:8088",
+          "http://localhost:8070",
+          "http://localhost:3000",
+          "http://localhost:8961"
+        ],
+        "notBefore": 0,
+        "bearerOnly": false,
+        "consentRequired": false,
+        "standardFlowEnabled": true,
+        "implicitFlowEnabled": false,
+        "directAccessGrantsEnabled": false,
+        "serviceAccountsEnabled": false,
+        "publicClient": false,
+        "frontchannelLogout": true,
+        "protocol": "openid-connect",
+        "attributes": {
+          "access.token.lifespan": "-1",
+          "client.secret.creation.time": "1707820779",
+          "user.info.response.signature.alg": "RS256",
+          "post.logout.redirect.uris": "http://localhost:8070/*##http://localhost:3200/*##http://localhost:3000/*",
+          "oauth2.device.authorization.grant.enabled": "false",
+          "use.jwks.url": "false",
+          "backchannel.logout.revoke.offline.tokens": "false",
+          "use.refresh.tokens": "true",
+          "tls-client-certificate-bound-access-tokens": "false",
+          "oidc.ciba.grant.enabled": "false",
+          "backchannel.logout.session.required": "true",
+          "client_credentials.use_refresh_token": "false",
+          "acr.loa.map": "{}",
+          "require.pushed.authorization.requests": "false",
+          "display.on.consent.screen": "false",
+          "client.session.idle.timeout": "-1",
+          "token.response.type.bearer.lower-case": "false"
+        },
+        "authenticationFlowBindingOverrides": {},
+        "fullScopeAllowed": true,
+        "nodeReRegistrationTimeout": -1,
+        "defaultClientScopes": [
+          "web-origins",
+          "acr",
+          "roles",
+          "profile",
+          "email"
+        ],
+        "optionalClientScopes": [
+          "address",
+          "phone",
+          "offline_access",
+          "microprofile-jwt"
+        ]
+      },
       {
         "id": "0d004a05-7049-452c-83a8-2bae2b5d8015",
         "clientId": "realm-management",
@@ -2283,4 +2358,5 @@
     "clientPolicies": {
       "policies": []
     }
-}]
+  }
+]