wmedvede commented on code in PR #3928:
URL:
https://github.com/apache/incubator-kie-kogito-runtimes/pull/3928#discussion_r2218781616
##########
quarkus/extensions/kogito-quarkus-serverless-workflow-extension/kogito-quarkus-serverless-workflow-integration-test/src/main/resources/application.properties:
##########
@@ -223,6 +223,51 @@ quarkus.oidc-client.service5_oauth2.grant.type=client
quarkus.oidc-client.service5_oauth2.credentials.client-secret.method=basic
quarkus.oidc-client.service5_oauth2.credentials.client-secret.value=secret
+# -------
+# Token propagation support test properties, relates to the TokenExchangeIT
and the token-exchange.sw.json
+# -------
+# 1) Configure the desired packages for the code generation, this information
is basically source
+quarkus.openapi-generator.codegen.spec.token_exchange_external_service_yaml.base-package=org.acme.externalexchangeservice
+
+# 2) Configure the access url for the service.
+quarkus.rest-client.token_exchange_external_service_yaml.url=${exchange-external-service-mock.url}
+sonataflow.security.with_exchange_oauth2.exchange-token=true
+sonataflow.security.with_exchange_and_propagation_oauth2.exchange-token=true
Review Comment:
Sorry for the silly question, maybe I misunderstood:
In **case 1**)
sonataflow.security.with_exchange_oauth2.exchange-token=true
1) we exchange the token, so the WF gets a new token, to access the service.
2) we pass the exchanged token
In **case 2**)
quarkus.openapi-generator.token_exchange_external_service_yaml.auth.with_exchange_and_propagation_oauth2.token-propagation=true
we do this:
1) no exchange is produced
2) and, given that token propagation == true, we just propagate it as the
token propagation worked before.
Is that correct?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
