I generate a Jhipster project classic Spring Auth + Angular client application.
I just need to set a custom context path "gateway" on a Jhipster application
On the server i just set on the file "src\main\resources\config\application-dev.yml":
.....
server:
port: 8080
servlet:
context-path: /gateway
...
On the angular client i can't understand how to set up this.
On the file "webpack\webpack.common.js" is set:
....
new webpack.DefinePlugin({
'process.env': {
NODE_ENV: `'${options.env}'`,
BUILD_TIMESTAMP: `'${new Date().getTime()}'`,
// APP_VERSION is passed as an environment variable from the Gradle / Maven build tasks.
VERSION: `'${process.env.hasOwnProperty('APP_VERSION') ? process.env.APP_VERSION : 'DEV'}'`,
DEBUG_INFO_ENABLED: options.env === 'development',
// The root URL for API calls, ending with a '/' - for example: `"https://www.jhipster.tech:8081/myservice/"`.
// If this URL is left empty (""), then it will be relative to the current context.
// If you use an API server, in `prod` mode, you will need to enable CORS
// (see the `jhipster.cors` common JHipster property in the `application-*.yml` configurations)
SERVER_API_URL: `'http://localhost:8080/gateway/'`
}
}),
......
new BaseHrefWebpackPlugin({ baseHref: '/gateway' })
....
but it's does'nt work , the login always failed. i miss something else?
UPDATE for Gaël Marziou comment
It's seem the login from client "http://localhost:9000/gateway/" failed to login to the service "http://localhost:8080/gateway/api/authentication" with code 403, for some csfr exception on the server:
Resolved [org.springframework.security.web.csrf.MissingCsrfTokenException: Could not verify the provided CSRF token because your session was not found.]
So it's probably some error on the security configuration of spring boot :
@Override
public void configure(HttpSecurity http) throws Exception {
// @formatter:off
http
.csrf()
.csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse())
.and()
.addFilterBefore(corsFilter, CsrfFilter.class)
.exceptionHandling()
.authenticationEntryPoint(problemSupport)
.accessDeniedHandler(problemSupport)
.and()
.rememberMe()
.rememberMeServices(rememberMeServices)
.rememberMeParameter("remember-me")
.key(jHipsterProperties.getSecurity().getRememberMe().getKey())
.and()
.formLogin()
.loginProcessingUrl("/api/authentication")
.successHandler(ajaxAuthenticationSuccessHandler())
.failureHandler(ajaxAuthenticationFailureHandler())
.permitAll()
.and()
.logout()
.logoutUrl("/api/logout")
.logoutSuccessHandler(ajaxLogoutSuccessHandler())
.permitAll()
.and()
.headers()
.contentSecurityPolicy("default-src 'self'; frame-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:")
.and()
.referrerPolicy(ReferrerPolicyHeaderWriter.ReferrerPolicy.STRICT_ORIGIN_WHEN_CROSS_ORIGIN)
.and()
.featurePolicy("geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none'")
.and()
.frameOptions()
.deny()
.and()
.authorizeRequests()
.antMatchers("/**/api/authenticate").permitAll()
.antMatchers("/**/api/register").permitAll()
.antMatchers("/**/api/activate").permitAll()
.antMatchers("/**/api/account/reset-password/init").permitAll()
.antMatchers("/**/api/account/reset-password/finish").permitAll()
.antMatchers("/**/api/**").authenticated()
.antMatchers("/**/management/health").permitAll()
.antMatchers("/**/management/info").permitAll()
.antMatchers("/**/management/prometheus").permitAll()
.antMatchers("/**/management/**").hasAuthority(AuthoritiesConstants.ADMIN);
// @formatter:on
}
I found following 5 places.
webpack.common.js
new BaseHrefWebpackPlugin({ baseHref: '/gateway/' })
webpack.dev.js
proxy: [{
context: [
'/gateway/api',
'/gateway/services',
...
app.context.ts
export const SERVER_API_URL = process.env.SERVER_API_URL + "/gateway/";
resources\config\application-dev.yml
.....
server:
port: 8080
servlet:
context-path: /gateway
index.html
<base href="/gateway/" />