angularspring-bootjhipstercontextpath

How set up a Context Path on a Jhipster (spring boot + angular) application


I generate a Jhipster project classic Spring Auth + Angular client application.

I just need to set a custom context path "gateway" on a Jhipster application

On the server i just set on the file "src\main\resources\config\application-dev.yml":

.....
server:
  port: 8080
  servlet:
     context-path: /gateway
...

On the angular client i can't understand how to set up this.

On the file "webpack\webpack.common.js" is set:

....
new webpack.DefinePlugin({
    'process.env': {
        NODE_ENV: `'${options.env}'`,
        BUILD_TIMESTAMP: `'${new Date().getTime()}'`,
        // APP_VERSION is passed as an environment variable from the Gradle / Maven build tasks.
        VERSION: `'${process.env.hasOwnProperty('APP_VERSION') ? process.env.APP_VERSION : 'DEV'}'`,
        DEBUG_INFO_ENABLED: options.env === 'development',
        // The root URL for API calls, ending with a '/' - for example: `"https://www.jhipster.tech:8081/myservice/"`.
        // If this URL is left empty (""), then it will be relative to the current context.
        // If you use an API server, in `prod` mode, you will need to enable CORS
        // (see the `jhipster.cors` common JHipster property in the `application-*.yml` configurations)
        SERVER_API_URL: `'http://localhost:8080/gateway/'`
    }
}),
......        
new BaseHrefWebpackPlugin({ baseHref: '/gateway' })
....

but it's does'nt work , the login always failed. i miss something else?

UPDATE for Gaël Marziou comment

It's seem the login from client "http://localhost:9000/gateway/" failed to login to the service "http://localhost:8080/gateway/api/authentication" with code 403, for some csfr exception on the server:

Resolved [org.springframework.security.web.csrf.MissingCsrfTokenException: Could not verify the provided CSRF token because your session was not found.]

So it's probably some error on the security configuration of spring boot :

    @Override
    public void configure(HttpSecurity http) throws Exception {
        // @formatter:off
        http
            .csrf()
            .csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse())
        .and()
            .addFilterBefore(corsFilter, CsrfFilter.class)
            .exceptionHandling()
                .authenticationEntryPoint(problemSupport)
                .accessDeniedHandler(problemSupport)
        .and()
            .rememberMe()
            .rememberMeServices(rememberMeServices)
            .rememberMeParameter("remember-me")
            .key(jHipsterProperties.getSecurity().getRememberMe().getKey())
        .and()
            .formLogin()
            .loginProcessingUrl("/api/authentication")
            .successHandler(ajaxAuthenticationSuccessHandler())
            .failureHandler(ajaxAuthenticationFailureHandler())
            .permitAll()
        .and()
            .logout()
            .logoutUrl("/api/logout")
            .logoutSuccessHandler(ajaxLogoutSuccessHandler())
            .permitAll()
        .and()
            .headers()
            .contentSecurityPolicy("default-src 'self'; frame-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:")
        .and()
            .referrerPolicy(ReferrerPolicyHeaderWriter.ReferrerPolicy.STRICT_ORIGIN_WHEN_CROSS_ORIGIN)
        .and()
            .featurePolicy("geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none'")
        .and()
            .frameOptions()
            .deny()
        .and()
            .authorizeRequests()
            .antMatchers("/**/api/authenticate").permitAll()
            .antMatchers("/**/api/register").permitAll()
            .antMatchers("/**/api/activate").permitAll()
            .antMatchers("/**/api/account/reset-password/init").permitAll()
            .antMatchers("/**/api/account/reset-password/finish").permitAll()
            .antMatchers("/**/api/**").authenticated()
            .antMatchers("/**/management/health").permitAll()
            .antMatchers("/**/management/info").permitAll()
            .antMatchers("/**/management/prometheus").permitAll()
            .antMatchers("/**/management/**").hasAuthority(AuthoritiesConstants.ADMIN);
        // @formatter:on
    }

Solution

  • I found following 5 places.

    webpack.common.js

    new BaseHrefWebpackPlugin({ baseHref: '/gateway/' })
    

    webpack.dev.js

    proxy: [{
        context: [
            '/gateway/api',
            '/gateway/services',
           ...
    

    app.context.ts

    export const SERVER_API_URL = process.env.SERVER_API_URL + "/gateway/";
    

    resources\config\application-dev.yml

    .....
    server:
      port: 8080
      servlet:
         context-path: /gateway
    

    index.html

    <base href="/gateway/" />