Add default OIDC scopes and auto-configuration for new applications

Open Copilot opened this issue 3 months ago • 0 comments

Implements user-friendly enhancements to reduce manual configuration and improve OpenID Connect compliance. Addresses requirements 2-4 from the problem statement; requirement 1 (site settings management for default app members) requires new infrastructure and is deferred.

Changes

Database initialization

Added standard OIDC scopes: openid, profile, email to data.sql

Auto-configuration for new clients

Modified DefaultClientService.create() to automatically include default grant types and scopes if present in system:

Grant types: authorization_code, refresh_token
Scopes: openid, profile, email

User-provided values are preserved; defaults supplement rather than replace.

// New helper methods query by name and merge with user input
private Collection<Long> enhanceScopesWithDefaults(Collection<Long> scopes) {
    Set<Long> result = new HashSet<>(scopes != null ? scopes : Collections.emptyList());
    Collection<DefaultScope> defaults = scopeMapper.selectScopesByNames(
        Arrays.asList("openid", "profile", "email"));
    defaults.forEach(s -> result.add(s.getSid()));
    return result;
}

Mapper enhancements

ScopeMapper.selectScopesByNames() - query scopes by name
GrantTypeMapper.selectGrantTypesByNames() - query grant types by name

Documentation

Added OpenID Connect endpoints table to README with Discovery, UserInfo, Token, and JWK endpoints. Documented standard OIDC scopes and auto-configuration behavior.

Deferred

Site settings management (logo, title, homepage, navigation, banners) requires:

New settings schema and storage
Backend API layer
Frontend UI components
Permission system extensions

Better addressed as dedicated feature work.

[!WARNING]

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

kubernetes.default.svc

Triggering command: /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -Dspring.application.admin.enabled=true -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.port=9001 -Dcom.sun.management.jmxremote.authenticate=false -Dcom.sun.management.jmxremote.ssl=false -Djava.rmi.server.hostname=127.0.0.1 -cp /home/REDACTED/work/auth/auth/auth-service/target/classes:/home/REDACTED/work/auth/auth/auth-core/target/auth-core-1.2.0-alpha-3.jar:/home/REDACTED/.m2/repository/org/springframework/security/oauth/spring-security-oauth2/2.3.6.RELEASE/spring-security-oauth2-2.3.6.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-beans/5.2.10.RELEASE/spring-beans-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-core/5.2.10.RELEASE/spring-core-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-context/5.2.10.RELEASE/spring-context-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/security/spring-security-core/5.3.5.RELEASE/spring-security-core-5.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/security/spring-security-config/5.3.5.RELEASE/spring-security-config-5.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/security/spring-security-web/5.3.5.RELEASE/spring-security-web-5.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/commons-codec/commons-codec/1.14/commons-codec-1.14.jar:/home/REDACTED/.m2/repository/org/codehaus/jackson/jackson-mapper-asl/1.9.13/jackson-mapper-asl-1.9.13.jar:/home/REDACTED/.m2/repository/org/codehaus/jackson/jackson-core-asl/1.9.13/jackson-core-asl-1.9.13.jar:/home/REDACTED/.m2/repository/org/springdoc/springdoc-openapi-common/1.5.4/springdoc-openapi-common-1.5.4.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-autoconfigure/2.3.5.RELEASE/spring-boot-autoconfigure-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/io/swagger/core/v3/swagger-models/2.1.6/swagger-models-2.1.6.jar:/home/REDACTED/.m2/repository/io/swagger/core/v3/swagger-annotations/2.1.6/swagger-annotations-2.1.6.jar:/home/REDACTED/.m2/repository/io/swagger/core/v3/swagger-integration/2.1.6/swagger-integration-2.1.6.jar:/home/REDACTED/.m2/repository/io/swagger/core/v3/swagger-core/2.1.6/swagger-core-2.1.6.jar:/home/REDACTED/.m2/repository/jakarta/validation/jakarta.validation-api/2.0.2/jakarta.validation-api-2.0.2.jar:/home/REDACTED/.m2/repository/io/github/classgraph/classgraph/4.8.69/classgraph-4.8.69.jar:/home/REDACTED/.m2/repository/org/apache/commons/commons-lang3/3.10/commons-lang3-3.10.jar:/home/REDACTED/.m2/repository/cn/dustlight/storage/tencent-cloud-object-storage/0.0.5/tencent-cloud-object-storage-0.0.5.jar:/home/REDACTED/.m2/repository/com/qcloud/cos_api/5.6.37/cos_api-5.6.37.jar:/home/REDACTED/.m2/repository/org/apache/httpcomponents/httpclient/4.5.13/httpclient-4.5.13.jar:/home/REDACTED/.m2/repository/org/apache/httpcomponents/httpcore/4.4.13/httpcore-4.4.13.jar:/home/REDACTED/.m2/repository/org/slf4j/slf4j-api/1.7.30/slf4j-api-1.7.30.jar:/home/REDACTED/.m2/repository/joda-time/joda-time/2.9.9/joda-time-2.9.9.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.11.3/jackson-databind-2.11.3.jar:/home/REDACTED/.m2/repository/com/tencentcloudapi/tencentcloud-sdk-java-kms/3.1.213/tencentcloud-sdk-java-kms-3.1.213.jar:/home/REDACTED/.m2/repository/com/tencentcloudapi/tencentcloud-sdk-java-common/3.1.213/tencentcloud-sdk-java-common-3.1.213.jar:/home/REDACTED/.m2/repository/log4j/log4j/1.2.17/log4j-1.2.17.jar:/home/REDACTED/.m2/repository/org/bouncycastle/bcprov-jdk15on/1.64/bcprov-jdk15on-1.64.jar:/home/REDACTED/.m2/repository/cn/dustlight/storage/storage-core/0.0.5/storage-core-0.0.5.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter/2.3.5.RELEASE/spring-boot-starter-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot/2.3.5.RELEASE/spring-boot-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-logging/2.3.5.RELEASE/spring-boot-starter-logging-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/ch/qos/logback/logback-classic/1.2.3/logback-classic-1.2.3.jar:/home/REDACTED/.m2/repository/ch/qos/logback/logback-core/1.2.3/logback-core-1.2.3.jar:/home/REDACTED/.m2/repository/org/apache/logging/log4j/log4j-to-slf4j/2.13.3/log4j-to-slf4j-2.13.3.jar:/home/REDACTED/.m2/repository/org/apache/logging/log4j/log4j-api/2.13.3/log4j-api-2.13.3.jar:/home/REDACTED/.m2/repository/org/slf4j/jul-to-slf4j/1.7.30/jul-to-slf4j-1.7.30.jar:/home/REDACTED/.m2/repository/jakarta/annotation/jakarta.annotation-api/1.3.5/jakarta.annotation-api-1.3.5.jar:/home/REDACTED/.m2/repository/org/yaml/snakeyaml/1.26/snakeyaml-1.26.jar:/home/REDACTED/.m2/repository/cn/dustlight/storage/alibaba-cloud-object-storage/0.0.5/alibaba-cloud-object-storage-0.0.5.jar:/home/REDACTED/.m2/repository/com/aliyun/oss/aliyun-sdk-oss/3.10.2/aliyun-sdk-oss-3.10.2.jar:/home/REDACTED/.m2/repository/org/jdom/jdom2/2.0.6/jdom2-2.0.6.jar:/home/REDACTED/.m2/repository/org/codehaus/jettison/jettison/1.1/jettison-1.1.jar:/home/REDACTED/.m2/repository/stax/stax-api/1.0.1/stax-api-1.0.1.jar:/home/REDACTED/.m2/repository/com/aliyun/aliyun-java-sdk-core/3.4.0/aliyun-java-sdk-core-3.4.0.jar:/home/REDACTED/.m2/repository/com/aliyun/aliyun-java-sdk-ram/3.0.0/aliyun-java-sdk-ram-3.0.0.jar:/home/REDACTED/.m2/repository/com/aliyun/aliyun-java-sdk-sts/3.0.0/aliyun-java-sdk-sts-3.0.0.jar:/home/REDACTED/.m2/repository/com/aliyun/aliyun-java-sdk-ecs/4.2.0/aliyun-java-sdk-ecs-4.2.0.jar:/home/REDACTED/.m2/repository/com/aliyun/aliyun-java-sdk-kms/2.7.0/aliyun-java-sdk-kms-2.7.0.jar:/home/REDACTED/.m2/repository/cn/dustlight/captcha/captcha-core/1.0.1/captcha-core-1.0.1.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-aop/2.3.5.RELEASE/spring-boot-starter-aop-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-aop/5.2.10.RELEASE/spring-aop-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/aspectj/aspectjweaver/1.9.6/aspectjweaver-1.9.6.jar:/home/REDACTED/.m2/repository/org/springframework/spring-web/5.2.10.RELEASE/spring-web-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/apache/tomcat/embed/tomcat-embed-core/9.0.39/tomcat-embed-core-9.0.39.jar:/home/REDACTED/.m2/repository/org/apache/tomcat/tomcat-annotations-api/9.0.39/tomcat-annotations-api-9.0.39.jar:/home/REDACTED/.m2/repository/cn/dustlight/captcha/recaptcha/1.0.1/recaptcha-1.0.1.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/core/jackson-annotations/2.11.3/jackson-annotations-2.11.3.jar:/home/REDACTED/.m2/repository/cn/dustlight/captcha/redis-store/1.0.1/redis-store-1.0.1.jar:/home/REDACTED/.m2/repository/cn/dustlight/captcha/email-sender/1.0.1/email-sender-1.0.1.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-mail/2.3.5.RELEASE/spring-boot-starter-mail-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-context-support/5.2.10.RELEASE/spring-context-support-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/com/sun/mail/jakarta.mail/1.6.5/jakarta.mail-1.6.5.jar:/home/REDACTED/.m2/repository/com/sun/activation/jakarta.activation/1.2.2/jakarta.activation-1.2.2.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-freemarker/2.3.5.RELEASE/spring-boot-starter-freemarker-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/freemarker/freemarker/2.3.30/freemarker-2.3.30.jar:/home/REDACTED/.m2/repository/cn/dustlight/captcha/tencent-sms/1.0.1/tencent-sms-1.0.1.jar:/home/REDACTED/.m2/repository/com/tencentcloudapi/tencentcloud-sdk-java/3.1.304/tencentcloud-sdk-java-3.1.304.jar:/home/REDACTED/.m2/repository/commons-logging/commons-logging/1.2/commons-logging-1.2.jar:/home/REDACTED/.m2/repository/com/squareup/okio/okio/1.12.0/okio-1.12.0.jar:/home/REDACTED/.m2/repository/com/squareup/okhttp/okhttp/2.7.5/okhttp-2.7.5.jar:/home/REDACTED/.m2/repository/com/google/code/gson/gson/2.8.6/gson-2.8.6.jar:/home/REDACTED/.m2/repository/javax/xml/bind/jaxb-api/2.3.1/jaxb-api-2.3.1.jar:/home/REDACTED/.m2/repository/javax/activation/javax.activation-api/1.2.0/javax.activation-api-1.2.0.jar:/home/REDACTED/.m2/repository/com/squareup/okhttp/logging-interceptor/2.7.5/logging-interceptor-2.7.5.jar:/home/REDACTED/.m2/repository/cn/dustlight/captcha/aliyun-sms/1.0.1/aliyun-sms-1.0.1.jar:/home/REDACTED/.m2/repository/com/aliyun/dysmsapi20170525/2.0.4/dysmsapi20170525-2.0.4.jar:/home/REDACTED/.m2/repository/com/aliyun/tea-util/0.2.11/tea-util-0.2.11.jar:/home/REDACTED/.m2/repository/com/aliyun/endpoint-util/0.0.6/endpoint-util-0.0.6.jar:/home/REDACTED/.m2/repository/com/aliyun/tea/1.3.3/tea-1.3.3.jar:/home/REDACTED/.m2/repository/com/squareup/okhttp3/okhttp/3.14.9/okhttp-3.14.9.jar:/home/REDACTED/.m2/repository/com/aliyun/tea-openapi/0.0.16/tea-openapi-0.0.16.jar:/home/REDACTED/.m2/repository/com/aliyun/credentials-java/0.2.4/credentials-java-0.2.4.jar:/home/REDACTED/.m2/repository/org/ini4j/ini4j/0.5.4/ini4j-0.5.4.jar:/home/REDACTED/.m2/repository/org/jacoco/org.jacoco.agent/0.8.3/org.jacoco.agent-0.8.3-runtime.jar:/home/REDACTED/.m2/repository/com/sun/xml/bind/jaxb-core/2.3.0/jaxb-core-2.3.0.jar:/home/REDACTED/.m2/repository/com/sun/xml/bind/jaxb-impl/2.3.0/jaxb-impl-2.3.0.jar:/home/REDACTED/.m2/repository/com/aliyun/openapiutil/0.1.6/openapiutil-0.1.6.jar:/home/REDACTED/.m2/repository/org/mybatis/spring/boot/mybatis-spring-boot-starter/2.1.3/mybatis-spring-boot-starter-2.1.3.jar:/home/REDACTED/.m2/repository/org/mybatis/spring/boot/mybatis-spring-boot-autoconfigure/2.1.3/mybatis-spring-boot-autoconfigure-2.1.3.jar:/home/REDACTED/.m2/repository/org/mybatis/mybatis/3.5.5/mybatis-3.5.5.jar:/home/REDACTED/.m2/repository/org/mybatis/mybatis-spring/2.0.5/mybatis-spring-2.0.5.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-jdbc/2.3.5.RELEASE/spring-boot-starter-jdbc-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/com/zaxxer/HikariCP/3.4.5/HikariCP-3.4.5.jar:/home/REDACTED/.m2/repository/org/springframework/spring-jdbc/5.2.10.RELEASE/spring-jdbc-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-tx/5.2.10.RELEASE/spring-tx-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/mysql/mysql-connector-java/8.0.22/mysql-connector-java-8.0.22.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-data-redis/2.3.5.RELEASE/spring-boot-starter-data-redis-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/data/spring-data-redis/2.3.5.RELEASE/spring-data-redis-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/data/spring-data-keyvalue/2.3.5.RELEASE/spring-data-keyvalue-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/data/spring-data-commons/2.3.5.RELEASE/spring-data-commons-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-oxm/5.2.10.RELEASE/spring-oxm-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/io/lettuce/lettuce-core/5.3.5.RELEASE/lettuce-core-5.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/io/netty/netty-common/4.1.53.Final/netty-common-4.1.53.Final.jar:/home/REDACTED/.m2/repository/io/netty/netty-handler/4.1.53.Final/netty-handler-4.1.53.Final.jar:/home/REDACTED/.m2/repository/io/netty/netty-resolver/4.1.53.Final/netty-resolver-4.1.53.Final.jar:/home/REDACTED/.m2/repository/io/netty/netty-buffer/4.1.53.Final/netty-buffer-4.1.53.Final.jar:/home/REDACTED/.m2/repository/io/netty/netty-codec/4.1.53.Final/netty-codec-4.1.53.Final.jar:/home/REDACTED/.m2/repository/io/netty/netty-transport/4.1.53.Final/netty-transport-4.1.53.Final.jar:/home/REDACTED/.m2/repository/io/projectreactor/reactor-core/3.3.11.RELEASE/reactor-core-3.3.11.RELEASE.jar:/home/REDACTED/.m2/repository/org/reactivestreams/reactive-streams/1.0.3/reactive-streams-1.0.3.jar:/home/REDACTED/.m2/repository/org/springframework/session/spring-session-data-redis/2.3.1.RELEASE/spring-session-data-redis-2.3.1.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/session/spring-session-core/2.3.1.RELEASE/spring-session-core-2.3.1.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-jcl/5.2.10.RELEASE/spring-jcl-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/springdoc/springdoc-openapi-ui/1.5.4/springdoc-openapi-ui-1.5.4.jar:/home/REDACTED/.m2/repository/org/springdoc/springdoc-openapi-webmvc-core/1.5.4/springdoc-openapi-webmvc-core-1.5.4.jar:/home/REDACTED/.m2/repository/org/webjars/swagger-ui/3.42.0/swagger-ui-3.42.0.jar:/home/REDACTED/.m2/repository/org/webjars/webjars-locator-core/0.45/webjars-locator-core-0.45.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.11.3/jackson-core-2.11.3.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-configuration-processor/2.3.5.RELEASE/spring-boot-configuration-processor-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-web/2.3.5.RELEASE/spring-boot-starter-web-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-json/2.3.5.RELEASE/spring-boot-starter-json-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.11.3/jackson-datatype-jdk8-2.11.3.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.11.3/jackson-datatype-jsr310-2.11.3.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/module/jackson-module-parameter-names/2.11.3/jackson-module-parameter-names-2.11.3.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-tomcat/2.3.5.RELEASE/spring-boot-starter-tomcat-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/glassfish/jakarta.el/3.0.3/jakarta.el-3.0.3.jar:/home/REDACTED/.m2/repository/org/apache/tomcat/embed/tomcat-embed-websocket/9.0.39/tomcat-embed-websocket-9.0.39.jar:/home/REDACTED/.m2/repository/org/springframework/spring-webmvc/5.2.10.RELEASE/spring-webmvc-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/spring-expression/5.2.10.RELEASE/spring-expression-5.2.10.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-starter-actuator/2.3.5.RELEASE/spring-boot-starter-actuator-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-actuator-autoconfigure/2.3.5.RELEASE/spring-boot-actuator-autoconfigure-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/boot/spring-boot-actuator/2.3.5.RELEASE/spring-boot-actuator-2.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/io/micrometer/micrometer-core/1.5.6/micrometer-core-1.5.6.jar:/home/REDACTED/.m2/repository/org/hdrhistogram/HdrHistogram/2.1.12/HdrHistogram-2.1.12.jar:/home/REDACTED/.m2/repository/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar:/home/REDACTED/.m2/repository/org/springframework/cloud/spring-cloud-starter-kubernetes/1.1.7.RELEASE/spring-cloud-starter-kubernetes-1.1.7.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/cloud/spring-cloud-kubernetes-core/1.1.7.RELEASE/spring-cloud-kubernetes-core-1.1.7.RELEASE.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-client/4.10.3/kubernetes-client-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-core/4.10.3/kubernetes-model-core-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-common/4.10.3/kubernetes-model-common-4.10.3.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/module/jackson-module-jaxb-annotations/2.11.3/jackson-module-jaxb-annotations-2.11.3.jar:/home/REDACTED/.m2/repository/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-rbac/4.10.3/kubernetes-model-rbac-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-admissionregistration/4.10.3/kubernetes-model-admissionregistration-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-apps/4.10.3/kubernetes-model-apps-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-autoscaling/4.10.3/kubernetes-model-autoscaling-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-apiextensions/4.10.3/kubernetes-model-apiextensions-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-batch/4.10.3/kubernetes-model-batch-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-certificates/4.10.3/kubernetes-model-certificates-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-coordination/4.10.3/kubernetes-model-coordination-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-discovery/4.10.3/kubernetes-model-discovery-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-events/4.10.3/kubernetes-model-events-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-extensions/4.10.3/kubernetes-model-extensions-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-networking/4.10.3/kubernetes-model-networking-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-metrics/4.10.3/kubernetes-model-metrics-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-policy/4.10.3/kubernetes-model-policy-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-scheduling/4.10.3/kubernetes-model-scheduling-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-settings/4.10.3/kubernetes-model-settings-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/kubernetes-model-storageclass/4.10.3/kubernetes-model-storageclass-4.10.3.jar:/home/REDACTED/.m2/repository/io/fabric8/openshift-model/4.10.3/openshift-model-4.10.3.jar:/home/REDACTED/.m2/repository/com/squareup/okhttp3/logging-interceptor/3.14.9/logging-interceptor-3.14.9.jar:/home/REDACTED/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.11.3/jackson-dataformat-yaml-2.11.3.jar:/home/REDACTED/.m2/repository/io/fabric8/zjsonpatch/0.3.0/zjsonpatch-0.3.0.jar:/home/REDACTED/.m2/repository/com/github/mifmif/generex/1.0.2/generex-1.0.2.jar:/home/REDACTED/.m2/repository/dk/brics/automaton/automaton/1.11-8/automaton-1.11-8.jar:/home/REDACTED/.m2/repository/org/springframework/cloud/spring-cloud-context/2.2.6.RELEASE/spring-cloud-context-2.2.6.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/security/spring-security-crypto/5.3.5.RELEASE/spring-security-crypto-5.3.5.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/cloud/spring-cloud-kubernetes-discovery/1.1.7.RELEASE/spring-cloud-kubernetes-discovery-1.1.7.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/cloud/spring-cloud-commons/2.2.6.RELEASE/spring-cloud-commons-2.2.6.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/cloud/spring-cloud-starter-kubernetes-config/1.1.7.RELEASE/spring-cloud-starter-kubernetes-config-1.1.7.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/cloud/spring-cloud-kubernetes-config/1.1.7.RELEASE/spring-cloud-kubernetes-config-1.1.7.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/security/spring-security-rsa/1.0.9.RELEASE/spring-security-rsa-1.0.9.RELEASE.jar:/home/REDACTED/.m2/repository/org/springframework/security/spring-security-jwt/1.1.1.RELEASE/spring-security-jwt-1.1.1.RELEASE.jar:/home/REDACTED/.m2/repository/org/bouncycastle/bcpkix-jdk15on/1.64/bcpkix-jdk15on-1.64.jar:/home/REDACTED/.m2/repository/com/nimbusds/nimbus-jose-jwt/8.19/nimbus-jose-jwt-8.19.jar:/home/REDACTED/.m2/repository/com/github/stephenc/jcip/jcip-annotations/1.0-1/jcip-annotations-1.0-1.jar:/home/REDACTED/.m2/repository/net/minidev/json-smart/2.3/json-smart-2.3.jar:/home/REDACTED/.m2/repository/net/minidev/accessors-smart/1.2/accessors-smart-1.2.jar:/home/REDACTED/.m2/repository/org/ow2/asm/asm/5.0.4/asm-5.0.4.jar:/home/REDACTED/.m2/repository/jakarta/xml/bind/jakarta.xml.bind-api/2.3.2/jakarta.xml.bind-api-2.3.2.jar:/home/REDACTED/.m2/repository/jakarta/activation/jakarta.activation-api/1.2.2/jakarta.activation-api-1.2.2.jar:/home/REDACTED/.m2/repository/org/glassfish/jaxb/jaxb-runtime/2.3.2/jaxb-runtime-2.3.2.jar:/home/REDACTED/.m2/repository/org/glassfish/jaxb/txw2/2.3.3/txw2-2.3.3.jar:/home/REDACTED/.m2/repository/com/sun/istack/istack-commons-runtime/3.0.8/istack-commons-runtime-3.0.8.jar:/home/REDACTED/.m2/repository/org/jvnet/staxex/stax-ex/1.8.1/stax-ex-1.8.1.jar:/home/REDACTED/.m2/repository/com/sun/xml/fastinfoset/FastInfoset/1.2.16/FastInfoset-1.2.16.jar:/home/REDACTED/.m2/repository/org/projectlombok/lombok/1.18.34/lombok-1.18.34.jar cn.dustlight.auth.AuthServiceApplication --spring.application.admin.enabled=true --spring.application.admin.jmx-name=org.springframework.boot:type=Admin,name=SpringApplication (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled

Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

用户友好

这个项目是一个身份认证提供服务，功能齐全，但是如果用户真的要使用的话，需要魔改的地方太多了，主要是没有进行配置化，以及简化使用，以下是我想到的点，如果你有更多补充的也可以提出来。

允许系统默认应用 default 的成员更改：站点 Logo 图标、站点 title、首页的启用与否、首页的内容、首页显示的链接导航、公告 Banner。

系统初始化的时候默认带有scope ：openid profile email。

所有应用创建的时候，如果系统中有 authorization_code 或者 refresh_code 的时候，应用默认添加这两个授权模式。如果有 openid profile email 这几个 scope 也自动带上。

README.md 加上支持 OpenID Connect 的说明以及相关接口地址。

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Nov 10 '25 02:11 Copilot