Added authentication and authorization via Keycloak

module-server/src/main/resources/application.yaml

@@ -30,6 +30,12 @@ spring:
   data.mongodb:
     uri: ${MONGODB_CONNECTION_STRING}
     auto-index-creation: true
+  security:
+    oauth2:
+      resourceserver:
+        jwt:
+          jwk-set-uri: https://id.2martens.de/realms/wahlrecht/protocol/openid-connect/certs
+
 
 # properties for application
 de.twomartens.wahlrecht:
@@ -49,6 +55,16 @@ springdoc:
 openapi:
   description: |
     Open API Documentation for the Wahlrecht API
+    
+    ## Authenticate
+    
+    The API is secured by the need to provide bearer tokens. Anonymous access is supported
+    with the user "anonymous" with password "anonymous". It grants access to all GET
+    operations as well as the calculation of results.
+    
+    For changes to the database-stored data, you need a proper authorized user.
+    
+    The client_id is "wahlrecht", if you are on the Swagger UI and want to authorize there.
 
     ## Calculate election results
 

module-server/src/main/resources/policy-enforcer.json

@@ -0,0 +1,6 @@
+{
+  "realm": "wahlrecht",
+  "auth-server-url": "https://id.2martens.de",
+  "resource": "wahlrecht",
+  "http-method-as-scope": true
+}