feat: add oauth scope (for entra id) (#110)

camunda-community-hub · Oct 16, 2024 · 40138fc · 40138fc
1 parent 81f4a22
commit 40138fc
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 2 deletions.
diff --git a/extension/java-client-operate/src/main/java/io/camunda/operate/auth/JwtAuthentication.java b/extension/java-client-operate/src/main/java/io/camunda/operate/auth/JwtAuthentication.java
@@ -73,6 +73,7 @@ private HttpPost buildRequest() throws URISyntaxException {
     formParams.add(new BasicNameValuePair("client_id", jwtCredential.clientId()));
     formParams.add(new BasicNameValuePair("client_secret", jwtCredential.clientSecret()));
     formParams.add(new BasicNameValuePair("audience", jwtCredential.audience()));
+    formParams.add(new BasicNameValuePair("scope", jwtCredential.scope()));
     httpPost.setEntity(new UrlEncodedFormEntity(formParams));
     return httpPost;
   }

diff --git a/extension/java-client-operate/src/main/java/io/camunda/operate/auth/JwtCredential.java b/extension/java-client-operate/src/main/java/io/camunda/operate/auth/JwtCredential.java
@@ -2,4 +2,5 @@
 
 import java.net.URL;
 
-public record JwtCredential(String clientId, String clientSecret, String audience, URL authUrl) {}
+public record JwtCredential(
+    String clientId, String clientSecret, String audience, URL authUrl, String scope) {}
diff --git a/...r-camunda-operate/src/main/java/io/camunda/operate/spring/OperateClientConfiguration.java b/...r-camunda-operate/src/main/java/io/camunda/operate/spring/OperateClientConfiguration.java
@@ -76,7 +76,8 @@ public Authentication authentication() {
                 properties.clientId(),
                 properties.clientSecret(),
                 properties.audience(),
-                properties.authUrl()),
+                properties.authUrl(),
+                properties.scope()),
             new JacksonTokenResponseMapper(objectMapper));
       }
       default -> throw new IllegalStateException("Unsupported profile: " + properties.profile());

diff --git a/...operate/src/main/java/io/camunda/operate/spring/OperateClientConfigurationProperties.java b/...operate/src/main/java/io/camunda/operate/spring/OperateClientConfigurationProperties.java
@@ -19,6 +19,7 @@ public record OperateClientConfigurationProperties(
     String clientSecret,
     URL authUrl,
     String audience,
+    String scope,
     // saas auth properies
     String region,
     String clusterId) {