Authentication Server - FCL

[GerberI]

See also: https://gitlab.bfr.berlin/devs43/common/keycloak/boards

Keycloak, config repository

• [x] Create an intial fcl realm for keycloak
• [ ] Configure fcl realm for production
• [ ] Add a user manager role and account for the fcl realm
• [x] Create a keycloak adapter config
• [ ] Create pipeline scripts to deploy the configs to the server => Later
• [ ] Create a theme for the fcl web-app that inherits from the BfR keycloak theme

Server

• [x] Refactor server code
• [x] Add session storage and storage-db adapter
• [x] Add keycloak middleware
• [x] Add login, logout, userInfo endpoints
• [ ] Add backchannel endpoint
• [x] Add code stubs for api usage
• [ ] Add authentication failure handling
• [ ] Add user id validation
• [ ] Remove obsolete code

Client

• [ ] If necessary, refactor user module
• [ ] Remove page close guard for page reloads
• [ ] Refactor redux store in preparation for session storage => to discuss later
• [ ] Add session storage to store session data => to discuss, what data to protect?
• [ ] Replace login page with a link to the login endpoint => first step: login as landing page
• [ ] Replace logout functionality with a link to the logout endpoint
• [ ] Suggestion: Add link to the account settings endpoint => later
• [ ] Facilitate user info endpoint to decide if the right user is logged in (add checkauth algorithm)
• [ ] Add dialogs for user interaction on logout event
• [ ] Add backchannel logout functionality
• [ ] Remove token handling and obsolete user components

Final

• [ ] Write a script to move the old users to keycloak