Merge pull request #2 from stranljip/pull-docker

add Dockerfile and add configuration to respect X-Forward-* headers

.github/workflows/docker.yml

+name: Docker
+
+on:
+    push:
+        branches: [ master ]
+    release:
+        types: [published]
+
+jobs:
+    docker_build:
+        name: Create and push Docker image to Docker Hub
+        runs-on: ubuntu-latest
+        steps:
+            - name: Check out the repo
+              uses: actions/checkout@v2
+            - name: Set up JDK 11
+              uses: actions/setup-java@v1
+              with:
+                  java-version: 11
+            - name: Build with Maven
+              run: mvn -B package --file pom.xml
+            - name: Push to Docker Hub
+              uses: docker/build-push-action@v1
+              with:
+                  username: ${{ secrets.DOCKER_USERNAME }}
+                  password: ${{ secrets.DOCKER_PASSWORD }}
+                  repository: helmholtzcloud/marketplace
+                  tag_with_ref: true
+                  tags: latest

Dockerfile

+FROM adoptopenjdk:11-jre-hotspot
+COPY target/helmholtz-marketplace-server-*.jar app.jar
+EXPOSE 8080
+CMD java -jar -Dsecret=$UNITY_CLIENT_SECRET app.jar

src/main/resources/application.yml

 logging:
-  level:
-    root: INFO
-    org.springframework.web: INFO
-    org.springframework.security: INFO
-    org.springframework.security.oauth2: INFO
-    org.springframework.boot.autoconfigure: DEBUG
+    level:
+        root: INFO
+        org.springframework.web: INFO
+        org.springframework.security: INFO
+        org.springframework.security.oauth2: INFO
+        org.springframework.boot.autoconfigure: DEBUG
+
+server:
+    forward-headers-strategy: NATIVE
 
 spring:
-  security:
-    oauth2:
-      client:
-        registration:
-          unity:
-            provider: hdf
-            client-id: helmholtz-marketplace
-            client-secret: ${secret:nopass}
-            authorization-grant-type: authorization_code
-            redirect-uri: "{baseUrl}/login/oauth2/code/unity"
-            scope:
-              - credentials
-              - profile
-              - email
-            client-authentication-method: basic
-        provider:
-          hdf:
-            issuer-uri: https://login.helmholtz-data-federation.de/oauth2
-            authorization-uri: https://login.helmholtz-data-federation.de/oauth2-as/oauth2-authz
-            token-uri: https://login.helmholtz-data-federation.de/oauth2/token
-            user-info-uri: https://login.helmholtz-data-federation.de/oauth2/userinfo
-            jwk-set-uri: https://login.helmholtz-data-federation.de/oauth2/jwk
-            user-name-attribute: sub
\ No newline at end of file
+    security:
+        oauth2:
+            client:
+                registration:
+                    unity:
+                        provider: hdf
+                        client-id: helmholtz-marketplace
+                        client-secret: ${secret:nopass}
+                        authorization-grant-type: authorization_code
+                        redirect-uri: "{baseUrl}/login/oauth2/code/unity"
+                        scope:
+                            - credentials
+                            - profile
+                            - email
+                        client-authentication-method: basic
+                provider:
+                    hdf:
+                        issuer-uri: https://login.helmholtz-data-federation.de/oauth2
+                        authorization-uri: https://login.helmholtz-data-federation.de/oauth2-as/oauth2-authz
+                        token-uri: https://login.helmholtz-data-federation.de/oauth2/token
+                        user-info-uri: https://login.helmholtz-data-federation.de/oauth2/userinfo
+                        jwk-set-uri: https://login.helmholtz-data-federation.de/oauth2/jwk
+                        user-name-attribute: sub