src/main/resources/application-test.yml

server:
  servlet:
    context-path: /platform

spring:
  jpa:
    show-sql: false
  flyway:
    clean-disabled: false
  security:
    oauth2:
      resourceserver:
        jwt:
          issuer-uri: https://test-issuer.example.com/oidc

cameleer:
  clickhouse:
    enabled: false
feat: move SaaS app to /platform base path, Logto becomes catch-all Eliminates all Logto path enumeration in Traefik. Routing is now: - /platform/* → cameleer-saas (SPA + API) - /server/* → server-ui - /* (catch-all) → Logto (sign-in, OIDC, assets, everything) Spring context-path handles backend prefix transparently. No changes needed in controllers, SecurityConfig, or interceptors. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> 2026-04-05 23:06:41 +02:00			`server:`
			`servlet:`
			`context-path: /platform`

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21 Set up the foundational Spring Boot project structure: - Root POM with web, security, JPA, Flyway, validation, AOP, actuator - PostgreSQL + Testcontainers for test infrastructure - Application YAML configs for default, dev, and test profiles - Maven wrapper (3.9.9) for reproducible builds - .gitignore for Maven/IDE/OS artifacts Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> 2026-03-30 10:08:14 +02:00			`spring:`
			`jpa:`
			`show-sql: false`
			`flyway:`
			`clean-disabled: false`
feat: add OAuth2 Resource Server for Logto OIDC authentication Dual auth: machine endpoints use Ed25519 JWT filter, all other API endpoints use Spring Security OAuth2 Resource Server with Logto OIDC. Mock JwtDecoder provided for test isolation. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-04-04 15:03:06 +02:00			`security:`
			`oauth2:`
			`resourceserver:`
			`jwt:`
			`issuer-uri: https://test-issuer.example.com/oidc`
fix: allow JwtDecoder bean override in test context - Add @Primary + @ConditionalOnMissingBean so TestSecurityConfig.jwtDecoder() wins over SecurityConfig.jwtDecoder() without needing a real OIDC endpoint - Add spring.main.allow-bean-definition-overriding=true and cameleer.clickhouse.enabled=false to src/test/resources/application-test.yml so Testcontainers @ServiceConnection can supply the datasource - Disable ClickHouse in test profile (src/main/resources/application-test.yml) so the explicit ClickHouseConfig DataSource bean is not created, allowing @ServiceConnection to wire the Testcontainers Postgres datasource - Fix TenantControllerTest and LicenseControllerTest to explicitly grant ROLE_platform-admin authority via .authorities() on the test JWT, since spring-security-test does not run the custom JwtAuthenticationConverter - Fix EnvironmentService.createDefaultForTenant() to use an internal bootstrap path that skips license enforcement (chicken-and-egg: no license exists at tenant creation time yet) - Remove now-unnecessary license stub from EnvironmentServiceTest Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-04-05 13:06:31 +02:00
			`cameleer:`
			`clickhouse:`
			`enabled: false`