From a5c4e0cead45b666646c1e20e15c17de7387b443 Mon Sep 17 00:00:00 2001
From: hsiegeln <37154749+hsiegeln@users.noreply.github.com>
Date: Sun, 5 Apr 2026 13:06:53 +0200
Subject: [PATCH] feat: add spring-boot-starter-oauth2-resource-server and OIDC
 properties

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 cameleer3-server-app/pom.xml                                | 4 ++++
 .../cameleer3/server/app/security/SecurityProperties.java   | 6 ++++++
 cameleer3-server-app/src/main/resources/application.yml     | 2 ++
 3 files changed, 12 insertions(+)

diff --git a/cameleer3-server-app/pom.xml b/cameleer3-server-app/pom.xml
index d3e89e03..0d4b53b3 100644
--- a/cameleer3-server-app/pom.xml
+++ b/cameleer3-server-app/pom.xml
@@ -86,6 +86,10 @@
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-security</artifactId>
         </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-oauth2-resource-server</artifactId>
+        </dependency>
         <dependency>
             <groupId>com.nimbusds</groupId>
             <artifactId>nimbus-jose-jwt</artifactId>
diff --git a/cameleer3-server-app/src/main/java/com/cameleer3/server/app/security/SecurityProperties.java b/cameleer3-server-app/src/main/java/com/cameleer3/server/app/security/SecurityProperties.java
index 15ceddbc..59509c32 100644
--- a/cameleer3-server-app/src/main/java/com/cameleer3/server/app/security/SecurityProperties.java
+++ b/cameleer3-server-app/src/main/java/com/cameleer3/server/app/security/SecurityProperties.java
@@ -17,6 +17,8 @@ public class SecurityProperties {
     private String uiPassword;
     private String uiOrigin;
     private String jwtSecret;
+    private String oidcIssuerUri;
+    private String oidcAudience;
 
     public long getAccessTokenExpiryMs() { return accessTokenExpiryMs; }
     public void setAccessTokenExpiryMs(long accessTokenExpiryMs) { this.accessTokenExpiryMs = accessTokenExpiryMs; }
@@ -34,4 +36,8 @@ public class SecurityProperties {
     public void setUiOrigin(String uiOrigin) { this.uiOrigin = uiOrigin; }
     public String getJwtSecret() { return jwtSecret; }
     public void setJwtSecret(String jwtSecret) { this.jwtSecret = jwtSecret; }
+    public String getOidcIssuerUri() { return oidcIssuerUri; }
+    public void setOidcIssuerUri(String oidcIssuerUri) { this.oidcIssuerUri = oidcIssuerUri; }
+    public String getOidcAudience() { return oidcAudience; }
+    public void setOidcAudience(String oidcAudience) { this.oidcAudience = oidcAudience; }
 }
diff --git a/cameleer3-server-app/src/main/resources/application.yml b/cameleer3-server-app/src/main/resources/application.yml
index d7b979b3..75f03a78 100644
--- a/cameleer3-server-app/src/main/resources/application.yml
+++ b/cameleer3-server-app/src/main/resources/application.yml
@@ -50,6 +50,8 @@ security:
   ui-password: ${CAMELEER_UI_PASSWORD:admin}
   ui-origin: ${CAMELEER_UI_ORIGIN:http://localhost:5173}
   jwt-secret: ${CAMELEER_JWT_SECRET:}
+  oidc-issuer-uri: ${CAMELEER_OIDC_ISSUER_URI:}
+  oidc-audience: ${CAMELEER_OIDC_AUDIENCE:}
 
 
 springdoc: