add sns for endpoint override and add lambda support in helm chart

Author: mrFlick72

auth-server/local/application.yml

@@ -47,9 +47,10 @@ spring:
         jwt:
           jwk-set-uri: http://localhost:${server.port}/oauth2/jwks
 
-  redis:
-    database: 0
-    host: localhost
+  data:
+    redis:
+      database: 0
+      host: localhost
 
 server:
   port: 9090

helm-charts/charts/README.md

@@ -194,10 +194,31 @@ application:
       endpointOverride:
     dynamodb:
       endpointOverride:
+    sns:
+      endpointOverride:
+    lambda:
+      endpointOverride:
 ```
 
 Use these values for LocalStack or non-default AWS endpoints.
 
+### Lambda Token Enhancement
+
+```yaml
+application:
+  lambda:
+    aws:
+      enabled: false
+      functionName: vauthenticator-token-enhancer
+      functionResultCacheTtl: 10s
+```
+
+| Name | Description | Default |
+| --- | --- | --- |
+| `application.lambda.aws.enabled` | Enable AWS Lambda-based token customization. | `false` |
+| `application.lambda.aws.functionName` | Lambda function name invoked for token enhancement. | `vauthenticator-token-enhancer` |
+| `application.lambda.aws.functionResultCacheTtl` | Cache TTL for Lambda invocation results, as a Spring duration. | `10s` |
+
 ### Password Policy
 
 ```yaml

helm-charts/charts/vauthenticator/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: "0.11.0"
+version: "0.12.0"
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

helm-charts/charts/vauthenticator/templates/configmap.yaml

@@ -12,6 +12,10 @@ data:
         endpointOverride: {{ .Values.application.aws.kms.endpointOverride }}
       dynamodb:
         endpointOverride: {{ .Values.application.aws.dynamodb.endpointOverride }}
+      sns:
+        endpointOverride: {{ .Values.application.aws.sns.endpointOverride }}
+      lambda:
+        endpointOverride: {{ .Values.application.aws.lambda.endpointOverride }}
 
     password:
       password-history:
@@ -169,6 +173,11 @@ data:
           table-name: {{ .Values.application.dynamoDb.defaultMfaAccountMethods.tableName  }}
 
       host: {{ .Values.application.baseUrl }}
+      lambda:
+        aws:
+          enabled: {{ .Values.application.lambda.aws.enabled }}
+          function-name: {{ .Values.application.lambda.aws.functionName }}
+          function-result-cache-ttl: {{ .Values.application.lambda.aws.functionResultCacheTtl }}
     {{- if eq .Values.aws.iamUser.enabled true }}
     iamUserAwsCredentialsProvider: true
     {{- end }}

helm-charts/charts/vauthenticator/values.yaml

@@ -227,3 +227,13 @@ application:
       endpointOverride:
     dynamodb:
       endpointOverride:
+    sns:
+      endpointOverride:
+    lambda:
+      endpointOverride:
+
+  lambda:
+    aws:
+      enabled: false
+      functionName: vauthenticator-token-enhancer
+      functionResultCacheTtl: 10s