Develop (#175)

* Synching develop branch with master. (#161)

* Feature/157 (#158)

* Initial creation of terraform setup for AWS static-content site hosting.

* Website deployment run locally works. Terraform AWS resource build run locally works.

* Creating test self-hosted environment. Alwways run terraform in docker containers.

* Removing all run on PR creation / modification.

* Making redirect_uri and logout URL field defaults parameterized.

* OIDC Authorization Code Flow with local keycoak is now working for test and prod hosted static-content site.

* Updating Token History grouping.

* Test suite works against test and prod sites with a local keycloak instance. The introspection endpoint in keycloak  cannot be invoked from the browser. So, the static content site cannot call the keycloak instrospection site. The test suite looks for hte expected CORS error. Test suite must be run against a local build for full validation.

* Feature/158 (#160)

* Initial creation of terraform setup for AWS static-content site hosting.

* Website deployment run locally works. Terraform AWS resource build run locally works.

* Creating test self-hosted environment. Alwways run terraform in docker containers.

* Removing all run on PR creation / modification.

* Making redirect_uri and logout URL field defaults parameterized.

* OIDC Authorization Code Flow with local keycoak is now working for test and prod hosted static-content site.

* Updating Token History grouping.

* Test suite works against test and prod sites with a local keycloak instance. The introspection endpoint in keycloak  cannot be invoked from the browser. So, the static content site cannot call the keycloak instrospection site. The test suite looks for hte expected CORS error. Test suite must be run against a local build for full validation.

* Minimize javascript for static content sites. Google analytics for static content sites.

* feature/152 (#163)

* Feature/157 (#158)

* Initial creation of terraform setup for AWS static-content site hosting.

* Website deployment run locally works. Terraform AWS resource build run locally works.

* Creating test self-hosted environment. Alwways run terraform in docker containers.

* Removing all run on PR creation / modification.

* Making redirect_uri and logout URL field defaults parameterized.

* OIDC Authorization Code Flow with local keycoak is now working for test and prod hosted static-content site.

* Updating Token History grouping.

* Test suite works against test and prod sites with a local keycloak instance. The introspection endpoint in keycloak  cannot be invoked from the browser. So, the static content site cannot call the keycloak instrospection site. The test suite looks for hte expected CORS error. Test suite must be run against a local build for full validation.

* Feature/158 (#160)

* Initial creation of terraform setup for AWS static-content site hosting.

* Website deployment run locally works. Terraform AWS resource build run locally works.

* Creating test self-hosted environment. Alwways run terraform in docker containers.

* Removing all run on PR creation / modification.

* Making redirect_uri and logout URL field defaults parameterized.

* OIDC Authorization Code Flow with local keycoak is now working for test and prod hosted static-content site.

* Updating Token History grouping.

* Test suite works against test and prod sites with a local keycloak instance. The introspection endpoint in keycloak  cannot be invoked from the browser. So, the static content site cannot call the keycloak instrospection site. The test suite looks for hte expected CORS error. Test suite must be run against a local build for full validation.

* Minimize javascript for static content sites. Google analytics for static content sites.

* Feature/152 (#162)

* Synching develop branch with master. (#161)

* Feature/157 (#158)

* Initial creation of terraform setup for AWS static-content site hosting.

* Website deployment run locally works. Terraform AWS resource build run locally works.

* Creating test self-hosted environment. Alwways run terraform in docker containers.

* Removing all run on PR creation / modification.

* Making redirect_uri and logout URL field defaults parameterized.

* OIDC Authorization Code Flow with local keycoak is now working for test and prod hosted static-content site.

* Updating Token History grouping.

* Test suite works against test and prod sites with a local keycloak instance. The introspection endpoint in keycloak  cannot be invoked from the browser. So, the static content site cannot call the keycloak instrospection site. The test suite looks for hte expected CORS error. Test suite must be run against a local build for full validation.

* Feature/158 (#160)

* Initial creation of terraform setup for AWS static-content site hosting.

* Website deployment run locally works. Terraform AWS resource build run locally works.

* Creating test self-hosted environment. Alwways run terraform in docker containers.

* Removing all run on PR creation / modification.

* Making redirect_uri and logout URL field defaults parameterized.

* OIDC Authorization Code Flow with local keycoak is now working for test and prod hosted static-content site.

* Updating Token History grouping.

* Test suite works against test and prod sites with a local keycloak instance. The introspection endpoint in keycloak  cannot be invoked from the browser. So, the static content site cannot call the keycloak instrospection site. The test suite looks for hte expected CORS error. Test suite must be run against a local build for full validation.

* Minimize javascript for static content sites. Google analytics for static content sites.

* Updated docker build instructions.

* Initial page + test creation. (#164)

* Initial page + test creation.

* Adding ability to take a JWT and decompose it into JWT Header and JWT Payload fields on jwt_tools.html page. Updated test suite to test this.

* Moving back to postgres18. Not sure when we lost that change.

* Fixing test #13.

* Fix coverage report.

* Another change attempting to fix the code coverage bug.

* Successful deployment to test.idptools.com and selenium test run.

* Terraform creates IAM role  with minimmum permissions.

* Terraform creates IAM role  with minimmum permissions.

* Automatically run terraform against test when commmits / merge made to develop.

* Updating develop / test 'test suite run' + terraform + static-content site deployment.

* Test change to kick off pipelines.

* Kick-off another workflow run.

* Terraform deploy job didn't run as expected on push.

* Initiate workflows by push. Test.

* Run hosted site test suite after deployment.

* Live website test should run better now.

* Triggering another workflow.

* Another  fix to live-test workflow.

* Force a workflow to start on push.

* Fixing yet another live-test bug.

Author: rcbjBlueMars

docker-compose-live-tests.yml

@@ -8,9 +8,11 @@
 # uses): the browser drives the public HTTPS site and must call the local
 # Keycloak from that HTTPS page. Chrome treats http://localhost (loopback) as
 # potentially-trustworthy and exempt from mixed-content / private-network
-# blocking, but a private-IP host (e.g. a bridge service name) is blocked. So
-# both containers share the host network and Keycloak is reached at
-# http://localhost:8080 — exactly the scenario remote-run-tests.sh proves.
+# blocking, but a private-IP host (e.g. a bridge service name like
+# "keycloak:8080") is blocked. So both containers share the host network and
+# Keycloak is reached at http://localhost:8080 — the scenario remote-run-tests.sh
+# proves. (No user-defined networks or volumes: host net needs neither, and
+# Keycloak uses in-memory H2 for throwaway test data.)
 #
 # Readiness: instead of a Docker healthcheck (flaky under host networking), the
 # tests container waits for Keycloak itself (docker-run-tests.sh waitForKeycloak).
@@ -19,36 +21,15 @@
 #   LIVE_DEBUGGER_BASE_URL (default https://test.idptools.com)
 #   LIVE_CONFIG_FILE        (default ./env/test-idptools-com.js)
 services:
-  postgres:
-    image: postgres:18
-    volumes:
-      - postgres_data:/var/lib/postgresql/data
-    environment:
-      POSTGRES_USER: keycloak
-      POSTGRES_PASSWORD: keycloak
-      POSTGRES_DB: keycloak
-      # postgres:18 refuses to start on a data dir initialized by an older
-      # major version. Initialize into a fresh subdirectory of the volume so
-      # the upgrade starts cleanly (test data is disposable and recreated each
-      # run); any legacy PG17 files at the volume root are ignored.
-      PGDATA: /var/lib/postgresql/data/pgdata
-    healthcheck:
-      test: pg_isready
-      interval: 10s
-      timeout: 60s
-      retries: 5
-      start_period: 45s
-    networks:
-      - keycloak
-
   keycloak:
     image: quay.io/keycloak/keycloak:26.6.4
     command: ["start-dev"]
+    hostname: keycloak
+    network_mode: "host"
     environment:
-      KC_DB: postgres
-      KC_DB_URL: jdbc:postgresql://postgres:5432/keycloak
-      KC_DB_USERNAME: keycloak
-      KC_DB_PASSWORD: keycloak
+      KC_HTTP_PORT: "8080"
+      KC_BOOTSTRAP_ADMIN_USERNAME: keycloak
+      KC_BOOTSTRAP_ADMIN_PASSWORD: keycloak
       KEYCLOAK_ADMIN: keycloak
       KEYCLOAK_ADMIN_PASSWORD: keycloak
       KC_HEALTH_ENABLED: "true"
@@ -58,16 +39,17 @@ services:
     build:
       context: .
       dockerfile: tests/Dockerfile
+    network_mode: "host"
     environment:
       # Target the deployed site; talk to the local Keycloak over loopback.
       - DEBUGGER_BASE_URL=${LIVE_DEBUGGER_BASE_URL:-https://test.idptools.com}
-      - KEYCLOAK_BASE_URL=http://keycloak:8080
-      - KEYCLOAK_LOCALHOST_BASE_URL=http://keycloak:8080
+      - KEYCLOAK_BASE_URL=http://localhost:8080
+      - KEYCLOAK_LOCALHOST_BASE_URL=http://localhost:8080
       - CONFIG_FILE=${LIVE_CONFIG_FILE:-./env/test-idptools-com.js}
     # Persist the generated report/logs to the host (gitignored).
     volumes:
       - ./tests/report:/usr/src/app/report
-    # Start-order only (host networking healthchecks are unreliable); the test
+    # Start-order only (host-networking healthchecks are unreliable); the test
     # runner waits for Keycloak to answer before configuring it.
     depends_on:
       - keycloak