feat: add Dockerfile for JVM migration build and runtime stages

Author: phongphongg

.vscode/launch.json

@@ -19,8 +19,8 @@
       "projectName": "migration",
       "env": {
         "SPRING_DATASOURCE_URL": "jdbc:postgresql://localhost:5432/workastra_db?currentSchema=workastra",
-        "SPRING_DATASOURCE_USERNAME": "workastra_user",
-        "SPRING_DATASOURCE_PASSWORD": "workastra_password"
+        "SPRING_DATASOURCE_USERNAME": "<user>",
+        "SPRING_DATASOURCE_PASSWORD": "<password>"
       }
     },
     {
@@ -30,9 +30,9 @@
       "mainClass": "com.workastra.iam.IAMApplication",
       "projectName": "iam",
       "env": {
-        "SPRING_DATASOURCE_URL": "jdbc:postgresql://localhost:5432/workastra_db?currentSchema=workastra",
-        "SPRING_DATASOURCE_USERNAME": "workastra_user",
-        "SPRING_DATASOURCE_PASSWORD": "workastra_password"
+        "SPRING_DATASOURCE_URL": "jdbc:postgresql://localhost:5432/workastra?currentSchema=workastra",
+        "SPRING_DATASOURCE_USERNAME": "<user>",
+        "SPRING_DATASOURCE_PASSWORD": "<password>"
       }
     }
   ]

iam/jvm.Dockerfile

@@ -0,0 +1,35 @@
+# syntax=docker/dockerfile:1.19.0
+
+# Build stage
+FROM ghcr.io/graalvm/jdk-community:25.0.1 AS build
+
+WORKDIR /app
+
+# Copy build files first for better layer caching
+COPY gradlew gradlew.bat settings.gradle.kts build.gradle.kts ./
+COPY gradle/ gradle/
+
+# Download Gradle distribution
+RUN --mount=type=cache,target=/root/.gradle \
+    ./gradlew --version
+
+# Copy source and build
+COPY console/ console/
+COPY iam/ iam/
+COPY migration/ migration/
+
+RUN --mount=type=cache,target=/root/.gradle \
+    ./gradlew --no-daemon iam:bootJar
+
+# Runtime stage
+FROM eclipse-temurin:25-jre
+
+WORKDIR /app
+
+COPY --from=build /app/iam/build/libs/iam-*.jar iam.jar
+
+USER 1000
+
+EXPOSE 9000
+
+CMD ["java", "-jar", "/app/iam.jar"]

iam/src/main/resources/application.yaml

@@ -1,6 +1,7 @@
 ---
 server:
   port: 9000
+  forward-headers-strategy: framework
 
 spring:
   main:
@@ -10,28 +11,6 @@ spring:
       name: user
       password: "{noop}password"
       roles: USER
-    oauth2:
-      authorizationserver:
-        client:
-          workastra-desk:
-            registration:
-              client-id: workastra-desk
-              client-secret: "{noop}secret"
-              client-authentication-methods:
-                - client_secret_basic
-              client-name: Workastra Desk
-              authorization-grant-types:
-                - authorization_code
-                - refresh_token
-              redirect-uris:
-                - https://oauth.pstmn.io/v1/callback
-                - http://localhost:3000/api/oidc/callback
-              scopes:
-                - openid
-                - profile
-                - offline_access
-            require-authorization-consent: false
-            require-proof-key: true
   jpa:
     hibernate:
       ddl-auto: none

migration/jvm.Dockerfile

@@ -0,0 +1,33 @@
+# syntax=docker/dockerfile:1.19.0
+
+# Build stage
+FROM ghcr.io/graalvm/jdk-community:25.0.1 AS build
+
+WORKDIR /app
+
+# Copy build files first for better layer caching
+COPY gradlew gradlew.bat settings.gradle.kts build.gradle.kts ./
+COPY gradle/ gradle/
+
+# Download Gradle distribution
+RUN --mount=type=cache,target=/root/.gradle \
+    ./gradlew --version
+
+# Copy source and build
+COPY console/ console/
+COPY iam/ iam/
+COPY migration/ migration/
+
+RUN --mount=type=cache,target=/root/.gradle \
+    ./gradlew --no-daemon migration:bootJar
+
+# Runtime stage
+FROM eclipse-temurin:25-jre
+
+WORKDIR /app
+
+COPY --from=build /app/migration/build/libs/migration-*.jar app.jar
+
+USER 1000
+
+ENTRYPOINT ["java", "-jar", "/app/app.jar"]

migration/src/main/java/com/workastra/migration/Migration.java

@@ -30,7 +30,7 @@ public void run(ApplicationArguments args) throws Exception {
                     org.springframework.security.oauth2.core.AuthorizationGrantType.AUTHORIZATION_CODE
                 )
                 .authorizationGrantType(org.springframework.security.oauth2.core.AuthorizationGrantType.REFRESH_TOKEN)
-                .redirectUri("http://localhost:3000/api/oidc/callback")
+                .redirectUri("http://workastra.com/api/oidc/callback")
                 .scope(org.springframework.security.oauth2.core.oidc.OidcScopes.OPENID)
                 .scope(org.springframework.security.oauth2.core.oidc.OidcScopes.PROFILE)
                 .scope("offline_access")