Authentication and session handling in BFF doesn't work in cluster mo…

…de (#1140) (#1145)

Co-authored-by: khanhtranduy <[email protected]>

.env

@@ -57,6 +57,9 @@ PROMETHEUS_SERVICE_PORT=9090
 PROMETHEUS_SERVICE_HOST=prometheus
 PROMETHEUS_ADDR=${PROMETHEUS_SERVICE_HOST}:${PROMETHEUS_SERVICE_PORT}
 
+# Redis
+SPRING_DATA_REDIS_HOST=redis
+SPRING_DATA_REDIS_PORT=6379
 
 # *******************************************************
 # Environment Variables are injected to the microservices

backoffice-bff/pom.xml

@@ -24,6 +24,14 @@
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-oauth2-client</artifactId>
         </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-data-redis</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.session</groupId>
+            <artifactId>spring-session-data-redis</artifactId>
+        </dependency>
     </dependencies>
     <build>
         <plugins>

backoffice-bff/src/main/resources/application.yaml

@@ -20,6 +20,12 @@ spring:
             client-id: backoffice-bff
             client-secret: TVacLC0cQ8tiiEKiTVerTb2YvwQ1TRJF #gitleaks:allow
             scope: openid, profile, email, roles
+  data:
+    redis:
+      host: redis
+      port: 6379
+  session:
+    store-type: redis
 management:
   tracing:
     sampling:
@@ -42,6 +48,8 @@ spring:
       on-profile: "dev"
   cloud:
     gateway:
+      default-filters:
+        - SaveSession
       routes:
         # Changes for your local development should not be committed
         - id: api_servicename_local
@@ -69,6 +77,8 @@ spring:
       on-profile: "prod"
   cloud:
     gateway:
+      default-filters:
+        - SaveSession
       routes:
         - id: api
           uri: http://nginx

docker-compose.yml

@@ -591,6 +591,18 @@ services:
       - kafka-connect
     networks:
       - yas-network
+  redis:
+    image: redis:7.4.1-alpine
+    restart: always
+    ports:
+      - '6379:6379'
+    environment:
+      - SPRING_DATA_REDIS_HOST
+      - SPRING_DATA_REDIS_PORT
+    volumes:
+      - redis:/data
+    networks:
+      - yas-network
 
 networks:
   yas-network:
@@ -600,3 +612,4 @@ networks:
 volumes:
   postgres:
   pgadmin:
+  redis:

storefront-bff/pom.xml

@@ -26,6 +26,14 @@
             <groupId>org.springframework.cloud</groupId>
             <artifactId>spring-cloud-starter-gateway</artifactId>
         </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-data-redis</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.session</groupId>
+            <artifactId>spring-session-data-redis</artifactId>
+        </dependency>
     </dependencies>
     <build>
         <plugins>

storefront-bff/src/main/resources/application.yaml

@@ -20,6 +20,12 @@ spring:
             client-id: storefront-bff
             client-secret: ZrU9I0q2uXBglBnmvyJdkl1lf0ncr8tn #gitleaks:allow
             scope: openid, profile, email, roles
+  data:
+    redis:
+      host: redis
+      port: 6379
+  session:
+    store-type: redis
 management:
   metrics:
     distribution:
@@ -39,22 +45,24 @@ spring:
       on-profile: "dev"
   cloud:
     gateway:
+      default-filters:
+        - SaveSession
       routes:
         # Changes for your local development should not be committed
         - id: api_servicename_local
           uri: http://localhost:8081
           predicates:
             - Path=/api/servicename/**
           filters:
-            - RewritePath=/api/(?<segment>.*), /$\{segment}
             - TokenRelay=
+            - StripPrefix=1
         - id: api
           uri: http://api.yas.local
           predicates:
             - Path=/api/**
           filters:
-            - RewritePath=/api/(?<segment>.*), /$\{segment}
             - TokenRelay=
+            - StripPrefix=1
         - id: nextjs
           uri: http://localhost:3000
           predicates:
@@ -66,6 +74,8 @@ spring:
       on-profile: "prod"
   cloud:
     gateway:
+      default-filters:
+        - SaveSession
       routes:
         - id: api
           uri: http://nginx