auth media

gateway-service/src/main/resources/application.yml

@@ -6,6 +6,23 @@ spring:
   application:
     name: gateway-service
 
+  security:
+    oauth2:
+      client:
+        registration:
+          google:
+            client-id: ${GOOGLE_CLIENT_ID:}
+            client-secret: ${GOOGLE_CLIENT_SECRET:}
+            scope: email,profile
+          github:
+            client-id: ${GITHUB_CLIENT_ID:}
+            client-secret: ${GITHUB_CLIENT_SECRET:}
+            scope: user:email,read:user
+          facebook:
+            client-id: ${FACEBOOK_CLIENT_ID:}
+            client-secret: ${FACEBOOK_CLIENT_SECRET:}
+            scope: email,public_profile
+
   # ---- R2DBC (reactive DB) ----
   r2dbc:
     url: r2dbc:postgresql://${DB_HOST:localhost}:${DB_PORT:5432}/${DB_NAME:appdb}
@@ -75,12 +92,18 @@ jwt:
   secret: ${JWT_SECRET:}
   expiration: ${JWT_EXPIRATION:103600000}
 
+# ---- OAuth2 redirect after success ----
+oauth2:
+  redirect-uri: ${OAUTH2_REDIRECT_URI:https://balexvic.com/login}
+
 # ---- Auth path config ----
 auth:
   public-paths:
     - /api/auth/login
     - /api/auth/register
     - /api/auth/refresh/token
+    - /oauth2/authorization/**
+    - /login/oauth2/code/**
     - /actuator/**
     - /api/*/v3/api-docs/**
     - /api/*/swagger-ui/**
@@ -102,7 +125,7 @@ management:
     health:
       show-details: always
     gateway:
-      enabled: true
+      access: unrestricted
 
 # ---- Logging ----
 logging: