feat(hmm): align backoffice identity administration (#702)

src/main/java/com/cloudhandson/vpdbackoffice/config/DbPoolWarmup.java

@@ -1,6 +1,8 @@
 package com.cloudhandson.vpdbackoffice.config;
 
 import com.cloudhandson.vpdbackoffice.service.PermissionService;
+import com.cloudhandson.vpdbackoffice.service.GroupService;
+import com.cloudhandson.vpdbackoffice.service.UserService;
 import java.sql.Connection;
 import javax.sql.DataSource;
 import org.slf4j.Logger;
@@ -14,13 +16,19 @@ public class DbPoolWarmup {
 
   private static final Logger log = LoggerFactory.getLogger(DbPoolWarmup.class);
   private final DataSource dataSource;
+  private final UserService userService;
+  private final GroupService groupService;
   private final PermissionService permissionService;
 
   public DbPoolWarmup(
       DataSource dataSource,
+      UserService userService,
+      GroupService groupService,
       PermissionService permissionService
   ) {
     this.dataSource = dataSource;
+    this.userService = userService;
+    this.groupService = groupService;
     this.permissionService = permissionService;
   }
 
@@ -36,10 +44,13 @@ public class DbPoolWarmup {
 
   private void warmupBackofficeCatalog() {
     long started = System.nanoTime();
-    // Only warm the Smilegate identity catalog. VPD catalog objects are not
-    // part of this PoC and may deliberately be absent from the ADB schema.
+    userService.findAll();
+    userService.findUserRoles();
+    groupService.findAll();
+    groupService.findGroupUsers();
+    groupService.findGroupRoles();
     permissionService.findRoles();
     permissionService.findPermissionViews();
-    log.info("Backoffice DB catalog cache warmed up in {}ms", (System.nanoTime() - started) / 1_000_000);
+    log.info("HMM identity catalog cache warmed up in {}ms", (System.nanoTime() - started) / 1_000_000);
   }
 }

src/main/java/com/cloudhandson/vpdbackoffice/config/SecurityConfig.java

@@ -13,6 +13,7 @@ import org.springframework.security.crypto.factory.PasswordEncoderFactories;
 import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.security.provisioning.InMemoryUserDetailsManager;
 import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint;
 
 @Configuration
 public class SecurityConfig {
@@ -45,6 +46,8 @@ public class SecurityConfig {
         .headers(headers -> headers.httpStrictTransportSecurity(hsts -> hsts
             .includeSubDomains(true)
             .maxAgeInSeconds(31_536_000)))
+        .exceptionHandling(exceptions -> exceptions
+            .authenticationEntryPoint(new LoginUrlAuthenticationEntryPoint("/login")))
         .authorizeHttpRequests(auth -> auth
             .requestMatchers(
                 "/css/**", "/js/**", "/webjars/**",
@@ -64,8 +67,6 @@ public class SecurityConfig {
             .requestMatchers(HttpMethod.POST, "/**").hasRole("ADMIN")
             .requestMatchers(HttpMethod.DELETE, "/**").hasRole("ADMIN")
             .anyRequest().authenticated())
-        .httpBasic(basic -> {
-        })
         .formLogin(login -> login
             .loginPage("/login")
             .permitAll())