joungmin/vpd-permission-poc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: enforce DDS token access through common grants

Browse Source
This commit is contained in:
devmrko
2026-06-30 13:20:00 +09:00
parent 3a07788e5c
commit a5e70bcff1
19 changed files with 509 additions and 68 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
scripts/deploy-dds-backoffice-local.sh
View File

@@ -46,6 +46,7 @@ export DDS_BACKOFFICE_PG_PASSWORD="${DDS_BACKOFFICE_PG_PASSWORD:-${DDSUSER_PG_PA
export DDS_BACKOFFICE_MY_PASSWORD="${DDS_BACKOFFICE_MY_PASSWORD:-${DDSUSER_MY_PASSWORD:-}}"
export DDS_BACKOFFICE_BOTH_PASSWORD="${DDS_BACKOFFICE_BOTH_PASSWORD:-${DDSUSER_BOTH_PASSWORD:-}}"
export DDS_BACKOFFICE_NONE_PASSWORD="${DDS_BACKOFFICE_NONE_PASSWORD:-${DDSUSER_NONE_PASSWORD:-}}"
export DDS_BACKOFFICE_TOKEN_PASSWORD="${DDS_BACKOFFICE_TOKEN_PASSWORD:-${DDSUSER_TOKEN_PASSWORD:-}}"
PID_FILE="$APP_DIR/app.pid"
LOG_FILE="$APP_DIR/app.log"

25
scripts/setup-dds-token-data-grant.sh Executable file
View File

@@ -0,0 +1,25 @@
#!/usr/bin/env bash
# Apply the single-technical-user DDS token path.
# The password is supplied through the environment and is never printed.
set -Eeuo pipefail
ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
if [[ -f /home/opc/apps/vpd-backoffice/.env ]]; then
set -a
. /home/opc/apps/vpd-backoffice/.env
set +a
fi
: "${ADB_USER:?ADB_USER is required}"
: "${ADB_PASSWORD:?ADB_PASSWORD is required}"
: "${ADB_TNS:?ADB_TNS is required}"
: "${DDSUSER_TOKEN_PASSWORD:?DDSUSER_TOKEN_PASSWORD is required}"
sqlplus -S -L "${ADB_USER}/${ADB_PASSWORD}@${ADB_TNS}" <<SQL
WHENEVER SQLERROR EXIT SQL.SQLCODE
SET DEFINE ON
DEFINE DDSUSER_TOKEN_PASSWORD = "${DDSUSER_TOKEN_PASSWORD}"
@${ROOT}/sql/adb/34_dds_token_data_grant_common_auth.sql
SQL
echo "DDS token DATA GRANT setup complete (technical user: dds_demo_token)"