mirror of
https://github.com/authelia/authelia.git
synced 2026-10-28 09:34:52 +08:00
renovate[bot]
92322fb848
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [maven](https://hub.docker.com/_/maven) ([source](https://redirect.github.com/carlossg/docker-maven)) | stage | digest | `2efc28d` → `d23342b` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE2NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
33 lines
1.5 KiB
Docker
33 lines
1.5 KiB
Docker
# SPDX-FileCopyrightText: 2026 Authelia
|
|
#
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
FROM --platform=${BUILDPLATFORM} maven:3.10.0-eclipse-temurin-21@sha256:d23342b1a070a07555f4ef20c085a81aa40e5f5b3288ebf8ddae2f67e9d760c8 AS builder
|
|
|
|
ARG CONFORMANCE_SUITE_REPO=https://gitlab.com/openid/conformance-suite.git
|
|
ARG CONFORMANCE_SUITE_REF=release-v5.3.3
|
|
ARG CONFORMANCE_SUITE_COMMIT=7d420f716e49d44f8a6b04f0a3e240ad6d68ab55
|
|
|
|
WORKDIR /src
|
|
|
|
COPY --link example/compose/oidc-conformance/authelia-login.patch /tmp/authelia-login.patch
|
|
|
|
RUN --mount=type=cache,target=/root/.m2 <<EOF
|
|
set -eu
|
|
git clone --depth 1 --branch "${CONFORMANCE_SUITE_REF}" "${CONFORMANCE_SUITE_REPO}" .
|
|
test "$(git rev-parse HEAD)" = "${CONFORMANCE_SUITE_COMMIT}"
|
|
git apply /tmp/authelia-login.patch
|
|
mvn -B package -DskipTests=true
|
|
EOF
|
|
|
|
FROM registry.gitlab.com/openid/conformance-suite:release-v5.3.3@sha256:377ab51f011d821c4b6f7729053e85adf062d691e51a3615f40507fd900a2436
|
|
|
|
COPY --link --from=builder /src/target/fapi-test-suite.jar /server/fapi-test-suite.jar
|
|
|
|
# The conformance server fetches Authelia's discovery document, JWKS, token endpoint and userinfo endpoint over TLS
|
|
# signed by the suite development CA, which no public root vouches for. Importing into the JDK's own cacerts adds that
|
|
# CA while leaving the public roots in place, which a -Djavax.net.ssl.trustStore override would not.
|
|
COPY --link common/pki/ca.public.crt /tmp/authelia-ca.crt
|
|
|
|
RUN keytool -importcert -noprompt -alias authelia-development-ca -file /tmp/authelia-ca.crt -cacerts -storepass changeit
|