JiriOndrusek opened a new issue, #9498: URL: https://github.com/apache/camel-quarkus/issues/9498
Add an advanced example to camel-quarkus-examples that shows how to secure and audit a partner-facing HTTP API with Camel Quarkus. Scenario: partners POST orders, auditors read and verify an audit trail. Goal: also a reference for authors of other examples. The cross-cutting concerns (authentication, authorization, tenant isolation, validation, idempotency, audit, error handling, operations) are solved once here, so other examples do not need to cover them and can copy the parts they need. Shows: - OIDC bearer auth on platform-http (Keycloak Dev Services), deny-by-default RBAC - tenant isolation from a signed claim, header allow-list, per-partner throttling - JSON Schema validation, JPA idempotent consumer - HMAC-chained audit trail with a verify endpoint, DB append-only triggers - RFC 9457 errors, health/metrics on a management port - JVM and native tests -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
