+ 
+
+
+
+
+ <#if realm.password>
+ <#nested "title">
+ <#if properties.styles?has_content>
+ <#list properties.styles?split(' ') as style>
+
+
+
+
+
+
+ <#nested "header">
+
+
+
+
+ <#if social.providers??>
+ ${msg("selectAlternative")}
+ + + <#if realm.password && realm.registrationAllowed && !registrationDisabled??> +
+ ${msg("noAccount")} ${msg("doRegister")}
+
+
+
+
+
+
diff --git a/scripts/keycloak/themes/openrmf/login/messages/messages_en.properties b/scripts/keycloak/themes/openrmf/login/messages/messages_en.properties
new file mode 100644
index 00000000..15758453
--- /dev/null
+++ b/scripts/keycloak/themes/openrmf/login/messages/messages_en.properties
@@ -0,0 +1,285 @@
+doLogIn=Sign in
+needHelp=Need help?
+copyright={0} Cingulara and Tutela. All rights reserved.
+selectAlternative=Or select an alternative
+
+doRegister=Register
+doCancel=Cancel
+doSubmit=Submit
+doYes=Yes
+doNo=No
+doContinue=Continue
+doIgnore=Ignore
+doAccept=Accept
+doDecline=Decline
+doForgotPassword=Forgotten your password?
+doClickHere=Click here
+doImpersonate=Impersonate
+kerberosNotConfigured=Kerberos is not configured. Contact your System Administrator for more information.
+kerberosNotConfiguredTitle=Kerberos is not configured. Contact your System Administrator for more information.
+bypassKerberosDetail=Either you are not signed in via Kerberos or your browser is not set up for Kerberos sign in. Please click continue to sign in through other means.
+kerberosNotSetUp=You need to set up Kerberos before you can sign in. Contact your System Administrator for more information.
+registerWithTitle=Register with {0}
+registerWithTitleHtml={0}
+loginTitle=Sign in to {0}
+loginTitleHtml={0}
+impersonateTitle={0} Impersonate user
+impersonateTitleHtml={0} Impersonate user
+realmChoice=Realm
+unknownUser=Unknown user
+loginTotpTitle=Mobile Authenticator Setup
+loginProfileTitle=Update Account Information
+loginTimeout=You took too long to sign in. The sign in process is starting from the beginning. Please refresh and start over.
+oauthGrantTitle=Grant access
+oauthGrantTitleHtml={0}
+errorTitle=We're sorry
+errorTitleHtml=We're sorry
+emailVerifyTitle=Email verification
+emailForgotTitle=Forgotten your password?
+updatePasswordTitle=Update password
+codeSuccessTitle=Success code
+codeErrorTitle=Error code: {0}
+
+termsTitle=Terms and Conditions
+termsTitleHtml=Terms and Conditions
+termsText=© ${msg("copyright", "${.now?string('yyyy')}")}
+Terms and conditions to be defined
+ +recaptchaFailed=Invalid Recaptcha +recaptchaNotConfigured=Recaptcha is required and has not been configured +consentDenied=Consent denied. + +noAccount=New user? +username=Username +usernameOrEmail=Username or email +firstName=First name +givenName=Given name +fullName=Full name +lastName=Last name +familyName=Family name +email=Email +password=Password +passwordConfirm=Confirm password +passwordNew=New Password +passwordNewConfirm=New password confirmation +rememberMe=Remember me +authenticatorCode=One-time code +address=Address +street=Street +locality=City or Locality +region=State, Province, or Region +postal_code=Zip or Postal code +country=Country +emailVerified=Email verified +gssDelegationCredential=GSS Delegation Credential + +loginTotpStep1=Install one of the following applications on your mobile +loginTotpStep2=Open the application and scan the barcode +loginTotpStep3=Enter the one-time code provided by the application and click Submit to finish the setup +loginTotpManualStep2=Open the application and enter the key +loginTotpManualStep3=Use the following configuration values if the application allows them to be set +loginTotpUnableToScan=Unable to scan? +loginTotpScanBarcode=Scan barcode? +loginTotpOneTime=One-time code +loginTotpType=Type +loginTotpAlgorithm=Algorithm +loginTotpDigits=Digits +loginTotpInterval=Interval + +loginTotp.totp=Time-based +loginTotp.hotp=Counter-based + + +oauthGrantRequest=Do you grant these access privileges? +inResource=in + +emailVerifyInstruction1=An email with instructions to verify your email address has been sent to you +emailVerifyInstruction2=Haven't received a verification code in your email? +emailVerifyInstruction3=to re-send the email + +emailLinkIdpTitle=Link {0} +emailLinkIdp1=An email with instructions to link {0} account {1} with your {2} account has been sent to you +emailLinkIdp2=Haven't received a verification code in your email? +emailLinkIdp3=to re-send the email +emailLinkIdp4=If you've already verified the email in a different browser +emailLinkIdp5=to continue + +backToLogin=« Back to Sign in + +emailInstruction=Enter your username or email address and we will send you instructions on how to create a new password + +copyCodeInstruction=Copy this code and paste it into your application + +pageExpiredTitle=Page has expired +pageExpiredMsg1=To restart the sign in process +pageExpiredMsg2=To continue the sign in process + +personalInfo=Personal Info: +role_admin=Admin +role_realm-admin=Realm Admin +role_create-realm=Create realm +role_create-client=Create client +role_view-realm=View realm +role_view-users=View users +role_view-applications=View applications +role_view-clients=View clients +role_view-events=View events +role_view-identity-providers=View identity providers +role_manage-realm=Manage realm +role_manage-users=Manage users +role_manage-applications=Manage applications +role_manage-identity-providers=Manage identity providers +role_manage-clients=Manage clients +role_manage-events=Manage events +role_view-profile=View profile +role_manage-account=Manage account +role_manage-account-links=Manage account links +role_read-token=Read token +role_offline-access=Offline access +client_account=Account +client_security-admin-console=Security Admin Console +client_admin-cli=Admin CLI +client_realm-management=Realm Management +client_broker=Broker + +invalidUserMessage=Invalid username or password +invalidEmailMessage=Invalid email address +accountDisabledMessage=Your account is disabled. Contact your System Administrator for more information. +accountTemporarilyDisabledMessage=Your account is temporarily disabled. Contact your System Administrator for more information or try again later. +expiredCodeMessage=Your session has timed out. Try signing in again. +expiredActionMessage=Your action has expired. Try signing in again. +expiredActionTokenNoSessionMessage=Your action has expired +expiredActionTokenSessionExistsMessage=Your action has expired. Try signing in again. + +missingFirstNameMessage=Type your first name +missingLastNameMessage=Type your last name +missingEmailMessage=Type your email address +missingUsernameMessage=Type your username +missingPasswordMessage=Type your password +missingTotpMessage=Type your authenticator code +notMatchPasswordMessage=We're having problems signing you in. The passwords you entered don't match. + +invalidPasswordExistingMessage=We're having problems signing you in. The password you entered may be invalid. +invalidPasswordBlacklistedMessage=We're having problems signing you in. The password you entered may be blacklisted. +invalidPasswordConfirmMessage=We're having problems signing you in. The password confirmation you entered doesn't match. +invalidTotpMessage=We're having problems signing you in. The authenticator code you entered may be invalid. + +usernameExistsMessage=Username already exists +emailExistsMessage=Email already exists + +federatedIdentityExistsMessage=User with {0} {1} already exists. Sign in to Account Management to link the account. + +confirmLinkIdpTitle=Account already exists +federatedIdentityConfirmLinkMessage=User with {0} {1} already exists. How do you want to continue? +federatedIdentityConfirmReauthenticateMessage=Authenticate as {0} to link your account with {1} +confirmLinkIdpReviewProfile=Review profile +confirmLinkIdpContinue=Add to existing account + +configureTotpMessage=You need to set up Mobile Authenticator to activate your account +updateProfileMessage=You need to update your user profile to activate your account +updatePasswordMessage=You need to change your password to activate your account +resetPasswordMessage=You need to change your password +verifyEmailMessage=You need to verify your email address to activate your account +linkIdpMessage=You need to verify your email address to link your account with {0} + +emailSentMessage=You will receive an email shortly with further instructions +emailSendErrorMessage=We have been unable to send the email. Try again later. + +accountUpdatedMessage=Your account has been updated +accountPasswordUpdatedMessage=Your password has been updated + +noAccessMessage=No access + +invalidPasswordMinLengthMessage=Passwords must have a minimum length of {0} characters +invalidPasswordMinDigitsMessage=Passwords must have a minimum of {0} numbers +invalidPasswordMinLowerCaseCharsMessage=Passwords must have a minimum of {0} lower case characters +invalidPasswordMinUpperCaseCharsMessage=Passworrds must have a minimum of {0} upper case characters +invalidPasswordMinSpecialCharsMessage=Passwords must have a minimum of {0} special characters +invalidPasswordNotUsernameMessage=Your password can't be your username +invalidPasswordRegexPatternMessage=Passwords must match the regex pattern +invalidPasswordHistoryMessage=Passwords must not be equal to any of the last {0} passwords +invalidPasswordGenericMessage=Your password doesn't match the password policy + +failedToProcessResponseMessage=Failed to process response +httpsRequiredMessage=HTTPS required +realmNotEnabledMessage=Realm not enabled +invalidRequestMessage=Invalid request +failedLogout=Logout failed +unknownLoginRequesterMessage=Unknown login requester +loginRequesterNotEnabledMessage=Login requester not enabled +bearerOnlyMessage=Bearer-only applications are not allowed to initiate browser login +standardFlowDisabledMessage=Client is not allowed to initiate browser login with given response_type. Standard flow is disabled for the client. +implicitFlowDisabledMessage=Client is not allowed to initiate browser login with given response_type. Implicit flow is disabled for the client. +invalidRedirectUriMessage=Invalid redirect uri +unsupportedNameIdFormatMessage=Unsupported NameIDFormat +invalidRequesterMessage=Invalid requester +registrationNotAllowedMessage=Registration not allowed +resetCredentialNotAllowedMessage=Reset Credential not allowed + +permissionNotApprovedMessage=Permission denied +noRelayStateInResponseMessage=No relay state in response from identity provider +insufficientPermissionMessage=Insufficient permissions to link identities +couldNotProceedWithAuthenticationRequestMessage=Could not proceed with authentication request to identity provider +couldNotObtainTokenMessage=Could not obtain token from identity provider +unexpectedErrorRetrievingTokenMessage=Unexpected error when retrieving token from identity provider +unexpectedErrorHandlingResponseMessage=Unexpected error when handling response from identity provider +identityProviderAuthenticationFailedMessage=Authentication failed. Could not authenticate with identity provider +identityProviderDifferentUserMessage=Authenticated as {0}, but expected to be authenticated as {1} +couldNotSendAuthenticationRequestMessage=Could not send authentication request to identity provider +unexpectedErrorHandlingRequestMessage=Unexpected error when handling authentication request to identity provider +invalidAccessCodeMessage=Invalid access code +sessionNotActiveMessage=Session not active +invalidCodeMessage=We hit a problem. Try signing in again through your application. +identityProviderUnexpectedErrorMessage=We hit a problem. It wasn't possible to authenticate with the identity provider. +identityProviderNotFoundMessage=Could not find an identity provider with the identifier +identityProviderLinkSuccess=You successfully verified your email. Go back to your original browser and continue with the sign in. +staleCodeMessage=This page is no longer valid. Go back to your application and sign in again. +realmSupportsNoCredentialsMessage=Realm does not support any credential type. +identityProviderNotUniqueMessage=Realm supports multiple identity providers. Could not determine which identity provider should be used to authenticate with. +emailVerifiedMessage=Your email address has been verified +staleEmailVerificationLink=The link is no longer valid. You may have already verified your email address. +identityProviderAlreadyLinkedMessage=Federated identity returned by {0} is already linked to another user +confirmAccountLinking=Confirm linking the account {0} of identity provider {1} with your account +confirmEmailAddressVerification=Confirm validity of e-mail address {0} +confirmExecutionOfActions=Perform the following action(s) + +locale_ca=Catal\u00E0 +locale_de=Deutsch +locale_en=English +locale_es=Espa\u00F1ol +locale_fr=Fran\u00e7ais +locale_it=Italian +locale_ja=\u65E5\u672C\u8A9E +locale_nl=Nederlands +locale_no=Norsk +locale_pt_BR=Portugu\u00EAs (Brasil) +locale_pt-BR=Portugu\u00EAs (Brasil) +locale_ru=\u0420\u0443\u0441\u0441\u043A\u0438\u0439 +locale_lt=Lietuvi\u0173 +locale_zh-CN=\u4e2d\u6587\u7b80\u4f53 +locale_sv=Svenska + +backToApplication=« Back to Application +missingParameterMessage=Missing parameters: {0} +clientNotFoundMessage=Client not found +clientDisabledMessage=Client disabled +invalidParameterMessage=Invalid parameter: {0} +alreadyLoggedIn=You are already signed in +differentUserAuthenticated=You are already signed in as different user '{0}' in this session. Try signing in again. +brokerLinkingSessionExpired=Requested broker account linking, but current session is no longer valid. +proceedWithAction=» Click here to proceed + +requiredAction.CONFIGURE_TOTP=Configure OTP +requiredAction.terms_and_conditions=Terms and Conditions +requiredAction.UPDATE_PASSWORD=Update Password +requiredAction.UPDATE_PROFILE=Update Profile +requiredAction.VERIFY_EMAIL=Verify Email + +p3pPolicy=CP="This is not a P3P policy!" + +doX509Login=You will be signed in as: +clientCertificate=X509 client certificate: +noCertificate=[No Certificate] + + +pageNotFound=This page is not available +internalServerError=We hit a problem diff --git a/scripts/keycloak/themes/openrmf/login/register.ftl b/scripts/keycloak/themes/openrmf/login/register.ftl new file mode 100644 index 00000000..a1511856 --- /dev/null +++ b/scripts/keycloak/themes/openrmf/login/register.ftl @@ -0,0 +1,97 @@ +<#import "template.ftl" as layout> +<@layout.registrationLayout; section> + <#if section = "title"> + ${msg("loginTitle",(realm.displayName!''))} + <#elseif section = "header"> + + + <#elseif section = "form"> + +
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/scripts/keycloak/themes/openrmf/login/resources/css/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30e6fwniDtzM.woff b/scripts/keycloak/themes/openrmf/login/resources/css/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30e6fwniDtzM.woff
new file mode 100644
index 00000000..564f6a23
Binary files /dev/null and b/scripts/keycloak/themes/openrmf/login/resources/css/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30e6fwniDtzM.woff differ
diff --git a/scripts/keycloak/themes/openrmf/login/resources/css/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk40e6fwniDtzNAAw.woff b/scripts/keycloak/themes/openrmf/login/resources/css/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk40e6fwniDtzNAAw.woff
new file mode 100644
index 00000000..ef101db9
Binary files /dev/null and b/scripts/keycloak/themes/openrmf/login/resources/css/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk40e6fwniDtzNAAw.woff differ
diff --git a/scripts/keycloak/themes/openrmf/login/resources/css/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk50e6fwniDtzNAAw.woff b/scripts/keycloak/themes/openrmf/login/resources/css/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk50e6fwniDtzNAAw.woff
new file mode 100644
index 00000000..83d0952c
Binary files /dev/null and b/scripts/keycloak/themes/openrmf/login/resources/css/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk50e6fwniDtzNAAw.woff differ
diff --git a/scripts/keycloak/themes/openrmf/login/resources/css/login.css b/scripts/keycloak/themes/openrmf/login/resources/css/login.css
new file mode 100644
index 00000000..4b4dae3e
--- /dev/null
+++ b/scripts/keycloak/themes/openrmf/login/resources/css/login.css
@@ -0,0 +1,246 @@
+/* vietnamese */
+@font-face {
+ font-family: 'Muli';
+ font-style: normal;
+ font-weight: 400;
+ src: url(7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk40e6fwniDtzNAAw.woff) format('woff');
+ unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+ font-family: 'Muli';
+ font-style: normal;
+ font-weight: 400;
+ src: url(7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk50e6fwniDtzNAAw.woff) format('woff');
+ unicode-range: U+0100-024F, U+0259, U+1E00-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+ font-family: 'Muli';
+ font-style: normal;
+ font-weight: 400;
+ src: url(7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30e6fwniDtzM.woff) format('woff');
+ unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+
+body, html {
+ display: flex;
+ flex-direction: column;
+ flex: 1;
+ overflow: hidden;
+ min-height: 0;
+ font-size: 14px;
+ color:rgba(0,0,0,.87);
+ margin:0;
+ height: 100%;
+}
+body {
+ margin: 0;
+}
+.login-content {
+ /* background-size:cover;
+ background-position:center; */
+ background-color: white;
+ min-height: 100%;
+ min-width: 320px;
+ display:flex;
+ justify-content:center;
+ flex-direction:column;
+}
+.login-content .box {
+ width: 448px;
+ border-radius: 8px;
+ background-color: #ffffff;
+ box-shadow: 0 2px 2px 0 rgba(0, 0, 0, 0.24), 0 0 2px 0 rgba(0, 0, 0, 0.12);
+ margin: auto;
+}
+.login-content .box .box-container {
+ width:100%;
+ padding-left: 32px;
+}
+.login-content .box .logo {
+ display: block;
+ margin-left: auto;
+ margin-right: auto;
+ margin-top: 30px;
+}
+.login-content .box .application-name {
+ width: 270px;
+ font-family: Muli;
+ font-size: 24px;
+ font-weight: 600;
+ font-style: normal;
+ font-stretch: normal;
+ line-height: 0.83;
+ letter-spacing: -0.4px;
+ text-align: left;
+ color: #0055B8;
+ margin-left: 32px;
+ margin-top: 40px;
+}
+.login-content .box .form {
+ margin-left: 32px;
+ margin-top: 55px;
+ margin-bottom: -55px;
+}
+.login-content .box .login-field {
+ width: 320px;
+ height: 24px;
+ font-family: Muli;
+ font-size: 14px;
+ font-weight: normal;
+ font-style: normal;
+ font-stretch: normal;
+ letter-spacing: -0.4px;
+ text-align: left;
+ color: #000000;
+ border: none;
+ border-bottom: 1px solid #ccc;
+ outline: none;
+ background-color: #fff;
+}
+.login-content .box input[type="text"]:focus, .login-content .box input[type="password"]:focus {
+ border-bottom: 2px solid #0055B8;
+}
+.login-content .box input[type="text"]:-webkit-autofill, .login-content .box input[type="password"]:-webkit-autofill
+{
+ box-shadow: 0 0 0px 1000px white inset;
+}
+.login-content .box .submit{
+ width: 320px;
+ height: 36px;
+ border-radius: 2px;
+ background-color: #2C5FBC;
+ font-family: Muli;
+ font-size: 14px;
+ font-weight: bold;
+ font-style: normal;
+ font-stretch: normal;
+ line-height: normal;
+ letter-spacing: normal;
+ text-align: center;
+ color: #ffffff;
+ border-style: none;
+ margin-top: 60px;
+ margin-bottom: 60px;
+}
+.login-content .box .visibility {
+ position: relative;
+ left: 296px;
+ top: 20px;
+ width: 24px;
+ height: 24px;
+ opacity: 0.54;
+ border: none;
+}
+.login-content .box .copyright {
+ min-width: 320px;
+ text-align: center;
+ font-size: 14px;
+ opacity: .54;
+ position: relative;
+ top: 50px;
+}
+.message-text {
+ width: 322px;
+ height: 22px;
+ opacity: 0.87;
+ font-family: Muli;
+ font-size: 14px;
+ font-weight: normal;
+ font-style: normal;
+ font-stretch: normal;
+ line-height: 1.3;
+ letter-spacing: -0.4px;
+ text-align: left;
+ color: #b8082a;
+ border: 0px;
+ position: relative;
+ /* top: 180px; */
+ left: 64px;
+ display: inline-flex;
+ align-items: center;
+}
+.identity-providers {
+ width: 270px;
+ font-family: Muli;
+ font-size: 16px;
+ font-weight: 600;
+ font-style: normal;
+ font-stretch: normal;
+ line-height: 0.83;
+ letter-spacing: -0.4px;
+ text-align: left;
+ color: #0055B8;
+ margin-left: 32px;
+ margin-top: 20px;
+}
+
+.login-content .box .social-link-style {
+ width: 320px;
+ height: 36px;
+ border-radius: 2px;
+ background-color: var(--white);
+ font-family: Muli;
+ font-size: 14px;
+ font-weight: bold;
+ font-style: normal;
+ font-stretch: normal;
+ line-height: normal;
+ letter-spacing: normal;
+ text-align: center;
+ color: #00754a;
+ border-style: solid;
+ border-color: #00754a;
+ margin-top: 0px;
+ margin-left: 30px;
+ margin-bottom: 10px;
+}
+
+.login-content .box .para {
+ font-family: Muli;
+ font-size: 14px;
+ margin-left: 30px;
+}
+
+/* Registration */
+
+.login-content .box .btnsubmit {
+ width: 320px;
+ height: 36px;
+ border-radius: 2px;
+ background-color: #2C5FBC;
+ font-family: Muli;
+ font-size: 14px;
+ font-weight: bold;
+ font-style: normal;
+ font-stretch: normal;
+ line-height: normal;
+ letter-spacing: normal;
+ text-align: center;
+ color: #ffffff;
+ border-style: none;
+ margin-top: 30px;
+ margin-bottom: 30px;
+ margin-left: 62px;
+}
+.login-content .box .control-label {
+ font-weight: bold;
+ margin: 2px 5px 2px 5px;
+}
+.login-content .box .form-control {
+ margin: 2px 5px 8px 5px;
+ width: 320px;
+ height: 24px;
+ font-family: Muli;
+ font-size: 14px;
+ font-weight: normal;
+ font-style: normal;
+ font-stretch: normal;
+ letter-spacing: -0.4px;
+ text-align: left;
+ color: #000000;
+ border: 1px solid #ccc;
+ outline: none;
+ background-color: #fff;
+}
\ No newline at end of file
diff --git a/scripts/keycloak/themes/openrmf/login/resources/img/eye-off.png b/scripts/keycloak/themes/openrmf/login/resources/img/eye-off.png
new file mode 100644
index 00000000..c99e6ed3
Binary files /dev/null and b/scripts/keycloak/themes/openrmf/login/resources/img/eye-off.png differ
diff --git a/scripts/keycloak/themes/openrmf/login/resources/img/eye.png b/scripts/keycloak/themes/openrmf/login/resources/img/eye.png
new file mode 100644
index 00000000..419b21e4
Binary files /dev/null and b/scripts/keycloak/themes/openrmf/login/resources/img/eye.png differ
diff --git a/scripts/keycloak/themes/openrmf/login/resources/img/favicon.png b/scripts/keycloak/themes/openrmf/login/resources/img/favicon.png
new file mode 100644
index 00000000..8535f1f7
Binary files /dev/null and b/scripts/keycloak/themes/openrmf/login/resources/img/favicon.png differ
diff --git a/scripts/keycloak/themes/openrmf/login/resources/img/logo-large.png b/scripts/keycloak/themes/openrmf/login/resources/img/logo-large.png
new file mode 100644
index 00000000..97572621
Binary files /dev/null and b/scripts/keycloak/themes/openrmf/login/resources/img/logo-large.png differ
diff --git a/scripts/keycloak/themes/openrmf/login/template.ftl b/scripts/keycloak/themes/openrmf/login/template.ftl
new file mode 100644
index 00000000..bc9b119c
--- /dev/null
+++ b/scripts/keycloak/themes/openrmf/login/template.ftl
@@ -0,0 +1,36 @@
+<#macro registrationLayout bodyClass="" displayInfo=false displayMessage=true>
+
+
+
+
+
+
+
+
+ © ${msg("copyright", "${.now?string('yyyy')}")}
+
+
+
+
+
diff --git a/scripts/keycloak/themes/openrmf/login/theme.properties b/scripts/keycloak/themes/openrmf/login/theme.properties
new file mode 100644
index 00000000..f567cf2d
--- /dev/null
+++ b/scripts/keycloak/themes/openrmf/login/theme.properties
@@ -0,0 +1,104 @@
+parent=keycloak
+import=common/keycloak
+locales=en
+styles=css/login.css
+stylesCommon=node_modules/patternfly/dist/css/patternfly.min.css node_modules/patternfly/dist/css/patternfly-additions.min.css lib/zocial/zocial.css
+
+kcFeedbackErrorIcon=pficon pficon-error-circle-o
+kcFeedbackWarningIcon=pficon pficon-warning-triangle-o
+kcFeedbackSuccessIcon=pficon pficon-ok
+kcFeedbackInfoIcon=pficon pficon-info
+
+kcInputClass=login-field
+
+
+meta=viewport==width=device-width,initial-scale=1
+
+kcHtmlClass=login-pf
+kcLoginClass=login-pf-page
+
+kcLogoLink=http://www.keycloak.org
+
+kcLogoClass=login-pf-brand
+
+kcContainerClass=container-fluid
+kcContentClass=col-sm-8 col-sm-offset-2 col-md-6 col-md-offset-3 col-lg-6 col-lg-offset-3
+kcContentWrapperClass=row
+
+kcHeaderClass=login-pf-page-header
+kcFeedbackAreaClass=col-md-12
+kcLocaleClass=col-xs-12 col-sm-1
+kcAlertIconClasserror=pficon pficon-error-circle-o
+
+kcFormAreaClass=col-sm-10 col-sm-offset-1 col-md-8 col-md-offset-2 col-lg-8 col-lg-offset-2
+kcFormCardClass=card-pf
+kcFormCardAccountClass=login-pf-accounts
+kcFormSocialAccountClass=login-pf-social-section
+kcFormSocialAccountContentClass=col-xs-12 col-sm-6
+kcFormSocialAccountListClass=login-pf-social list-unstyled login-pf-social-all
+kcFormSocialAccountDoubleListClass=login-pf-social-double-col
+kcFormSocialAccountListLinkClass=login-pf-social-link
+kcFormHeaderClass=login-pf-header
+
+kcFeedbackErrorIcon=pficon pficon-error-circle-o
+kcFeedbackWarningIcon=pficon pficon-warning-triangle-o
+kcFeedbackSuccessIcon=pficon pficon-ok
+kcFeedbackInfoIcon=pficon pficon-info
+
+kcResetFlowIcon=pficon pficon-arrow fa-2x
+kcWebAuthnKeyIcon=pficon pficon-key
+
+kcFormClass=form-horizontal
+kcFormGroupClass=form-group
+kcFormGroupErrorClass=has-error
+kcLabelClass=control-label
+kcLabelWrapperClass=col-xs-12 col-sm-12 col-md-12 col-lg-12
+kcInputClass=form-control
+kcInputWrapperClass=col-xs-12 col-sm-12 col-md-12 col-lg-12
+kcFormOptionsClass=col-xs-12 col-sm-12 col-md-12 col-lg-12
+kcFormButtonsClass=col-xs-12 col-sm-12 col-md-12 col-lg-12
+kcFormSettingClass=login-pf-settings
+kcTextareaClass=form-control
+kcSignUpClass=login-pf-signup
+
+
+kcInfoAreaClass=col-xs-12 col-sm-4 col-md-4 col-lg-5 details
+
+##### css classes for form buttons
+# main class used for all buttons
+kcButtonClass=btn
+# classes defining priority of the button - primary or default (there is typically only one priority button for the form)
+kcButtonPrimaryClass=btn-primary
+kcButtonDefaultClass=btn-default
+# classes defining size of the button
+kcButtonLargeClass=btn-lg
+kcButtonBlockClass=btn-block
+
+##### css classes for input
+kcInputLargeClass=input-lg
+
+##### css classes for form accessability
+kcSrOnlyClass=sr-only
+
+##### css classes for select-authenticator form
+kcSelectAuthListClass=list-group list-view-pf
+kcSelectAuthListItemClass=list-group-item list-view-pf-stacked
+kcSelectAuthListItemInfoClass=list-view-pf-main-info
+kcSelectAuthListItemLeftClass=list-view-pf-left
+kcSelectAuthListItemBodyClass=list-view-pf-body
+kcSelectAuthListItemDescriptionClass=list-view-pf-description
+kcSelectAuthListItemHeadingClass=list-group-item-heading
+kcSelectAuthListItemHelpTextClass=list-group-item-text
+
+##### css classes for the authenticators
+kcAuthenticatorDefaultClass=fa list-view-pf-icon-lg
+kcAuthenticatorPasswordClass=fa fa-unlock list-view-pf-icon-lg
+kcAuthenticatorOTPClass=fa fa-mobile list-view-pf-icon-lg
+kcAuthenticatorWebAuthnClass=fa fa-key list-view-pf-icon-lg
+kcAuthenticatorWebAuthnPasswordlessClass=fa fa-key list-view-pf-icon-lg
+
+##### css classes for the OTP Login Form
+kcSelectOTPListClass=card-pf card-pf-view card-pf-view-select card-pf-view-single-select
+kcSelectOTPListItemClass=card-pf-body card-pf-top-element
+kcAuthenticatorOtpCircleClass=fa fa-mobile card-pf-icon-circle
+kcSelectOTPItemHeadingClass=card-pf-title text-center
\ No newline at end of file
diff --git a/scripts/local/docker-compose.yml b/scripts/local/docker-compose.yml
index 643078ba..02c35978 100644
--- a/scripts/local/docker-compose.yml
+++ b/scripts/local/docker-compose.yml
@@ -3,7 +3,9 @@ version : '3.2'
services:
web:
image: nginxinc/nginx-unprivileged:1.18
+ container_name: openrmf-web
command: [nginx-debug, '-g', 'daemon off;']
+ restart: always
ports:
- 8080:8080
volumes:
diff --git a/scripts/local/local-dev-images.yml b/scripts/local/local-dev-images.yml
index a254e26f..6542cb4a 100644
--- a/scripts/local/local-dev-images.yml
+++ b/scripts/local/local-dev-images.yml
@@ -3,7 +3,7 @@ version : '3.2'
services:
### 1 Web Front End Container
openrmf-web:
- image: openrmf-web:1.01.01
+ image: openrmf-web:1.02.01
container_name: openrmf-web
ports:
- 8080:8080
@@ -21,7 +21,7 @@ services:
### 9 API Containers
openrmfapi-scoring:
- image: openrmf-api-scoring:1.01.01
+ image: openrmf-api-scoring:1.02.01
container_name: openrmf-scoring-api
ports:
- 8090
@@ -29,8 +29,9 @@ services:
environment:
- ASPNETCORE_ENVIRONMENT=Development
- ASPNETCORE_URLS=http://*:8090
- - MONGODBCONNECTION=mongodb://openrmfscore:openrmf1234!@scoredb/openrmfscore?authSource=openrmfscore
- - MONGODB=openrmfscore
+ - DBCONNECTION=mongodb://openrmfscore:openrmf1234!@scoredb/openrmfscore?authSource=openrmfscore
+ - DB=openrmfscore
+ - DBTYPE=mongo
- JAEGER_AGENT_HOST=jaeger
- JAEGER_AGENT_PORT=6831
- JAEGER_SERVICE_NAME=openrmfapi-scoring
@@ -43,7 +44,7 @@ services:
- openrmf
openrmfapi-save:
- image: openrmf-api-save:1.01.01
+ image: openrmf-api-save:1.02.01
container_name: openrmf-save-api
ports:
- 8082
@@ -51,8 +52,9 @@ services:
environment:
- ASPNETCORE_ENVIRONMENT=Development
- ASPNETCORE_URLS=http://*:8082
- - MONGODBCONNECTION=mongodb://openrmf:openrmf1234!@checklistdb/openrmf?authSource=openrmf
- - MONGODB=openrmf
+ - DBCONNECTION=mongodb://openrmf:openrmf1234!@checklistdb/openrmf?authSource=openrmf
+ - DB=openrmf
+ - DBTYPE=mongo
- NATSSERVERURL=nats://natsserver:4222
- JAEGER_AGENT_HOST=jaeger
- JAEGER_AGENT_PORT=6831
@@ -68,7 +70,7 @@ services:
- openrmf
openrmfapi-template:
- image: openrmf-api-template:1.01.01
+ image: openrmf-api-template:1.02.01
container_name: openrmf-template-api
ports:
- 8088
@@ -77,8 +79,9 @@ services:
- ASPNETCORE_ENVIRONMENT=Development
- ASPNETCORE_URLS=http://*:8088
- NATSSERVERURL=nats://natsserver:4222
- - MONGODBCONNECTION=mongodb://openrmftemplate:openrmf1234!@templatedb/openrmftemplate?authSource=openrmftemplate
- - MONGODB=openrmftemplate
+ - DBCONNECTION=mongodb://openrmftemplate:openrmf1234!@templatedb/openrmftemplate?authSource=openrmftemplate
+ - DB=openrmftemplate
+ - DBTYPE=mongo
- JAEGER_AGENT_HOST=jaeger
- JAEGER_AGENT_PORT=6831
- JAEGER_SERVICE_NAME=openrmfapi-template
@@ -91,7 +94,7 @@ services:
- openrmf
openrmfapi-upload:
- image: openrmf-api-upload:1.01.01
+ image: openrmf-api-upload:1.02.01
container_name: openrmf-upload-api
ports:
- 8086
@@ -99,8 +102,9 @@ services:
environment:
- ASPNETCORE_ENVIRONMENT=Development
- ASPNETCORE_URLS=http://*:8086
- - MONGODBCONNECTION=mongodb://openrmf:openrmf1234!@checklistdb/openrmf?authSource=openrmf
- - MONGODB=openrmf
+ - DBCONNECTION=mongodb://openrmf:openrmf1234!@checklistdb/openrmf?authSource=openrmf
+ - DB=openrmf
+ - DBTYPE=mongo
- NATSSERVERURL=nats://natsserver:4222
- JAEGER_AGENT_HOST=jaeger
- JAEGER_AGENT_PORT=6831
@@ -116,7 +120,7 @@ services:
- openrmf
openrmfapi-read:
- image: openrmf-api-read:1.01.01
+ image: openrmf-api-read:1.02.01
container_name: openrmf-read-api
ports:
- 8084
@@ -124,8 +128,9 @@ services:
environment:
- ASPNETCORE_ENVIRONMENT=Development
- ASPNETCORE_URLS=http://*:8084
- - MONGODBCONNECTION=mongodb://openrmf:openrmf1234!@checklistdb/openrmf?authSource=openrmf
- - MONGODB=openrmf
+ - DBCONNECTION=mongodb://openrmf:openrmf1234!@checklistdb/openrmf?authSource=openrmf
+ - DB=openrmf
+ - DBTYPE=mongo
- NATSSERVERURL=nats://natsserver:4222
- JAEGER_AGENT_HOST=jaeger
- JAEGER_AGENT_PORT=6831
@@ -139,7 +144,7 @@ services:
- openrmf
openrmfapi-compliance:
- image: openrmf-api-compliance:1.01.01
+ image: openrmf-api-compliance:1.02.01
container_name: openrmf-compliance-api
ports:
- 8092
@@ -158,7 +163,7 @@ services:
- openrmf
openrmfapi-controls:
- image: openrmf-api-controls:1.01.01
+ image: openrmf-api-controls:1.02.01
container_name: openrmf-controls-api
ports:
- 8094
@@ -177,7 +182,7 @@ services:
- openrmf
openrmfapi-audit:
- image: openrmf-api-audit:1.01.01
+ image: openrmf-api-audit:1.02.01
container_name: openrmf-audit-api
ports:
- 8096
@@ -185,8 +190,9 @@ services:
environment:
- ASPNETCORE_ENVIRONMENT=Development
- ASPNETCORE_URLS=http://*:8096
- - MONGODBCONNECTION=mongodb://openrmfaudit:openrmf1234!@auditdb/openrmfaudit?authSource=openrmfaudit
- - MONGODB=openrmfaudit
+ - DBCONNECTION=mongodb://openrmfaudit:openrmf1234!@auditdb/openrmfaudit?authSource=openrmfaudit
+ - DB=openrmfaudit
+ - DBTYPE=mongo
- NATSSERVERURL=nats://natsserver:4222
- JAEGER_AGENT_HOST=jaeger
- JAEGER_AGENT_PORT=6831
@@ -200,7 +206,7 @@ services:
- openrmf
openrmfapi-report:
- image: openrmf-api-report:1.01.01
+ image: openrmf-api-report:1.02.01
container_name: openrmf-report-api
ports:
- 8098
@@ -208,8 +214,9 @@ services:
environment:
- ASPNETCORE_ENVIRONMENT=Development
- ASPNETCORE_URLS=http://*:8098
- - REPORTMONGODBCONNECTION=mongodb://openrmfreport:openrmf1234!@reportdb/openrmfreport?authSource=openrmfreport
- - REPORTMONGODB=openrmfreport
+ - DBCONNECTION=mongodb://openrmfreport:openrmf1234!@reportdb/openrmfreport?authSource=openrmfreport
+ - DB=openrmfreport
+ - DBTYPE=mongo
- NATSSERVERURL=nats://natsserver:4222
- JAEGER_AGENT_HOST=jaeger
- JAEGER_AGENT_PORT=6831
@@ -224,11 +231,12 @@ services:
### 8 Messaging Containers
openrmfmsg-score:
- image: openrmf-msg-score:1.01.01
+ image: openrmf-msg-score:1.02.01
container_name: openrmf-score-nats-message-client
environment:
- - MONGODBCONNECTION=mongodb://openrmfscore:openrmf1234!@scoredb/openrmfscore?authSource=openrmfscore
- - MONGODB=openrmfscore
+ - DBCONNECTION=mongodb://openrmfscore:openrmf1234!@scoredb/openrmfscore?authSource=openrmfscore
+ - DB=openrmfscore
+ - DBTYPE=mongo
- NATSSERVERURL=nats://natsserver:4222
- JAEGER_AGENT_HOST=jaeger
- JAEGER_AGENT_PORT=6831
@@ -243,11 +251,12 @@ services:
- openrmf
openrmfmsg-checklist:
- image: openrmf-msg-checklist:1.01.01
+ image: openrmf-msg-checklist:1.02.01
container_name: openrmf-checklist-nats-message-client
environment:
- - MONGODBCONNECTION=mongodb://openrmf:openrmf1234!@checklistdb/openrmf?authSource=openrmf
- - MONGODB=openrmf
+ - DBCONNECTION=mongodb://openrmf:openrmf1234!@checklistdb/openrmf?authSource=openrmf
+ - DB=openrmf
+ - DBTYPE=mongo
- NATSSERVERURL=nats://natsserver:4222
- JAEGER_AGENT_HOST=jaeger
- JAEGER_AGENT_PORT=6831
@@ -262,7 +271,7 @@ services:
- openrmf
openrmfmsg-compliance:
- image: openrmf-msg-compliance:1.01.01
+ image: openrmf-msg-compliance:1.02.01
container_name: openrmf-compliance-nats-message-client
environment:
- NATSSERVERURL=nats://natsserver:4222
@@ -278,7 +287,7 @@ services:
- openrmf
openrmfmsg-controls:
- image: openrmf-msg-controls:1.01.01
+ image: openrmf-msg-controls:1.02.01
container_name: openrmf-controls-nats-message-client
environment:
- NATSSERVERURL=nats://natsserver:4222
@@ -294,11 +303,12 @@ services:
- openrmf
openrmfmsg-template:
- image: openrmf-msg-template:1.01.01
+ image: openrmf-msg-template:1.02.01
container_name: openrmf-template-nats-message-client
environment:
- - MONGODBCONNECTION=mongodb://openrmftemplate:openrmf1234!@templatedb/openrmftemplate?authSource=openrmftemplate
- - MONGODB=openrmftemplate
+ - DBCONNECTION=mongodb://openrmftemplate:openrmf1234!@templatedb/openrmftemplate?authSource=openrmftemplate
+ - DB=openrmftemplate
+ - DBTYPE=mongo
- NATSSERVERURL=nats://natsserver:4222
- JAEGER_AGENT_HOST=jaeger
- JAEGER_AGENT_PORT=6831
@@ -313,11 +323,12 @@ services:
- openrmf
openrmfmsg-system:
- image: openrmf-msg-system:1.01.01
+ image: openrmf-msg-system:1.02.01
container_name: openrmf-system-nats-message-client
environment:
- - MONGODBCONNECTION=mongodb://openrmf:openrmf1234!@checklistdb/openrmf?authSource=openrmf
- - MONGODB=openrmf
+ - DBCONNECTION=mongodb://openrmf:openrmf1234!@checklistdb/openrmf?authSource=openrmf
+ - DB=openrmf
+ - DBTYPE=mongo
- NATSSERVERURL=nats://natsserver:4222
- JAEGER_AGENT_HOST=jaeger
- JAEGER_AGENT_PORT=6831
@@ -332,11 +343,12 @@ services:
- openrmf
openrmfmsg-audit:
- image: openrmf-msg-audit:1.01.01
+ image: openrmf-msg-audit:1.02.01
container_name: openrmf-audit-nats-message-client
environment:
- - MONGODBCONNECTION=mongodb://openrmfaudit:openrmf1234!@auditdb/openrmfaudit?authSource=openrmfaudit
- - MONGODB=openrmfaudit
+ - DBCONNECTION=mongodb://openrmfaudit:openrmf1234!@auditdb/openrmfaudit?authSource=openrmfaudit
+ - DB=openrmfaudit
+ - DBTYPE=mongo
- NATSSERVERURL=nats://natsserver:4222
- JAEGER_AGENT_HOST=jaeger
- JAEGER_AGENT_PORT=6831
@@ -351,13 +363,15 @@ services:
- openrmf
openrmfmsg-report:
- image: openrmf-msg-report:1.01.01
+ image: openrmf-msg-report:1.02.01
container_name: openrmf-report-nats-message-client
environment:
- - SYSTEMMONGODBCONNECTION=mongodb://openrmf:openrmf1234!@checklistdb/openrmf?authSource=openrmf
- - SYSTEMMONGODB=openrmf
- - REPORTMONGODBCONNECTION=mongodb://openrmfreport:openrmf1234!@reportdb/openrmfreport?authSource=openrmfreport
- - REPORTMONGODB=openrmfreport
+ - SYSTEMDBCONNECTION=mongodb://openrmf:openrmf1234!@checklistdb/openrmf?authSource=openrmf
+ - SYSTEMDB=openrmf
+ - SYSTEMDBTYPE=mongo
+ - REPORTDBCONNECTION=mongodb://openrmfreport:openrmf1234!@reportdb/openrmfreport?authSource=openrmfreport
+ - REPORTDB=openrmfreport
+ - REPORTDBTYPE=mongo
- NATSSERVERURL=nats://natsserver:4222
- JAEGER_AGENT_HOST=jaeger
- JAEGER_AGENT_PORT=6831
@@ -374,7 +388,6 @@ services:
### 5 MongoDB Containers
checklistdb:
- #image: mongo:4.0.5
image: cingulara/mongo:4.2.7-nonroot
container_name: mongodb-checklist
restart: always
@@ -391,7 +404,6 @@ services:
- openrmf
scoredb:
- #image: mongo:4.0.5
image: cingulara/mongo:4.2.7-nonroot
container_name: mongodb-score
restart: always
@@ -408,7 +420,6 @@ services:
- openrmf
templatedb:
- #image: mongo:4.0.5
image: cingulara/mongo:4.2.7-nonroot
container_name: mongodb-template
restart: always
@@ -425,7 +436,6 @@ services:
- openrmf
auditdb:
- #image: mongo:4.0.5
image: cingulara/mongo:4.2.7-nonroot
container_name: mongodb-audit
restart: always
@@ -442,7 +452,6 @@ services:
- openrmf
reportdb:
- #image: mongo:4.0.5
image: cingulara/mongo:4.2.7-nonroot
container_name: mongodb-report
restart: always
@@ -527,6 +536,7 @@ services:
jaeger:
image: jaegertracing/all-in-one:1.18.1
container_name: jaeger
+ restart: always
ports:
- "5778:5778/tcp"
- "6831:6831/udp"
diff --git a/scripts/local/nginx.conf b/scripts/local/nginx.conf
index 3a99dc0e..987e66ae 100644
--- a/scripts/local/nginx.conf
+++ b/scripts/local/nginx.conf
@@ -48,8 +48,21 @@ http {
server {
listen 8080;
+ # don't send the nginx version number in error pages and Server header
+ server_tokens off;
+
+ # config to don't allow the browser to render the page inside an frame or iframe
add_header X-Frame-Options "deny" always;
+ # when serving user-supplied content, include a X-Content-Type-Options: nosniff header along with the Content-Type: header,
+ # to disable content-type sniffing on some browsers.
+ add_header X-Content-Type-Options nosniff always;
+
+ # This header enables the Cross-site scripting (XSS) filter built into most recent web browsers.
+ # It's usually enabled by default anyway, so the role of this header is to re-enable the filter for
+ # this particular website if it was disabled by the user.
+ add_header X-XSS-Protection "1; mode=block" always;
+
location / {
proxy_pass http://web;
proxy_redirect off;
diff --git a/scripts/nginx.conf b/scripts/nginx.conf
index ed4f3f0e..e2f3f524 100644
--- a/scripts/nginx.conf
+++ b/scripts/nginx.conf
@@ -43,8 +43,21 @@ http {
root /usr/share/nginx/html;
+ # don't send the nginx version number in error pages and Server header
+ server_tokens off;
+
+ # config to don't allow the browser to render the page inside an frame or iframe
add_header X-Frame-Options "deny" always;
+ # when serving user-supplied content, include a X-Content-Type-Options: nosniff header along with the Content-Type: header,
+ # to disable content-type sniffing on some browsers.
+ add_header X-Content-Type-Options nosniff always;
+
+ # This header enables the Cross-site scripting (XSS) filter built into most recent web browsers.
+ # It's usually enabled by default anyway, so the role of this header is to re-enable the filter for
+ # this particular website if it was disabled by the user.
+ add_header X-XSS-Protection "1; mode=block" always;
+
error_page 404 /404.html;
location = /404.html {
root /usr/share/nginx/html/;
diff --git a/scripts/start.cmd b/scripts/start.cmd
index ada5f0d1..c695d4d4 100755
--- a/scripts/start.cmd
+++ b/scripts/start.cmd
@@ -1,7 +1,8 @@
+@echo off
REM Now run the latest development openRMF stack
docker-compose up -d
REM tell them the URL
-ECHO ""
-ECHO "Run http://{ip-address}:8080/ to access OpenRMF"
-ECHO ""
\ No newline at end of file
+echo(
+echo "Run http://{ip-address}:8080/ to access OpenRMF"
+echo(
\ No newline at end of file
diff --git a/scripts/stop.cmd b/scripts/stop.cmd
index 58694d08..53de3da3 100755
--- a/scripts/stop.cmd
+++ b/scripts/stop.cmd
@@ -1 +1,7 @@
-docker-compose down
\ No newline at end of file
+@echo off
+REM Now run the latest development openRMF stack
+docker-compose down
+
+echo(
+echo "The OpenRMF Stack has been shut down."
+echo(
\ No newline at end of file
diff --git a/scripts/stop.sh b/scripts/stop.sh
index 58694d08..226d3162 100755
--- a/scripts/stop.sh
+++ b/scripts/stop.sh
@@ -1 +1,5 @@
-docker-compose down
\ No newline at end of file
+docker-compose down
+
+echo ''
+echo 'The OpenRMF Stack has been shut down.'
+echo ''
\ No newline at end of file
+ <#if displayMessage && message?has_content>
+
+
+ <#nested "form">
+
+