update README.md in web ui

mercedes-benz · Sep 30, 2024 · df3b83d · df3b83d
1 parent 8eb1ab1
commit df3b83d
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 3 deletions.
diff --git a/sechub-webui/README.md b/sechub-webui/README.md
@@ -12,8 +12,12 @@ To start the application locally use the `webui_local` profile.
 
 This will include the following profiles:
 
-- `webui_localserver`
-- `webui_mocked` (only if you don't want to talk to the actual SecHub server)
+- `ssl-cert-provided`: a default ssl certificate will be used by the WebUI server
+- `basic-auth-mocked`: mock the SecHub Server & enable login with preconfigured credentials at `/login/classic`)
+- `local`: includes any local configurations matching `application-local.${USER}.yml`
+
+If you want to provide local configurations, create a file named `application-local.${USER}.yml` in the `src/main/resources` directory.
+Make sure that the ${USER} part matches your system username.
 
 This will enable configurations suitable for local development and testing.
 

diff --git a/sechub-webui/src/main/java/com/mercedesbenz/sechub/webui/security/SecurityConfiguration.java b/sechub-webui/src/main/java/com/mercedesbenz/sechub/webui/security/SecurityConfiguration.java
@@ -51,7 +51,8 @@ SecurityFilterChain securityFilterChain(HttpSecurity httpSecurity) throws Except
                         .sessionCreationPolicy(SessionCreationPolicy.IF_REQUIRED));
 
         if (environment.matchesProfiles(ApplicationProfiles.OAUTH2_ENABLED)) {
-            MercedesBenzOAuth2AccessTokenClient mercedesBenzOAuth2AccessTokenClient = new MercedesBenzOAuth2AccessTokenClient(new RestTemplate());
+            RestTemplate restTemplate = new RestTemplate();
+            MercedesBenzOAuth2AccessTokenClient mercedesBenzOAuth2AccessTokenClient = new MercedesBenzOAuth2AccessTokenClient(restTemplate);
             /* Enable OAuth2 */
             httpSecurity.oauth2Login(oauth2 -> oauth2
                 .loginPage(RequestConstants.LOGIN_OAUTH2)