使用 OIDC 代理将 OIDC 服务端点与自定义 GPT 集成

<dependency>
    <groupId>io.quarkus</groupId>
    <artifactId>quarkus-oidc</artifactId>
</dependency>
<dependency>
    <groupId>io.quarkus</groupId>
    <artifactId>quarkus-rest-client-oidc-token-propagation</artifactId>
</dependency>
<dependency>
    <groupId>io.quarkus</groupId>
    <artifactId>quarkus-rest</artifactId>
</dependency>
<dependency>
    <groupId>io.quarkus</groupId>
    <artifactId>quarkus-smallrye-openapi</artifactId>
</dependency>

quarkus.oidc.provider=strava
quarkus.oidc.application-type=service

quarkus.oidc.client-id=${strava-client-id}
quarkus.oidc.credentials.secret=${strava-client-secret}
quarkus.oidc.authentication.extra-params.scope=profile:read_all,activity:read_all

quarkus.rest-client.strava-client.url=https://www.strava.com/api/v3

quarkus.smallrye-openapi.operation-id-strategy=method
quarkus.smallrye-openapi.auto-add-security=false
quarkus.smallrye-openapi.servers=https://<your-free-ngrok-domain>.app

package org.acme.security.openid.connect.plugin;

import org.eclipse.microprofile.rest.client.inject.RegisterRestClient;

import io.quarkus.oidc.token.propagation.AccessToken;
import jakarta.ws.rs.GET;
import jakarta.ws.rs.Path;
import jakarta.ws.rs.PathParam;
import jakarta.ws.rs.Produces;
import jakarta.ws.rs.core.MediaType;

@RegisterRestClient(configKey="strava-client")
@AccessToken
@Path("/")
public interface StravaClient {

	@GET
	@Path("athlete/activities")
	@Produces(MediaType.APPLICATION_JSON)
	String athleteActivities();

	@GET
	@Path("activities/{id}")
	@Produces(MediaType.APPLICATION_JSON)
	String athleteActivity(@PathParam("id") long activityId);

	@GET
	@Path("athletes/{id}/stats")
	@Produces(MediaType.APPLICATION_JSON)
	String athleteStats(@PathParam("id") long athleteId);

	// Etc for other Strava API
}

package org.acme.security.openid.connect.plugin;

import org.eclipse.microprofile.rest.client.inject.RestClient;

import io.quarkus.logging.Log;
import io.quarkus.oidc.UserInfo;
import io.quarkus.security.Authenticated;
import jakarta.inject.Inject;
import jakarta.ws.rs.GET;
import jakarta.ws.rs.Path;
import jakarta.ws.rs.PathParam;
import jakarta.ws.rs.Produces;

@Path("/athlete")
@Authenticated (1)
public class FitnessAdviserService {

    @Inject
    UserInfo athlete;

    @Inject
    @RestClient
    StravaClient stravaClient;

    @GET
    @Produces("application/json")
    public String athlete() {
        Log.info("Fitness adviser: athlete");
        return athlete.getJsonObject().toString();
    }

    @GET
    @Produces("application/json")
    @Path("/activities")
    public String activities() {
        Log.info("Fitness adviser: activities");
        return stravaClient.athleteActivities();
    }

    @GET
    @Produces("application/json")
    @Path("/activity/{id}")
    public String activity(@PathParam("id") long activityId) {
        Log.infof("Fitness adviser: activity %d", activityId);
        return stravaClient.athleteActivity(activityId);
    }

    @GET
    @Produces("application/json")
    @Path("/stats")
    public String stats() {
        Log.info("Fitness adviser: stats");
        return stravaClient.athleteStats(athlete.getLong("id"));
    }

    // Etc for other Strava API
}

<dependency>
    <groupId>io.quarkiverse.oidc-proxy</groupId>
    <artifactId>quarkus-oidc-proxy</artifactId>
    <version>0.1.1</version>
</dependency>

quarkus.oidc.authentication.redirect-path=/callback (1)
quarkus.oidc-proxy.external-redirect-uri=https://chat.openai.com/aip/g-2faf163d359505ecb63596f17baa3dfe53ea3cb9/oauth/callback (2)
quarkus.oidc.authentication.force-redirect-https-scheme=true (3)
quarkus.oidc-proxy.root-path=/oidc
quarkus.oidc-proxy.external-client-id=external-client-id (4)
quarkus.oidc-proxy.external-client-secret=external-client-secret (4)

mvn clean install
java target/quarkus-app/quarkus-run.jar

%dev.quarkus.dev-ui.cors.enabled=false

ngrok http --domain <your-free-ngrok-domain> 8080

ngrok tunnel --label edge=<ngrok-tunnel-id> https://:8080