cds add xsuaa --for production

mta.yaml

@@ -27,6 +27,7 @@ modules:
           srv-url: ${default-url}
     requires:
       - name: samples-db
+      - name: samples-auth
 
   - name: samples-db-deployer
     type: hdb
@@ -44,24 +45,25 @@ modules:
       disk-quota: 256M
       memory: 256M
     requires:
-    - name: orders-api
+      - name: orders-api
-      group: destinations
+        group: destinations
-      properties:  
+        properties:
-        name: orders-api
+          name: orders-api
-        url: ~{srv-url}
+          url: ~{srv-url}
-        forwardAuthToken: true
+          forwardAuthToken: true
-    - name: reviews-api
+      - name: reviews-api
-      group: destinations
+        group: destinations
-      properties:  
+        properties:
-        name: reviews-api
+          name: reviews-api
-        url: ~{srv-url}
+          url: ~{srv-url}
-        forwardAuthToken: true
+          forwardAuthToken: true
-    - name: bookstore-api
+      - name: bookstore-api
-      group: destinations
+        group: destinations
-      properties:  
+        properties:
-        name: bookstore-api
+          name: bookstore-api
-        url: ~{srv-url}
+          url: ~{srv-url}
-        forwardAuthToken: true
+          forwardAuthToken: true
+      - name: samples-auth
     provides:
       - name: app-api
         properties:
@@ -74,3 +76,12 @@ resources:
     parameters:
       service: hana
       service-plan: hdi-shared
+  - name: samples-auth
+    type: org.cloudfoundry.managed-service
+    parameters:
+      service: xsuaa
+      service-plan: application
+      path: ./xs-security.json
+      config:
+        xsappname: samples-${org}-${space}
+        tenant-mode: dedicated

package.json

@@ -6,7 +6,8 @@
   "author": "daniel.hutzel@sap.com",
   "dependencies": {
     "@sap/cds": ">=8",
-    "@cap-js/hana": "^1"
+    "@cap-js/hana": "^1",
+    "@sap/xssec": "^4"
   },
   "workspaces": [
     "./bookshop",
@@ -44,6 +45,11 @@
   "cds": {
     "sql": {
       "native_hana_associations": false
+    },
+    "requires": {
+      "[production]": {
+        "auth": "xsuaa"
+      }
     }
   }
 }

xs-security.json

@@ -0,0 +1,6 @@
+{
+  "scopes": [],
+  "attributes": [],
+  "role-templates": [],
+  "authorities-inheritance": false
+}