cds add xsuaa --for production

app/router/xs-app.json

@@ -2,46 +2,46 @@
   "welcomeFile": "app/bookshop/index.html",
   "routes": [
     {
-      "source": "^/app/(.*)$", 
+      "source": "^/app/(.*)$",
-      "target": "$1", 
+      "target": "$1",
-      "localDir": ".", 
+      "localDir": ".",
       "cacheControl": "no-cache, no-store, must-revalidate"
     },
     {
-      "source": "^(.*)$", 
+      "source": "^(.*)$",
-      "target": "$1", 
+      "target": "$1",
-      "localDir": ".", 
+      "localDir": ".",
       "cacheControl": "no-cache, no-store, must-revalidate"
     },
     {
-      "source": "^/admin/(.*)$", 
+      "source": "^/admin/(.*)$",
-      "target": "/admin/$1", 
+      "target": "/admin/$1",
-      "destination": "bookstore-api", 
+      "destination": "bookstore-api",
       "csrfProtection": true
-    }, 
+    },
-    { 
+    {
-      "source": "^/browse/(.*)$", 
+      "source": "^/browse/(.*)$",
-      "target": "/browse/$1", 
+      "target": "/browse/$1",
-      "destination": "bookstore-api", 
+      "destination": "bookstore-api",
       "csrfProtection": true
-    }, 
+    },
-    { 
+    {
-      "source": "^/user/(.*)$", 
+      "source": "^/user/(.*)$",
-      "target": "/user/$1", 
+      "target": "/user/$1",
-      "destination": "bookstore-api", 
+      "destination": "bookstore-api",
       "csrfProtection": true
-    }, 
+    },
-    { 
+    {
-      "source": "^/odata/v4/orders/(.*)$",  
+      "source": "^/odata/v4/orders/(.*)$",
-      "target": "/odata/v4/orders/$1", 
+      "target": "/odata/v4/orders/$1",
-      "destination": "orders-api", 
+      "destination": "orders-api",
       "csrfProtection": true
-    }, 
+    },
-    { 
+    {
-      "source": "^/reviews/(.*)$", 
+      "source": "^/reviews/(.*)$",
-      "target": "/reviews/$1", 
+      "target": "/reviews/$1",
-      "destination": "reviews-api", 
+      "destination": "reviews-api",
       "csrfProtection": true
-    } 
+    }
   ]
 }

mta.yaml

@@ -27,6 +27,7 @@ modules:
           srv-url: ${default-url}
     requires:
       - name: samples-db
+      - name: samples-auth
 
   - name: samples-db-deployer
     type: hdb
@@ -44,24 +45,25 @@ modules:
       disk-quota: 256M
       memory: 256M
     requires:
-    - name: orders-api
+      - name: orders-api
-      group: destinations
+        group: destinations
-      properties:  
+        properties:
-        name: orders-api
+          name: orders-api
-        url: ~{srv-url}
+          url: ~{srv-url}
-        forwardAuthToken: true
+          forwardAuthToken: true
-    - name: reviews-api
+      - name: reviews-api
-      group: destinations
+        group: destinations
-      properties:  
+        properties:
-        name: reviews-api
+          name: reviews-api
-        url: ~{srv-url}
+          url: ~{srv-url}
-        forwardAuthToken: true
+          forwardAuthToken: true
-    - name: bookstore-api
+      - name: bookstore-api
-      group: destinations
+        group: destinations
-      properties:  
+        properties:
-        name: bookstore-api
+          name: bookstore-api
-        url: ~{srv-url}
+          url: ~{srv-url}
-        forwardAuthToken: true
+          forwardAuthToken: true
+      - name: samples-auth
     provides:
       - name: app-api
         properties:
@@ -74,3 +76,12 @@ resources:
     parameters:
       service: hana
       service-plan: hdi-shared
+  - name: samples-auth
+    type: org.cloudfoundry.managed-service
+    parameters:
+      service: xsuaa
+      service-plan: application
+      path: ./xs-security.json
+      config:
+        xsappname: samples-${org}-${space}
+        tenant-mode: dedicated

package.json

@@ -6,7 +6,8 @@
   "author": "daniel.hutzel@sap.com",
   "dependencies": {
     "@sap/cds": ">=8",
-    "@cap-js/hana": "^1"
+    "@cap-js/hana": "^1",
+    "@sap/xssec": "^4"
   },
   "workspaces": [
     "./bookshop",
@@ -44,6 +45,11 @@
   "cds": {
     "sql": {
       "native_hana_associations": false
+    },
+    "requires": {
+      "[production]": {
+        "auth": "xsuaa"
+      }
     }
   }
 }

xs-security.json

@@ -0,0 +1,6 @@
+{
+  "scopes": [],
+  "attributes": [],
+  "role-templates": [],
+  "authorities-inheritance": false
+}