application.json

{
  "html-app" : "/app/index.html",
  "example" : "chat-html-secured",
  "name" : "${application.id}",
  "configuration-files" : ["app/index.html"],
  "resources" : {
    "app" : {
      "type" : "filesystem",
      "config" : {
        "directory" : "${application.dir}/app/"
      }
    },

    "client" : {
      "type" : "aggregating-filesystem",
      "config" : {
        "directory" : "${io.liveoak.js.dir}"
      }
    },

    "application-clients" : {
      "type" : "application-clients"
    },

    "storage" : {
      "type" : "mongo",
      "config" : {
        "db" : "${application.id}"
      }
    },

    "auth" : {
      "type" : "keycloak"
    },

    "authz" : {
      "type" : "security",
      "config" : {
        "policies" : [
          {
            "policyName" : "URIPolicy",
            "policyResourceEndpoint" : "/${application.id}/uri-policy/authzCheck"
          },
          {
            "policyName" : "ACLPolicy",
            "policyResourceEndpoint" : "/${application.id}/acl-policy/authzCheck",
            "includedResourcePrefixes" : [ "/${application.id}/storage" ]
          }
        ]
      }
    },

    "acl-policy" : {
      "type" : "acl-policy",
      "config" : {
        "autoRules" : [
          {
            "resourcePath" : "/${application.id}/storage/chat",
            "autoAddedOwnerPermissions" : [ "DELETE" ]
          }
        ]
      }
    },

    "uri-policy" : {
      "type" : "uri-policy",
      "config" : {
        "rules" : [
          {
            "uriPattern" : "*",
            "requestTypes" : [ "*" ],
            "allowedUsers" : [ "*" ]
          },
          {
            "uriPattern" : "/${application.id}/storage/chat",
            "requestTypes" : [ "UPDATE" ],
            "allowedRoles" : [ "${application.id}/admin" ]
          },
          {
            "uriPattern" : "/${application.id}/storage/chat",
            "requestTypes" : [ "CREATE", "READ" ],
            "allowedRoles" : [ "${application.id}/admin", "${application.id}/user" ]
          },
          {
            "uriPattern" : "/${application.id}/storage/chat/*",
            "requestTypes" : [ "READ" ],
            "allowedRoles" : [ "${application.id}/user", "${application.id}/admin" ]
          },
          {
            "uriPattern" : "/${application.id}/storage/chat/*",
            "requestTypes" : [ "UPDATE", "DELETE" ],
            "allowedRoles" : [ "${application.id}/admin" ]
          }
        ]
      }
    }
  }
}