From cc1658c3557a174fadc8b1db5f62c0a2526302b3 Mon Sep 17 00:00:00 2001
From: dvirlabs <dvirlabs@gmail.com>
Date: Fri, 4 Jul 2025 17:31:47 +0300
Subject: [PATCH 1/7] try oidc

---
 frontend/package-lock.json | 52 ++++++++++++++++++++++++++++++++++++++
 frontend/package.json      |  2 ++
 frontend/src/keycloak.js   |  9 +++++++
 frontend/src/main.jsx      | 36 +++++++++++++++++++++-----
 4 files changed, 92 insertions(+), 7 deletions(-)
 create mode 100644 frontend/src/keycloak.js

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 885f3d7..2cea909 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -8,6 +8,8 @@
       "name": "frontend",
       "version": "0.0.0",
       "dependencies": {
+        "@react-keycloak/web": "^3.4.0",
+        "keycloak-js": "^26.2.0",
         "react": "^19.1.0",
         "react-beautiful-dnd": "^13.1.1",
         "react-dom": "^19.1.0",
@@ -962,6 +964,46 @@
         "@jridgewell/sourcemap-codec": "^1.4.14"
       }
     },
+    "node_modules/@react-keycloak/core": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/@react-keycloak/core/-/core-3.2.0.tgz",
+      "integrity": "sha512-1yzU7gQzs+6E1v6hGqxy0Q+kpMHg9sEcke2yxZR29WoU8KNE8E50xS6UbI8N7rWsgyYw8r9W1cUPCOF48MYjzw==",
+      "dependencies": {
+        "react-fast-compare": "^3.2.0"
+      },
+      "funding": {
+        "type": "patreon",
+        "url": "https://www.patreon.com/reactkeycloak"
+      },
+      "peerDependencies": {
+        "react": ">=16"
+      }
+    },
+    "node_modules/@react-keycloak/web": {
+      "version": "3.4.0",
+      "resolved": "https://registry.npmjs.org/@react-keycloak/web/-/web-3.4.0.tgz",
+      "integrity": "sha512-yKKSCyqBtn7dt+VckYOW1IM5NW999pPkxDZOXqJ6dfXPXstYhOQCkTZqh8l7UL14PkpsoaHDh7hSJH8whah01g==",
+      "dependencies": {
+        "@babel/runtime": "^7.9.0",
+        "@react-keycloak/core": "^3.2.0",
+        "hoist-non-react-statics": "^3.3.2"
+      },
+      "funding": {
+        "type": "patreon",
+        "url": "https://www.patreon.com/reactkeycloak"
+      },
+      "peerDependencies": {
+        "keycloak-js": ">=9.0.2",
+        "react": ">=16.8",
+        "react-dom": ">=16.8",
+        "typescript": ">=3.8"
+      },
+      "peerDependenciesMeta": {
+        "typescript": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/@rolldown/pluginutils": {
       "version": "1.0.0-beta.9",
       "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.0-beta.9.tgz",
@@ -2080,6 +2122,11 @@
         "node": ">=6"
       }
     },
+    "node_modules/keycloak-js": {
+      "version": "26.2.0",
+      "resolved": "https://registry.npmjs.org/keycloak-js/-/keycloak-js-26.2.0.tgz",
+      "integrity": "sha512-CrFcXTN+d6J0V/1v3Zpioys6qHNWE6yUzVVIsCUAmFn9H14GZ0vuYod+lt+SSpMgWGPuneDZBSGBAeLBFuqjsw=="
+    },
     "node_modules/keyv": {
       "version": "4.5.4",
       "resolved": "https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz",
@@ -2403,6 +2450,11 @@
         "react": "^19.1.0"
       }
     },
+    "node_modules/react-fast-compare": {
+      "version": "3.2.2",
+      "resolved": "https://registry.npmjs.org/react-fast-compare/-/react-fast-compare-3.2.2.tgz",
+      "integrity": "sha512-nsO+KSNgo1SbJqJEYRE9ERzo7YtYbou/OqjSQKxV7jcKox7+usiUVZOAC+XnDOABXggQTno0Y1CpVnuWEc1boQ=="
+    },
     "node_modules/react-icons": {
       "version": "5.5.0",
       "resolved": "https://registry.npmjs.org/react-icons/-/react-icons-5.5.0.tgz",
diff --git a/frontend/package.json b/frontend/package.json
index 45ce11c..22f00e0 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -10,6 +10,8 @@
     "preview": "vite preview"
   },
   "dependencies": {
+    "@react-keycloak/web": "^3.4.0",
+    "keycloak-js": "^26.2.0",
     "react": "^19.1.0",
     "react-beautiful-dnd": "^13.1.1",
     "react-dom": "^19.1.0",
diff --git a/frontend/src/keycloak.js b/frontend/src/keycloak.js
new file mode 100644
index 0000000..1971f37
--- /dev/null
+++ b/frontend/src/keycloak.js
@@ -0,0 +1,9 @@
+import Keycloak from 'keycloak-js';
+
+const keycloak = new Keycloak({
+  url: 'https://keycloak.dvirlabs.com/',
+  realm: 'lab', // ⬅️ Change to your realm name
+  clientId: 'navix', // ⬅️ Change to your client ID in Keycloak
+});
+
+export default keycloak;
diff --git a/frontend/src/main.jsx b/frontend/src/main.jsx
index b9a1a6d..c255fb6 100644
--- a/frontend/src/main.jsx
+++ b/frontend/src/main.jsx
@@ -1,10 +1,32 @@
-import { StrictMode } from 'react'
-import { createRoot } from 'react-dom/client'
-import './index.css'
-import App from './App.jsx'
+import { StrictMode, useState, useEffect } from 'react';
+import { createRoot } from 'react-dom/client';
+import './index.css';
+import App from './App.jsx';
+import keycloak from './keycloak';
+
+function SecuredApp() {
+  const [authenticated, setAuthenticated] = useState(false);
+
+  useEffect(() => {
+    keycloak.init({ onLoad: 'login-required' }).then((auth) => {
+      if (!auth) {
+        window.location.reload();
+      } else {
+        setAuthenticated(true);
+      }
+    });
+
+    // Optional: refresh token
+    setInterval(() => {
+      keycloak.updateToken(70).catch(() => keycloak.logout());
+    }, 6000);
+  }, []);
+
+  return authenticated ? <App /> : <div>Loading...</div>;
+}
 
 createRoot(document.getElementById('root')).render(
   <StrictMode>
-    <App />
-  </StrictMode>,
-)
+    <SecuredApp />
+  </StrictMode>
+);

From 52a1f2b4ae02d433f260e8160e11e84df1c0b729 Mon Sep 17 00:00:00 2001
From: dvirlabs <dvirlabs@gmail.com>
Date: Fri, 4 Jul 2025 19:03:40 +0300
Subject: [PATCH 2/7] Update the pipeline to support tags

---
 .woodpecker.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.woodpecker.yaml b/.woodpecker.yaml
index 8df1d8b..be03ba0 100644
--- a/.woodpecker.yaml
+++ b/.woodpecker.yaml
@@ -14,7 +14,7 @@ steps:
       context: frontend
       tags:
         - latest
-        - ${CI_COMMIT_BRANCH}-${CI_COMMIT_SHA:0:7}
+        - ${CI_COMMIT_TAG:-${CI_COMMIT_BRANCH}-${CI_COMMIT_SHA:0:7}}
       username:
         from_secret: DOCKER_USERNAME
       password:
@@ -35,7 +35,7 @@ steps:
       context: backend
       tags:
         - latest
-        - ${CI_COMMIT_BRANCH}-${CI_COMMIT_SHA:0:7}
+        - ${CI_COMMIT_TAG:-${CI_COMMIT_BRANCH}-${CI_COMMIT_SHA:0:7}}
       username:
         from_secret: DOCKER_USERNAME
       password:

From 1654d2b3d2667f016375fec26c15855585278d54 Mon Sep 17 00:00:00 2001
From: dvirlabs <dvirlabs@gmail.com>
Date: Sat, 5 Jul 2025 21:45:39 +0300
Subject: [PATCH 3/7] Trigger apps-gitops pipeline

---
 .woodpecker.yaml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/.woodpecker.yaml b/.woodpecker.yaml
index be03ba0..9d6523a 100644
--- a/.woodpecker.yaml
+++ b/.woodpecker.yaml
@@ -94,3 +94,19 @@ steps:
         git add manifests/${CI_REPO_NAME}/values.yaml
         git commit -m "backend: update tag to $TAG" || echo "No changes"
         git push origin HEAD
+
+  trigger-gitops-pipeline:
+    name: Trigger apps-gitops pipeline
+    image: curlimages/curl
+    when:
+      branch: [ master, develop ]
+      event: [ push ]
+    environment:
+      WOODPECKER_API_TOKEN:
+        from_secret: WOODPECKER_API_TOKEN
+    commands:
+      - |
+        curl -X POST https://woodpecker.dvirlabs.com/api/repos/dvirlabs/apps-gitops/builds \
+          -H "Authorization: Bearer $WOODPECKER_API_TOKEN" \
+          -H "Content-Type: application/json" \
+          -d '{"branch": "master"}'

From e64715eafcd7451407a82787ff7365bfcf6a6ce7 Mon Sep 17 00:00:00 2001
From: dvirlabs <dvirlabs@gmail.com>
Date: Sun, 6 Jul 2025 00:46:37 +0300
Subject: [PATCH 4/7] Try tigger gitops pipeline

---
 .woodpecker.yaml | 30 ++++++++++++++++--------------
 1 file changed, 16 insertions(+), 14 deletions(-)

diff --git a/.woodpecker.yaml b/.woodpecker.yaml
index 9d6523a..ad5fd2a 100644
--- a/.woodpecker.yaml
+++ b/.woodpecker.yaml
@@ -95,18 +95,20 @@ steps:
         git commit -m "backend: update tag to $TAG" || echo "No changes"
         git push origin HEAD
 
-  trigger-gitops-pipeline:
-    name: Trigger apps-gitops pipeline
-    image: curlimages/curl
-    when:
-      branch: [ master, develop ]
-      event: [ push ]
+  trigger-gitops-via-push:
+    name: Trigger apps-gitops via Git push
+    image: alpine/git
     environment:
-      WOODPECKER_API_TOKEN:
-        from_secret: WOODPECKER_API_TOKEN
-    commands:
-      - |
-        curl -X POST https://woodpecker.dvirlabs.com/api/repos/dvirlabs/apps-gitops/builds \
-          -H "Authorization: Bearer $WOODPECKER_API_TOKEN" \
-          -H "Content-Type: application/json" \
-          -d '{"branch": "master"}'
+      GIT_USERNAME:
+        from_secret: GIT_USERNAME
+      GIT_TOKEN:
+        from_secret: GIT_TOKEN
+    commands: |
+      git config --global user.name "woodpecker-bot"
+      git config --global user.email "ci@dvirlabs.com"
+      git clone "https://${GIT_USERNAME}:${GIT_TOKEN}@git.dvirlabs.com/dvirlabs/apps-gitops.git"
+      cd apps-gitops
+      echo "# trigger at $(date)" >> .trigger
+      git add .trigger
+      git commit -m "ci: trigger apps-gitops build" || echo "no changes"
+      git push origin HEAD

From 83ef4f643543569f1b8bf88227ff8a5d815c4805 Mon Sep 17 00:00:00 2001
From: dvirlabs <dvirlabs@gmail.com>
Date: Sun, 6 Jul 2025 00:47:24 +0300
Subject: [PATCH 5/7] Try tigger gitops pipeline

---
 .woodpecker.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.woodpecker.yaml b/.woodpecker.yaml
index ad5fd2a..0ef4c55 100644
--- a/.woodpecker.yaml
+++ b/.woodpecker.yaml
@@ -106,7 +106,7 @@ steps:
     commands: |
       git config --global user.name "woodpecker-bot"
       git config --global user.email "ci@dvirlabs.com"
-      git clone "https://${GIT_USERNAME}:${GIT_TOKEN}@git.dvirlabs.com/dvirlabs/apps-gitops.git"
+      git clone "https://$${GIT_USERNAME}:$${GIT_TOKEN}@git.dvirlabs.com/dvirlabs/apps-gitops.git"
       cd apps-gitops
       echo "# trigger at $(date)" >> .trigger
       git add .trigger

From 5bbdce4f034d246b60329b6e1e97ef60de2233f9 Mon Sep 17 00:00:00 2001
From: dvirlabs <dvirlabs@gmail.com>
Date: Sun, 6 Jul 2025 18:22:19 +0300
Subject: [PATCH 6/7] Prev version

---
 .woodpecker.yaml | 22 ++++++++++++++++++++--
 1 file changed, 20 insertions(+), 2 deletions(-)

diff --git a/.woodpecker.yaml b/.woodpecker.yaml
index 8df1d8b..0ef4c55 100644
--- a/.woodpecker.yaml
+++ b/.woodpecker.yaml
@@ -14,7 +14,7 @@ steps:
       context: frontend
       tags:
         - latest
-        - ${CI_COMMIT_BRANCH}-${CI_COMMIT_SHA:0:7}
+        - ${CI_COMMIT_TAG:-${CI_COMMIT_BRANCH}-${CI_COMMIT_SHA:0:7}}
       username:
         from_secret: DOCKER_USERNAME
       password:
@@ -35,7 +35,7 @@ steps:
       context: backend
       tags:
         - latest
-        - ${CI_COMMIT_BRANCH}-${CI_COMMIT_SHA:0:7}
+        - ${CI_COMMIT_TAG:-${CI_COMMIT_BRANCH}-${CI_COMMIT_SHA:0:7}}
       username:
         from_secret: DOCKER_USERNAME
       password:
@@ -94,3 +94,21 @@ steps:
         git add manifests/${CI_REPO_NAME}/values.yaml
         git commit -m "backend: update tag to $TAG" || echo "No changes"
         git push origin HEAD
+
+  trigger-gitops-via-push:
+    name: Trigger apps-gitops via Git push
+    image: alpine/git
+    environment:
+      GIT_USERNAME:
+        from_secret: GIT_USERNAME
+      GIT_TOKEN:
+        from_secret: GIT_TOKEN
+    commands: |
+      git config --global user.name "woodpecker-bot"
+      git config --global user.email "ci@dvirlabs.com"
+      git clone "https://$${GIT_USERNAME}:$${GIT_TOKEN}@git.dvirlabs.com/dvirlabs/apps-gitops.git"
+      cd apps-gitops
+      echo "# trigger at $(date)" >> .trigger
+      git add .trigger
+      git commit -m "ci: trigger apps-gitops build" || echo "no changes"
+      git push origin HEAD

From 505b51e53afe8e30698bbe146d523a83888dd431 Mon Sep 17 00:00:00 2001
From: dvirlabs <dvirlabs@gmail.com>
Date: Sun, 6 Jul 2025 19:03:06 +0300
Subject: [PATCH 7/7] prev version for real

---
 .woodpecker.yaml | 22 ++++++++++++++++++++--
 1 file changed, 20 insertions(+), 2 deletions(-)

diff --git a/.woodpecker.yaml b/.woodpecker.yaml
index 8df1d8b..0ef4c55 100644
--- a/.woodpecker.yaml
+++ b/.woodpecker.yaml
@@ -14,7 +14,7 @@ steps:
       context: frontend
       tags:
         - latest
-        - ${CI_COMMIT_BRANCH}-${CI_COMMIT_SHA:0:7}
+        - ${CI_COMMIT_TAG:-${CI_COMMIT_BRANCH}-${CI_COMMIT_SHA:0:7}}
       username:
         from_secret: DOCKER_USERNAME
       password:
@@ -35,7 +35,7 @@ steps:
       context: backend
       tags:
         - latest
-        - ${CI_COMMIT_BRANCH}-${CI_COMMIT_SHA:0:7}
+        - ${CI_COMMIT_TAG:-${CI_COMMIT_BRANCH}-${CI_COMMIT_SHA:0:7}}
       username:
         from_secret: DOCKER_USERNAME
       password:
@@ -94,3 +94,21 @@ steps:
         git add manifests/${CI_REPO_NAME}/values.yaml
         git commit -m "backend: update tag to $TAG" || echo "No changes"
         git push origin HEAD
+
+  trigger-gitops-via-push:
+    name: Trigger apps-gitops via Git push
+    image: alpine/git
+    environment:
+      GIT_USERNAME:
+        from_secret: GIT_USERNAME
+      GIT_TOKEN:
+        from_secret: GIT_TOKEN
+    commands: |
+      git config --global user.name "woodpecker-bot"
+      git config --global user.email "ci@dvirlabs.com"
+      git clone "https://$${GIT_USERNAME}:$${GIT_TOKEN}@git.dvirlabs.com/dvirlabs/apps-gitops.git"
+      cd apps-gitops
+      echo "# trigger at $(date)" >> .trigger
+      git add .trigger
+      git commit -m "ci: trigger apps-gitops build" || echo "no changes"
+      git push origin HEAD