Enable PEN access, drop KrakenD

.github/workflows/deploy.yaml

@@ -56,7 +56,7 @@ jobs:
         env:
           CLUSTER: dev-gcp
           IMAGE: ${{ needs.build.outputs.image }}
-          RESOURCE: .nais/deploy-dev.yml,.nais/apiendpoints.yaml
+          RESOURCE: .nais/deploy-dev.yml
   trivy-imagescan:
     name: Scan Docker image
     needs: [ build ]

.nais/deploy-dev.yml

@@ -12,7 +12,7 @@ spec:
     min: 2
     max: 2
   ingresses:
-    - https://pensjonssimulator.intern.dev.nav.no
+    - https://pensjonssimulator.ekstern.dev.nav.no
   liveness:
     path: /internal/health/liveness
     initialDelay: 30
@@ -49,6 +49,13 @@ spec:
           namespace: aura
         - application: tokenx-token-generator
           namespace: aura
+    outbound:
+      rules:
+        - application: pensjon-pen-q2
+          namespace: pensjon-q2
+          cluster: dev-fss
+      external:
+        - host: pensjon-pen-q2.dev-fss-pub.nais.io
   env:
     - name: PEN_SERVICE_ID
       value: dev-fss:pensjon-q2:pensjon-pen-q2

.nais/deploy-prod.yml

@@ -13,7 +13,7 @@ spec:
     max: 4
     cpuThresholdPercentage: 70
   ingresses:
-    - https://pensjonssimulator.intern.nav.no
+    - https://www.nav.no/pensjon/simulator
   liveness:
     path: /internal/health/liveness
     initialDelay: 30

src/main/kotlin/no/nav/pensjon/simulator/tech/security/egress/EnrichedAuthentication.kt

@@ -20,20 +20,20 @@ class EnrichedAuthentication(
         return egressTokenSuppliersByService.value[service]?.get() ?: RawJwt("")
     }
 
-    override fun getName(): String = initialAuth?.name ?: "no name"
+    override fun getName(): String? = initialAuth?.name
 
-    override fun getAuthorities(): MutableCollection<out GrantedAuthority> = initialAuth!!.authorities
+    override fun getAuthorities(): MutableCollection<out GrantedAuthority>? = initialAuth?.authorities
 
-    override fun getCredentials(): Any = initialAuth!!.credentials
+    override fun getCredentials(): Any? = initialAuth?.credentials
 
-    override fun getDetails(): Any = initialAuth!!.details
+    override fun getDetails(): Any? = initialAuth?.details
 
-    override fun getPrincipal(): Any = initialAuth?.principal ?: "no principal"
+    override fun getPrincipal(): Any? = initialAuth?.principal
 
-    override fun isAuthenticated(): Boolean = initialAuth!!.isAuthenticated
+    override fun isAuthenticated(): Boolean = initialAuth?.isAuthenticated ?: false
 
     override fun setAuthenticated(isAuthenticated: Boolean) {
-        initialAuth!!.isAuthenticated = isAuthenticated
+        initialAuth?.let { it.isAuthenticated = isAuthenticated }
     }
 }