DEV-683 Implement OIDC for GeoServer

[jason-raitz]

Purpose

Since we've done away with the local geoserver repo, this is a way to do development on geoserver and geoserver-secure locally.

This repo uses keycloak to mimic CalNet OIDC. There are also some changes to the README to reflect one time adding of oidc configuration to the geoserver and geoserver-secure containers.

looks good; i have some questions about whether we can incorporate the oidc config for geoserver into something called through the compose file.

also, maybe out of scope for this PR, but i'n now wondering about whether we should be building our own keycloak image.

Some feedback and suggestions.

Looks good to me, but I don't have the cycles to spin it up locally for testing so I don't want to explicitly approve it.

@jason-raitz

When entering the restricted GeoServer URL http://localhost:8081/geoserver in browser, it is redirected to public GeoServer URL http://localhost:8080/geoserver. Could you check this in your local?

i'm seeing the same thing as @yzhoubk - i think we might need separate client configs and geoserver OIDC configs for each geoserver instance.

@jason-raitz

When entering the restricted GeoServer URL http://localhost:8081/geoserver in browser, it is redirected to public GeoServer URL http://localhost:8080/geoserver. Could you check this in your local?

Great catch @yzhoubk! Thanks.

Restricted GeoServer looks good. Map services are created on both Restricted and public Geoserver.

r+. thanks!