173 lines
4.9 KiB
JSON
173 lines
4.9 KiB
JSON
{
|
|
"realm": "toir",
|
|
"enabled": true,
|
|
"displayName": "TOIR",
|
|
"sslRequired": "external",
|
|
"registrationAllowed": false,
|
|
"registrationEmailAsUsername": false,
|
|
"loginWithEmailAllowed": true,
|
|
"duplicateEmailsAllowed": false,
|
|
"resetPasswordAllowed": true,
|
|
"rememberMe": true,
|
|
"verifyEmail": false,
|
|
"roles": {
|
|
"realm": [
|
|
{
|
|
"name": "admin",
|
|
"description": "Full administrative access"
|
|
},
|
|
{
|
|
"name": "editor",
|
|
"description": "Can create and modify data"
|
|
},
|
|
{
|
|
"name": "viewer",
|
|
"description": "Read-only access"
|
|
}
|
|
]
|
|
},
|
|
"clientScopes": [
|
|
{
|
|
"name": "api-audience",
|
|
"description": "Adds backend audience to SPA access token",
|
|
"protocol": "openid-connect",
|
|
"attributes": {
|
|
"display.on.consent.screen": "false",
|
|
"include.in.token.scope": "false"
|
|
},
|
|
"protocolMappers": [
|
|
{
|
|
"name": "aud-toir-backend",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-audience-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"included.client.audience": "toir-backend",
|
|
"id.token.claim": "false",
|
|
"access.token.claim": "true",
|
|
"introspection.token.claim": "true"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"clients": [
|
|
{
|
|
"clientId": "toir-frontend",
|
|
"name": "toir-frontend",
|
|
"description": "Frontend SPA client",
|
|
"enabled": true,
|
|
"protocol": "openid-connect",
|
|
"publicClient": true,
|
|
"bearerOnly": false,
|
|
"standardFlowEnabled": true,
|
|
"implicitFlowEnabled": false,
|
|
"directAccessGrantsEnabled": false,
|
|
"serviceAccountsEnabled": false,
|
|
"fullScopeAllowed": true,
|
|
"rootUrl": "https://toir-frontend.greact.ru",
|
|
"baseUrl": "https://toir-frontend.greact.ru",
|
|
"redirectUris": [
|
|
"https://toir-frontend.greact.ru/*",
|
|
"http://localhost:5173/*"
|
|
],
|
|
"webOrigins": [
|
|
"https://toir-frontend.greact.ru",
|
|
"http://localhost:5173"
|
|
],
|
|
"attributes": {
|
|
"pkce.code.challenge.method": "S256"
|
|
},
|
|
"defaultClientScopes": [
|
|
"api-audience"
|
|
],
|
|
"optionalClientScopes": [
|
|
"offline_access"
|
|
],
|
|
"protocolMappers": [
|
|
{
|
|
"name": "sub",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-property-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "id",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "sub",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"name": "preferred_username",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-property-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "username",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "preferred_username",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"name": "email",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-property-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "email",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "email",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"name": "name",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-full-name-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"userinfo.token.claim": "true"
|
|
}
|
|
},
|
|
{
|
|
"name": "realm roles",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-realm-role-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"multivalued": "true",
|
|
"userinfo.token.claim": "true",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "realm_access.roles",
|
|
"jsonType.label": "String"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"clientId": "toir-backend",
|
|
"name": "toir-backend",
|
|
"description": "Backend API resource server",
|
|
"enabled": true,
|
|
"protocol": "openid-connect",
|
|
"publicClient": false,
|
|
"bearerOnly": true,
|
|
"standardFlowEnabled": false,
|
|
"implicitFlowEnabled": false,
|
|
"directAccessGrantsEnabled": false,
|
|
"serviceAccountsEnabled": false,
|
|
"fullScopeAllowed": false
|
|
}
|
|
]
|
|
}
|