105 lines
2.9 KiB
JSON
105 lines
2.9 KiB
JSON
{
|
|
"realm": "ca-skeleton",
|
|
"enabled": true,
|
|
"sslRequired": "none",
|
|
"roles": {
|
|
"realm": [
|
|
{
|
|
"name": "user",
|
|
"description": "The baseline realm role the application authorizes ordinary calls on."
|
|
}
|
|
],
|
|
"client": {
|
|
"ca-skeleton-api": [
|
|
{
|
|
"name": "graphql-query",
|
|
"description": "Permission to execute a GraphQL query against the shipped endpoint."
|
|
},
|
|
{
|
|
"name": "notification-submit",
|
|
"description": "Accept a notification for dispatch.",
|
|
"composite": false,
|
|
"clientRole": true
|
|
},
|
|
{
|
|
"name": "notification-template-publish",
|
|
"description": "Publish a notification template version. Separate from submit: publishing changes what every future submission renders.",
|
|
"composite": false,
|
|
"clientRole": true
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"clients": [
|
|
{
|
|
"clientId": "ca-skeleton-api",
|
|
"enabled": true,
|
|
"protocol": "openid-connect",
|
|
"publicClient": false,
|
|
"bearerOnly": false,
|
|
"serviceAccountsEnabled": true,
|
|
"standardFlowEnabled": false,
|
|
"directAccessGrantsEnabled": false,
|
|
"implicitFlowEnabled": false,
|
|
"secret": "${KEYCLOAK_GRAPHQL_SMOKE_CLIENT_SECRET}",
|
|
"attributes": {
|
|
"access.token.lifespan": "300"
|
|
},
|
|
"protocolMappers": [
|
|
{
|
|
"name": "ca-skeleton-api-audience",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-audience-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"included.client.audience": "ca-skeleton-api",
|
|
"id.token.claim": "false",
|
|
"access.token.claim": "true"
|
|
}
|
|
},
|
|
{
|
|
"name": "realm-roles",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-realm-role-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"multivalued": "true",
|
|
"claim.name": "realm_access.roles",
|
|
"jsonType.label": "String",
|
|
"access.token.claim": "true"
|
|
}
|
|
},
|
|
{
|
|
"name": "client-roles",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-client-role-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"multivalued": "true",
|
|
"claim.name": "resource_access.${client_id}.roles",
|
|
"jsonType.label": "String",
|
|
"access.token.claim": "true"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"users": [
|
|
{
|
|
"username": "service-account-ca-skeleton-api",
|
|
"enabled": true,
|
|
"serviceAccountClientId": "ca-skeleton-api",
|
|
"realmRoles": [
|
|
"user"
|
|
],
|
|
"clientRoles": {
|
|
"ca-skeleton-api": [
|
|
"graphql-query",
|
|
"notification-submit",
|
|
"notification-template-publish"
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|