Files
keycloak-pattern/scripts/verify-internal-spa-no-google-contract.sh

14 lines
395 B
Bash
Executable File

#!/usr/bin/env sh
set -eu
jq -e '
(.clients[] | select(.clientId == "spa-public")
| .publicClient == true
and .attributes["pkce.code.challenge.method"] == "S256")
and
([.users[].username] | index("regular-user") != null)
' keycloak/import/keycloak-patterns-realm.json >/dev/null
npm --prefix frontend test
echo "AP1 local-identity profile verified without a Google dependency"