diff --git a/CHANGELOG.md b/CHANGELOG.md index 7593c64b9e8b40c6ef327ad122c82dca2f1924f9..dc14cdc6033e1c0d1f1b0583ed9b7a69b4bfe3a0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,8 @@ +# v0.1.12 - 2022-11-15 + +* Added new `frontend_client_id` config entry as a replacement for `frontend_keycloak_client_id` +* Deprecated config entries: `frontend_keycloak_server`, `frontend_keycloak_realm`, `frontend_keycloak_client_id` + # v0.1.9 - 2022-05-11 * Add a health check for remote token validation via the introspection endpoint diff --git a/docs/config.md b/docs/config.md index 295442e4177df48d8a1be3c8236918c4e901ab92..114eb3121f862bc00643833ea1e317cd2adf1573 100644 --- a/docs/config.md +++ b/docs/config.md @@ -20,12 +20,8 @@ dbp_relay_auth: remote_validation_id: ~ # Example: client-token-check # The client secret for the client referenced by client_id (optional) remote_validation_secret: ~ # Example: mysecret - # The Keycloak server base URL - frontend_keycloak_server: ~ # Example: 'https://keycloak.example.com/auth' - # The keycloak realm - frontend_keycloak_realm: ~ # Example: client-docs - # The ID for the keycloak client (authorization code flow) used for API docs or similar - frontend_keycloak_client_id: ~ # Example: client-docs + # The client ID for the OIDC client (authorization code flow) used for API docs and other frontends provided by the API itself + frontend_client_id: ~ # Example: client-docs ``` ## Configuration Discovery @@ -56,17 +52,6 @@ There are two modes of operation: everything is handled by the OIDC server. -## Frontend Keycloak Config (FIXME) - -At this time the bundle is still depending on Keycloak as a specific OIDC server -for some optional functionality. The auth bundle handles the OIDC login -component of the OpenAPI docs provided by the core bundle (the login button at -the top left). - -We are looking into providing a frontend web component that works with all OIDC -serves to remove this dependency. - - ## Remote Validation Client with Keycloak To create a client which can validate/introspect tokens in Keycloak create a