Skip to content
Snippets Groups Projects
Commit 482e4d88 authored by Reiter, Christoph's avatar Reiter, Christoph :snake:
Browse files

Clean up the auth bundle config

Remove everything not strictly needed and avoid using "keycloak"
unless required, since we want to support other ODIC servers in the long
run as well.
parent a4a7b175
No related branches found
No related tags found
No related merge requests found
Pipeline #64166 failed
...@@ -16,17 +16,13 @@ ...@@ -16,17 +16,13 @@
APP_ENV=dev APP_ENV=dev
APP_SECRET= APP_SECRET=
# KEYCLOAK # Auth related
KEYCLOAK_SERVER_URL=https://auth.your-server/auth AUTH_SERVER_URL=https://auth.your-server/auth/realms/your-realm
KEYCLOAK_REALM=your-realm # (optional) This allows you to log into the auto generated OpenAPI documentation page
KEYCLOAK_FRONTEND_CLIENT_ID=your-client-id # which you can see when visiting the server with a browser. Leave empty to disable.
# If not empty gets used to check if the access token got issued AUTH_APIDOCS_KEYCLOAK_SERVER=https://auth.your-server/auth
# for this audience ('api-gw' for example) AUTH_APIDOCS_KEYCLOAK_REALM=your-realm
KEYCLOAK_AUDIENCE=api-gw AUTH_APIDOCS_KEYCLOAK_CLIENT_ID=api-docs-client-id
# Set to true to enable remote access token validation
KEYCLOAK_REMOTE_VALIDATION=false
KEYCLOAK_CLIENT_ID=
KEYCLOAK_CLIENT_SECRET=
# Deployment related # Deployment related
API_BUILDINFO=unknown # a git hash or something identifying the build API_BUILDINFO=unknown # a git hash or something identifying the build
......
dbp_relay_auth: dbp_relay_auth:
server_url: '%env(KEYCLOAK_SERVER_URL)%/realms/%env(KEYCLOAK_REALM)%' server_url: '%env(AUTH_SERVER_URL)%'
# Remote validation # OpenAPI Docs Keycloak Settings
remote_validation: '%env(bool:KEYCLOAK_REMOTE_VALIDATION)%' frontend_keycloak_server: '%env(AUTH_APIDOCS_KEYCLOAK_SERVER)%'
remote_validation_id: '%env(KEYCLOAK_CLIENT_ID)%' frontend_keycloak_realm: '%env(AUTH_APIDOCS_KEYCLOAK_REALM)%'
remote_validation_secret: '%env(KEYCLOAK_CLIENT_SECRET)%' frontend_keycloak_client_id: '%env(AUTH_APIDOCS_KEYCLOAK_CLIENT_ID)%'
# Frontend \ No newline at end of file
frontend_keycloak_server: '%env(KEYCLOAK_SERVER_URL)%'
frontend_keycloak_realm: '%env(KEYCLOAK_REALM)%'
frontend_keycloak_client_id: '%env(KEYCLOAK_FRONTEND_CLIENT_ID)%'
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment