Skip to content
Snippets Groups Projects
Commit 482e4d88 authored by Reiter, Christoph's avatar Reiter, Christoph :snake:
Browse files

Clean up the auth bundle config

Remove everything not strictly needed and avoid using "keycloak"
unless required, since we want to support other ODIC servers in the long
run as well.
parent a4a7b175
No related branches found
No related tags found
No related merge requests found
Pipeline #64166 failed
......@@ -16,17 +16,13 @@
APP_ENV=dev
APP_SECRET=
# KEYCLOAK
KEYCLOAK_SERVER_URL=https://auth.your-server/auth
KEYCLOAK_REALM=your-realm
KEYCLOAK_FRONTEND_CLIENT_ID=your-client-id
# If not empty gets used to check if the access token got issued
# for this audience ('api-gw' for example)
KEYCLOAK_AUDIENCE=api-gw
# Set to true to enable remote access token validation
KEYCLOAK_REMOTE_VALIDATION=false
KEYCLOAK_CLIENT_ID=
KEYCLOAK_CLIENT_SECRET=
# Auth related
AUTH_SERVER_URL=https://auth.your-server/auth/realms/your-realm
# (optional) This allows you to log into the auto generated OpenAPI documentation page
# which you can see when visiting the server with a browser. Leave empty to disable.
AUTH_APIDOCS_KEYCLOAK_SERVER=https://auth.your-server/auth
AUTH_APIDOCS_KEYCLOAK_REALM=your-realm
AUTH_APIDOCS_KEYCLOAK_CLIENT_ID=api-docs-client-id
# Deployment related
API_BUILDINFO=unknown # a git hash or something identifying the build
......
dbp_relay_auth:
server_url: '%env(KEYCLOAK_SERVER_URL)%/realms/%env(KEYCLOAK_REALM)%'
# Remote validation
remote_validation: '%env(bool:KEYCLOAK_REMOTE_VALIDATION)%'
remote_validation_id: '%env(KEYCLOAK_CLIENT_ID)%'
remote_validation_secret: '%env(KEYCLOAK_CLIENT_SECRET)%'
# Frontend
frontend_keycloak_server: '%env(KEYCLOAK_SERVER_URL)%'
frontend_keycloak_realm: '%env(KEYCLOAK_REALM)%'
frontend_keycloak_client_id: '%env(KEYCLOAK_FRONTEND_CLIENT_ID)%'
server_url: '%env(AUTH_SERVER_URL)%'
# OpenAPI Docs Keycloak Settings
frontend_keycloak_server: '%env(AUTH_APIDOCS_KEYCLOAK_SERVER)%'
frontend_keycloak_realm: '%env(AUTH_APIDOCS_KEYCLOAK_REALM)%'
frontend_keycloak_client_id: '%env(AUTH_APIDOCS_KEYCLOAK_CLIENT_ID)%'
\ No newline at end of file
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment