Skip to content

Commit ecafe85

Browse files
alukachalukach
committed
Remove client authentication
Format to fit Keycloak export
1 parent c5d1afc commit ecafe85

File tree

1 file changed

+91
-53
lines changed

1 file changed

+91
-53
lines changed

‎auth/keycloak/eoapi-realm.json‎

Lines changed: 91 additions & 53 deletions
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,9 @@
5454
"clientRole": false,
5555
"containerId": "c2c7ef25-d119-422d-a3bd-9abda8dc1385"
5656
},
57-
"requiredCredentials": ["password"],
57+
"requiredCredentials": [
58+
"password"
59+
],
5860
"otpPolicyType": "totp",
5961
"otpPolicyAlgorithm": "HmacSHA1",
6062
"otpPolicyInitialCounter": 0,
@@ -69,7 +71,9 @@
6971
],
7072
"localizationTexts": {},
7173
"webAuthnPolicyRpEntityName": "keycloak",
72-
"webAuthnPolicySignatureAlgorithms": ["ES256"],
74+
"webAuthnPolicySignatureAlgorithms": [
75+
"ES256"
76+
],
7377
"webAuthnPolicyRpId": "",
7478
"webAuthnPolicyAttestationConveyancePreference": "not specified",
7579
"webAuthnPolicyAuthenticatorAttachment": "not specified",
@@ -80,7 +84,9 @@
8084
"webAuthnPolicyAcceptableAaguids": [],
8185
"webAuthnPolicyExtraOrigins": [],
8286
"webAuthnPolicyPasswordlessRpEntityName": "keycloak",
83-
"webAuthnPolicyPasswordlessSignatureAlgorithms": ["ES256"],
87+
"webAuthnPolicyPasswordlessSignatureAlgorithms": [
88+
"ES256"
89+
],
8490
"webAuthnPolicyPasswordlessRpId": "",
8591
"webAuthnPolicyPasswordlessAttestationConveyancePreference": "not specified",
8692
"webAuthnPolicyPasswordlessAuthenticatorAttachment": "not specified",
@@ -90,31 +96,22 @@
9096
"webAuthnPolicyPasswordlessAvoidSameAuthenticatorRegister": false,
9197
"webAuthnPolicyPasswordlessAcceptableAaguids": [],
9298
"webAuthnPolicyPasswordlessExtraOrigins": [],
93-
"users": [
94-
{
95-
"id": "194f70e7-2b3d-417f-b7f7-ce162244aaf7",
96-
"username": "service-account-stac-api",
97-
"emailVerified": false,
98-
"createdTimestamp": 1712038343100,
99-
"enabled": true,
100-
"totp": false,
101-
"serviceAccountClientId": "stac-api",
102-
"disableableCredentialTypes": [],
103-
"requiredActions": [],
104-
"notBefore": 0
105-
}
106-
],
10799
"scopeMappings": [
108100
{
109101
"clientScope": "offline_access",
110-
"roles": ["offline_access"]
102+
"roles": [
103+
"offline_access"
104+
]
111105
}
112106
],
113107
"clientScopeMappings": {
114108
"account": [
115109
{
116110
"client": "account-console",
117-
"roles": ["manage-account", "view-groups"]
111+
"roles": [
112+
"manage-account",
113+
"view-groups"
114+
]
118115
}
119116
]
120117
},
@@ -129,7 +126,9 @@
129126
"enabled": true,
130127
"alwaysDisplayInConsole": false,
131128
"clientAuthenticatorType": "client-secret",
132-
"redirectUris": ["/realms/eoapi/account/*"],
129+
"redirectUris": [
130+
"/realms/eoapi/account/*"
131+
],
133132
"webOrigins": [],
134133
"notBefore": 0,
135134
"bearerOnly": false,
@@ -160,7 +159,9 @@
160159
"enabled": true,
161160
"alwaysDisplayInConsole": false,
162161
"clientAuthenticatorType": "client-secret",
163-
"redirectUris": ["/realms/eoapi/account/*"],
162+
"redirectUris": [
163+
"/realms/eoapi/account/*"
164+
],
164165
"webOrigins": [],
165166
"notBefore": 0,
166167
"bearerOnly": false,
@@ -212,7 +213,9 @@
212213
"publicClient": true,
213214
"frontchannelLogout": false,
214215
"protocol": "openid-connect",
215-
"attributes": {},
216+
"attributes": {
217+
"post.logout.redirect.uris": "+"
218+
},
216219
"authenticationFlowBindingOverrides": {},
217220
"fullScopeAllowed": false,
218221
"nodeReRegistrationTimeout": 0,
@@ -239,7 +242,9 @@
239242
"publicClient": false,
240243
"frontchannelLogout": false,
241244
"protocol": "openid-connect",
242-
"attributes": {},
245+
"attributes": {
246+
"post.logout.redirect.uris": "+"
247+
},
243248
"authenticationFlowBindingOverrides": {},
244249
"fullScopeAllowed": false,
245250
"nodeReRegistrationTimeout": 0,
@@ -266,7 +271,9 @@
266271
"publicClient": false,
267272
"frontchannelLogout": false,
268273
"protocol": "openid-connect",
269-
"attributes": {},
274+
"attributes": {
275+
"post.logout.redirect.uris": "+"
276+
},
270277
"authenticationFlowBindingOverrides": {},
271278
"fullScopeAllowed": false,
272279
"nodeReRegistrationTimeout": 0,
@@ -283,8 +290,12 @@
283290
"enabled": true,
284291
"alwaysDisplayInConsole": false,
285292
"clientAuthenticatorType": "client-secret",
286-
"redirectUris": ["/admin/eoapi/console/*"],
287-
"webOrigins": ["+"],
293+
"redirectUris": [
294+
"/admin/eoapi/console/*"
295+
],
296+
"webOrigins": [
297+
"+"
298+
],
288299
"notBefore": 0,
289300
"bearerOnly": false,
290301
"consentRequired": false,
@@ -335,22 +346,25 @@
335346
"enabled": true,
336347
"alwaysDisplayInConsole": true,
337348
"clientAuthenticatorType": "client-secret",
338-
"secret": "**********",
339-
"redirectUris": ["http://localhost:8081/docs/oauth2-redirect"],
340-
"webOrigins": ["http://localhost:8081"],
349+
"redirectUris": [
350+
"http://localhost:8081/docs/oauth2-redirect"
351+
],
352+
"webOrigins": [
353+
"+"
354+
],
341355
"notBefore": 0,
342356
"bearerOnly": false,
343357
"consentRequired": false,
344358
"standardFlowEnabled": true,
345359
"implicitFlowEnabled": false,
346360
"directAccessGrantsEnabled": true,
347-
"serviceAccountsEnabled": true,
348-
"authorizationServicesEnabled": true,
349-
"publicClient": false,
361+
"serviceAccountsEnabled": false,
362+
"publicClient": true,
350363
"frontchannelLogout": true,
351364
"protocol": "openid-connect",
352365
"attributes": {
353366
"client.secret.creation.time": "1712036922",
367+
"post.logout.redirect.uris": "+",
354368
"oauth2.device.authorization.grant.enabled": "false",
355369
"use.jwks.url": "false",
356370
"backchannel.logout.revoke.offline.tokens": "false",
@@ -999,7 +1013,9 @@
9991013
},
10001014
"smtpServer": {},
10011015
"eventsEnabled": false,
1002-
"eventsListeners": ["jboss-logging"],
1016+
"eventsListeners": [
1017+
"jboss-logging"
1018+
],
10031019
"enabledEventTypes": [],
10041020
"adminEventsEnabled": false,
10051021
"adminEventsDetailsEnabled": false,
@@ -1014,7 +1030,9 @@
10141030
"subType": "anonymous",
10151031
"subComponents": {},
10161032
"config": {
1017-
"max-clients": ["200"]
1033+
"max-clients": [
1034+
"200"
1035+
]
10181036
}
10191037
},
10201038
{
@@ -1034,13 +1052,13 @@
10341052
"config": {
10351053
"allowed-protocol-mapper-types": [
10361054
"oidc-address-mapper",
1055+
"saml-user-property-mapper",
10371056
"oidc-full-name-mapper",
1057+
"oidc-sha256-pairwise-sub-mapper",
10381058
"saml-role-list-mapper",
10391059
"saml-user-attribute-mapper",
1040-
"oidc-usermodel-attribute-mapper",
10411060
"oidc-usermodel-property-mapper",
1042-
"oidc-sha256-pairwise-sub-mapper",
1043-
"saml-user-property-mapper"
1061+
"oidc-usermodel-attribute-mapper"
10441062
]
10451063
}
10461064
},
@@ -1052,14 +1070,14 @@
10521070
"subComponents": {},
10531071
"config": {
10541072
"allowed-protocol-mapper-types": [
1055-
"oidc-address-mapper",
1056-
"saml-role-list-mapper",
1057-
"oidc-full-name-mapper",
1058-
"oidc-usermodel-attribute-mapper",
1059-
"oidc-usermodel-property-mapper",
10601073
"saml-user-property-mapper",
1074+
"saml-role-list-mapper",
1075+
"oidc-address-mapper",
10611076
"oidc-sha256-pairwise-sub-mapper",
1062-
"saml-user-attribute-mapper"
1077+
"saml-user-attribute-mapper",
1078+
"oidc-usermodel-attribute-mapper",
1079+
"oidc-full-name-mapper",
1080+
"oidc-usermodel-property-mapper"
10631081
]
10641082
}
10651083
},
@@ -1078,7 +1096,9 @@
10781096
"subType": "anonymous",
10791097
"subComponents": {},
10801098
"config": {
1081-
"allow-default-scopes": ["true"]
1099+
"allow-default-scopes": [
1100+
"true"
1101+
]
10821102
}
10831103
},
10841104
{
@@ -1088,7 +1108,9 @@
10881108
"subType": "authenticated",
10891109
"subComponents": {},
10901110
"config": {
1091-
"allow-default-scopes": ["true"]
1111+
"allow-default-scopes": [
1112+
"true"
1113+
]
10921114
}
10931115
},
10941116
{
@@ -1098,8 +1120,12 @@
10981120
"subType": "anonymous",
10991121
"subComponents": {},
11001122
"config": {
1101-
"host-sending-registration-request-must-match": ["true"],
1102-
"client-uris-must-match": ["true"]
1123+
"host-sending-registration-request-must-match": [
1124+
"true"
1125+
],
1126+
"client-uris-must-match": [
1127+
"true"
1128+
]
11031129
}
11041130
}
11051131
],
@@ -1110,7 +1136,9 @@
11101136
"providerId": "rsa-generated",
11111137
"subComponents": {},
11121138
"config": {
1113-
"priority": ["100"]
1139+
"priority": [
1140+
"100"
1141+
]
11141142
}
11151143
},
11161144
{
@@ -1119,8 +1147,12 @@
11191147
"providerId": "hmac-generated",
11201148
"subComponents": {},
11211149
"config": {
1122-
"priority": ["100"],
1123-
"algorithm": ["HS512"]
1150+
"priority": [
1151+
"100"
1152+
],
1153+
"algorithm": [
1154+
"HS512"
1155+
]
11241156
}
11251157
},
11261158
{
@@ -1129,7 +1161,9 @@
11291161
"providerId": "aes-generated",
11301162
"subComponents": {},
11311163
"config": {
1132-
"priority": ["100"]
1164+
"priority": [
1165+
"100"
1166+
]
11331167
}
11341168
},
11351169
{
@@ -1138,8 +1172,12 @@
11381172
"providerId": "rsa-enc-generated",
11391173
"subComponents": {},
11401174
"config": {
1141-
"priority": ["100"],
1142-
"algorithm": ["RSA-OAEP"]
1175+
"priority": [
1176+
"100"
1177+
],
1178+
"algorithm": [
1179+
"RSA-OAEP"
1180+
]
11431181
}
11441182
}
11451183
]

0 commit comments

Comments
 (0)