captacao: variaveis do login do dono no painel (realm athleticmap, atm_admin)

2026-10-07 20:37:13 +00:00
parent 5c754aafa3
commit 814b62375f
1 changed files with 4 additions and 0 deletions
@@ -223,6 +223,10 @@ spec:
            # alcanca o nome publico do Keycloak (medido em 2026-09-25: HTTP 000).
            - { name: SPRING_SECURITY_OAUTH2_RESOURCESERVER_JWT_ISSUERURI, value: "https://auth-plataforma.athleticmap.com/realms/clientes" }
            - { name: SPRING_SECURITY_OAUTH2_RESOURCESERVER_JWT_JWKSETURI, value: "http://keycloak.plataforma-prod.svc.cluster.local:8080/realms/clientes/protocol/openid-connect/certs" }
+            # Login do DONO no painel (captacao 4.38): JWT do realm `athleticmap` com atm_admin,
+            # aceito alem do x-atm-admin-token. Decodificador proprio, separado do realm clientes.
+            - { name: ATM_PLATAFORMA_ADMIN_JWT_EMISSOR, value: "https://auth-plataforma.athleticmap.com/realms/athleticmap" }
+            - { name: ATM_PLATAFORMA_ADMIN_JWT_CHAVES, value: "http://keycloak.plataforma-prod.svc.cluster.local:8080/realms/athleticmap/protocol/openid-connect/certs" }
            # DESLIGADO ate a tela minha-conta.html estar no ar: ligado, manda a cada
            # comprador o convite para definir senha do painel.
            - { name: ACESSO_DO_CLIENTE_LIGADO, value: "true" }