deploy
51072c153e
Sem ele o Keycloak monta os links e o iss com o KC_HOSTNAME global (auth-plataforma), e os runtimes do tenant validam contra ATM_ISSUER, que o molde define como auth.athleticmap.com. Os dois tem de bater. Nao da para resolver so no KC_HOSTNAME porque ele e um so e a plataforma depende do valor antigo. Dai o frontendUrl por realm, que e para isto.
91 lines
2.1 KiB
JSON
91 lines
2.1 KiB
JSON
{
|
|
"realm": "{{REALM}}",
|
|
"enabled": true,
|
|
"displayName": "Athletic Map — {{TENANT}}",
|
|
"loginWithEmailAllowed": true,
|
|
"roles": {
|
|
"realm": [
|
|
{
|
|
"name": "admin"
|
|
},
|
|
{
|
|
"name": "atm_athlete"
|
|
},
|
|
{
|
|
"name": "atm_trainer"
|
|
},
|
|
{
|
|
"name": "atm_team_admin"
|
|
},
|
|
{
|
|
"name": "atm_fed_admin"
|
|
},
|
|
{
|
|
"name": "atm_admin"
|
|
},
|
|
{
|
|
"name": "atm_cadastro"
|
|
},
|
|
{
|
|
"name": "atm_financeiro"
|
|
},
|
|
{
|
|
"name": "atm_financeiro-leitura"
|
|
}
|
|
]
|
|
},
|
|
"clients": [
|
|
{
|
|
"clientId": "spa",
|
|
"name": "Athletic Map SPA",
|
|
"publicClient": true,
|
|
"protocol": "openid-connect",
|
|
"standardFlowEnabled": true,
|
|
"implicitFlowEnabled": false,
|
|
"directAccessGrantsEnabled": false,
|
|
"redirectUris": [
|
|
"https://{{TENANT}}.athleticmap.com/*"
|
|
],
|
|
"webOrigins": [
|
|
"https://{{TENANT}}.athleticmap.com"
|
|
],
|
|
"attributes": {
|
|
"pkce.code.challenge.method": "S256",
|
|
"post.logout.redirect.uris": "https://{{TENANT}}.athleticmap.com/*"
|
|
},
|
|
"protocolMappers": [
|
|
{
|
|
"name": "funcionario_id",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"user.attribute": "funcionario_id",
|
|
"claim.name": "funcionario_id",
|
|
"jsonType.label": "String",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"userinfo.token.claim": "true"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"attributes": {
|
|
"frontendUrl": "https://auth.athleticmap.com"
|
|
},
|
|
"smtpServer": {
|
|
"host": "{{SMTP_HOST}}",
|
|
"port": "{{SMTP_PORTA}}",
|
|
"from": "{{SMTP_REMETENTE}}",
|
|
"fromDisplayName": "Athletic Map",
|
|
"replyTo": "{{SMTP_RESPONDER_PARA}}",
|
|
"replyToDisplayName": "Athletic Map",
|
|
"auth": "{{SMTP_AUTH}}",
|
|
"user": "{{SMTP_USUARIO}}",
|
|
"password": "{{SMTP_SENHA}}",
|
|
"starttls": "{{SMTP_STARTTLS}}",
|
|
"ssl": "false"
|
|
}
|
|
}
|