5bd74d4ffe
O realm do molde nao tinha os papeis que o SecurityConfig dos servicos verifica. Acrescentados ao ConfigMap de import e a copia em realm/. Nao afeta o realm que ja existe — o Keycloak so importa realm inexistente.
75 lines
1.7 KiB
JSON
75 lines
1.7 KiB
JSON
{
|
|
"realm": "athleticmap",
|
|
"enabled": true,
|
|
"displayName": "Athletic Map",
|
|
"loginWithEmailAllowed": true,
|
|
"roles": {
|
|
"realm": [
|
|
{
|
|
"name": "admin"
|
|
},
|
|
{
|
|
"name": "atm_athlete"
|
|
},
|
|
{
|
|
"name": "atm_trainer"
|
|
},
|
|
{
|
|
"name": "atm_team_admin"
|
|
},
|
|
{
|
|
"name": "atm_fed_admin"
|
|
},
|
|
{
|
|
"name": "atm_admin"
|
|
},
|
|
{
|
|
"name": "atm_cadastro"
|
|
},
|
|
{
|
|
"name": "atm_financeiro"
|
|
},
|
|
{
|
|
"name": "atm_financeiro-leitura"
|
|
}
|
|
]
|
|
},
|
|
"clients": [
|
|
{
|
|
"clientId": "spa",
|
|
"name": "Athletic Map SPA",
|
|
"publicClient": true,
|
|
"protocol": "openid-connect",
|
|
"standardFlowEnabled": true,
|
|
"implicitFlowEnabled": false,
|
|
"directAccessGrantsEnabled": false,
|
|
"redirectUris": [
|
|
"https://plataforma.athleticmap.influxdigital.com.br/*"
|
|
],
|
|
"webOrigins": [
|
|
"https://plataforma.athleticmap.influxdigital.com.br"
|
|
],
|
|
"attributes": {
|
|
"pkce.code.challenge.method": "S256",
|
|
"post.logout.redirect.uris": "https://plataforma.athleticmap.influxdigital.com.br/*"
|
|
},
|
|
"protocolMappers": [
|
|
{
|
|
"name": "funcionario_id",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"user.attribute": "funcionario_id",
|
|
"claim.name": "funcionario_id",
|
|
"jsonType.label": "String",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"userinfo.token.claim": "true"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|