mirror of
https://github.com/suitenumerique/messages.git
synced 2026-09-27 12:14:55 +02:00
Bastien Ogier
c46e2045bb
Removed the direct access grant on the rest-api client in the dev realm.json Repair make test-keycloak, which could not run against a freshly imported realm. The fixtures need more rights than the rest-api service account holds, so they now use the bootstrap admin service account. The bootstrap admin user cannot serve here, because it has an empty profile and Keycloak refuses the password grant. Grant view-realm to the service account. set_realm_role reads a realm role by id, which fails with 403 without that role. Add a setup guide for the authentication provider and one for the identity provider. Document the required client shape in env.md.
16 lines
438 B
Plaintext
16 lines
438 B
Plaintext
KC_BOOTSTRAP_ADMIN_USERNAME=admin
|
|
KC_BOOTSTRAP_ADMIN_PASSWORD=admin
|
|
KC_BOOTSTRAP_ADMIN_CLIENT_ID=bootstrap-admin
|
|
KC_BOOTSTRAP_ADMIN_CLIENT_SECRET=BootstrapAdminClientSecretForDev
|
|
KC_DB=postgres
|
|
KC_DB_URL_HOST=postgresql
|
|
KC_DB_URL_DATABASE=messages
|
|
KC_DB_PASSWORD=pass
|
|
KC_DB_USERNAME=user
|
|
KC_DB_SCHEMA=public
|
|
KC_HOSTNAME_STRICT=false
|
|
KC_HOSTNAME_STRICT_HTTPS=false
|
|
KC_HTTP_ENABLED=true
|
|
KC_HEALTH_ENABLED=true
|
|
PROXY_ADDRESS_FORWARDING=true
|