Matthieu Bessat
02e16a7e74
- generate JWT id_token in token exchange - store optional nonce in authorization object - switch to RS256 algorithm for JWT signature - add JWKs endpoint to provide OIDC clients with public keys
71 lines
1.8 KiB
TOML
71 lines
1.8 KiB
TOML
signing_key = "tmp/secrets/signing.key"
|
|
|
|
[instance]
|
|
base_uri = "https://auth.fictive.org"
|
|
name = "Fictive's auth"
|
|
logo_uri = "https://example.org/logo.png"
|
|
|
|
[[applications]]
|
|
slug = "listmonk"
|
|
name = "Listmonk"
|
|
description = "Newsletter tool."
|
|
client_id = "da2120b4-635d-4eb5-8b2f-dbae89f6a6e9"
|
|
client_secret = "59da2291-8999-40e2-afe9-a54ac7cd0a94"
|
|
login_uri = "https://lists.fictive.org"
|
|
allowed_redirect_uris = [
|
|
"https://lists.fictive.org/auth/oidc",
|
|
]
|
|
visibility = "Internal"
|
|
authorize_flow = "Implicit"
|
|
|
|
[[applications]]
|
|
slug = "demo_app"
|
|
name = "Demo app"
|
|
description = "A super application where you can do everything you want."
|
|
client_id = "a1785786-8be1-443c-9a6f-35feed703609"
|
|
client_secret = "49c6c16a-0a8a-4981-a60d-5cb96582cc1a"
|
|
login_uri = "https://localhost:9876"
|
|
allowed_redirect_uris = [
|
|
"http://localhost:9090/callback",
|
|
"http://localhost:9876/callback"
|
|
]
|
|
visibility = "Internal"
|
|
authorize_flow = "Implicit"
|
|
|
|
[[applications]]
|
|
slug = "wiki"
|
|
name = "Wiki app"
|
|
description = "The knowledge base of the exemple org."
|
|
client_id = "f9de1885-448d-44bb-8c48-7e985486a8c6"
|
|
client_secret = "49c6c16a-0a8a-4981-a60d-5cb96582cc1a"
|
|
login_uri = "https://wiki.example.org/login"
|
|
allowed_redirect_uris = [
|
|
"https://wiki.example.org/oauth2/callback"
|
|
]
|
|
visibility = "Public"
|
|
authorize_flow = "Implicit"
|
|
|
|
[[applications]]
|
|
slug = "private_app"
|
|
name = "Demo app"
|
|
description = "Private app you should never discover"
|
|
client_id = "c8a08783-2342-4ce3-a3cb-9dc89b6bdf"
|
|
client_secret = "this_is_the_secret"
|
|
login_uri = "https://private-app.org"
|
|
allowed_redirect_uris = [
|
|
"http://localhost:9091/authorize",
|
|
]
|
|
visibility = "Private"
|
|
authorize_flow = "Implicit"
|
|
|
|
[[roles]]
|
|
slug = "basic"
|
|
name = "Basic"
|
|
description = "Basic user"
|
|
default = true
|
|
|
|
[[roles]]
|
|
slug = "admin"
|
|
name = "Administrator"
|
|
description = "Full power on organization instance"
|
|
|