diff --git a/tools/docker/keycloak/Dockerfile b/tools/docker/keycloak/Dockerfile index 17a64f3..74684b4 100644 --- a/tools/docker/keycloak/Dockerfile +++ b/tools/docker/keycloak/Dockerfile @@ -1,9 +1,17 @@ -FROM jboss/keycloak:1.9.0.Final +FROM jboss/keycloak:1.9.5.Final ENV JAVA_OPTS "-Djava.security.egd=file:///dev/urandom" ENV REALM_DIR $JBOSS_HOME/realms +ENV REALM_FILE $REALM_DIR/apiman-realm.json +ENV REALM_FILE_TMPL $REALM_DIR/apiman-realm.json.tmpl ENV KC_USER_NAME "admin" ENV KC_USER_PASSWORD "admin123!" +ENV MANAGER_HOST "localhost" +ENV GATEWAY_HOST "localhost" +ENV MANAGER_PORT "8080" +ENV GATEWAY_PORT "8080" +ENV MANAGER_HTTPS_PORT "8443" +ENV GATEWAY_HTTPS_PORT "8443" # Add wrapping docker entrypoint ADD scripts/docker-entrypoint.sh ${JBOSS_HOME}/bin/docker-entrypoint.sh @@ -11,4 +19,11 @@ ADD scripts/docker-entrypoint.sh ${JBOSS_HOME}/bin/docker-entrypoint.sh # Add realm definition file ADD realms $REALM_DIR +# change owner of newely created directory and install gettext package for envsubst +USER root +RUN chown -R jboss:jboss ${REALM_DIR} &&\ + yum update -y &&\ + yum install -y gettext +USER jboss + ENTRYPOINT ["sh", "/opt/jboss/keycloak/bin/docker-entrypoint.sh"] diff --git a/tools/docker/keycloak/realms/apiman-realm.json b/tools/docker/keycloak/realms/apiman-realm.json deleted file mode 100644 index 40aad33..0000000 --- a/tools/docker/keycloak/realms/apiman-realm.json +++ /dev/null @@ -1,1400 +0,0 @@ -{ - "id" : "apiman", - "realm" : "apiman", - "displayName" : "Apiman Realm", - "displayNameHtml" : "
Apiman Realm
", - "notBefore" : 0, - "revokeRefreshToken" : false, - "accessTokenLifespan" : 300, - "accessTokenLifespanForImplicitFlow" : 900, - "ssoSessionIdleTimeout" : 1800, - "ssoSessionMaxLifespan" : 36000, - "offlineSessionIdleTimeout" : 2592000, - "accessCodeLifespan" : 60, - "accessCodeLifespanUserAction" : 300, - "accessCodeLifespanLogin" : 1800, - "enabled" : true, - "sslRequired" : "none", - "registrationAllowed" : true, - "registrationEmailAsUsername" : false, - "rememberMe" : true, - "verifyEmail" : false, - "resetPasswordAllowed" : true, - "editUsernameAllowed" : false, - "bruteForceProtected" : false, - "maxFailureWaitSeconds" : 900, - "minimumQuickLoginWaitSeconds" : 60, - "waitIncrementSeconds" : 60, - "quickLoginCheckMilliSeconds" : 1000, - "maxDeltaTimeSeconds" : 43200, - "failureFactor" : 30, - "privateKey" : "MIIEogIBAAKCAQEAxyG61ohrfJQKNmDA/ePZtqZVpPXjwn3k3T+iWiTvMsxW2+WlnqIEmL5qZ09DMhBH9r50WZRO2gVoCb657Er9x0vfD6GNf/47XU2y33TX8axhP+hSwkv/VViaDlu4jQrfgPWz/FXMjWIZxg1xQS+nOBF2ScCRYWNQ/ZnUNnvrq8dGC2/AlyeYcgDUOdwlJuvgkGlF0QoVPQiRPurR3RwlG+BjL8JB3hbaAZhdJqwqApmGQbcpgLj2tODnlrZnEAp5cPPU/lgqCE1OOp78BAEiE91ZLPl/+D8qDHk+Maz0Io3bkeRZMXPpvtbL3qN+3GlF8Yz264HDSsTNrH+nd19tFQIDAQABAoIBADfD0V/cykUT7Bw4UjOHiGOnBxrwJT1FJj9zX5Lg/v95y+U+1XesJZ9ky8VspAO0HYMS6OBhMQfLNcxs1gI/KfyS2b+13Tt3xcYmSS5cuVCbloxgEjUJNVMAQfw9YVxWLCsgI6xJlsQNMeyNvSalIq4H7dlPjSb5uiea2Zv8bg4nfGR+bl0tUEeCcgaFAX0b7j/26u93Fsp2ag5eZon9OMF3+u7BOoZI+PNYI+mvIXpf2mYBZBn7rV2caeqjRU9wu0Xkwpi6o3slOw/RL2S8K08lf/eJvaIq3I1NDONbteIxdhePzbor/mq7BvJTrPKK4axstQlJaRoOQgPdFSXYjUECgYEA7trwFegoX+k8DX9VrJnlv2qIOyHpIOpCEihlMieMMFWp7ybpCK+p2z5NTdcOPVyQIRscNMJcw8SpSehlPn0hx9Nyl3qNRau7rjtxMH+I7vYrn4X5V/tiLaMqNtpmZNIG6zKw4NUicyFcyyz+6HS08V7mTwiX4qHzwZQOND52DYUCgYEA1WzbaL1eW75AcBDlIGE0j0Kf/Ix62ZqbsdYWMG9q9DFXmolejgm0t0kS22WActd66Z+SNW6sqfx7MJ2TdQ73xr0gQySsWv+B38FpJMawoqi8vjobfkL2XM7xvMBtI3NobeG4Yg6ZoCTpeJd+ktTJEau2IeVAL8GAL5C1DyQ+blECgYAKHC5JXxhGZwLpt1gTBDibT5EQn7DUedXuGtOdudrPOPEGdGksuvK/mvV+s/mgU0iufg1FlmyCxNI9lJ6kdHt3j9Wr374XEtvQ1idGXD+ZjcXu7KbPOI7BS8S/qaLn5ZPxZKXj/mGE6gaZewAXKsl15gRtl/mF2EEPEos/Xt10WQKBgCkj37Nz9XFn3hH8H767Hh+TbzWGetPhaqvAIezaPVqu/D0Mx85Hbq96BYmHKlh40vefy9ZC7EOkKLb5WQhSh06m/EYVFqg/4nAYX0U4i6n/LsrYdp5DGCxRs+V3jlIsF/A+d4VnXROyqdKWGU8Cd3PRjr0/7LyH50bD9TLjAKnRAoGAEb9gCjffxdSMuZA5iN+vgiAp6zowZVSTDh5qVuXD6YJ+cGTXMN5e+XS5VTwVZaGZYEX1FFF/Z536xQbpWHpWN65v+2oASLrgbYZqIxEi4UMMygjZPZXX+WoGpCEXS14IkERbCphEfsrpgMkZQ1NbhjLrXjA4taNgZHnADs4sZIE=", - "publicKey" : "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyG61ohrfJQKNmDA/ePZtqZVpPXjwn3k3T+iWiTvMsxW2+WlnqIEmL5qZ09DMhBH9r50WZRO2gVoCb657Er9x0vfD6GNf/47XU2y33TX8axhP+hSwkv/VViaDlu4jQrfgPWz/FXMjWIZxg1xQS+nOBF2ScCRYWNQ/ZnUNnvrq8dGC2/AlyeYcgDUOdwlJuvgkGlF0QoVPQiRPurR3RwlG+BjL8JB3hbaAZhdJqwqApmGQbcpgLj2tODnlrZnEAp5cPPU/lgqCE1OOp78BAEiE91ZLPl/+D8qDHk+Maz0Io3bkeRZMXPpvtbL3qN+3GlF8Yz264HDSsTNrH+nd19tFQIDAQAB", - "certificate" : "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", - "codeSecret" : "2cc97335-f941-4f94-9470-80b4d15be5e3", - "roles" : { - "realm" : [ { - "id" : "b70f7106-062d-4780-a8ec-6b324d9df542", - "name" : "apiadmin", - "description" : "Administrator privileges.", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "7d8ae6ce-99cc-48c7-9b98-25df71be574f", - "name" : "offline_access", - "description" : "${role_offline-access}", - "scopeParamRequired" : true, - "composite" : false - }, { - "id" : "c7bae0cb-400b-4c64-8b49-abd51ee978a7", - "name" : "apiuser", - "description" : "User privileges.", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "4e65194d-670d-4976-ba96-7983559aa937", - "name" : "apipublisher", - "description" : "Required to publish to the API Gateway.", - "scopeParamRequired" : false, - "composite" : false - } ], - "client" : { - "apiman" : [ ], - "apimanui" : [ ], - "realm-management" : [ { - "id" : "bfde4829-5da9-4359-bb9a-59adfc719eeb", - "name" : "manage-identity-providers", - "description" : "${role_manage-identity-providers}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "fddf1c14-c222-48ab-b102-44d8ddbdcbc5", - "name" : "create-client", - "description" : "${role_create-client}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "1444120a-70e7-4f08-9120-f13c0bb96d4e", - "name" : "manage-clients", - "description" : "${role_manage-clients}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "1a23aaf3-4f3e-4fb7-bb2d-d1113e560145", - "name" : "manage-events", - "description" : "${role_manage-events}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "b20267b4-f6d0-4f35-bd0a-215dbcecd322", - "name" : "impersonation", - "description" : "${role_impersonation}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "e0b37a3c-c7ab-4f9f-a825-93000599ab30", - "name" : "realm-admin", - "description" : "${role_realm-admin}", - "scopeParamRequired" : false, - "composite" : true, - "composites" : { - "client" : { - "realm-management" : [ "manage-identity-providers", "create-client", "view-events", "manage-clients", "manage-events", "impersonation", "manage-users", "view-realm", "view-clients", "manage-realm", "view-users", "view-identity-providers" ] - } - } - }, { - "id" : "227a7df3-3ba8-4620-8c66-d6967dfb419e", - "name" : "view-events", - "description" : "${role_view-events}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "6f2d8f8c-dfff-43f1-860e-ba29bf7e028d", - "name" : "manage-users", - "description" : "${role_manage-users}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "4dbf7a04-9680-4907-bc6e-bde5f5551307", - "name" : "view-realm", - "description" : "${role_view-realm}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "0c0d81ed-cc3a-418a-b7aa-4b1b3d00c748", - "name" : "manage-realm", - "description" : "${role_manage-realm}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "61e5fa34-f82f-4531-8bdf-9c11e55d28d5", - "name" : "view-clients", - "description" : "${role_view-clients}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "7295f14d-c95e-4c97-97fa-f201b9a92bde", - "name" : "view-users", - "description" : "${role_view-users}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "315c6df2-0028-4c01-9cda-7b5237b3fe2b", - "name" : "view-identity-providers", - "description" : "${role_view-identity-providers}", - "scopeParamRequired" : false, - "composite" : false - } ], - "security-admin-console" : [ ], - "apiman-gateway-api" : [ ], - "admin-cli" : [ ], - "broker" : [ { - "id" : "13bc4e5e-9058-4958-ac46-e2e3d155ba5b", - "name" : "read-token", - "description" : "${role_read-token}", - "scopeParamRequired" : false, - "composite" : false - } ], - "account" : [ { - "id" : "dc68e64a-c8ef-4b75-9523-72fe39f5c2fe", - "name" : "manage-account", - "description" : "${role_manage-account}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "27c46da3-4c9b-48bd-909b-a7b0449c5498", - "name" : "view-profile", - "description" : "${role_view-profile}", - "scopeParamRequired" : false, - "composite" : false - } ] - } - }, - "groups" : [ ], - "defaultRoles" : [ "offline_access", "apiuser" ], - "requiredCredentials" : [ "password" ], - "otpPolicyType" : "totp", - "otpPolicyAlgorithm" : "HmacSHA1", - "otpPolicyInitialCounter" : 0, - "otpPolicyDigits" : 6, - "otpPolicyLookAheadWindow" : 1, - "otpPolicyPeriod" : 30, - "clientScopeMappings" : { - "realm-management" : [ { - "client" : "admin-cli", - "roles" : [ "realm-admin" ] - }, { - "client" : "security-admin-console", - "roles" : [ "realm-admin" ] - } ] - }, - "clients" : [ { - "id" : "a8d14e70-bd9c-42ca-9945-7eb4db8b5709", - "clientId" : "account", - "name" : "${client_account}", - "baseUrl" : "/auth/realms/apiman/account", - "surrogateAuthRequired" : false, - "enabled" : true, - "clientAuthenticatorType" : "client-secret", - "secret" : "d42dc5b5-1050-4d2c-898b-6be1ef4095b8", - "defaultRoles" : [ "view-profile", "manage-account" ], - "redirectUris" : [ "/auth/realms/apiman/account/*" ], - "webOrigins" : [ ], - "notBefore" : 0, - "bearerOnly" : false, - "consentRequired" : false, - "standardFlowEnabled" : true, - "implicitFlowEnabled" : false, - "directAccessGrantsEnabled" : false, - "serviceAccountsEnabled" : false, - "publicClient" : false, - "frontchannelLogout" : false, - "attributes" : { }, - "fullScopeAllowed" : false, - "nodeReRegistrationTimeout" : 0, - "protocolMappers" : [ { - "id" : "28ce3b33-6e0e-4dbf-8a5d-a31cbc7a25df", - "name" : "email", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${email}", - "config" : { - "user.attribute" : "email", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "email", - "jsonType.label" : "String" - } - }, { - "id" : "2dd59350-bdf9-489c-bfff-15cdb4a7e112", - "name" : "username", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${username}", - "config" : { - "user.attribute" : "username", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "preferred_username", - "jsonType.label" : "String" - } - }, { - "id" : "993a14ce-98b8-4ddc-acd7-71fc1f06292b", - "name" : "full name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-full-name-mapper", - "consentRequired" : true, - "consentText" : "${fullName}", - "config" : { - "id.token.claim" : "true", - "access.token.claim" : "true" - } - }, { - "id" : "91c78c09-419a-459c-bb23-88547e5429c2", - "name" : "given name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${givenName}", - "config" : { - "user.attribute" : "firstName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "given_name", - "jsonType.label" : "String" - } - }, { - "id" : "484ed91c-961e-424f-8fb8-f1528b62fee0", - "name" : "family name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${familyName}", - "config" : { - "user.attribute" : "lastName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "family_name", - "jsonType.label" : "String" - } - }, { - "id" : "6d69b352-2b0f-48e3-963f-889f15a46579", - "name" : "role list", - "protocol" : "saml", - "protocolMapper" : "saml-role-list-mapper", - "consentRequired" : false, - "config" : { - "single" : "false", - "attribute.nameformat" : "Basic", - "attribute.name" : "Role" - } - } ], - "useTemplateConfig" : false, - "useTemplateScope" : false, - "useTemplateMappers" : false - }, { - "id" : "a3473aca-faf5-42e8-add4-6e7b8f88ef00", - "clientId" : "admin-cli", - "name" : "${client_admin-cli}", - "surrogateAuthRequired" : false, - "enabled" : true, - "clientAuthenticatorType" : "client-secret", - "secret" : "c62e4c4d-53db-45bf-9bf0-ba50a636b149", - "redirectUris" : [ ], - "webOrigins" : [ ], - "notBefore" : 0, - "bearerOnly" : false, - "consentRequired" : false, - "standardFlowEnabled" : false, - "implicitFlowEnabled" : false, - "directAccessGrantsEnabled" : true, - "serviceAccountsEnabled" : false, - "publicClient" : true, - "frontchannelLogout" : false, - "attributes" : { }, - "fullScopeAllowed" : false, - "nodeReRegistrationTimeout" : 0, - "protocolMappers" : [ { - "id" : "cd891fe3-46a6-4d9d-9c66-b91780cecbbf", - "name" : "full name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-full-name-mapper", - "consentRequired" : true, - "consentText" : "${fullName}", - "config" : { - "id.token.claim" : "true", - "access.token.claim" : "true" - } - }, { - "id" : "5d419e4c-a9d6-4f71-99a0-346c6bd5e9d3", - "name" : "username", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${username}", - "config" : { - "user.attribute" : "username", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "preferred_username", - "jsonType.label" : "String" - } - }, { - "id" : "a968f2a4-da35-4fd9-b03a-b0518d6f7128", - "name" : "given name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${givenName}", - "config" : { - "user.attribute" : "firstName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "given_name", - "jsonType.label" : "String" - } - }, { - "id" : "4b16db84-6fc6-4cd7-b6fc-ed3a901ca01c", - "name" : "email", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${email}", - "config" : { - "user.attribute" : "email", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "email", - "jsonType.label" : "String" - } - }, { - "id" : "c3e492e3-1eb4-4fdf-8557-9fe8f7bbeece", - "name" : "role list", - "protocol" : "saml", - "protocolMapper" : "saml-role-list-mapper", - "consentRequired" : false, - "config" : { - "single" : "false", - "attribute.nameformat" : "Basic", - "attribute.name" : "Role" - } - }, { - "id" : "f94ede04-b2bb-4be7-81ec-e2faa0fbf798", - "name" : "family name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${familyName}", - "config" : { - "user.attribute" : "lastName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "family_name", - "jsonType.label" : "String" - } - } ], - "useTemplateConfig" : false, - "useTemplateScope" : false, - "useTemplateMappers" : false - }, { - "id" : "1abb0913-8c31-400b-92d6-61293b13f3d3", - "clientId" : "apiman", - "name" : "Apiman", - "description" : "The apiman rest layer.", - "rootUrl" : "", - "baseUrl" : "/apiman", - "surrogateAuthRequired" : false, - "enabled" : true, - "clientAuthenticatorType" : "client-secret", - "secret" : "5af5458f-0a96-4251-8f92-08ebcc3a8aa2", - "redirectUris" : [ "http://localhost:8080/apiman/*", "https://localhost:8080/apiman/*" ], - "webOrigins" : [ "*" ], - "notBefore" : 0, - "bearerOnly" : false, - "consentRequired" : false, - "standardFlowEnabled" : true, - "implicitFlowEnabled" : false, - "directAccessGrantsEnabled" : true, - "serviceAccountsEnabled" : false, - "publicClient" : true, - "frontchannelLogout" : false, - "protocol" : "openid-connect", - "attributes" : { - "saml.assertion.signature" : "false", - "saml.force.post.binding" : "false", - "saml.multivalued.roles" : "false", - "saml.signature.algorithm" : "RSA_SHA256", - "saml.encrypt" : "false", - "saml_force_name_id_format" : "false", - "saml.client.signature" : "false", - "saml.authnstatement" : "true", - "saml_name_id_format" : "username", - "saml.server.signature" : "false", - "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#" - }, - "fullScopeAllowed" : true, - "nodeReRegistrationTimeout" : -1, - "protocolMappers" : [ { - "id" : "5b44de25-e322-4d83-9684-5c2a8830c2e4", - "name" : "email", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${email}", - "config" : { - "user.attribute" : "email", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "email", - "jsonType.label" : "String" - } - }, { - "id" : "39a09c47-539c-43c8-be7a-c1a8e2a21d03", - "name" : "full name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-full-name-mapper", - "consentRequired" : true, - "consentText" : "${fullName}", - "config" : { - "id.token.claim" : "true", - "access.token.claim" : "true" - } - }, { - "id" : "a3fa08bc-b147-4c57-8bda-d57388b9dd80", - "name" : "role list", - "protocol" : "saml", - "protocolMapper" : "saml-role-list-mapper", - "consentRequired" : false, - "config" : { - "single" : "false", - "attribute.nameformat" : "Basic", - "attribute.name" : "Role" - } - }, { - "id" : "264cc4e4-22a2-4979-86f4-e70d19eb92ab", - "name" : "username", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${username}", - "config" : { - "user.attribute" : "username", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "preferred_username", - "jsonType.label" : "String" - } - }, { - "id" : "ce359e53-4427-4f19-8587-63a7ce55d2d8", - "name" : "family name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${familyName}", - "config" : { - "user.attribute" : "lastName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "family_name", - "jsonType.label" : "String" - } - }, { - "id" : "00f118c4-54ca-445e-b4ce-12ff1698d0e5", - "name" : "given name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${givenName}", - "config" : { - "user.attribute" : "firstName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "given_name", - "jsonType.label" : "String" - } - } ], - "useTemplateConfig" : false, - "useTemplateScope" : false, - "useTemplateMappers" : false - }, { - "id" : "98e30b6d-907c-49d5-b466-202f7c7cd82a", - "clientId" : "apiman-gateway-api", - "name" : "Apiman Gateway API", - "description" : "The apiman Gateway REST layer.", - "rootUrl" : "", - "baseUrl" : "/apiman-gateway-api", - "surrogateAuthRequired" : false, - "enabled" : true, - "clientAuthenticatorType" : "client-secret", - "secret" : "217b725d-7790-47a7-a3fc-5cf31f92a8db", - "redirectUris" : [ "http://localhost:8080/apiman-gateway-api/*", "https://localhost:8080/apiman-gateway-api/*" ], - "webOrigins" : [ "*" ], - "notBefore" : 0, - "bearerOnly" : false, - "consentRequired" : false, - "standardFlowEnabled" : true, - "implicitFlowEnabled" : false, - "directAccessGrantsEnabled" : true, - "serviceAccountsEnabled" : false, - "publicClient" : true, - "frontchannelLogout" : false, - "protocol" : "openid-connect", - "attributes" : { - "saml.assertion.signature" : "false", - "saml.force.post.binding" : "false", - "saml.multivalued.roles" : "false", - "saml.signature.algorithm" : "RSA_SHA256", - "saml.encrypt" : "false", - "saml_force_name_id_format" : "false", - "saml.client.signature" : "false", - "saml.authnstatement" : "true", - "saml_name_id_format" : "username", - "saml.server.signature" : "false", - "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#" - }, - "fullScopeAllowed" : true, - "nodeReRegistrationTimeout" : -1, - "protocolMappers" : [ { - "id" : "ef8a8d17-9797-4912-981a-f1e706d38f46", - "name" : "email", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${email}", - "config" : { - "user.attribute" : "email", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "email", - "jsonType.label" : "String" - } - }, { - "id" : "f31aa721-cc51-4aaf-abcf-9d0d90bed438", - "name" : "family name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${familyName}", - "config" : { - "user.attribute" : "lastName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "family_name", - "jsonType.label" : "String" - } - }, { - "id" : "71bbac19-ad9e-4caf-90e3-ad8096ddf4e5", - "name" : "full name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-full-name-mapper", - "consentRequired" : true, - "consentText" : "${fullName}", - "config" : { - "id.token.claim" : "true", - "access.token.claim" : "true" - } - }, { - "id" : "6aa48269-a109-438b-8b13-1a6d3b43db63", - "name" : "username", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${username}", - "config" : { - "user.attribute" : "username", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "preferred_username", - "jsonType.label" : "String" - } - }, { - "id" : "64d82ade-ba98-41f3-a748-a4e111d5016b", - "name" : "role list", - "protocol" : "saml", - "protocolMapper" : "saml-role-list-mapper", - "consentRequired" : false, - "config" : { - "single" : "false", - "attribute.nameformat" : "Basic", - "attribute.name" : "Role" - } - }, { - "id" : "0b90fb5a-79de-4aed-bd5f-ff6302d14e7c", - "name" : "given name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${givenName}", - "config" : { - "user.attribute" : "firstName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "given_name", - "jsonType.label" : "String" - } - } ], - "useTemplateConfig" : false, - "useTemplateScope" : false, - "useTemplateMappers" : false - }, { - "id" : "d33348b3-93a3-4591-83e3-20204776808d", - "clientId" : "apimanui", - "name" : "Apiman UI", - "description" : "The apiman user interface.", - "rootUrl" : "", - "baseUrl" : "/apimanui", - "surrogateAuthRequired" : false, - "enabled" : true, - "clientAuthenticatorType" : "client-secret", - "secret" : "722557fd-a725-4cc0-9dff-7d09c0c47038", - "redirectUris" : [ "http://localhost:8080/apimanui/*", "http://localhost:8080/apimanui/*" ], - "webOrigins" : [ ], - "notBefore" : 0, - "bearerOnly" : false, - "consentRequired" : false, - "standardFlowEnabled" : true, - "implicitFlowEnabled" : false, - "directAccessGrantsEnabled" : true, - "serviceAccountsEnabled" : false, - "publicClient" : true, - "frontchannelLogout" : false, - "protocol" : "openid-connect", - "attributes" : { - "saml.assertion.signature" : "false", - "saml.force.post.binding" : "false", - "saml.multivalued.roles" : "false", - "saml.signature.algorithm" : "RSA_SHA256", - "saml.encrypt" : "false", - "saml_force_name_id_format" : "false", - "saml.client.signature" : "false", - "saml.authnstatement" : "true", - "saml_name_id_format" : "username", - "saml.server.signature" : "false", - "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#" - }, - "fullScopeAllowed" : true, - "nodeReRegistrationTimeout" : -1, - "protocolMappers" : [ { - "id" : "aa49713e-f06f-429c-8e01-6c40af2a9233", - "name" : "email", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${email}", - "config" : { - "user.attribute" : "email", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "email", - "jsonType.label" : "String" - } - }, { - "id" : "9dd13c7c-dc31-4fa8-8f1c-6b9b4d5d3fc9", - "name" : "username", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${username}", - "config" : { - "user.attribute" : "username", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "preferred_username", - "jsonType.label" : "String" - } - }, { - "id" : "aef631b8-c8db-4e8d-b9dc-2715adbd1912", - "name" : "full name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-full-name-mapper", - "consentRequired" : true, - "consentText" : "${fullName}", - "config" : { - "id.token.claim" : "true", - "access.token.claim" : "true" - } - }, { - "id" : "d040ae37-516d-44cc-b75f-e8398ce64ccd", - "name" : "given name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${givenName}", - "config" : { - "user.attribute" : "firstName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "given_name", - "jsonType.label" : "String" - } - }, { - "id" : "18eca5f9-ea5a-40b5-ab55-0daa9675640c", - "name" : "role list", - "protocol" : "saml", - "protocolMapper" : "saml-role-list-mapper", - "consentRequired" : false, - "config" : { - "single" : "false", - "attribute.nameformat" : "Basic", - "attribute.name" : "Role" - } - }, { - "id" : "a8bcaea4-4e75-4d6e-8c2a-90333594742d", - "name" : "family name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${familyName}", - "config" : { - "user.attribute" : "lastName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "family_name", - "jsonType.label" : "String" - } - } ], - "useTemplateConfig" : false, - "useTemplateScope" : false, - "useTemplateMappers" : false - }, { - "id" : "34bd3689-5952-49a2-bbc6-c4c2f3b19306", - "clientId" : "broker", - "name" : "${client_broker}", - "surrogateAuthRequired" : false, - "enabled" : true, - "clientAuthenticatorType" : "client-secret", - "secret" : "656feef3-a682-4fae-98b9-5af112ccf6f2", - "redirectUris" : [ ], - "webOrigins" : [ ], - "notBefore" : 0, - "bearerOnly" : false, - "consentRequired" : false, - "standardFlowEnabled" : true, - "implicitFlowEnabled" : false, - "directAccessGrantsEnabled" : false, - "serviceAccountsEnabled" : false, - "publicClient" : false, - "frontchannelLogout" : false, - "attributes" : { }, - "fullScopeAllowed" : false, - "nodeReRegistrationTimeout" : 0, - "protocolMappers" : [ { - "id" : "0aadd34d-9b4f-4748-86d0-aaf059179ce8", - "name" : "given name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${givenName}", - "config" : { - "user.attribute" : "firstName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "given_name", - "jsonType.label" : "String" - } - }, { - "id" : "ef0cfed0-e489-42f2-9508-6f18700c46ad", - "name" : "username", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${username}", - "config" : { - "user.attribute" : "username", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "preferred_username", - "jsonType.label" : "String" - } - }, { - "id" : "aeec7844-5ce7-4cfc-9e57-59f5b1bc2fe1", - "name" : "full name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-full-name-mapper", - "consentRequired" : true, - "consentText" : "${fullName}", - "config" : { - "id.token.claim" : "true", - "access.token.claim" : "true" - } - }, { - "id" : "c7fc0e6f-44c3-4bbd-b6c6-0efcb523acde", - "name" : "family name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${familyName}", - "config" : { - "user.attribute" : "lastName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "family_name", - "jsonType.label" : "String" - } - }, { - "id" : "7e5d027a-8ad0-4e72-9da2-d853b6de9891", - "name" : "role list", - "protocol" : "saml", - "protocolMapper" : "saml-role-list-mapper", - "consentRequired" : false, - "config" : { - "single" : "false", - "attribute.nameformat" : "Basic", - "attribute.name" : "Role" - } - }, { - "id" : "28ffb043-6a79-4d3a-986f-a74ddda49b5d", - "name" : "email", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${email}", - "config" : { - "user.attribute" : "email", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "email", - "jsonType.label" : "String" - } - } ], - "useTemplateConfig" : false, - "useTemplateScope" : false, - "useTemplateMappers" : false - }, { - "id" : "07c77079-7ce8-4879-8e20-4b042b59f9f9", - "clientId" : "realm-management", - "name" : "${client_realm-management}", - "surrogateAuthRequired" : false, - "enabled" : true, - "clientAuthenticatorType" : "client-secret", - "secret" : "37818abe-3f6e-4fcd-8fff-9a39c9dfbd72", - "redirectUris" : [ ], - "webOrigins" : [ ], - "notBefore" : 0, - "bearerOnly" : true, - "consentRequired" : false, - "standardFlowEnabled" : true, - "implicitFlowEnabled" : false, - "directAccessGrantsEnabled" : false, - "serviceAccountsEnabled" : false, - "publicClient" : false, - "frontchannelLogout" : false, - "attributes" : { }, - "fullScopeAllowed" : false, - "nodeReRegistrationTimeout" : 0, - "protocolMappers" : [ { - "id" : "81512b74-8ca0-4b56-aee6-8796d32ef08e", - "name" : "email", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${email}", - "config" : { - "user.attribute" : "email", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "email", - "jsonType.label" : "String" - } - }, { - "id" : "46dd0a74-4e67-49d3-a4bd-9b942477ea8d", - "name" : "role list", - "protocol" : "saml", - "protocolMapper" : "saml-role-list-mapper", - "consentRequired" : false, - "config" : { - "single" : "false", - "attribute.nameformat" : "Basic", - "attribute.name" : "Role" - } - }, { - "id" : "19a045d2-7c70-4975-bd97-15337a5c6cea", - "name" : "username", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${username}", - "config" : { - "user.attribute" : "username", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "preferred_username", - "jsonType.label" : "String" - } - }, { - "id" : "a05f7bab-83b9-455e-a6d7-c420eee2a568", - "name" : "given name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${givenName}", - "config" : { - "user.attribute" : "firstName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "given_name", - "jsonType.label" : "String" - } - }, { - "id" : "77afffb5-4afc-42a0-9629-4e1a952b05b6", - "name" : "family name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${familyName}", - "config" : { - "user.attribute" : "lastName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "family_name", - "jsonType.label" : "String" - } - }, { - "id" : "7035d549-8da1-4660-8a21-9b5acbd92fc1", - "name" : "full name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-full-name-mapper", - "consentRequired" : true, - "consentText" : "${fullName}", - "config" : { - "id.token.claim" : "true", - "access.token.claim" : "true" - } - } ], - "useTemplateConfig" : false, - "useTemplateScope" : false, - "useTemplateMappers" : false - }, { - "id" : "a33a0ea7-c67e-4a75-8be6-5be2bf638145", - "clientId" : "security-admin-console", - "name" : "${client_security-admin-console}", - "baseUrl" : "/auth/admin/apiman/console/index.html", - "surrogateAuthRequired" : false, - "enabled" : true, - "clientAuthenticatorType" : "client-secret", - "secret" : "5f5482ac-cf0c-4ff6-acd5-787dbbfb9f75", - "redirectUris" : [ "/auth/admin/apiman/console/*" ], - "webOrigins" : [ ], - "notBefore" : 0, - "bearerOnly" : false, - "consentRequired" : false, - "standardFlowEnabled" : true, - "implicitFlowEnabled" : false, - "directAccessGrantsEnabled" : false, - "serviceAccountsEnabled" : false, - "publicClient" : true, - "frontchannelLogout" : false, - "attributes" : { }, - "fullScopeAllowed" : false, - "nodeReRegistrationTimeout" : 0, - "protocolMappers" : [ { - "id" : "a3483a2d-1075-403e-a461-4c19e1ff19d4", - "name" : "full name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-full-name-mapper", - "consentRequired" : true, - "consentText" : "${fullName}", - "config" : { - "id.token.claim" : "true", - "access.token.claim" : "true" - } - }, { - "id" : "2b2bcbb1-75c0-49dd-8f34-4b460c3dc62f", - "name" : "locale", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-attribute-mapper", - "consentRequired" : false, - "consentText" : "${locale}", - "config" : { - "user.attribute" : "locale", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "locale", - "jsonType.label" : "String" - } - }, { - "id" : "a944a4ca-957c-4833-b667-fe12cf4d1fef", - "name" : "family name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${familyName}", - "config" : { - "user.attribute" : "lastName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "family_name", - "jsonType.label" : "String" - } - }, { - "id" : "bfe92fd4-7c40-43bf-92ab-5401d7c8d7b6", - "name" : "email", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${email}", - "config" : { - "user.attribute" : "email", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "email", - "jsonType.label" : "String" - } - }, { - "id" : "8bf2c5c0-8bb6-4e65-811c-64e9d14ca508", - "name" : "given name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${givenName}", - "config" : { - "user.attribute" : "firstName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "given_name", - "jsonType.label" : "String" - } - }, { - "id" : "6b0df5f5-0cb3-4ed1-8ece-9b4d6ce55f61", - "name" : "role list", - "protocol" : "saml", - "protocolMapper" : "saml-role-list-mapper", - "consentRequired" : false, - "config" : { - "single" : "false", - "attribute.nameformat" : "Basic", - "attribute.name" : "Role" - } - }, { - "id" : "41be8005-d6f6-47de-88d4-9ed1bff7d092", - "name" : "username", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${username}", - "config" : { - "user.attribute" : "username", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "preferred_username", - "jsonType.label" : "String" - } - } ], - "useTemplateConfig" : false, - "useTemplateScope" : false, - "useTemplateMappers" : false - } ], - "clientTemplates" : [ ], - "browserSecurityHeaders" : { - "xFrameOptions" : "SAMEORIGIN", - "contentSecurityPolicy" : "frame-src 'self'" - }, - "smtpServer" : { }, - "eventsEnabled" : false, - "eventsListeners" : [ "jboss-logging" ], - "enabledEventTypes" : [ ], - "adminEventsEnabled" : false, - "adminEventsDetailsEnabled" : false, - "internationalizationEnabled" : false, - "supportedLocales" : [ "" ], - "authenticationFlows" : [ { - "id" : "973d3861-45ad-4e54-af5e-e95fa3f5ee28", - "alias" : "Handle Existing Account", - "description" : "Handle what to do if there is existing account with same email/username like authenticated identity provider", - "providerId" : "basic-flow", - "topLevel" : false, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "idp-confirm-link", - "requirement" : "REQUIRED", - "priority" : 10, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "authenticator" : "idp-email-verification", - "requirement" : "ALTERNATIVE", - "priority" : 20, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "requirement" : "ALTERNATIVE", - "priority" : 30, - "flowAlias" : "Verify Existing Account by Re-authentication", - "userSetupAllowed" : false, - "autheticatorFlow" : true - } ] - }, { - "id" : "9fb80da7-4d77-46eb-be7b-cf4a8b8ec262", - "alias" : "Verify Existing Account by Re-authentication", - "description" : "Reauthentication of existing account", - "providerId" : "basic-flow", - "topLevel" : false, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "idp-username-password-form", - "requirement" : "REQUIRED", - "priority" : 10, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "authenticator" : "auth-otp-form", - "requirement" : "OPTIONAL", - "priority" : 20, - "userSetupAllowed" : false, - "autheticatorFlow" : false - } ] - }, { - "id" : "3806972b-fda8-4dfa-8fa3-cb9de13d88e1", - "alias" : "browser", - "description" : "browser based authentication", - "providerId" : "basic-flow", - "topLevel" : true, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "auth-cookie", - "requirement" : "ALTERNATIVE", - "priority" : 10, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "authenticator" : "auth-spnego", - "requirement" : "DISABLED", - "priority" : 20, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "requirement" : "ALTERNATIVE", - "priority" : 30, - "flowAlias" : "forms", - "userSetupAllowed" : false, - "autheticatorFlow" : true - } ] - }, { - "id" : "221195b2-9bc5-4413-8a31-18bde3eb9255", - "alias" : "clients", - "description" : "Base authentication for clients", - "providerId" : "client-flow", - "topLevel" : true, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "client-secret", - "requirement" : "ALTERNATIVE", - "priority" : 10, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "authenticator" : "client-jwt", - "requirement" : "ALTERNATIVE", - "priority" : 20, - "userSetupAllowed" : false, - "autheticatorFlow" : false - } ] - }, { - "id" : "54979a7f-5398-4e49-adbe-b6f720953d39", - "alias" : "direct grant", - "description" : "OpenID Connect Resource Owner Grant", - "providerId" : "basic-flow", - "topLevel" : true, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "direct-grant-validate-username", - "requirement" : "REQUIRED", - "priority" : 10, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "authenticator" : "direct-grant-validate-password", - "requirement" : "REQUIRED", - "priority" : 20, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "authenticator" : "direct-grant-validate-otp", - "requirement" : "OPTIONAL", - "priority" : 30, - "userSetupAllowed" : false, - "autheticatorFlow" : false - } ] - }, { - "id" : "1909260e-4fdf-4966-b7bd-15d1fefb41be", - "alias" : "first broker login", - "description" : "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account", - "providerId" : "basic-flow", - "topLevel" : true, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticatorConfig" : "review profile config", - "authenticator" : "idp-review-profile", - "requirement" : "REQUIRED", - "priority" : 10, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "authenticatorConfig" : "create unique user config", - "authenticator" : "idp-create-user-if-unique", - "requirement" : "ALTERNATIVE", - "priority" : 20, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "requirement" : "ALTERNATIVE", - "priority" : 30, - "flowAlias" : "Handle Existing Account", - "userSetupAllowed" : false, - "autheticatorFlow" : true - } ] - }, { - "id" : "bf4450a5-9081-4558-8d17-ac2e825ea990", - "alias" : "forms", - "description" : "Username, password, otp and other auth forms.", - "providerId" : "basic-flow", - "topLevel" : false, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "auth-username-password-form", - "requirement" : "REQUIRED", - "priority" : 10, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "authenticator" : "auth-otp-form", - "requirement" : "OPTIONAL", - "priority" : 20, - "userSetupAllowed" : false, - "autheticatorFlow" : false - } ] - }, { - "id" : "4be6e758-3734-496a-8355-97a420ed3e6d", - "alias" : "registration", - "description" : "registration flow", - "providerId" : "basic-flow", - "topLevel" : true, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "registration-page-form", - "requirement" : "REQUIRED", - "priority" : 10, - "flowAlias" : "registration form", - "userSetupAllowed" : false, - "autheticatorFlow" : true - } ] - }, { - "id" : "3e2eeef8-1df0-476f-a0a6-cf103b8ad1d4", - "alias" : "registration form", - "description" : "registration form", - "providerId" : "form-flow", - "topLevel" : false, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "registration-user-creation", - "requirement" : "REQUIRED", - "priority" : 20, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "authenticator" : "registration-profile-action", - "requirement" : "REQUIRED", - "priority" : 40, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "authenticator" : "registration-password-action", - "requirement" : "REQUIRED", - "priority" : 50, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "authenticator" : "registration-recaptcha-action", - "requirement" : "DISABLED", - "priority" : 60, - "userSetupAllowed" : false, - "autheticatorFlow" : false - } ] - }, { - "id" : "fc73607e-8219-4296-910b-40c8c4b3bf54", - "alias" : "reset credentials", - "description" : "Reset credentials for a user if they forgot their password or something", - "providerId" : "basic-flow", - "topLevel" : true, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "reset-credentials-choose-user", - "requirement" : "REQUIRED", - "priority" : 10, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "authenticator" : "reset-credential-email", - "requirement" : "REQUIRED", - "priority" : 20, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "authenticator" : "reset-password", - "requirement" : "REQUIRED", - "priority" : 30, - "userSetupAllowed" : false, - "autheticatorFlow" : false - }, { - "authenticator" : "reset-otp", - "requirement" : "OPTIONAL", - "priority" : 40, - "userSetupAllowed" : false, - "autheticatorFlow" : false - } ] - } ], - "authenticatorConfig" : [ { - "alias" : "create unique user config", - "config" : { - "require.password.update.after.registration" : "false" - } - }, { - "alias" : "review profile config", - "config" : { - "update.profile.on.first.login" : "missing" - } - } ], - "requiredActions" : [ { - "alias" : "CONFIGURE_TOTP", - "name" : "Configure Totp", - "providerId" : "CONFIGURE_TOTP", - "enabled" : true, - "defaultAction" : false, - "config" : { } - }, { - "alias" : "UPDATE_PASSWORD", - "name" : "Update Password", - "providerId" : "UPDATE_PASSWORD", - "enabled" : true, - "defaultAction" : false, - "config" : { } - }, { - "alias" : "UPDATE_PROFILE", - "name" : "Update Profile", - "providerId" : "UPDATE_PROFILE", - "enabled" : true, - "defaultAction" : false, - "config" : { } - }, { - "alias" : "VERIFY_EMAIL", - "name" : "Verify Email", - "providerId" : "VERIFY_EMAIL", - "enabled" : true, - "defaultAction" : false, - "config" : { } - }, { - "alias" : "terms_and_conditions", - "name" : "Terms and Conditions", - "providerId" : "terms_and_conditions", - "enabled" : false, - "defaultAction" : false, - "config" : { } - } ], - "browserFlow" : "browser", - "registrationFlow" : "registration", - "directGrantFlow" : "direct grant", - "resetCredentialsFlow" : "reset credentials", - "clientAuthenticationFlow" : "clients" -} diff --git a/tools/docker/keycloak/realms/apiman-realm.json.tmpl b/tools/docker/keycloak/realms/apiman-realm.json.tmpl new file mode 100644 index 0000000..1391386 --- /dev/null +++ b/tools/docker/keycloak/realms/apiman-realm.json.tmpl @@ -0,0 +1,2772 @@ +[ + { + "id" : "apiman", + "realm" : "apiman", + "displayName" : "Apiman Realm", + "displayNameHtml" : "
Apiman Realm
", + "notBefore" : 0, + "revokeRefreshToken" : false, + "accessTokenLifespan" : 300, + "accessTokenLifespanForImplicitFlow" : 900, + "ssoSessionIdleTimeout" : 1800, + "ssoSessionMaxLifespan" : 36000, + "offlineSessionIdleTimeout" : 2592000, + "accessCodeLifespan" : 60, + "accessCodeLifespanUserAction" : 300, + "accessCodeLifespanLogin" : 1800, + "enabled" : true, + "sslRequired" : "none", + "registrationAllowed" : true, + "registrationEmailAsUsername" : false, + "rememberMe" : true, + "verifyEmail" : false, + "resetPasswordAllowed" : true, + "editUsernameAllowed" : false, + "bruteForceProtected" : false, + "maxFailureWaitSeconds" : 900, + "minimumQuickLoginWaitSeconds" : 60, + "waitIncrementSeconds" : 60, + "quickLoginCheckMilliSeconds" : 1000, + "maxDeltaTimeSeconds" : 43200, + "failureFactor" : 30, + "privateKey" : "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", + "publicKey" : "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyG61ohrfJQKNmDA/ePZtqZVpPXjwn3k3T+iWiTvMsxW2+WlnqIEmL5qZ09DMhBH9r50WZRO2gVoCb657Er9x0vfD6GNf/47XU2y33TX8axhP+hSwkv/VViaDlu4jQrfgPWz/FXMjWIZxg1xQS+nOBF2ScCRYWNQ/ZnUNnvrq8dGC2/AlyeYcgDUOdwlJuvgkGlF0QoVPQiRPurR3RwlG+BjL8JB3hbaAZhdJqwqApmGQbcpgLj2tODnlrZnEAp5cPPU/lgqCE1OOp78BAEiE91ZLPl/+D8qDHk+Maz0Io3bkeRZMXPpvtbL3qN+3GlF8Yz264HDSsTNrH+nd19tFQIDAQAB", + "certificate" : "MIICmzCCAYMCBgFSPJdVbDANBgkqhkiG9w0BAQsFADARMQ8wDQYDVQQDDAZhcGltYW4wHhcNMTYwMTEzMjAwMzE2WhcNMjYwMTEzMjAwNDU2WjARMQ8wDQYDVQQDDAZhcGltYW4wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHIbrWiGt8lAo2YMD949m2plWk9ePCfeTdP6JaJO8yzFbb5aWeogSYvmpnT0MyEEf2vnRZlE7aBWgJvrnsSv3HS98PoY1//jtdTbLfdNfxrGE/6FLCS/9VWJoOW7iNCt+A9bP8VcyNYhnGDXFBL6c4EXZJwJFhY1D9mdQ2e+urx0YLb8CXJ5hyANQ53CUm6+CQaUXRChU9CJE+6tHdHCUb4GMvwkHeFtoBmF0mrCoCmYZBtymAuPa04OeWtmcQCnlw89T+WCoITU46nvwEASIT3Vks+X/4PyoMeT4xrPQijduR5Fkxc+m+1sveo37caUXxjPbrgcNKxM2sf6d3X20VAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAIssNnGNFu1uJMNKop9KZhr50CihsANQP0vbr+dhoqI3sfACx8tWpZ1cWryRkAu1AHTCFzuuhPs2imchtuKGEJ3lI3D+oJ8tBzBHLjiU3+1q3RE429PJYm1PgVjdfOwFoGwBcfp5AfvcZ3OSMg80PNItZOuozseZj9GwvL0d5UgNICPkRm0LP6EB/laex050LzfLVWgdomRI4UCACu7xpQiLko10mj9u1v7sgv7zT5P/ZB0Txq+CdHur1uzrdC2fUPjXsn89NSCfAEzvAKA6XAHb0KdjL3P1ImSUbXRiXDSmG41Slh7S7/izzSlznB4Sw8mYaknrq+xg2dT1n5YlM7Y=", + "codeSecret" : "2cc97335-f941-4f94-9470-80b4d15be5e3", + "roles" : { + "realm" : [ { + "id" : "b35c1e8e-0823-4604-8377-5def2817ccaa", + "name" : "apipublisher", + "description" : "Required to publish to the API Gateway.", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "a0ba4669-65b4-4db2-ab7f-8144068e6521", + "name" : "offline_access", + "description" : "${role_offline-access}", + "scopeParamRequired" : true, + "composite" : false + }, { + "id" : "4bc7f1b6-7b2a-4c87-8910-924d1774a933", + "name" : "apiadmin", + "description" : "Administrator privileges.", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "b086849c-e19a-40f7-b962-5b3f718fff3c", + "name" : "apiuser", + "description" : "User privileges.", + "scopeParamRequired" : false, + "composite" : false + } ], + "client" : { + "apiman" : [ ], + "apimanui" : [ ], + "realm-management" : [ { + "id" : "bfde4829-5da9-4359-bb9a-59adfc719eeb", + "name" : "manage-identity-providers", + "description" : "${role_manage-identity-providers}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "fddf1c14-c222-48ab-b102-44d8ddbdcbc5", + "name" : "create-client", + "description" : "${role_create-client}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "1444120a-70e7-4f08-9120-f13c0bb96d4e", + "name" : "manage-clients", + "description" : "${role_manage-clients}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "1a23aaf3-4f3e-4fb7-bb2d-d1113e560145", + "name" : "manage-events", + "description" : "${role_manage-events}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "b20267b4-f6d0-4f35-bd0a-215dbcecd322", + "name" : "impersonation", + "description" : "${role_impersonation}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "e0b37a3c-c7ab-4f9f-a825-93000599ab30", + "name" : "realm-admin", + "description" : "${role_realm-admin}", + "scopeParamRequired" : false, + "composite" : true, + "composites" : { + "client" : { + "realm-management" : [ "manage-identity-providers", "create-client", "view-events", "manage-clients", "manage-events", "impersonation", "manage-users", "view-realm", "view-clients", "manage-realm", "view-users", "view-identity-providers" ] + } + } + }, { + "id" : "227a7df3-3ba8-4620-8c66-d6967dfb419e", + "name" : "view-events", + "description" : "${role_view-events}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "6f2d8f8c-dfff-43f1-860e-ba29bf7e028d", + "name" : "manage-users", + "description" : "${role_manage-users}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "4dbf7a04-9680-4907-bc6e-bde5f5551307", + "name" : "view-realm", + "description" : "${role_view-realm}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "0c0d81ed-cc3a-418a-b7aa-4b1b3d00c748", + "name" : "manage-realm", + "description" : "${role_manage-realm}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "61e5fa34-f82f-4531-8bdf-9c11e55d28d5", + "name" : "view-clients", + "description" : "${role_view-clients}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "7295f14d-c95e-4c97-97fa-f201b9a92bde", + "name" : "view-users", + "description" : "${role_view-users}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "315c6df2-0028-4c01-9cda-7b5237b3fe2b", + "name" : "view-identity-providers", + "description" : "${role_view-identity-providers}", + "scopeParamRequired" : false, + "composite" : false + } ], + "security-admin-console" : [ ], + "apiman-gateway-api" : [ ], + "admin-cli" : [ ], + "broker" : [ { + "id" : "13bc4e5e-9058-4958-ac46-e2e3d155ba5b", + "name" : "read-token", + "description" : "${role_read-token}", + "scopeParamRequired" : false, + "composite" : false + } ], + "account" : [ { + "id" : "dc68e64a-c8ef-4b75-9523-72fe39f5c2fe", + "name" : "manage-account", + "description" : "${role_manage-account}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "27c46da3-4c9b-48bd-909b-a7b0449c5498", + "name" : "view-profile", + "description" : "${role_view-profile}", + "scopeParamRequired" : false, + "composite" : false + } ] + } + }, + "groups" : [ ], + "defaultRoles" : [ "offline_access", "apiuser" ], + "requiredCredentials" : [ "password" ], + "otpPolicyType" : "totp", + "otpPolicyAlgorithm" : "HmacSHA1", + "otpPolicyInitialCounter" : 0, + "otpPolicyDigits" : 6, + "otpPolicyLookAheadWindow" : 1, + "otpPolicyPeriod" : 30, + "users" : [ { + "id" : "7e1812bb-652d-4343-8ce0-0d9ff6340b09", + "createdTimestamp" : 1452717177895, + "username" : "admin", + "enabled" : true, + "totp" : false, + "emailVerified" : true, + "firstName" : "Admin", + "lastName" : "User", + "email" : "admin@example.org", + "credentials" : [ { + "type" : "password", + "hashedSaltedValue" : "VfNsGOUkrhrh4KcESDOxhNde1amTyhETqSTDmgeIfBxsniM3vcyQdEYDzuEgW5GwWCyTE4cGHstAzSpzXnJIyg==", + "salt" : "04otAOy0+i+LEtmmX0iGhw==", + "hashIterations" : 1, + "counter" : 0, + "algorithm" : "pbkdf2", + "digits" : 0, + "createdDate" : 1452717197000 + } ], + "requiredActions" : [ ], + "realmRoles" : [ "offline_access", "apiadmin", "apiuser" ], + "clientRoles" : { + "account" : [ "manage-account", "view-profile" ] + }, + "groups" : [ ] + }, { + "id" : "47fa988a-73c3-4a12-9e5d-92b0edd3115a", + "createdTimestamp" : 1452717220155, + "username" : "apimanager", + "enabled" : true, + "totp" : false, + "emailVerified" : true, + "firstName" : "API", + "lastName" : "Manager", + "email" : "apimanager@example.org", + "credentials" : [ { + "type" : "password", + "hashedSaltedValue" : "opeyac9aLYiFXeNC7E2g3wSUUg5/HilmjJNd0HP3ipGaeMK2MfGsutNfkjqSmQ+F8xXwzMDIzUn8gQtTSN3fng==", + "salt" : "9T1xFfaLFBc1QXcdaH7Uow==", + "hashIterations" : 1, + "counter" : 0, + "algorithm" : "pbkdf2", + "digits" : 0, + "createdDate" : 1452717231000 + } ], + "requiredActions" : [ ], + "realmRoles" : [ "apipublisher", "offline_access", "apiuser" ], + "clientRoles" : { + "account" : [ "manage-account", "view-profile" ] + }, + "groups" : [ ] + } ], + "clientScopeMappings" : { + "realm-management" : [ { + "client" : "admin-cli", + "roles" : [ "realm-admin" ] + }, { + "client" : "security-admin-console", + "roles" : [ "realm-admin" ] + } ] + }, + "clients" : [ { + "id" : "a8d14e70-bd9c-42ca-9945-7eb4db8b5709", + "clientId" : "account", + "name" : "${client_account}", + "baseUrl" : "/auth/realms/apiman/account", + "surrogateAuthRequired" : false, + "enabled" : true, + "clientAuthenticatorType" : "client-secret", + "secret" : "d42dc5b5-1050-4d2c-898b-6be1ef4095b8", + "defaultRoles" : [ "view-profile", "manage-account" ], + "redirectUris" : [ "/auth/realms/apiman/account/*" ], + "webOrigins" : [ ], + "notBefore" : 0, + "bearerOnly" : false, + "consentRequired" : false, + "standardFlowEnabled" : true, + "implicitFlowEnabled" : false, + "directAccessGrantsEnabled" : false, + "serviceAccountsEnabled" : false, + "publicClient" : false, + "frontchannelLogout" : false, + "attributes" : { }, + "fullScopeAllowed" : false, + "nodeReRegistrationTimeout" : 0, + "protocolMappers" : [ { + "id" : "28ce3b33-6e0e-4dbf-8a5d-a31cbc7a25df", + "name" : "email", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${email}", + "config" : { + "user.attribute" : "email", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "email", + "jsonType.label" : "String" + } + }, { + "id" : "2dd59350-bdf9-489c-bfff-15cdb4a7e112", + "name" : "username", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${username}", + "config" : { + "user.attribute" : "username", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "preferred_username", + "jsonType.label" : "String" + } + }, { + "id" : "993a14ce-98b8-4ddc-acd7-71fc1f06292b", + "name" : "full name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-full-name-mapper", + "consentRequired" : true, + "consentText" : "${fullName}", + "config" : { + "id.token.claim" : "true", + "access.token.claim" : "true" + } + }, { + "id" : "91c78c09-419a-459c-bb23-88547e5429c2", + "name" : "given name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${givenName}", + "config" : { + "user.attribute" : "firstName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "given_name", + "jsonType.label" : "String" + } + }, { + "id" : "484ed91c-961e-424f-8fb8-f1528b62fee0", + "name" : "family name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${familyName}", + "config" : { + "user.attribute" : "lastName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "family_name", + "jsonType.label" : "String" + } + }, { + "id" : "6d69b352-2b0f-48e3-963f-889f15a46579", + "name" : "role list", + "protocol" : "saml", + "protocolMapper" : "saml-role-list-mapper", + "consentRequired" : false, + "config" : { + "single" : "false", + "attribute.nameformat" : "Basic", + "attribute.name" : "Role" + } + } ], + "useTemplateConfig" : false, + "useTemplateScope" : false, + "useTemplateMappers" : false + }, { + "id" : "a3473aca-faf5-42e8-add4-6e7b8f88ef00", + "clientId" : "admin-cli", + "name" : "${client_admin-cli}", + "surrogateAuthRequired" : false, + "enabled" : true, + "clientAuthenticatorType" : "client-secret", + "secret" : "c62e4c4d-53db-45bf-9bf0-ba50a636b149", + "redirectUris" : [ ], + "webOrigins" : [ ], + "notBefore" : 0, + "bearerOnly" : false, + "consentRequired" : false, + "standardFlowEnabled" : false, + "implicitFlowEnabled" : false, + "directAccessGrantsEnabled" : true, + "serviceAccountsEnabled" : false, + "publicClient" : true, + "frontchannelLogout" : false, + "attributes" : { }, + "fullScopeAllowed" : false, + "nodeReRegistrationTimeout" : 0, + "protocolMappers" : [ { + "id" : "cd891fe3-46a6-4d9d-9c66-b91780cecbbf", + "name" : "full name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-full-name-mapper", + "consentRequired" : true, + "consentText" : "${fullName}", + "config" : { + "id.token.claim" : "true", + "access.token.claim" : "true" + } + }, { + "id" : "5d419e4c-a9d6-4f71-99a0-346c6bd5e9d3", + "name" : "username", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${username}", + "config" : { + "user.attribute" : "username", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "preferred_username", + "jsonType.label" : "String" + } + }, { + "id" : "a968f2a4-da35-4fd9-b03a-b0518d6f7128", + "name" : "given name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${givenName}", + "config" : { + "user.attribute" : "firstName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "given_name", + "jsonType.label" : "String" + } + }, { + "id" : "4b16db84-6fc6-4cd7-b6fc-ed3a901ca01c", + "name" : "email", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${email}", + "config" : { + "user.attribute" : "email", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "email", + "jsonType.label" : "String" + } + }, { + "id" : "c3e492e3-1eb4-4fdf-8557-9fe8f7bbeece", + "name" : "role list", + "protocol" : "saml", + "protocolMapper" : "saml-role-list-mapper", + "consentRequired" : false, + "config" : { + "single" : "false", + "attribute.nameformat" : "Basic", + "attribute.name" : "Role" + } + }, { + "id" : "f94ede04-b2bb-4be7-81ec-e2faa0fbf798", + "name" : "family name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${familyName}", + "config" : { + "user.attribute" : "lastName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "family_name", + "jsonType.label" : "String" + } + } ], + "useTemplateConfig" : false, + "useTemplateScope" : false, + "useTemplateMappers" : false + }, { + "id" : "1abb0913-8c31-400b-92d6-61293b13f3d3", + "clientId" : "apiman", + "name" : "Apiman", + "description" : "The apiman rest layer.", + "rootUrl" : "", + "baseUrl" : "/apiman", + "surrogateAuthRequired" : false, + "enabled" : true, + "clientAuthenticatorType" : "client-secret", + "secret" : "5af5458f-0a96-4251-8f92-08ebcc3a8aa2", + "redirectUris" : $APIMAN_URLS, + "webOrigins" : [ "*" ], + "notBefore" : 0, + "bearerOnly" : false, + "consentRequired" : false, + "standardFlowEnabled" : true, + "implicitFlowEnabled" : false, + "directAccessGrantsEnabled" : true, + "serviceAccountsEnabled" : false, + "publicClient" : true, + "frontchannelLogout" : false, + "protocol" : "openid-connect", + "attributes" : { + "saml.assertion.signature" : "false", + "saml.force.post.binding" : "false", + "saml.multivalued.roles" : "false", + "saml.signature.algorithm" : "RSA_SHA256", + "saml.encrypt" : "false", + "saml_force_name_id_format" : "false", + "saml.client.signature" : "false", + "saml.authnstatement" : "true", + "saml_name_id_format" : "username", + "saml.server.signature" : "false", + "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#" + }, + "fullScopeAllowed" : true, + "nodeReRegistrationTimeout" : -1, + "protocolMappers" : [ { + "id" : "5b44de25-e322-4d83-9684-5c2a8830c2e4", + "name" : "email", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${email}", + "config" : { + "user.attribute" : "email", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "email", + "jsonType.label" : "String" + } + }, { + "id" : "39a09c47-539c-43c8-be7a-c1a8e2a21d03", + "name" : "full name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-full-name-mapper", + "consentRequired" : true, + "consentText" : "${fullName}", + "config" : { + "id.token.claim" : "true", + "access.token.claim" : "true" + } + }, { + "id" : "a3fa08bc-b147-4c57-8bda-d57388b9dd80", + "name" : "role list", + "protocol" : "saml", + "protocolMapper" : "saml-role-list-mapper", + "consentRequired" : false, + "config" : { + "single" : "false", + "attribute.nameformat" : "Basic", + "attribute.name" : "Role" + } + }, { + "id" : "264cc4e4-22a2-4979-86f4-e70d19eb92ab", + "name" : "username", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${username}", + "config" : { + "user.attribute" : "username", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "preferred_username", + "jsonType.label" : "String" + } + }, { + "id" : "ce359e53-4427-4f19-8587-63a7ce55d2d8", + "name" : "family name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${familyName}", + "config" : { + "user.attribute" : "lastName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "family_name", + "jsonType.label" : "String" + } + }, { + "id" : "00f118c4-54ca-445e-b4ce-12ff1698d0e5", + "name" : "given name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${givenName}", + "config" : { + "user.attribute" : "firstName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "given_name", + "jsonType.label" : "String" + } + } ], + "useTemplateConfig" : false, + "useTemplateScope" : false, + "useTemplateMappers" : false + }, { + "id" : "98e30b6d-907c-49d5-b466-202f7c7cd82a", + "clientId" : "apiman-gateway-api", + "name" : "Apiman Gateway API", + "description" : "The apiman Gateway REST layer.", + "rootUrl" : "", + "baseUrl" : "/apiman-gateway-api", + "surrogateAuthRequired" : false, + "enabled" : true, + "clientAuthenticatorType" : "client-secret", + "secret" : "217b725d-7790-47a7-a3fc-5cf31f92a8db", + "redirectUris" : $APIMAN_GATEWAY_URLS, + "webOrigins" : [ "*" ], + "notBefore" : 0, + "bearerOnly" : false, + "consentRequired" : false, + "standardFlowEnabled" : true, + "implicitFlowEnabled" : false, + "directAccessGrantsEnabled" : true, + "serviceAccountsEnabled" : false, + "publicClient" : true, + "frontchannelLogout" : false, + "protocol" : "openid-connect", + "attributes" : { + "saml.assertion.signature" : "false", + "saml.force.post.binding" : "false", + "saml.multivalued.roles" : "false", + "saml.signature.algorithm" : "RSA_SHA256", + "saml.encrypt" : "false", + "saml_force_name_id_format" : "false", + "saml.client.signature" : "false", + "saml.authnstatement" : "true", + "saml_name_id_format" : "username", + "saml.server.signature" : "false", + "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#" + }, + "fullScopeAllowed" : true, + "nodeReRegistrationTimeout" : -1, + "protocolMappers" : [ { + "id" : "ef8a8d17-9797-4912-981a-f1e706d38f46", + "name" : "email", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${email}", + "config" : { + "user.attribute" : "email", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "email", + "jsonType.label" : "String" + } + }, { + "id" : "f31aa721-cc51-4aaf-abcf-9d0d90bed438", + "name" : "family name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${familyName}", + "config" : { + "user.attribute" : "lastName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "family_name", + "jsonType.label" : "String" + } + }, { + "id" : "71bbac19-ad9e-4caf-90e3-ad8096ddf4e5", + "name" : "full name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-full-name-mapper", + "consentRequired" : true, + "consentText" : "${fullName}", + "config" : { + "id.token.claim" : "true", + "access.token.claim" : "true" + } + }, { + "id" : "6aa48269-a109-438b-8b13-1a6d3b43db63", + "name" : "username", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${username}", + "config" : { + "user.attribute" : "username", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "preferred_username", + "jsonType.label" : "String" + } + }, { + "id" : "64d82ade-ba98-41f3-a748-a4e111d5016b", + "name" : "role list", + "protocol" : "saml", + "protocolMapper" : "saml-role-list-mapper", + "consentRequired" : false, + "config" : { + "single" : "false", + "attribute.nameformat" : "Basic", + "attribute.name" : "Role" + } + }, { + "id" : "0b90fb5a-79de-4aed-bd5f-ff6302d14e7c", + "name" : "given name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${givenName}", + "config" : { + "user.attribute" : "firstName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "given_name", + "jsonType.label" : "String" + } + } ], + "useTemplateConfig" : false, + "useTemplateScope" : false, + "useTemplateMappers" : false + }, { + "id" : "d33348b3-93a3-4591-83e3-20204776808d", + "clientId" : "apimanui", + "name" : "Apiman UI", + "description" : "The apiman user interface.", + "rootUrl" : "", + "baseUrl" : "/apimanui", + "surrogateAuthRequired" : false, + "enabled" : true, + "clientAuthenticatorType" : "client-secret", + "secret" : "722557fd-a725-4cc0-9dff-7d09c0c47038", + "redirectUris" : $APIMANUI_URLS, + "webOrigins" : [ ], + "notBefore" : 0, + "bearerOnly" : false, + "consentRequired" : false, + "standardFlowEnabled" : true, + "implicitFlowEnabled" : false, + "directAccessGrantsEnabled" : true, + "serviceAccountsEnabled" : false, + "publicClient" : true, + "frontchannelLogout" : false, + "protocol" : "openid-connect", + "attributes" : { + "saml.assertion.signature" : "false", + "saml.force.post.binding" : "false", + "saml.multivalued.roles" : "false", + "saml.signature.algorithm" : "RSA_SHA256", + "saml.encrypt" : "false", + "saml_force_name_id_format" : "false", + "saml.client.signature" : "false", + "saml.authnstatement" : "true", + "saml_name_id_format" : "username", + "saml.server.signature" : "false", + "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#" + }, + "fullScopeAllowed" : true, + "nodeReRegistrationTimeout" : -1, + "protocolMappers" : [ { + "id" : "aa49713e-f06f-429c-8e01-6c40af2a9233", + "name" : "email", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${email}", + "config" : { + "user.attribute" : "email", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "email", + "jsonType.label" : "String" + } + }, { + "id" : "9dd13c7c-dc31-4fa8-8f1c-6b9b4d5d3fc9", + "name" : "username", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${username}", + "config" : { + "user.attribute" : "username", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "preferred_username", + "jsonType.label" : "String" + } + }, { + "id" : "aef631b8-c8db-4e8d-b9dc-2715adbd1912", + "name" : "full name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-full-name-mapper", + "consentRequired" : true, + "consentText" : "${fullName}", + "config" : { + "id.token.claim" : "true", + "access.token.claim" : "true" + } + }, { + "id" : "d040ae37-516d-44cc-b75f-e8398ce64ccd", + "name" : "given name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${givenName}", + "config" : { + "user.attribute" : "firstName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "given_name", + "jsonType.label" : "String" + } + }, { + "id" : "18eca5f9-ea5a-40b5-ab55-0daa9675640c", + "name" : "role list", + "protocol" : "saml", + "protocolMapper" : "saml-role-list-mapper", + "consentRequired" : false, + "config" : { + "single" : "false", + "attribute.nameformat" : "Basic", + "attribute.name" : "Role" + } + }, { + "id" : "a8bcaea4-4e75-4d6e-8c2a-90333594742d", + "name" : "family name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${familyName}", + "config" : { + "user.attribute" : "lastName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "family_name", + "jsonType.label" : "String" + } + } ], + "useTemplateConfig" : false, + "useTemplateScope" : false, + "useTemplateMappers" : false + }, { + "id" : "34bd3689-5952-49a2-bbc6-c4c2f3b19306", + "clientId" : "broker", + "name" : "${client_broker}", + "surrogateAuthRequired" : false, + "enabled" : true, + "clientAuthenticatorType" : "client-secret", + "secret" : "656feef3-a682-4fae-98b9-5af112ccf6f2", + "redirectUris" : [ ], + "webOrigins" : [ ], + "notBefore" : 0, + "bearerOnly" : false, + "consentRequired" : false, + "standardFlowEnabled" : true, + "implicitFlowEnabled" : false, + "directAccessGrantsEnabled" : false, + "serviceAccountsEnabled" : false, + "publicClient" : false, + "frontchannelLogout" : false, + "attributes" : { }, + "fullScopeAllowed" : false, + "nodeReRegistrationTimeout" : 0, + "protocolMappers" : [ { + "id" : "0aadd34d-9b4f-4748-86d0-aaf059179ce8", + "name" : "given name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${givenName}", + "config" : { + "user.attribute" : "firstName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "given_name", + "jsonType.label" : "String" + } + }, { + "id" : "ef0cfed0-e489-42f2-9508-6f18700c46ad", + "name" : "username", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${username}", + "config" : { + "user.attribute" : "username", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "preferred_username", + "jsonType.label" : "String" + } + }, { + "id" : "aeec7844-5ce7-4cfc-9e57-59f5b1bc2fe1", + "name" : "full name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-full-name-mapper", + "consentRequired" : true, + "consentText" : "${fullName}", + "config" : { + "id.token.claim" : "true", + "access.token.claim" : "true" + } + }, { + "id" : "c7fc0e6f-44c3-4bbd-b6c6-0efcb523acde", + "name" : "family name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${familyName}", + "config" : { + "user.attribute" : "lastName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "family_name", + "jsonType.label" : "String" + } + }, { + "id" : "7e5d027a-8ad0-4e72-9da2-d853b6de9891", + "name" : "role list", + "protocol" : "saml", + "protocolMapper" : "saml-role-list-mapper", + "consentRequired" : false, + "config" : { + "single" : "false", + "attribute.nameformat" : "Basic", + "attribute.name" : "Role" + } + }, { + "id" : "28ffb043-6a79-4d3a-986f-a74ddda49b5d", + "name" : "email", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${email}", + "config" : { + "user.attribute" : "email", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "email", + "jsonType.label" : "String" + } + } ], + "useTemplateConfig" : false, + "useTemplateScope" : false, + "useTemplateMappers" : false + }, { + "id" : "07c77079-7ce8-4879-8e20-4b042b59f9f9", + "clientId" : "realm-management", + "name" : "${client_realm-management}", + "surrogateAuthRequired" : false, + "enabled" : true, + "clientAuthenticatorType" : "client-secret", + "secret" : "37818abe-3f6e-4fcd-8fff-9a39c9dfbd72", + "redirectUris" : [ ], + "webOrigins" : [ ], + "notBefore" : 0, + "bearerOnly" : true, + "consentRequired" : false, + "standardFlowEnabled" : true, + "implicitFlowEnabled" : false, + "directAccessGrantsEnabled" : false, + "serviceAccountsEnabled" : false, + "publicClient" : false, + "frontchannelLogout" : false, + "attributes" : { }, + "fullScopeAllowed" : false, + "nodeReRegistrationTimeout" : 0, + "protocolMappers" : [ { + "id" : "81512b74-8ca0-4b56-aee6-8796d32ef08e", + "name" : "email", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${email}", + "config" : { + "user.attribute" : "email", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "email", + "jsonType.label" : "String" + } + }, { + "id" : "46dd0a74-4e67-49d3-a4bd-9b942477ea8d", + "name" : "role list", + "protocol" : "saml", + "protocolMapper" : "saml-role-list-mapper", + "consentRequired" : false, + "config" : { + "single" : "false", + "attribute.nameformat" : "Basic", + "attribute.name" : "Role" + } + }, { + "id" : "19a045d2-7c70-4975-bd97-15337a5c6cea", + "name" : "username", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${username}", + "config" : { + "user.attribute" : "username", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "preferred_username", + "jsonType.label" : "String" + } + }, { + "id" : "a05f7bab-83b9-455e-a6d7-c420eee2a568", + "name" : "given name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${givenName}", + "config" : { + "user.attribute" : "firstName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "given_name", + "jsonType.label" : "String" + } + }, { + "id" : "77afffb5-4afc-42a0-9629-4e1a952b05b6", + "name" : "family name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${familyName}", + "config" : { + "user.attribute" : "lastName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "family_name", + "jsonType.label" : "String" + } + }, { + "id" : "7035d549-8da1-4660-8a21-9b5acbd92fc1", + "name" : "full name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-full-name-mapper", + "consentRequired" : true, + "consentText" : "${fullName}", + "config" : { + "id.token.claim" : "true", + "access.token.claim" : "true" + } + } ], + "useTemplateConfig" : false, + "useTemplateScope" : false, + "useTemplateMappers" : false + }, { + "id" : "a33a0ea7-c67e-4a75-8be6-5be2bf638145", + "clientId" : "security-admin-console", + "name" : "${client_security-admin-console}", + "baseUrl" : "/auth/admin/apiman/console/index.html", + "surrogateAuthRequired" : false, + "enabled" : true, + "clientAuthenticatorType" : "client-secret", + "secret" : "5f5482ac-cf0c-4ff6-acd5-787dbbfb9f75", + "redirectUris" : [ "/auth/admin/apiman/console/*" ], + "webOrigins" : [ ], + "notBefore" : 0, + "bearerOnly" : false, + "consentRequired" : false, + "standardFlowEnabled" : true, + "implicitFlowEnabled" : false, + "directAccessGrantsEnabled" : false, + "serviceAccountsEnabled" : false, + "publicClient" : true, + "frontchannelLogout" : false, + "attributes" : { }, + "fullScopeAllowed" : false, + "nodeReRegistrationTimeout" : 0, + "protocolMappers" : [ { + "id" : "a3483a2d-1075-403e-a461-4c19e1ff19d4", + "name" : "full name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-full-name-mapper", + "consentRequired" : true, + "consentText" : "${fullName}", + "config" : { + "id.token.claim" : "true", + "access.token.claim" : "true" + } + }, { + "id" : "2b2bcbb1-75c0-49dd-8f34-4b460c3dc62f", + "name" : "locale", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-attribute-mapper", + "consentRequired" : false, + "consentText" : "${locale}", + "config" : { + "user.attribute" : "locale", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "locale", + "jsonType.label" : "String" + } + }, { + "id" : "a944a4ca-957c-4833-b667-fe12cf4d1fef", + "name" : "family name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${familyName}", + "config" : { + "user.attribute" : "lastName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "family_name", + "jsonType.label" : "String" + } + }, { + "id" : "bfe92fd4-7c40-43bf-92ab-5401d7c8d7b6", + "name" : "email", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${email}", + "config" : { + "user.attribute" : "email", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "email", + "jsonType.label" : "String" + } + }, { + "id" : "8bf2c5c0-8bb6-4e65-811c-64e9d14ca508", + "name" : "given name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${givenName}", + "config" : { + "user.attribute" : "firstName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "given_name", + "jsonType.label" : "String" + } + }, { + "id" : "6b0df5f5-0cb3-4ed1-8ece-9b4d6ce55f61", + "name" : "role list", + "protocol" : "saml", + "protocolMapper" : "saml-role-list-mapper", + "consentRequired" : false, + "config" : { + "single" : "false", + "attribute.nameformat" : "Basic", + "attribute.name" : "Role" + } + }, { + "id" : "41be8005-d6f6-47de-88d4-9ed1bff7d092", + "name" : "username", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${username}", + "config" : { + "user.attribute" : "username", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "preferred_username", + "jsonType.label" : "String" + } + } ], + "useTemplateConfig" : false, + "useTemplateScope" : false, + "useTemplateMappers" : false + } ], + "clientTemplates" : [ ], + "browserSecurityHeaders" : { + "xFrameOptions" : "SAMEORIGIN", + "contentSecurityPolicy" : "frame-src 'self'" + }, + "smtpServer" : { }, + "eventsEnabled" : false, + "eventsListeners" : [ "jboss-logging" ], + "enabledEventTypes" : [ ], + "adminEventsEnabled" : false, + "adminEventsDetailsEnabled" : false, + "internationalizationEnabled" : false, + "supportedLocales" : [ "" ], + "authenticationFlows" : [ { + "id" : "ebaff4bc-59a0-4f8c-b1e8-af410be940ae", + "alias" : "Handle Existing Account", + "description" : "Handle what to do if there is existing account with same email/username like authenticated identity provider", + "providerId" : "basic-flow", + "topLevel" : false, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "idp-confirm-link", + "requirement" : "REQUIRED", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "idp-email-verification", + "requirement" : "ALTERNATIVE", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "requirement" : "ALTERNATIVE", + "priority" : 30, + "flowAlias" : "Verify Existing Account by Re-authentication", + "userSetupAllowed" : false, + "autheticatorFlow" : true + } ] + }, { + "id" : "5c7b59d3-d5d3-435d-8641-91e95cc4ecfe", + "alias" : "Verify Existing Account by Re-authentication", + "description" : "Reauthentication of existing account", + "providerId" : "basic-flow", + "topLevel" : false, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "idp-username-password-form", + "requirement" : "REQUIRED", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "auth-otp-form", + "requirement" : "OPTIONAL", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + } ] + }, { + "id" : "2a04990d-8260-49bc-8a3a-68426d6c8270", + "alias" : "browser", + "description" : "browser based authentication", + "providerId" : "basic-flow", + "topLevel" : true, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "auth-cookie", + "requirement" : "ALTERNATIVE", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "auth-spnego", + "requirement" : "DISABLED", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "requirement" : "ALTERNATIVE", + "priority" : 30, + "flowAlias" : "forms", + "userSetupAllowed" : false, + "autheticatorFlow" : true + } ] + }, { + "id" : "f1a939a1-6799-4414-9dd3-c71ce8345297", + "alias" : "clients", + "description" : "Base authentication for clients", + "providerId" : "client-flow", + "topLevel" : true, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "client-secret", + "requirement" : "ALTERNATIVE", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "client-jwt", + "requirement" : "ALTERNATIVE", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + } ] + }, { + "id" : "16a866c5-c4ed-41f8-a4c5-841cab9429c9", + "alias" : "direct grant", + "description" : "OpenID Connect Resource Owner Grant", + "providerId" : "basic-flow", + "topLevel" : true, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "direct-grant-validate-username", + "requirement" : "REQUIRED", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "direct-grant-validate-password", + "requirement" : "REQUIRED", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "direct-grant-validate-otp", + "requirement" : "OPTIONAL", + "priority" : 30, + "userSetupAllowed" : false, + "autheticatorFlow" : false + } ] + }, { + "id" : "a3ff124b-cd36-4b6c-957e-6c1eaf3f44a2", + "alias" : "first broker login", + "description" : "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account", + "providerId" : "basic-flow", + "topLevel" : true, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticatorConfig" : "review profile config", + "authenticator" : "idp-review-profile", + "requirement" : "REQUIRED", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticatorConfig" : "create unique user config", + "authenticator" : "idp-create-user-if-unique", + "requirement" : "ALTERNATIVE", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "requirement" : "ALTERNATIVE", + "priority" : 30, + "flowAlias" : "Handle Existing Account", + "userSetupAllowed" : false, + "autheticatorFlow" : true + } ] + }, { + "id" : "4beb713d-3ced-4712-894d-5609c0c13021", + "alias" : "forms", + "description" : "Username, password, otp and other auth forms.", + "providerId" : "basic-flow", + "topLevel" : false, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "auth-username-password-form", + "requirement" : "REQUIRED", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "auth-otp-form", + "requirement" : "OPTIONAL", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + } ] + }, { + "id" : "dd7b0b4f-ef09-45a5-a792-ba3586805708", + "alias" : "registration", + "description" : "registration flow", + "providerId" : "basic-flow", + "topLevel" : true, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "registration-page-form", + "requirement" : "REQUIRED", + "priority" : 10, + "flowAlias" : "registration form", + "userSetupAllowed" : false, + "autheticatorFlow" : true + } ] + }, { + "id" : "84f47627-e602-48dd-a3ae-e177da1b44e1", + "alias" : "registration form", + "description" : "registration form", + "providerId" : "form-flow", + "topLevel" : false, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "registration-user-creation", + "requirement" : "REQUIRED", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "registration-profile-action", + "requirement" : "REQUIRED", + "priority" : 40, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "registration-password-action", + "requirement" : "REQUIRED", + "priority" : 50, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "registration-recaptcha-action", + "requirement" : "DISABLED", + "priority" : 60, + "userSetupAllowed" : false, + "autheticatorFlow" : false + } ] + }, { + "id" : "ffbb8c15-d55b-4eac-a19b-30d11ded1d16", + "alias" : "reset credentials", + "description" : "Reset credentials for a user if they forgot their password or something", + "providerId" : "basic-flow", + "topLevel" : true, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "reset-credentials-choose-user", + "requirement" : "REQUIRED", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "reset-credential-email", + "requirement" : "REQUIRED", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "reset-password", + "requirement" : "REQUIRED", + "priority" : 30, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "reset-otp", + "requirement" : "OPTIONAL", + "priority" : 40, + "userSetupAllowed" : false, + "autheticatorFlow" : false + } ] + } ], + "authenticatorConfig" : [ { + "alias" : "create unique user config", + "config" : { + "require.password.update.after.registration" : "false" + } + }, { + "alias" : "review profile config", + "config" : { + "update.profile.on.first.login" : "missing" + } + } ], + "requiredActions" : [ { + "alias" : "CONFIGURE_TOTP", + "name" : "Configure Totp", + "providerId" : "CONFIGURE_TOTP", + "enabled" : true, + "defaultAction" : false, + "config" : { } + }, { + "alias" : "UPDATE_PASSWORD", + "name" : "Update Password", + "providerId" : "UPDATE_PASSWORD", + "enabled" : true, + "defaultAction" : false, + "config" : { } + }, { + "alias" : "UPDATE_PROFILE", + "name" : "Update Profile", + "providerId" : "UPDATE_PROFILE", + "enabled" : true, + "defaultAction" : false, + "config" : { } + }, { + "alias" : "VERIFY_EMAIL", + "name" : "Verify Email", + "providerId" : "VERIFY_EMAIL", + "enabled" : true, + "defaultAction" : false, + "config" : { } + }, { + "alias" : "terms_and_conditions", + "name" : "Terms and Conditions", + "providerId" : "terms_and_conditions", + "enabled" : false, + "defaultAction" : false, + "config" : { } + } ], + "browserFlow" : "browser", + "registrationFlow" : "registration", + "directGrantFlow" : "direct grant", + "resetCredentialsFlow" : "reset credentials", + "clientAuthenticationFlow" : "clients" +}, + { + "id" : "qerealm", + "realm" : "qerealm", + "notBefore" : 0, + "revokeRefreshToken" : false, + "accessTokenLifespan" : 30, + "accessTokenLifespanForImplicitFlow" : 900, + "ssoSessionIdleTimeout" : 300, + "ssoSessionMaxLifespan" : 300, + "offlineSessionIdleTimeout" : 864000, + "accessCodeLifespan" : 60, + "accessCodeLifespanUserAction" : 60, + "accessCodeLifespanLogin" : 60, + "enabled" : true, + "sslRequired" : "none", + "registrationAllowed" : false, + "registrationEmailAsUsername" : false, + "rememberMe" : false, + "verifyEmail" : false, + "resetPasswordAllowed" : false, + "editUsernameAllowed" : false, + "bruteForceProtected" : false, + "maxFailureWaitSeconds" : 900, + "minimumQuickLoginWaitSeconds" : 60, + "waitIncrementSeconds" : 60, + "quickLoginCheckMilliSeconds" : 1000, + "maxDeltaTimeSeconds" : 43200, + "failureFactor" : 30, + "privateKey" : "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", + "publicKey" : "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWGyngp7pGoEUnfw+U6IeO8e8ugeQbSN06AaO2sNTQJ2kX7lqeCnuHrCHp+txZPHEH/SplWdd5xoNKy0QaYmWzuaFssjIpgch1lv0gU8oyVMbbzoyviRhAuVnVjdaDz6x0vG+ci65do9bacdR/wenVN6Vc2YTJapTw/g6t6ylZh0mCdbcu8IV/UecQkuwn8/c2emJvY5qngIfHOgxIDqFkxsmn/YT3oY0w+QUpODUrMFy6+GnFITNv0JvV1hypqajuxzBu3mGlZYB58e1/+9OS/bFwGAlG3rluUuJ+Ry65FW6gfIe2Nd13V8JKn9zplQPuYyPXkKPybdzSFUYnn+MQIDAQAB", + "certificate" : "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", + "codeSecret" : "21a2ac72-a548-42bd-9c29-cb9e6b78f9e3", + "roles" : { + "realm" : [ { + "id" : "f96277cd-c6d0-43fa-9d35-c46f57555976", + "name" : "user", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "0e1c7cd9-b486-4efc-9447-9edb4de09d02", + "name" : "admin", + "description" : "Is allowed access to anything echo-related", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "b8c3b90b-1eaf-4cdd-b9d9-3161e3140d8c", + "name" : "offline_access", + "description" : "${role_offline-access}", + "scopeParamRequired" : true, + "composite" : false + } ], + "client" : { + "qeclient" : [ ], + "realm-management" : [ { + "id" : "b41e8abc-2f79-4021-ad37-015642058b7a", + "name" : "view-identity-providers", + "description" : "${role_view-identity-providers}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "9cd240ca-2111-4eda-8a75-de220df783e9", + "name" : "view-realm", + "description" : "${role_view-realm}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "d699120d-7a18-4def-9188-f9f366ea4010", + "name" : "manage-events", + "description" : "${role_manage-events}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "df4b79af-2a98-4ca0-a2ae-a8bb62d33ce2", + "name" : "impersonation", + "description" : "${role_impersonation}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "c8ad469f-6fa9-47f5-9648-c88944fb43da", + "name" : "view-users", + "description" : "${role_view-users}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "bf99a374-c5be-4f81-9f24-890998bc51c9", + "name" : "manage-clients", + "description" : "${role_manage-clients}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "ec0f0ad0-0fbc-45cc-967b-b408a48b582d", + "name" : "manage-realm", + "description" : "${role_manage-realm}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "88f42a84-ad03-4bd6-bafe-0ff408232b8e", + "name" : "view-events", + "description" : "${role_view-events}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "ab3ca10c-9301-4285-b7ba-1d298ffb2aa7", + "name" : "manage-users", + "description" : "${role_manage-users}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "fdbb6b19-7f95-46a0-8db7-1fb81bd3f03f", + "name" : "manage-identity-providers", + "description" : "${role_manage-identity-providers}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "207f27db-70a8-4cc3-918a-b90a4d11ff8f", + "name" : "view-clients", + "description" : "${role_view-clients}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "6122efcc-15d5-439c-a5e8-9fe6163913ef", + "name" : "realm-admin", + "description" : "${role_realm-admin}", + "scopeParamRequired" : false, + "composite" : true, + "composites" : { + "client" : { + "realm-management" : [ "view-identity-providers", "view-realm", "manage-events", "impersonation", "manage-clients", "view-users", "manage-realm", "view-events", "manage-users", "manage-identity-providers", "view-clients" ] + } + } + } ], + "apiman_conf" : [ ], + "security-admin-console" : [ ], + "admin-cli" : [ ], + "broker" : [ { + "id" : "408a0363-a07c-49fd-aabe-4e8bd8f6f63a", + "name" : "read-token", + "description" : "${role_read-token}", + "scopeParamRequired" : false, + "composite" : false + } ], + "account" : [ { + "id" : "67ed553b-a528-4479-bf4b-2fabf2119bd0", + "name" : "manage-account", + "description" : "${role_manage-account}", + "scopeParamRequired" : false, + "composite" : false + }, { + "id" : "5452cea3-66bc-49dc-a6e6-76321e4d2f73", + "name" : "view-profile", + "description" : "${role_view-profile}", + "scopeParamRequired" : false, + "composite" : false + } ] + } + }, + "groups" : [ ], + "defaultRoles" : [ "offline_access" ], + "requiredCredentials" : [ "password" ], + "otpPolicyType" : "totp", + "otpPolicyAlgorithm" : "HmacSHA1", + "otpPolicyInitialCounter" : 0, + "otpPolicyDigits" : 6, + "otpPolicyLookAheadWindow" : 1, + "otpPolicyPeriod" : 30, + "users" : [ { + "id" : "de4af322-85b2-4dbe-8d53-6a2ee29e4080", + "username" : "admin", + "enabled" : true, + "totp" : false, + "emailVerified" : true, + "firstName" : "admin", + "lastName" : "admin", + "email" : "admin@admin", + "credentials" : [ { + "type" : "password", + "hashedSaltedValue" : "bFNBrC3Z2WrFjUnnDRu6pDdJ90/8BirowTmMgLey/VYyNi3jXylfGnyJ8RmNeNd9N+nUR2zxK34CpTUixagtig==", + "salt" : "7cn1i879ZmKx/Szrsk6nUw==", + "hashIterations" : 1, + "counter" : 0, + "algorithm" : "pbkdf2", + "digits" : 0 + } ], + "requiredActions" : [ ], + "realmRoles" : [ "user", "admin", "offline_access" ], + "clientRoles" : { + "account" : [ "manage-account", "view-profile" ] + }, + "groups" : [ ] + }, { + "id" : "b9ac3953-a9be-42f8-a28c-9911c5b9565f", + "createdTimestamp" : 1445868108359, + "username" : "nobody", + "enabled" : true, + "totp" : false, + "emailVerified" : true, + "firstName" : "nobody", + "lastName" : "nobody", + "email" : "nobody@nobody", + "credentials" : [ { + "type" : "password", + "hashedSaltedValue" : "ynGoGN8y9GxzpQmT03TP4ZLmDpz9ECwoBj4quKE8I3CXDO0H40Wh2segVZZAtOLpMN4KEwk/K4h74KkZocf/4g==", + "salt" : "ERm/bB0ew44oOJBiS9Oa8g==", + "hashIterations" : 1, + "counter" : 0, + "algorithm" : "pbkdf2", + "digits" : 0 + } ], + "requiredActions" : [ ], + "realmRoles" : [ "offline_access" ], + "clientRoles" : { + "account" : [ "manage-account", "view-profile" ] + }, + "groups" : [ ] + }, { + "id" : "54bb8773-9487-4999-8630-6ab56be7ceda", + "createdTimestamp" : 1445868083927, + "username" : "user", + "enabled" : true, + "totp" : false, + "emailVerified" : true, + "firstName" : "user", + "lastName" : "user", + "email" : "user@user", + "credentials" : [ { + "type" : "password", + "hashedSaltedValue" : "3OIYdvn6S6k9hHD5iG9laQvlRz921JraEP9UnD8kyih81+IN8lo6tyzYUnJ1EX6vQUY7ZyNFAMIctE7KBfk2AA==", + "salt" : "DIydRjhwjqBhS1jzxnuMDA==", + "hashIterations" : 1, + "counter" : 0, + "algorithm" : "pbkdf2", + "digits" : 0 + } ], + "requiredActions" : [ ], + "realmRoles" : [ "user", "offline_access" ], + "clientRoles" : { + "account" : [ "manage-account", "view-profile" ] + }, + "groups" : [ ] + } ], + "clientScopeMappings" : { + "realm-management" : [ { + "client" : "admin-cli", + "roles" : [ "realm-admin" ] + }, { + "client" : "security-admin-console", + "roles" : [ "realm-admin" ] + } ] + }, + "clients" : [ { + "id" : "1f97eaf4-6435-48dd-8b77-f0a61dbd5343", + "clientId" : "account", + "name" : "${client_account}", + "baseUrl" : "/auth/realms/qerealm/account", + "surrogateAuthRequired" : false, + "enabled" : true, + "clientAuthenticatorType" : "client-secret", + "secret" : "06e44ca8-fd8e-4754-8f5d-bb0d9a6ebcc6", + "defaultRoles" : [ "view-profile", "manage-account" ], + "redirectUris" : [ "/auth/realms/qerealm/account/*" ], + "webOrigins" : [ ], + "notBefore" : 0, + "bearerOnly" : false, + "consentRequired" : false, + "standardFlowEnabled" : true, + "implicitFlowEnabled" : false, + "directAccessGrantsEnabled" : false, + "serviceAccountsEnabled" : false, + "publicClient" : false, + "frontchannelLogout" : false, + "attributes" : { }, + "fullScopeAllowed" : false, + "nodeReRegistrationTimeout" : 0, + "protocolMappers" : [ { + "id" : "76e84547-a1db-4fd5-b650-2e39de451985", + "name" : "given name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${givenName}", + "config" : { + "user.attribute" : "firstName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "given_name", + "Claim JSON Type" : "String" + } + }, { + "id" : "b7da15d8-c92b-4287-b40c-71f96fea2445", + "name" : "full name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-full-name-mapper", + "consentRequired" : true, + "consentText" : "${fullName}", + "config" : { + "id.token.claim" : "true", + "access.token.claim" : "true" + } + }, { + "id" : "e46b35d9-d1fd-4a78-9bab-43996517e813", + "name" : "role list", + "protocol" : "saml", + "protocolMapper" : "saml-role-list-mapper", + "consentRequired" : false, + "config" : { + "single" : "false", + "attribute.nameformat" : "Basic", + "attribute.name" : "Role" + } + }, { + "id" : "7307a307-62ed-40c0-9cfa-1ee6cdde0052", + "name" : "email", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${email}", + "config" : { + "user.attribute" : "email", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "email", + "Claim JSON Type" : "String" + } + }, { + "id" : "5aaeeb2b-17b9-4b93-957f-d4ae4bd98d33", + "name" : "username", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${username}", + "config" : { + "user.attribute" : "username", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "preferred_username", + "Claim JSON Type" : "String" + } + }, { + "id" : "b007ff11-9bbb-43bb-87a0-a2271d2bd54d", + "name" : "family name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${familyName}", + "config" : { + "user.attribute" : "lastName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "family_name", + "Claim JSON Type" : "String" + } + } ], + "useTemplateConfig" : false, + "useTemplateScope" : false, + "useTemplateMappers" : false + }, { + "id" : "c3560cdc-e801-4f5f-ba93-a843c44ba0b7", + "clientId" : "admin-cli", + "name" : "${client_admin-cli}", + "surrogateAuthRequired" : false, + "enabled" : true, + "clientAuthenticatorType" : "client-secret", + "secret" : "90fe83b9-a49f-4dee-8d77-980b3fe181cc", + "redirectUris" : [ ], + "webOrigins" : [ ], + "notBefore" : 0, + "bearerOnly" : false, + "consentRequired" : false, + "standardFlowEnabled" : false, + "implicitFlowEnabled" : false, + "directAccessGrantsEnabled" : true, + "serviceAccountsEnabled" : false, + "publicClient" : true, + "frontchannelLogout" : false, + "attributes" : { }, + "fullScopeAllowed" : false, + "nodeReRegistrationTimeout" : 0, + "protocolMappers" : [ { + "id" : "402dac5c-c87f-47f5-82aa-7cd6e3acfe36", + "name" : "username", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${username}", + "config" : { + "user.attribute" : "username", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "preferred_username", + "jsonType.label" : "String" + } + }, { + "id" : "1f09b92b-6f2f-4da0-b8ff-9c07b363311e", + "name" : "email", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${email}", + "config" : { + "user.attribute" : "email", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "email", + "jsonType.label" : "String" + } + }, { + "id" : "8faaff31-0ad6-4260-b2af-811f199521ea", + "name" : "full name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-full-name-mapper", + "consentRequired" : true, + "consentText" : "${fullName}", + "config" : { + "id.token.claim" : "true", + "access.token.claim" : "true" + } + }, { + "id" : "a1a3ca95-ab17-40e9-afa3-616acf8f5313", + "name" : "family name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${familyName}", + "config" : { + "user.attribute" : "lastName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "family_name", + "jsonType.label" : "String" + } + }, { + "id" : "eab06e2e-f1aa-4f0e-99d8-d893df30ed8c", + "name" : "role list", + "protocol" : "saml", + "protocolMapper" : "saml-role-list-mapper", + "consentRequired" : false, + "config" : { + "single" : "false", + "attribute.nameformat" : "Basic", + "attribute.name" : "Role" + } + }, { + "id" : "83f991d2-b4ea-4c14-a5d8-306f800468c1", + "name" : "given name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${givenName}", + "config" : { + "user.attribute" : "firstName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "given_name", + "jsonType.label" : "String" + } + } ], + "useTemplateConfig" : false, + "useTemplateScope" : false, + "useTemplateMappers" : false + }, { + "id" : "b5f330f6-cdca-4581-b34e-29e45d7a19cb", + "clientId" : "apiman_conf", + "name" : "", + "surrogateAuthRequired" : false, + "enabled" : true, + "clientAuthenticatorType" : "client-secret", + "secret" : "f814a076-8e3a-4360-907d-6b7fc21401e4", + "redirectUris" : [ "/*" ], + "webOrigins" : [ ], + "notBefore" : 0, + "bearerOnly" : false, + "consentRequired" : true, + "standardFlowEnabled" : true, + "implicitFlowEnabled" : false, + "directAccessGrantsEnabled" : false, + "serviceAccountsEnabled" : false, + "publicClient" : false, + "frontchannelLogout" : false, + "protocol" : "openid-connect", + "attributes" : { + "saml.assertion.signature" : "false", + "saml.force.post.binding" : "false", + "saml.multivalued.roles" : "false", + "saml.signature.algorithm" : "RSA_SHA256", + "saml.encrypt" : "false", + "saml_force_name_id_format" : "false", + "saml.client.signature" : "false", + "saml.authnstatement" : "true", + "saml_name_id_format" : "username", + "saml.server.signature" : "false", + "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#" + }, + "fullScopeAllowed" : false, + "nodeReRegistrationTimeout" : -1, + "protocolMappers" : [ { + "id" : "2f333ceb-de9d-4ded-b87f-90cbc04f3b63", + "name" : "role list", + "protocol" : "saml", + "protocolMapper" : "saml-role-list-mapper", + "consentRequired" : false, + "config" : { + "single" : "false", + "attribute.nameformat" : "Basic", + "attribute.name" : "Role" + } + }, { + "id" : "830fa2b5-a3e6-4b14-ab91-f5a1e136b7da", + "name" : "given name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${givenName}", + "config" : { + "user.attribute" : "firstName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "given_name", + "jsonType.label" : "String" + } + }, { + "id" : "63aaed19-38b6-4c10-975b-5416c133636d", + "name" : "email", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${email}", + "config" : { + "user.attribute" : "email", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "email", + "jsonType.label" : "String" + } + }, { + "id" : "74220c7a-2353-47db-acff-68a4f0feb80c", + "name" : "full name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-full-name-mapper", + "consentRequired" : true, + "consentText" : "${fullName}", + "config" : { + "id.token.claim" : "true", + "access.token.claim" : "true" + } + }, { + "id" : "628b9f62-bf43-4ace-baf9-02a9c41cae65", + "name" : "family name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${familyName}", + "config" : { + "user.attribute" : "lastName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "family_name", + "jsonType.label" : "String" + } + }, { + "id" : "313fb6c2-4e31-4868-9c47-606d9e3fd7e0", + "name" : "username", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${username}", + "config" : { + "user.attribute" : "username", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "preferred_username", + "jsonType.label" : "String" + } + } ], + "useTemplateConfig" : false, + "useTemplateScope" : false, + "useTemplateMappers" : false + }, { + "id" : "6c29081a-a646-4e1c-94fc-b429527e564a", + "clientId" : "broker", + "name" : "${client_broker}", + "surrogateAuthRequired" : false, + "enabled" : true, + "clientAuthenticatorType" : "client-secret", + "secret" : "38967b66-a777-4fb5-a1a7-fd42296b7b1f", + "redirectUris" : [ ], + "webOrigins" : [ ], + "notBefore" : 0, + "bearerOnly" : false, + "consentRequired" : false, + "standardFlowEnabled" : true, + "implicitFlowEnabled" : false, + "directAccessGrantsEnabled" : false, + "serviceAccountsEnabled" : false, + "publicClient" : false, + "frontchannelLogout" : false, + "attributes" : { }, + "fullScopeAllowed" : false, + "nodeReRegistrationTimeout" : 0, + "protocolMappers" : [ { + "id" : "6bb1ffec-0538-4a78-8afc-32f921a23118", + "name" : "role list", + "protocol" : "saml", + "protocolMapper" : "saml-role-list-mapper", + "consentRequired" : false, + "config" : { + "single" : "false", + "attribute.nameformat" : "Basic", + "attribute.name" : "Role" + } + }, { + "id" : "a38f7374-4134-4104-8a24-c675e2393e3d", + "name" : "full name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-full-name-mapper", + "consentRequired" : true, + "consentText" : "${fullName}", + "config" : { + "id.token.claim" : "true", + "access.token.claim" : "true" + } + }, { + "id" : "48d33d93-ade6-4a99-9628-b4f5bd182334", + "name" : "given name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${givenName}", + "config" : { + "user.attribute" : "firstName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "given_name", + "Claim JSON Type" : "String" + } + }, { + "id" : "b3291055-d3e7-4e4b-824e-fd441417f12f", + "name" : "family name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${familyName}", + "config" : { + "user.attribute" : "lastName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "family_name", + "Claim JSON Type" : "String" + } + }, { + "id" : "9966fc24-3c36-428b-a1a5-3dd3e053e7ce", + "name" : "username", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${username}", + "config" : { + "user.attribute" : "username", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "preferred_username", + "Claim JSON Type" : "String" + } + }, { + "id" : "3a498871-ee98-4ace-8083-7e90d17fc1ff", + "name" : "email", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${email}", + "config" : { + "user.attribute" : "email", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "email", + "Claim JSON Type" : "String" + } + } ], + "useTemplateConfig" : false, + "useTemplateScope" : false, + "useTemplateMappers" : false + }, { + "id" : "f23c7ffe-131c-4629-b892-4a545b543461", + "clientId" : "qeclient", + "surrogateAuthRequired" : false, + "enabled" : true, + "clientAuthenticatorType" : "client-secret", + "secret" : "c927fc71-b882-4ae9-9939-c629ba6ae06f", + "redirectUris" : [ ], + "webOrigins" : [ ], + "notBefore" : 0, + "bearerOnly" : false, + "consentRequired" : false, + "standardFlowEnabled" : false, + "implicitFlowEnabled" : false, + "directAccessGrantsEnabled" : true, + "serviceAccountsEnabled" : false, + "publicClient" : true, + "frontchannelLogout" : false, + "protocol" : "openid-connect", + "attributes" : { + "saml.assertion.signature" : "false", + "saml.force.post.binding" : "false", + "saml.multivalued.roles" : "false", + "saml.signature.algorithm" : "RSA_SHA256", + "saml.encrypt" : "false", + "saml_force_name_id_format" : "false", + "saml.client.signature" : "false", + "saml.authnstatement" : "true", + "saml_name_id_format" : "username", + "saml.server.signature" : "false" + }, + "fullScopeAllowed" : true, + "nodeReRegistrationTimeout" : -1, + "protocolMappers" : [ { + "id" : "855c48e2-8751-4242-a586-943b99334f58", + "name" : "family name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${familyName}", + "config" : { + "user.attribute" : "lastName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "family_name", + "Claim JSON Type" : "String" + } + }, { + "id" : "1199e302-a112-450e-946c-21f1f305237a", + "name" : "given name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${givenName}", + "config" : { + "user.attribute" : "firstName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "given_name", + "Claim JSON Type" : "String" + } + }, { + "id" : "9cf38815-494b-45c8-be91-329527f7da5a", + "name" : "email", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${email}", + "config" : { + "user.attribute" : "email", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "email", + "Claim JSON Type" : "String" + } + }, { + "id" : "04cb22df-bb9f-47d9-ace6-bc07d6aee31b", + "name" : "full name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-full-name-mapper", + "consentRequired" : true, + "consentText" : "${fullName}", + "config" : { + "id.token.claim" : "true", + "access.token.claim" : "true" + } + }, { + "id" : "b71cde8f-c6be-4582-bb71-1363d6391c87", + "name" : "username", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${username}", + "config" : { + "user.attribute" : "username", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "preferred_username", + "Claim JSON Type" : "String" + } + }, { + "id" : "f5ebcab2-fb3e-49b8-a32e-de7ca9bb0a59", + "name" : "role list", + "protocol" : "saml", + "protocolMapper" : "saml-role-list-mapper", + "consentRequired" : false, + "config" : { + "single" : "false", + "attribute.nameformat" : "Basic", + "attribute.name" : "Role" + } + } ], + "useTemplateConfig" : false, + "useTemplateScope" : false, + "useTemplateMappers" : false + }, { + "id" : "45510d6f-fcda-4915-8981-2d048413cd4c", + "clientId" : "realm-management", + "name" : "${client_realm-management}", + "surrogateAuthRequired" : false, + "enabled" : true, + "clientAuthenticatorType" : "client-secret", + "secret" : "77d877eb-7f49-474e-b739-9f16a0d96884", + "redirectUris" : [ ], + "webOrigins" : [ ], + "notBefore" : 0, + "bearerOnly" : true, + "consentRequired" : false, + "standardFlowEnabled" : true, + "implicitFlowEnabled" : false, + "directAccessGrantsEnabled" : false, + "serviceAccountsEnabled" : false, + "publicClient" : false, + "frontchannelLogout" : false, + "attributes" : { }, + "fullScopeAllowed" : false, + "nodeReRegistrationTimeout" : 0, + "protocolMappers" : [ { + "id" : "086db4c0-5457-4ceb-bfe2-551fcc216080", + "name" : "email", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${email}", + "config" : { + "user.attribute" : "email", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "email", + "Claim JSON Type" : "String" + } + }, { + "id" : "c2bf289c-3d2b-4dd5-871b-c5b2dd1b3f68", + "name" : "family name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${familyName}", + "config" : { + "user.attribute" : "lastName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "family_name", + "Claim JSON Type" : "String" + } + }, { + "id" : "a8013a77-680a-4759-ad54-f6c25df3095b", + "name" : "username", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${username}", + "config" : { + "user.attribute" : "username", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "preferred_username", + "Claim JSON Type" : "String" + } + }, { + "id" : "3bdbb8da-fd46-4e35-9a25-46c77f02e9fd", + "name" : "given name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${givenName}", + "config" : { + "user.attribute" : "firstName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "given_name", + "Claim JSON Type" : "String" + } + }, { + "id" : "8564d12a-5637-44c9-9f4e-af40efb718aa", + "name" : "full name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-full-name-mapper", + "consentRequired" : true, + "consentText" : "${fullName}", + "config" : { + "id.token.claim" : "true", + "access.token.claim" : "true" + } + }, { + "id" : "de0d2bf2-2b61-4cc8-b2a5-dd0f1f4cabae", + "name" : "role list", + "protocol" : "saml", + "protocolMapper" : "saml-role-list-mapper", + "consentRequired" : false, + "config" : { + "single" : "false", + "attribute.nameformat" : "Basic", + "attribute.name" : "Role" + } + } ], + "useTemplateConfig" : false, + "useTemplateScope" : false, + "useTemplateMappers" : false + }, { + "id" : "2c49c344-18ba-4dff-92e6-ba49adb8489f", + "clientId" : "security-admin-console", + "name" : "${client_security-admin-console}", + "baseUrl" : "/auth/admin/qerealm/console/index.html", + "surrogateAuthRequired" : false, + "enabled" : true, + "clientAuthenticatorType" : "client-secret", + "secret" : "a3b6da19-6f23-4591-8f25-d1b4d2e127db", + "redirectUris" : [ "/auth/admin/qerealm/console/*" ], + "webOrigins" : [ ], + "notBefore" : 0, + "bearerOnly" : false, + "consentRequired" : false, + "standardFlowEnabled" : true, + "implicitFlowEnabled" : false, + "directAccessGrantsEnabled" : false, + "serviceAccountsEnabled" : false, + "publicClient" : true, + "frontchannelLogout" : false, + "attributes" : { }, + "fullScopeAllowed" : false, + "nodeReRegistrationTimeout" : 0, + "protocolMappers" : [ { + "id" : "e3955010-4e9a-4e1a-993a-2ff8140d116e", + "name" : "username", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${username}", + "config" : { + "user.attribute" : "username", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "preferred_username", + "Claim JSON Type" : "String" + } + }, { + "id" : "a3fd7ce0-ce59-4de1-858a-d2131b188d15", + "name" : "family name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${familyName}", + "config" : { + "user.attribute" : "lastName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "family_name", + "Claim JSON Type" : "String" + } + }, { + "id" : "01c5141e-aba0-490e-8f53-08c13861317c", + "name" : "full name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-full-name-mapper", + "consentRequired" : true, + "consentText" : "${fullName}", + "config" : { + "id.token.claim" : "true", + "access.token.claim" : "true" + } + }, { + "id" : "b6251621-ed1e-4c7f-9a4a-4a928c85e5c7", + "name" : "role list", + "protocol" : "saml", + "protocolMapper" : "saml-role-list-mapper", + "consentRequired" : false, + "config" : { + "single" : "false", + "attribute.nameformat" : "Basic", + "attribute.name" : "Role" + } + }, { + "id" : "7362035b-b814-47f8-b2ea-cf1ff90b3ada", + "name" : "given name", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${givenName}", + "config" : { + "user.attribute" : "firstName", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "given_name", + "Claim JSON Type" : "String" + } + }, { + "id" : "1765cd70-af59-44d0-8276-b3484ca0f6f0", + "name" : "email", + "protocol" : "openid-connect", + "protocolMapper" : "oidc-usermodel-property-mapper", + "consentRequired" : true, + "consentText" : "${email}", + "config" : { + "user.attribute" : "email", + "id.token.claim" : "true", + "access.token.claim" : "true", + "claim.name" : "email", + "Claim JSON Type" : "String" + } + } ], + "useTemplateConfig" : false, + "useTemplateScope" : false, + "useTemplateMappers" : false + } ], + "clientTemplates" : [ ], + "browserSecurityHeaders" : { + "xFrameOptions" : "SAMEORIGIN", + "contentSecurityPolicy" : "frame-src 'self'" + }, + "smtpServer" : { }, + "eventsEnabled" : false, + "eventsListeners" : [ "jboss-logging" ], + "enabledEventTypes" : [ ], + "adminEventsEnabled" : false, + "adminEventsDetailsEnabled" : false, + "internationalizationEnabled" : false, + "supportedLocales" : [ ], + "authenticationFlows" : [ { + "id" : "fa3fb1a7-100a-4dd9-ba40-31dae0731c63", + "alias" : "Handle Existing Account", + "description" : "Handle what to do if there is existing account with same email/username like authenticated identity provider", + "providerId" : "basic-flow", + "topLevel" : false, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "idp-confirm-link", + "requirement" : "REQUIRED", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "idp-email-verification", + "requirement" : "ALTERNATIVE", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "requirement" : "ALTERNATIVE", + "priority" : 30, + "flowAlias" : "Verify Existing Account by Re-authentication", + "userSetupAllowed" : false, + "autheticatorFlow" : true + } ] + }, { + "id" : "74ddcecd-9253-46a0-b9cc-55758c7c83c5", + "alias" : "Verify Existing Account by Re-authentication", + "description" : "Reauthentication of existing account", + "providerId" : "basic-flow", + "topLevel" : false, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "idp-username-password-form", + "requirement" : "REQUIRED", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "auth-otp-form", + "requirement" : "OPTIONAL", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + } ] + }, { + "id" : "7ded1456-6572-4f7b-a193-93efdc163662", + "alias" : "browser", + "description" : "browser based authentication", + "providerId" : "basic-flow", + "topLevel" : true, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "auth-cookie", + "requirement" : "ALTERNATIVE", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "auth-spnego", + "requirement" : "DISABLED", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "requirement" : "ALTERNATIVE", + "priority" : 30, + "flowAlias" : "forms", + "userSetupAllowed" : false, + "autheticatorFlow" : true + } ] + }, { + "id" : "d3518d7b-4713-4ca2-a917-3496dfa865e7", + "alias" : "clients", + "description" : "Base authentication for clients", + "providerId" : "client-flow", + "topLevel" : true, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "client-secret", + "requirement" : "ALTERNATIVE", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "client-jwt", + "requirement" : "ALTERNATIVE", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + } ] + }, { + "id" : "2720d31c-a756-44f9-a181-676ad9b16eb2", + "alias" : "direct grant", + "description" : "OpenID Connect Resource Owner Grant", + "providerId" : "basic-flow", + "topLevel" : true, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "direct-grant-validate-username", + "requirement" : "REQUIRED", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "direct-grant-validate-password", + "requirement" : "REQUIRED", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "direct-grant-validate-otp", + "requirement" : "OPTIONAL", + "priority" : 30, + "userSetupAllowed" : false, + "autheticatorFlow" : false + } ] + }, { + "id" : "825a13a6-2e26-481c-975e-dedd64eba091", + "alias" : "first broker login", + "description" : "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account", + "providerId" : "basic-flow", + "topLevel" : true, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticatorConfig" : "review profile config", + "authenticator" : "idp-review-profile", + "requirement" : "REQUIRED", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticatorConfig" : "create unique user config", + "authenticator" : "idp-create-user-if-unique", + "requirement" : "ALTERNATIVE", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "requirement" : "ALTERNATIVE", + "priority" : 30, + "flowAlias" : "Handle Existing Account", + "userSetupAllowed" : false, + "autheticatorFlow" : true + } ] + }, { + "id" : "f20ac71a-432f-4a11-96a8-aed7f3f53c3b", + "alias" : "forms", + "description" : "Username, password, otp and other auth forms.", + "providerId" : "basic-flow", + "topLevel" : false, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "auth-username-password-form", + "requirement" : "REQUIRED", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "auth-otp-form", + "requirement" : "OPTIONAL", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + } ] + }, { + "id" : "b40dab19-fcc1-4885-bbc8-a6d29fdfb356", + "alias" : "registration", + "description" : "registration flow", + "providerId" : "basic-flow", + "topLevel" : true, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "registration-page-form", + "requirement" : "REQUIRED", + "priority" : 10, + "flowAlias" : "registration form", + "userSetupAllowed" : false, + "autheticatorFlow" : true + } ] + }, { + "id" : "1f75d652-c851-46f2-b28b-ef6b0e9e9154", + "alias" : "registration form", + "description" : "registration form", + "providerId" : "form-flow", + "topLevel" : false, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "registration-user-creation", + "requirement" : "REQUIRED", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "registration-profile-action", + "requirement" : "REQUIRED", + "priority" : 40, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "registration-password-action", + "requirement" : "REQUIRED", + "priority" : 50, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "registration-recaptcha-action", + "requirement" : "DISABLED", + "priority" : 60, + "userSetupAllowed" : false, + "autheticatorFlow" : false + } ] + }, { + "id" : "1dea02c2-0b24-426b-a28a-438da63e1d29", + "alias" : "reset credentials", + "description" : "Reset credentials for a user if they forgot their password or something", + "providerId" : "basic-flow", + "topLevel" : true, + "builtIn" : true, + "authenticationExecutions" : [ { + "authenticator" : "reset-credentials-choose-user", + "requirement" : "REQUIRED", + "priority" : 10, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "reset-credential-email", + "requirement" : "REQUIRED", + "priority" : 20, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "reset-password", + "requirement" : "REQUIRED", + "priority" : 30, + "userSetupAllowed" : false, + "autheticatorFlow" : false + }, { + "authenticator" : "reset-otp", + "requirement" : "OPTIONAL", + "priority" : 40, + "userSetupAllowed" : false, + "autheticatorFlow" : false + } ] + } ], + "authenticatorConfig" : [ { + "alias" : "create unique user config", + "config" : { + "require.password.update.after.registration" : "false" + } + }, { + "alias" : "review profile config", + "config" : { + "update.profile.on.first.login" : "missing" + } + } ], + "requiredActions" : [ { + "alias" : "CONFIGURE_TOTP", + "name" : "Configure Totp", + "providerId" : "CONFIGURE_TOTP", + "enabled" : true, + "defaultAction" : false, + "config" : { } + }, { + "alias" : "UPDATE_PASSWORD", + "name" : "Update Password", + "providerId" : "UPDATE_PASSWORD", + "enabled" : true, + "defaultAction" : false, + "config" : { } + }, { + "alias" : "UPDATE_PROFILE", + "name" : "Update Profile", + "providerId" : "UPDATE_PROFILE", + "enabled" : true, + "defaultAction" : false, + "config" : { } + }, { + "alias" : "VERIFY_EMAIL", + "name" : "Verify Email", + "providerId" : "VERIFY_EMAIL", + "enabled" : true, + "defaultAction" : false, + "config" : { } + }, { + "alias" : "terms_and_conditions", + "name" : "Terms and Conditions", + "providerId" : "terms_and_conditions", + "enabled" : false, + "defaultAction" : false, + "config" : { } + } ], + "browserFlow" : "browser", + "registrationFlow" : "registration", + "directGrantFlow" : "direct grant", + "resetCredentialsFlow" : "reset credentials", + "clientAuthenticationFlow" : "clients" +} +] diff --git a/tools/docker/keycloak/realms/apiman-users-0.json b/tools/docker/keycloak/realms/apiman-users-0.json deleted file mode 100644 index 2d039ab..0000000 --- a/tools/docker/keycloak/realms/apiman-users-0.json +++ /dev/null @@ -1,56 +0,0 @@ -{ - "realm" : "apiman", - "users" : [ { - "id" : "7e1812bb-652d-4343-8ce0-0d9ff6340b09", - "createdTimestamp" : 1452717177895, - "username" : "admin", - "enabled" : true, - "totp" : false, - "emailVerified" : true, - "firstName" : "Admin", - "lastName" : "User", - "email" : "admin@example.org", - "credentials" : [ { - "type" : "password", - "hashedSaltedValue" : "VfNsGOUkrhrh4KcESDOxhNde1amTyhETqSTDmgeIfBxsniM3vcyQdEYDzuEgW5GwWCyTE4cGHstAzSpzXnJIyg==", - "salt" : "04otAOy0+i+LEtmmX0iGhw==", - "hashIterations" : 1, - "counter" : 0, - "algorithm" : "pbkdf2", - "digits" : 0, - "createdDate" : 1452717197000 - } ], - "requiredActions" : [ ], - "realmRoles" : [ "apiadmin", "offline_access", "apiuser" ], - "clientRoles" : { - "account" : [ "manage-account", "view-profile" ] - }, - "groups" : [ ] - }, { - "id" : "47fa988a-73c3-4a12-9e5d-92b0edd3115a", - "createdTimestamp" : 1452717220155, - "username" : "apimanager", - "enabled" : true, - "totp" : false, - "emailVerified" : true, - "firstName" : "API", - "lastName" : "Manager", - "email" : "apimanager@example.org", - "credentials" : [ { - "type" : "password", - "hashedSaltedValue" : "opeyac9aLYiFXeNC7E2g3wSUUg5/HilmjJNd0HP3ipGaeMK2MfGsutNfkjqSmQ+F8xXwzMDIzUn8gQtTSN3fng==", - "salt" : "9T1xFfaLFBc1QXcdaH7Uow==", - "hashIterations" : 1, - "counter" : 0, - "algorithm" : "pbkdf2", - "digits" : 0, - "createdDate" : 1452717231000 - } ], - "requiredActions" : [ ], - "realmRoles" : [ "offline_access", "apiuser", "apipublisher" ], - "clientRoles" : { - "account" : [ "manage-account", "view-profile" ] - }, - "groups" : [ ] - } ] -} \ No newline at end of file diff --git a/tools/docker/keycloak/realms/qerealm-realm.json b/tools/docker/keycloak/realms/qerealm-realm.json deleted file mode 100644 index d93cc28..0000000 --- a/tools/docker/keycloak/realms/qerealm-realm.json +++ /dev/null @@ -1,1232 +0,0 @@ -{ - "id" : "qerealm", - "realm" : "qerealm", - "notBefore" : 0, - "revokeRefreshToken" : false, - "accessTokenLifespan" : 30, - "accessTokenLifespanForImplicitFlow" : 900, - "ssoSessionIdleTimeout" : 300, - "ssoSessionMaxLifespan" : 300, - "offlineSessionIdleTimeout" : 864000, - "accessCodeLifespan" : 60, - "accessCodeLifespanUserAction" : 60, - "accessCodeLifespanLogin" : 60, - "enabled" : true, - "sslRequired" : "none", - "registrationAllowed" : false, - "registrationEmailAsUsername" : false, - "rememberMe" : false, - "verifyEmail" : false, - "resetPasswordAllowed" : false, - "editUsernameAllowed" : false, - "bruteForceProtected" : false, - "maxFailureWaitSeconds" : 900, - "minimumQuickLoginWaitSeconds" : 60, - "waitIncrementSeconds" : 60, - "quickLoginCheckMilliSeconds" : 1000, - "maxDeltaTimeSeconds" : 43200, - "failureFactor" : 30, - "privateKey" : "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", - "publicKey" : "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWGyngp7pGoEUnfw+U6IeO8e8ugeQbSN06AaO2sNTQJ2kX7lqeCnuHrCHp+txZPHEH/SplWdd5xoNKy0QaYmWzuaFssjIpgch1lv0gU8oyVMbbzoyviRhAuVnVjdaDz6x0vG+ci65do9bacdR/wenVN6Vc2YTJapTw/g6t6ylZh0mCdbcu8IV/UecQkuwn8/c2emJvY5qngIfHOgxIDqFkxsmn/YT3oY0w+QUpODUrMFy6+GnFITNv0JvV1hypqajuxzBu3mGlZYB58e1/+9OS/bFwGAlG3rluUuJ+Ry65FW6gfIe2Nd13V8JKn9zplQPuYyPXkKPybdzSFUYnn+MQIDAQAB", - "certificate" : "MIICnTCCAYUCBgFQsxAFFDANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdxZXJlYWxtMB4XDTE1MTAyOTEwMDQ0MloXDTI1MTAyOTEwMDYyMlowEjEQMA4GA1UEAwwHcWVyZWFsbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIlhsp4Ke6RqBFJ38PlOiHjvHvLoHkG0jdOgGjtrDU0CdpF+5angp7h6wh6frcWTxxB/0qZVnXecaDSstEGmJls7mhbLIyKYHIdZb9IFPKMlTG286Mr4kYQLlZ1Y3Wg8+sdLxvnIuuXaPW2nHUf8Hp1TelXNmEyWqU8P4OrespWYdJgnW3LvCFf1HnEJLsJ/P3Nnpib2Oap4CHxzoMSA6hZMbJp/2E96GNMPkFKTg1KzBcuvhpxSEzb9Cb1dYcqamo7scwbt5hpWWAefHtf/vTkv2xcBgJRt65blLifkcuuRVuoHyHtjXdd1fCSp/c6ZUD7mMj15Cj8m3c0hVGJ5/jECAwEAATANBgkqhkiG9w0BAQsFAAOCAQEALkykNdfLHAjATiYBmZbzJBPYtIOcREk6GjfN/Tm/M9h4etBvs3c+nUo5RCuzgQn9mXu019evs8BtQpqKSRf6gEhjmyPQVjOO/evyIa5Ixh62JaJm8zj5wQNdyAlXuP5BgGgPoOjb5z2mNSmcbF2N4JlTXmcz12+4AaHDX0lN06FfSAcxVxtL1m19ksnqxoDDDLBVIxCU9r/kIg1rPLUl7veAy6xtY31YaQ7kYTAJsi5IGTZhz3IvbyF1E+ybhNWEASZVUi8ob014dXGhaEBEottf1FsfVgmzjlHTlPYVtT+5pAGGFBbPHMta6j9kV3G0fWIF8Sc1RWbAf1Z7Ox+PiA==", - "codeSecret" : "21a2ac72-a548-42bd-9c29-cb9e6b78f9e3", - "roles" : { - "realm" : [ { - "id" : "9f4c5c3f-149b-4bf9-9b28-c196b6828728", - "name" : "admin", - "description" : "Is allowed access to anything echo-related", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "06765bde-bf16-45bd-9fe5-f16c43c27c1e", - "name" : "user", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "52960350-b846-417a-bc92-e8f10a3f4305", - "name" : "offline_access", - "description" : "${role_offline-access}", - "scopeParamRequired" : true, - "composite" : false - } ], - "client" : { - "qeclient" : [ ], - "realm-management" : [ { - "id" : "b41e8abc-2f79-4021-ad37-015642058b7a", - "name" : "view-identity-providers", - "description" : "${role_view-identity-providers}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "9cd240ca-2111-4eda-8a75-de220df783e9", - "name" : "view-realm", - "description" : "${role_view-realm}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "d699120d-7a18-4def-9188-f9f366ea4010", - "name" : "manage-events", - "description" : "${role_manage-events}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "df4b79af-2a98-4ca0-a2ae-a8bb62d33ce2", - "name" : "impersonation", - "description" : "${role_impersonation}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "c8ad469f-6fa9-47f5-9648-c88944fb43da", - "name" : "view-users", - "description" : "${role_view-users}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "bf99a374-c5be-4f81-9f24-890998bc51c9", - "name" : "manage-clients", - "description" : "${role_manage-clients}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "ec0f0ad0-0fbc-45cc-967b-b408a48b582d", - "name" : "manage-realm", - "description" : "${role_manage-realm}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "88f42a84-ad03-4bd6-bafe-0ff408232b8e", - "name" : "view-events", - "description" : "${role_view-events}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "ab3ca10c-9301-4285-b7ba-1d298ffb2aa7", - "name" : "manage-users", - "description" : "${role_manage-users}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "fdbb6b19-7f95-46a0-8db7-1fb81bd3f03f", - "name" : "manage-identity-providers", - "description" : "${role_manage-identity-providers}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "207f27db-70a8-4cc3-918a-b90a4d11ff8f", - "name" : "view-clients", - "description" : "${role_view-clients}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "6122efcc-15d5-439c-a5e8-9fe6163913ef", - "name" : "realm-admin", - "description" : "${role_realm-admin}", - "scopeParamRequired" : false, - "composite" : true, - "composites" : { - "client" : { - "realm-management" : [ "view-identity-providers", "view-realm", "manage-events", "impersonation", "manage-clients", "view-users", "manage-realm", "view-events", "manage-users", "manage-identity-providers", "view-clients" ] - } - } - } ], - "security-admin-console" : [ ], - "apiman_conf" : [ ], - "admin-cli" : [ ], - "broker" : [ { - "id" : "408a0363-a07c-49fd-aabe-4e8bd8f6f63a", - "name" : "read-token", - "description" : "${role_read-token}", - "scopeParamRequired" : false, - "composite" : false - } ], - "account" : [ { - "id" : "67ed553b-a528-4479-bf4b-2fabf2119bd0", - "name" : "manage-account", - "description" : "${role_manage-account}", - "scopeParamRequired" : false, - "composite" : false - }, { - "id" : "5452cea3-66bc-49dc-a6e6-76321e4d2f73", - "name" : "view-profile", - "description" : "${role_view-profile}", - "scopeParamRequired" : false, - "composite" : false - } ] - } - }, - "groups" : [ ], - "defaultRoles" : [ "offline_access" ], - "requiredCredentials" : [ "password" ], - "otpPolicyType" : "totp", - "otpPolicyAlgorithm" : "HmacSHA1", - "otpPolicyInitialCounter" : 0, - "otpPolicyDigits" : 6, - "otpPolicyLookAheadWindow" : 1, - "otpPolicyPeriod" : 30, - "clientScopeMappings" : { - "realm-management" : [ { - "client" : "security-admin-console", - "roles" : [ "realm-admin" ] - }, { - "client" : "admin-cli", - "roles" : [ "realm-admin" ] - } ] - }, - "clients" : [ { - "id" : "f23c7ffe-131c-4629-b892-4a545b543461", - "clientId" : "qeclient", - "surrogateAuthRequired" : false, - "enabled" : true, - "clientAuthenticatorType" : "client-secret", - "secret" : "c927fc71-b882-4ae9-9939-c629ba6ae06f", - "redirectUris" : [ ], - "webOrigins" : [ ], - "notBefore" : 0, - "bearerOnly" : false, - "consentRequired" : false, - "standardFlowEnabled" : false, - "implicitFlowEnabled" : false, - "directAccessGrantsEnabled" : true, - "serviceAccountsEnabled" : false, - "publicClient" : true, - "frontchannelLogout" : false, - "protocol" : "openid-connect", - "attributes" : { - "saml.assertion.signature" : "false", - "saml.force.post.binding" : "false", - "saml.multivalued.roles" : "false", - "saml.signature.algorithm" : "RSA_SHA256", - "saml.encrypt" : "false", - "saml_force_name_id_format" : "false", - "saml.client.signature" : "false", - "saml.authnstatement" : "true", - "saml_name_id_format" : "username", - "saml.server.signature" : "false" - }, - "fullScopeAllowed" : true, - "nodeReRegistrationTimeout" : -1, - "protocolMappers" : [ { - "id" : "855c48e2-8751-4242-a586-943b99334f58", - "name" : "family name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${familyName}", - "config" : { - "user.attribute" : "lastName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "family_name", - "Claim JSON Type" : "String" - } - }, { - "id" : "1199e302-a112-450e-946c-21f1f305237a", - "name" : "given name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${givenName}", - "config" : { - "user.attribute" : "firstName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "given_name", - "Claim JSON Type" : "String" - } - }, { - "id" : "9cf38815-494b-45c8-be91-329527f7da5a", - "name" : "email", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${email}", - "config" : { - "user.attribute" : "email", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "email", - "Claim JSON Type" : "String" - } - }, { - "id" : "04cb22df-bb9f-47d9-ace6-bc07d6aee31b", - "name" : "full name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-full-name-mapper", - "consentRequired" : true, - "consentText" : "${fullName}", - "config" : { - "id.token.claim" : "true", - "access.token.claim" : "true" - } - }, { - "id" : "b71cde8f-c6be-4582-bb71-1363d6391c87", - "name" : "username", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${username}", - "config" : { - "user.attribute" : "username", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "preferred_username", - "Claim JSON Type" : "String" - } - }, { - "id" : "f5ebcab2-fb3e-49b8-a32e-de7ca9bb0a59", - "name" : "role list", - "protocol" : "saml", - "protocolMapper" : "saml-role-list-mapper", - "consentRequired" : false, - "config" : { - "single" : "false", - "attribute.nameformat" : "Basic", - "attribute.name" : "Role" - } - } ], - "useTemplateConfig" : false, - "useTemplateScope" : false, - "useTemplateMappers" : false - }, { - "id" : "45510d6f-fcda-4915-8981-2d048413cd4c", - "clientId" : "realm-management", - "name" : "${client_realm-management}", - "surrogateAuthRequired" : false, - "enabled" : true, - "clientAuthenticatorType" : "client-secret", - "secret" : "77d877eb-7f49-474e-b739-9f16a0d96884", - "redirectUris" : [ ], - "webOrigins" : [ ], - "notBefore" : 0, - "bearerOnly" : true, - "consentRequired" : false, - "standardFlowEnabled" : true, - "implicitFlowEnabled" : false, - "directAccessGrantsEnabled" : false, - "serviceAccountsEnabled" : false, - "publicClient" : false, - "frontchannelLogout" : false, - "attributes" : { }, - "fullScopeAllowed" : false, - "nodeReRegistrationTimeout" : 0, - "protocolMappers" : [ { - "id" : "086db4c0-5457-4ceb-bfe2-551fcc216080", - "name" : "email", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${email}", - "config" : { - "user.attribute" : "email", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "email", - "Claim JSON Type" : "String" - } - }, { - "id" : "c2bf289c-3d2b-4dd5-871b-c5b2dd1b3f68", - "name" : "family name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${familyName}", - "config" : { - "user.attribute" : "lastName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "family_name", - "Claim JSON Type" : "String" - } - }, { - "id" : "a8013a77-680a-4759-ad54-f6c25df3095b", - "name" : "username", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${username}", - "config" : { - "user.attribute" : "username", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "preferred_username", - "Claim JSON Type" : "String" - } - }, { - "id" : "3bdbb8da-fd46-4e35-9a25-46c77f02e9fd", - "name" : "given name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${givenName}", - "config" : { - "user.attribute" : "firstName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "given_name", - "Claim JSON Type" : "String" - } - }, { - "id" : "8564d12a-5637-44c9-9f4e-af40efb718aa", - "name" : "full name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-full-name-mapper", - "consentRequired" : true, - "consentText" : "${fullName}", - "config" : { - "id.token.claim" : "true", - "access.token.claim" : "true" - } - }, { - "id" : "de0d2bf2-2b61-4cc8-b2a5-dd0f1f4cabae", - "name" : "role list", - "protocol" : "saml", - "protocolMapper" : "saml-role-list-mapper", - "consentRequired" : false, - "config" : { - "single" : "false", - "attribute.nameformat" : "Basic", - "attribute.name" : "Role" - } - } ], - "useTemplateConfig" : false, - "useTemplateScope" : false, - "useTemplateMappers" : false - }, { - "id" : "2c49c344-18ba-4dff-92e6-ba49adb8489f", - "clientId" : "security-admin-console", - "name" : "${client_security-admin-console}", - "baseUrl" : "/auth/admin/qerealm/console/index.html", - "surrogateAuthRequired" : false, - "enabled" : true, - "clientAuthenticatorType" : "client-secret", - "secret" : "a3b6da19-6f23-4591-8f25-d1b4d2e127db", - "redirectUris" : [ "/auth/admin/qerealm/console/*" ], - "webOrigins" : [ ], - "notBefore" : 0, - "bearerOnly" : false, - "consentRequired" : false, - "standardFlowEnabled" : true, - "implicitFlowEnabled" : false, - "directAccessGrantsEnabled" : false, - "serviceAccountsEnabled" : false, - "publicClient" : true, - "frontchannelLogout" : false, - "attributes" : { }, - "fullScopeAllowed" : false, - "nodeReRegistrationTimeout" : 0, - "protocolMappers" : [ { - "id" : "e3955010-4e9a-4e1a-993a-2ff8140d116e", - "name" : "username", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${username}", - "config" : { - "user.attribute" : "username", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "preferred_username", - "Claim JSON Type" : "String" - } - }, { - "id" : "a3fd7ce0-ce59-4de1-858a-d2131b188d15", - "name" : "family name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${familyName}", - "config" : { - "user.attribute" : "lastName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "family_name", - "Claim JSON Type" : "String" - } - }, { - "id" : "01c5141e-aba0-490e-8f53-08c13861317c", - "name" : "full name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-full-name-mapper", - "consentRequired" : true, - "consentText" : "${fullName}", - "config" : { - "id.token.claim" : "true", - "access.token.claim" : "true" - } - }, { - "id" : "b6251621-ed1e-4c7f-9a4a-4a928c85e5c7", - "name" : "role list", - "protocol" : "saml", - "protocolMapper" : "saml-role-list-mapper", - "consentRequired" : false, - "config" : { - "single" : "false", - "attribute.nameformat" : "Basic", - "attribute.name" : "Role" - } - }, { - "id" : "7362035b-b814-47f8-b2ea-cf1ff90b3ada", - "name" : "given name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${givenName}", - "config" : { - "user.attribute" : "firstName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "given_name", - "Claim JSON Type" : "String" - } - }, { - "id" : "1765cd70-af59-44d0-8276-b3484ca0f6f0", - "name" : "email", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${email}", - "config" : { - "user.attribute" : "email", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "email", - "Claim JSON Type" : "String" - } - } ], - "useTemplateConfig" : false, - "useTemplateScope" : false, - "useTemplateMappers" : false - }, { - "id" : "b5f330f6-cdca-4581-b34e-29e45d7a19cb", - "clientId" : "apiman_conf", - "name" : "", - "surrogateAuthRequired" : false, - "enabled" : true, - "clientAuthenticatorType" : "client-secret", - "secret" : "f814a076-8e3a-4360-907d-6b7fc21401e4", - "redirectUris" : [ "/*" ], - "webOrigins" : [ ], - "notBefore" : 0, - "bearerOnly" : false, - "consentRequired" : true, - "standardFlowEnabled" : true, - "implicitFlowEnabled" : false, - "directAccessGrantsEnabled" : false, - "serviceAccountsEnabled" : false, - "publicClient" : false, - "frontchannelLogout" : false, - "protocol" : "openid-connect", - "attributes" : { - "saml.assertion.signature" : "false", - "saml.force.post.binding" : "false", - "saml.multivalued.roles" : "false", - "saml.signature.algorithm" : "RSA_SHA256", - "saml.encrypt" : "false", - "saml_force_name_id_format" : "false", - "saml.client.signature" : "false", - "saml.authnstatement" : "true", - "saml_name_id_format" : "username", - "saml.server.signature" : "false", - "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#" - }, - "fullScopeAllowed" : false, - "nodeReRegistrationTimeout" : -1, - "protocolMappers" : [ { - "id" : "2f333ceb-de9d-4ded-b87f-90cbc04f3b63", - "name" : "role list", - "protocol" : "saml", - "protocolMapper" : "saml-role-list-mapper", - "consentRequired" : false, - "config" : { - "single" : "false", - "attribute.nameformat" : "Basic", - "attribute.name" : "Role" - } - }, { - "id" : "830fa2b5-a3e6-4b14-ab91-f5a1e136b7da", - "name" : "given name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${givenName}", - "config" : { - "user.attribute" : "firstName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "given_name", - "jsonType.label" : "String" - } - }, { - "id" : "63aaed19-38b6-4c10-975b-5416c133636d", - "name" : "email", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${email}", - "config" : { - "user.attribute" : "email", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "email", - "jsonType.label" : "String" - } - }, { - "id" : "74220c7a-2353-47db-acff-68a4f0feb80c", - "name" : "full name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-full-name-mapper", - "consentRequired" : true, - "consentText" : "${fullName}", - "config" : { - "id.token.claim" : "true", - "access.token.claim" : "true" - } - }, { - "id" : "628b9f62-bf43-4ace-baf9-02a9c41cae65", - "name" : "family name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${familyName}", - "config" : { - "user.attribute" : "lastName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "family_name", - "jsonType.label" : "String" - } - }, { - "id" : "313fb6c2-4e31-4868-9c47-606d9e3fd7e0", - "name" : "username", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${username}", - "config" : { - "user.attribute" : "username", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "preferred_username", - "jsonType.label" : "String" - } - } ], - "useTemplateConfig" : false, - "useTemplateScope" : false, - "useTemplateMappers" : false - }, { - "id" : "c3560cdc-e801-4f5f-ba93-a843c44ba0b7", - "clientId" : "admin-cli", - "name" : "${client_admin-cli}", - "surrogateAuthRequired" : false, - "enabled" : true, - "clientAuthenticatorType" : "client-secret", - "secret" : "90fe83b9-a49f-4dee-8d77-980b3fe181cc", - "redirectUris" : [ ], - "webOrigins" : [ ], - "notBefore" : 0, - "bearerOnly" : false, - "consentRequired" : false, - "standardFlowEnabled" : false, - "implicitFlowEnabled" : false, - "directAccessGrantsEnabled" : true, - "serviceAccountsEnabled" : false, - "publicClient" : true, - "frontchannelLogout" : false, - "attributes" : { }, - "fullScopeAllowed" : false, - "nodeReRegistrationTimeout" : 0, - "protocolMappers" : [ { - "id" : "402dac5c-c87f-47f5-82aa-7cd6e3acfe36", - "name" : "username", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${username}", - "config" : { - "user.attribute" : "username", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "preferred_username", - "jsonType.label" : "String" - } - }, { - "id" : "1f09b92b-6f2f-4da0-b8ff-9c07b363311e", - "name" : "email", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${email}", - "config" : { - "user.attribute" : "email", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "email", - "jsonType.label" : "String" - } - }, { - "id" : "8faaff31-0ad6-4260-b2af-811f199521ea", - "name" : "full name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-full-name-mapper", - "consentRequired" : true, - "consentText" : "${fullName}", - "config" : { - "id.token.claim" : "true", - "access.token.claim" : "true" - } - }, { - "id" : "a1a3ca95-ab17-40e9-afa3-616acf8f5313", - "name" : "family name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${familyName}", - "config" : { - "user.attribute" : "lastName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "family_name", - "jsonType.label" : "String" - } - }, { - "id" : "eab06e2e-f1aa-4f0e-99d8-d893df30ed8c", - "name" : "role list", - "protocol" : "saml", - "protocolMapper" : "saml-role-list-mapper", - "consentRequired" : false, - "config" : { - "single" : "false", - "attribute.nameformat" : "Basic", - "attribute.name" : "Role" - } - }, { - "id" : "83f991d2-b4ea-4c14-a5d8-306f800468c1", - "name" : "given name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${givenName}", - "config" : { - "user.attribute" : "firstName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "given_name", - "jsonType.label" : "String" - } - } ], - "useTemplateConfig" : false, - "useTemplateScope" : false, - "useTemplateMappers" : false - }, { - "id" : "6c29081a-a646-4e1c-94fc-b429527e564a", - "clientId" : "broker", - "name" : "${client_broker}", - "surrogateAuthRequired" : false, - "enabled" : true, - "clientAuthenticatorType" : "client-secret", - "secret" : "38967b66-a777-4fb5-a1a7-fd42296b7b1f", - "redirectUris" : [ ], - "webOrigins" : [ ], - "notBefore" : 0, - "bearerOnly" : false, - "consentRequired" : false, - "standardFlowEnabled" : true, - "implicitFlowEnabled" : false, - "directAccessGrantsEnabled" : false, - "serviceAccountsEnabled" : false, - "publicClient" : false, - "frontchannelLogout" : false, - "attributes" : { }, - "fullScopeAllowed" : false, - "nodeReRegistrationTimeout" : 0, - "protocolMappers" : [ { - "id" : "6bb1ffec-0538-4a78-8afc-32f921a23118", - "name" : "role list", - "protocol" : "saml", - "protocolMapper" : "saml-role-list-mapper", - "consentRequired" : false, - "config" : { - "single" : "false", - "attribute.nameformat" : "Basic", - "attribute.name" : "Role" - } - }, { - "id" : "a38f7374-4134-4104-8a24-c675e2393e3d", - "name" : "full name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-full-name-mapper", - "consentRequired" : true, - "consentText" : "${fullName}", - "config" : { - "id.token.claim" : "true", - "access.token.claim" : "true" - } - }, { - "id" : "48d33d93-ade6-4a99-9628-b4f5bd182334", - "name" : "given name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${givenName}", - "config" : { - "user.attribute" : "firstName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "given_name", - "Claim JSON Type" : "String" - } - }, { - "id" : "b3291055-d3e7-4e4b-824e-fd441417f12f", - "name" : "family name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${familyName}", - "config" : { - "user.attribute" : "lastName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "family_name", - "Claim JSON Type" : "String" - } - }, { - "id" : "9966fc24-3c36-428b-a1a5-3dd3e053e7ce", - "name" : "username", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${username}", - "config" : { - "user.attribute" : "username", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "preferred_username", - "Claim JSON Type" : "String" - } - }, { - "id" : "3a498871-ee98-4ace-8083-7e90d17fc1ff", - "name" : "email", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${email}", - "config" : { - "user.attribute" : "email", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "email", - "Claim JSON Type" : "String" - } - } ], - "useTemplateConfig" : false, - "useTemplateScope" : false, - "useTemplateMappers" : false - }, { - "id" : "1f97eaf4-6435-48dd-8b77-f0a61dbd5343", - "clientId" : "account", - "name" : "${client_account}", - "baseUrl" : "/auth/realms/qerealm/account", - "surrogateAuthRequired" : false, - "enabled" : true, - "clientAuthenticatorType" : "client-secret", - "secret" : "06e44ca8-fd8e-4754-8f5d-bb0d9a6ebcc6", - "defaultRoles" : [ "view-profile", "manage-account" ], - "redirectUris" : [ "/auth/realms/qerealm/account/*" ], - "webOrigins" : [ ], - "notBefore" : 0, - "bearerOnly" : false, - "consentRequired" : false, - "standardFlowEnabled" : true, - "implicitFlowEnabled" : false, - "directAccessGrantsEnabled" : false, - "serviceAccountsEnabled" : false, - "publicClient" : false, - "frontchannelLogout" : false, - "attributes" : { }, - "fullScopeAllowed" : false, - "nodeReRegistrationTimeout" : 0, - "protocolMappers" : [ { - "id" : "76e84547-a1db-4fd5-b650-2e39de451985", - "name" : "given name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${givenName}", - "config" : { - "user.attribute" : "firstName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "given_name", - "Claim JSON Type" : "String" - } - }, { - "id" : "b7da15d8-c92b-4287-b40c-71f96fea2445", - "name" : "full name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-full-name-mapper", - "consentRequired" : true, - "consentText" : "${fullName}", - "config" : { - "id.token.claim" : "true", - "access.token.claim" : "true" - } - }, { - "id" : "e46b35d9-d1fd-4a78-9bab-43996517e813", - "name" : "role list", - "protocol" : "saml", - "protocolMapper" : "saml-role-list-mapper", - "consentRequired" : false, - "config" : { - "single" : "false", - "attribute.nameformat" : "Basic", - "attribute.name" : "Role" - } - }, { - "id" : "7307a307-62ed-40c0-9cfa-1ee6cdde0052", - "name" : "email", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${email}", - "config" : { - "user.attribute" : "email", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "email", - "Claim JSON Type" : "String" - } - }, { - "id" : "5aaeeb2b-17b9-4b93-957f-d4ae4bd98d33", - "name" : "username", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${username}", - "config" : { - "user.attribute" : "username", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "preferred_username", - "Claim JSON Type" : "String" - } - }, { - "id" : "b007ff11-9bbb-43bb-87a0-a2271d2bd54d", - "name" : "family name", - "protocol" : "openid-connect", - "protocolMapper" : "oidc-usermodel-property-mapper", - "consentRequired" : true, - "consentText" : "${familyName}", - "config" : { - "user.attribute" : "lastName", - "id.token.claim" : "true", - "access.token.claim" : "true", - "claim.name" : "family_name", - "Claim JSON Type" : "String" - } - } ], - "useTemplateConfig" : false, - "useTemplateScope" : false, - "useTemplateMappers" : false - } ], - "clientTemplates" : [ ], - "browserSecurityHeaders" : { - "contentSecurityPolicy" : "frame-src 'self'", - "xFrameOptions" : "SAMEORIGIN" - }, - "smtpServer" : { }, - "eventsEnabled" : false, - "eventsListeners" : [ "jboss-logging" ], - "enabledEventTypes" : [ ], - "adminEventsEnabled" : false, - "adminEventsDetailsEnabled" : false, - "internationalizationEnabled" : false, - "supportedLocales" : [ ], - "authenticationFlows" : [ { - "alias" : "Handle Existing Account", - "description" : "Handle what to do if there is existing account with same email/username like authenticated identity provider", - "providerId" : "basic-flow", - "topLevel" : false, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "idp-confirm-link", - "autheticatorFlow" : false, - "requirement" : "REQUIRED", - "userSetupAllowed" : false, - "priority" : 10 - }, { - "authenticator" : "idp-email-verification", - "autheticatorFlow" : false, - "requirement" : "ALTERNATIVE", - "userSetupAllowed" : false, - "priority" : 20 - }, { - "flowAlias" : "Verify Existing Account by Re-authentication", - "autheticatorFlow" : true, - "requirement" : "ALTERNATIVE", - "userSetupAllowed" : false, - "priority" : 30 - } ] - }, { - "alias" : "Verify Existing Account by Re-authentication", - "description" : "Reauthentication of existing account", - "providerId" : "basic-flow", - "topLevel" : false, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "idp-username-password-form", - "autheticatorFlow" : false, - "requirement" : "REQUIRED", - "userSetupAllowed" : false, - "priority" : 10 - }, { - "authenticator" : "auth-otp-form", - "autheticatorFlow" : false, - "requirement" : "OPTIONAL", - "userSetupAllowed" : false, - "priority" : 20 - } ] - }, { - "alias" : "browser", - "description" : "browser based authentication", - "providerId" : "basic-flow", - "topLevel" : true, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "auth-cookie", - "autheticatorFlow" : false, - "requirement" : "ALTERNATIVE", - "userSetupAllowed" : false, - "priority" : 10 - }, { - "authenticator" : "auth-spnego", - "autheticatorFlow" : false, - "requirement" : "DISABLED", - "userSetupAllowed" : false, - "priority" : 20 - }, { - "flowAlias" : "forms", - "autheticatorFlow" : true, - "requirement" : "ALTERNATIVE", - "userSetupAllowed" : false, - "priority" : 30 - } ] - }, { - "alias" : "clients", - "description" : "Base authentication for clients", - "providerId" : "client-flow", - "topLevel" : true, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "client-secret", - "autheticatorFlow" : false, - "requirement" : "ALTERNATIVE", - "userSetupAllowed" : false, - "priority" : 10 - }, { - "authenticator" : "client-jwt", - "autheticatorFlow" : false, - "requirement" : "ALTERNATIVE", - "userSetupAllowed" : false, - "priority" : 20 - } ] - }, { - "alias" : "direct grant", - "description" : "OpenID Connect Resource Owner Grant", - "providerId" : "basic-flow", - "topLevel" : true, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "direct-grant-validate-username", - "autheticatorFlow" : false, - "requirement" : "REQUIRED", - "userSetupAllowed" : false, - "priority" : 10 - }, { - "authenticator" : "direct-grant-validate-password", - "autheticatorFlow" : false, - "requirement" : "REQUIRED", - "userSetupAllowed" : false, - "priority" : 20 - }, { - "authenticator" : "direct-grant-validate-otp", - "autheticatorFlow" : false, - "requirement" : "OPTIONAL", - "userSetupAllowed" : false, - "priority" : 30 - } ] - }, { - "alias" : "first broker login", - "description" : "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account", - "providerId" : "basic-flow", - "topLevel" : true, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticatorConfig" : "review profile config", - "authenticator" : "idp-review-profile", - "autheticatorFlow" : false, - "requirement" : "REQUIRED", - "userSetupAllowed" : false, - "priority" : 10 - }, { - "authenticatorConfig" : "create unique user config", - "authenticator" : "idp-create-user-if-unique", - "autheticatorFlow" : false, - "requirement" : "ALTERNATIVE", - "userSetupAllowed" : false, - "priority" : 20 - }, { - "flowAlias" : "Handle Existing Account", - "autheticatorFlow" : true, - "requirement" : "ALTERNATIVE", - "userSetupAllowed" : false, - "priority" : 30 - } ] - }, { - "alias" : "forms", - "description" : "Username, password, otp and other auth forms.", - "providerId" : "basic-flow", - "topLevel" : false, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "auth-username-password-form", - "autheticatorFlow" : false, - "requirement" : "REQUIRED", - "userSetupAllowed" : false, - "priority" : 10 - }, { - "authenticator" : "auth-otp-form", - "autheticatorFlow" : false, - "requirement" : "OPTIONAL", - "userSetupAllowed" : false, - "priority" : 20 - } ] - }, { - "alias" : "registration", - "description" : "registration flow", - "providerId" : "basic-flow", - "topLevel" : true, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "registration-page-form", - "flowAlias" : "registration form", - "autheticatorFlow" : true, - "requirement" : "REQUIRED", - "userSetupAllowed" : false, - "priority" : 10 - } ] - }, { - "alias" : "registration form", - "description" : "registration form", - "providerId" : "form-flow", - "topLevel" : false, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "registration-user-creation", - "autheticatorFlow" : false, - "requirement" : "REQUIRED", - "userSetupAllowed" : false, - "priority" : 20 - }, { - "authenticator" : "registration-profile-action", - "autheticatorFlow" : false, - "requirement" : "REQUIRED", - "userSetupAllowed" : false, - "priority" : 40 - }, { - "authenticator" : "registration-password-action", - "autheticatorFlow" : false, - "requirement" : "REQUIRED", - "userSetupAllowed" : false, - "priority" : 50 - }, { - "authenticator" : "registration-recaptcha-action", - "autheticatorFlow" : false, - "requirement" : "DISABLED", - "userSetupAllowed" : false, - "priority" : 60 - } ] - }, { - "alias" : "reset credentials", - "description" : "Reset credentials for a user if they forgot their password or something", - "providerId" : "basic-flow", - "topLevel" : true, - "builtIn" : true, - "authenticationExecutions" : [ { - "authenticator" : "reset-credentials-choose-user", - "autheticatorFlow" : false, - "requirement" : "REQUIRED", - "userSetupAllowed" : false, - "priority" : 10 - }, { - "authenticator" : "reset-credential-email", - "autheticatorFlow" : false, - "requirement" : "REQUIRED", - "userSetupAllowed" : false, - "priority" : 20 - }, { - "authenticator" : "reset-password", - "autheticatorFlow" : false, - "requirement" : "REQUIRED", - "userSetupAllowed" : false, - "priority" : 30 - }, { - "authenticator" : "reset-otp", - "autheticatorFlow" : false, - "requirement" : "OPTIONAL", - "userSetupAllowed" : false, - "priority" : 40 - } ] - } ], - "authenticatorConfig" : [ { - "alias" : "create unique user config", - "config" : { - "require.password.update.after.registration" : "false" - } - }, { - "alias" : "review profile config", - "config" : { - "update.profile.on.first.login" : "missing" - } - } ], - "requiredActions" : [ { - "alias" : "CONFIGURE_TOTP", - "name" : "Configure Totp", - "providerId" : "CONFIGURE_TOTP", - "enabled" : true, - "defaultAction" : false, - "config" : { } - }, { - "alias" : "UPDATE_PASSWORD", - "name" : "Update Password", - "providerId" : "UPDATE_PASSWORD", - "enabled" : true, - "defaultAction" : false, - "config" : { } - }, { - "alias" : "UPDATE_PROFILE", - "name" : "Update Profile", - "providerId" : "UPDATE_PROFILE", - "enabled" : true, - "defaultAction" : false, - "config" : { } - }, { - "alias" : "VERIFY_EMAIL", - "name" : "Verify Email", - "providerId" : "VERIFY_EMAIL", - "enabled" : true, - "defaultAction" : false, - "config" : { } - }, { - "alias" : "terms_and_conditions", - "name" : "Terms and Conditions", - "providerId" : "terms_and_conditions", - "enabled" : false, - "defaultAction" : false, - "config" : { } - } ], - "browserFlow" : "browser", - "registrationFlow" : "registration", - "directGrantFlow" : "direct grant", - "resetCredentialsFlow" : "reset credentials", - "clientAuthenticationFlow" : "clients" -} \ No newline at end of file diff --git a/tools/docker/keycloak/realms/qerealm-users-0.json b/tools/docker/keycloak/realms/qerealm-users-0.json deleted file mode 100644 index f9786b6..0000000 --- a/tools/docker/keycloak/realms/qerealm-users-0.json +++ /dev/null @@ -1,78 +0,0 @@ -{ - "realm" : "qerealm", - "users" : [ { - "id" : "de4af322-85b2-4dbe-8d53-6a2ee29e4080", - "username" : "admin", - "enabled" : true, - "totp" : false, - "emailVerified" : true, - "firstName" : "admin", - "lastName" : "admin", - "email" : "admin@admin", - "credentials" : [ { - "type" : "password", - "hashedSaltedValue" : "bFNBrC3Z2WrFjUnnDRu6pDdJ90/8BirowTmMgLey/VYyNi3jXylfGnyJ8RmNeNd9N+nUR2zxK34CpTUixagtig==", - "salt" : "7cn1i879ZmKx/Szrsk6nUw==", - "hashIterations" : 1, - "counter" : 0, - "algorithm" : "pbkdf2", - "digits" : 0 - } ], - "requiredActions" : [ ], - "realmRoles" : [ "admin", "user", "offline_access" ], - "clientRoles" : { - "account" : [ "manage-account", "view-profile" ] - }, - "groups" : [ ] - }, { - "id" : "b9ac3953-a9be-42f8-a28c-9911c5b9565f", - "createdTimestamp" : 1445868108359, - "username" : "nobody", - "enabled" : true, - "totp" : false, - "emailVerified" : true, - "firstName" : "nobody", - "lastName" : "nobody", - "email" : "nobody@nobody", - "credentials" : [ { - "type" : "password", - "hashedSaltedValue" : "ynGoGN8y9GxzpQmT03TP4ZLmDpz9ECwoBj4quKE8I3CXDO0H40Wh2segVZZAtOLpMN4KEwk/K4h74KkZocf/4g==", - "salt" : "ERm/bB0ew44oOJBiS9Oa8g==", - "hashIterations" : 1, - "counter" : 0, - "algorithm" : "pbkdf2", - "digits" : 0 - } ], - "requiredActions" : [ ], - "realmRoles" : [ "offline_access" ], - "clientRoles" : { - "account" : [ "manage-account", "view-profile" ] - }, - "groups" : [ ] - }, { - "id" : "54bb8773-9487-4999-8630-6ab56be7ceda", - "createdTimestamp" : 1445868083927, - "username" : "user", - "enabled" : true, - "totp" : false, - "emailVerified" : true, - "firstName" : "user", - "lastName" : "user", - "email" : "user@user", - "credentials" : [ { - "type" : "password", - "hashedSaltedValue" : "3OIYdvn6S6k9hHD5iG9laQvlRz921JraEP9UnD8kyih81+IN8lo6tyzYUnJ1EX6vQUY7ZyNFAMIctE7KBfk2AA==", - "salt" : "DIydRjhwjqBhS1jzxnuMDA==", - "hashIterations" : 1, - "counter" : 0, - "algorithm" : "pbkdf2", - "digits" : 0 - } ], - "requiredActions" : [ ], - "realmRoles" : [ "user", "offline_access" ], - "clientRoles" : { - "account" : [ "manage-account", "view-profile" ] - }, - "groups" : [ ] - } ] -} \ No newline at end of file diff --git a/tools/docker/keycloak/realms/version.json b/tools/docker/keycloak/realms/version.json deleted file mode 100644 index 628bb36..0000000 --- a/tools/docker/keycloak/realms/version.json +++ /dev/null @@ -1,4 +0,0 @@ -{ - "version" : "1.9.0.Final", - "build-time" : "2016-02-23 19:08" -} \ No newline at end of file diff --git a/tools/docker/keycloak/scripts/docker-entrypoint.sh b/tools/docker/keycloak/scripts/docker-entrypoint.sh index d7cb370..351b299 100644 --- a/tools/docker/keycloak/scripts/docker-entrypoint.sh +++ b/tools/docker/keycloak/scripts/docker-entrypoint.sh @@ -8,6 +8,15 @@ function wait_for_server() { echo ">>>>> SERVER STARTED <<<<<" } +# builds string representation of array of redirect uris and prints it in variable format +function build_array() { + host=$1 + port=$2 + ssl_port=$3 + url=$4 + var_name=$5 + echo "export ${var_name}=\"[\\\"http://${host}:${port}/${url}\\\", \\\"https://${host}:${ssl_port}/${url}\\\"]\"" +} # make sure we get fresh logfile logfile rm ${JBOSS_HOME}/standalone/log/server.log 2> /dev/null @@ -16,11 +25,19 @@ rm ${JBOSS_HOME}/standalone/log/server.log 2> /dev/null if [ ! -f $CONFIGURED_FILE ] then - ${JBOSS_HOME}/bin/add-user.sh -r master -u ${KC_USER_NAME} -p ${KC_USER_PASSWORD} + # Create variables containing arrays for realm file + eval `build_array $MANAGER_HOST $MANAGER_PORT $MANAGER_HTTPS_PORT "apiman/*" "APIMAN_URLS"` + eval `build_array $MANAGER_HOST $MANAGER_PORT $MANAGER_HTTPS_PORT "apimanui/*" "APIMANUI_URLS"` + eval `build_array $GATEWAY_HOST $GATEWAY_PORT $GATEWAY_HTTPS_PORT "apiman-gateway-api/*" "APIMAN_GATEWAY_URLS"` + + # create realm file substituting variables in template file + envsubst '$APIMAN_URLS:$APIMANUI_URLS:$APIMAN_GATEWAY_URLS' < ${REALM_FILE_TMPL} > ${REALM_FILE} + + ${JBOSS_HOME}/bin/add-user-keycloak.sh -r master -u ${KC_USER_NAME} -p ${KC_USER_PASSWORD} ${JBOSS_HOME}/bin/standalone.sh -b 0.0.0.0 \ -Dkeycloak.migration.action=import \ - -Dkeycloak.migration.provider=dir \ - -Dkeycloak.migration.dir=${REALM_DIR} & + -Dkeycloak.migration.provider=singleFile \ + -Dkeycloak.migration.file=${REALM_FILE} & WILDFLY_PID=$! touch ${CONFIGURED_FILE}