Updated bb config for Auth0

This commit is contained in:
Markus Thielen 2023-04-21 13:45:23 +02:00
parent 50abd4d7b2
commit 6aeefdec9d
2 changed files with 9 additions and 9 deletions

View File

@ -32,16 +32,16 @@ workers = 2
[oauth2] [oauth2]
# OAuth2 client id # OAuth2 client id
client_id = "todo-app" client_id = "5wl8hQV1thh07rScSoJ3aN56ETuXWprg"
# Oauth2 Realm # Oauth2 Realm
realm = "todo" realm = "basebox-test-1"
# OAuth2 client secret # OAuth2 client secret
client_secret = "SLnMUb4JArLs5LtzoqcQu0rg9PpgLtsN" client_secret = "QlHMvIffKLRviCcSu_bPQcf8e4dc6WeS3BwZE1r1F-9R30AFoeYEwaOazAuFenI5"
# Base URL to the identity provider (OAuth2/OpenID Connect server, e.g. Keycloak) # Base URL to the identity provider (OAuth2/OpenID Connect server, e.g. Keycloak)
idp_url = "https://kcdev.basebox.io:8443" idp_url = "https://basebox-test-1.eu.auth0.com"
# OpenID Connect scope; default is "openid profile email" # OpenID Connect scope; default is "openid profile email"
scope = "openid profile email" scope = "openid profile email"

View File

@ -5,18 +5,18 @@ log_level = "trace"
[idp_config] [idp_config]
# URL of IdP's discovery endpoint. If not set, the URL is made up by appending # URL of IdP's discovery endpoint. If not set, the URL is made up by appending
# ".well-known/openid-configuration" to the id_token_validation.iss field. # ".well-known/openid-configuration" to the id_token_validation.iss field.
discovery_url = "https://kcdev.basebox.io:8443/realms/todo/.well-known/openid-configuration" # discovery_url = "https://kcdev.basebox.io:8443/realms/todo/.well-known/openid-configuration"
# URL of IdP's public keystore. If set, the discovery endpoint is not used at all. # URL of IdP's public keystore. If set, the discovery endpoint is not used at all.
jwks_url = "https://kcdev.basebox.io:8443/realms/todo/protocol/openid-connect/certs" # jwks_url = "https://kcdev.basebox.io:8443/realms/todo/protocol/openid-connect/certs"
[openid_token_validation] [openid_token_validation]
# Incoming ID tokens are validated using, among other, the following fields. # Incoming ID tokens are validated using, among other, the following fields.
# Contents of 'iss' field, usually the URL of the authetnication realm # Contents of 'iss' field, usually the URL of the authetnication realm
iss = "https://kcdev.basebox.io:8443/realms/todo" iss = "https://basebox-test-1.eu.auth0.com/"
# ID token audience field, usually OpenID Connect client ID # ID token audience field, usually OpenID Connect client ID
id_aud = "todo-app" id_aud = "5wl8hQV1thh07rScSoJ3aN56ETuXWprg"
# Access token audience field # Access token audience field
acc_aud = "account" acc_aud = "basebox-todo"
[graphql] [graphql]
# path and file name to GraphQL schema file # path and file name to GraphQL schema file