don't fail if no role found in keycloak groups

appuio · Jan 26, 2024 · df5d5cd · df5d5cd
1 parent 02f1f22
commit df5d5cd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/docker-compose-dev.yml b/docker-compose-dev.yml
@@ -13,7 +13,7 @@ services:
       - GF_AUTH_GENERIC_OAUTH_LOGIN_ATTRIBUTE_PATH=preferred_username
       - GF_AUTH_GENERIC_OAUTH_NAME=VSHN Test Keycloak
       - GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_PATH=roles[?contains(@, 'admin')] && 'Admin' || roles[?contains(@, 'editor')] && 'Editor' || roles[?contains(@, 'viewer')] && 'Viewer' || 'Deny'
-      - GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_STRICT=true
+      - GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_STRICT=false
       - GF_AUTH_GENERIC_OAUTH_SCOPES=openid profile email
       - GF_AUTH_GENERIC_OAUTH_TOKEN_URL=https://id.test.vshn.net/auth/realms/VSHN-main-dev-realm/protocol/openid-connect/token
       - GF_SERVER_DOMAIN=operator-dev-grafana.apps.cloudscale-lpg-2.appuio.cloud