Skip to content

Commit

Permalink
sso-config updated
Browse files Browse the repository at this point in the history
  • Loading branch information
@martind260
martind260 committed Nov 5, 2024
1 parent 8f9740b commit 2d4e5b3
Show file tree
Hide file tree
Showing 2 changed files with 148 additions and 138 deletions.
89 changes: 18 additions & 71 deletions mobidam-sst-management-backend/sso-config/sso-authorisation.json
View file
Original file line number Diff line number Diff line change
@@ -1,72 +1,19 @@
{
"allowRemoteResourceManagement": false,
"policyEnforcementMode": "ENFORCING",
"resources": [
{
"name": "MOBIDAM_SST_MANAGEMENT_BACKEND_READ_THEENTITY",
"type": "mobidam-sst-management-mobidam-sst-management-backend-service",
"scopes": []
},
{
"name": "MOBIDAM_SST_MANAGEMENT_BACKEND_WRITE_THEENTITY",
"type": "mobidam-sst-management-mobidam-sst-management-backend-service",
"scopes": []
},
{
"name": "MOBIDAM_SST_MANAGEMENT_BACKEND_DELETE_THEENTITY",
"type": "mobidam-sst-management-mobidam-sst-management-backend-service",
"scopes": []
}
],
"policies": [
{
"name": "rolepolicy_admin",
"type": "role",
"logic": "POSITIVE",
"decisionStrategy": "AFFIRMATIVE",
"config": {
"roles": "[{\"id\":\"mobidam-sst-management/clientrole_admin\",\"required\":false}]"
}
},
{
"name": "rolepolicy_readonly",
"type": "role",
"logic": "POSITIVE",
"decisionStrategy": "AFFIRMATIVE",
"config": {
"roles": "[{\"id\":\"mobidam-sst-management/clientrole_readonly\",\"required\":false}]"
}
},
{
"name": "permission_MOBIDAM_SST_MANAGEMENT_BACKEND_DELETE_THEENTITY",
"type": "resource",
"logic": "POSITIVE",
"decisionStrategy": "AFFIRMATIVE",
"config": {
"resources": "[\"MOBIDAM_SST_MANAGEMENT_BACKEND_DELETE_THEENTITY\"]",
"applyPolicies": "[\"rolepolicy_admin\"]"
}
},
{
"name": "permission_MOBIDAM_SST_MANAGEMENT_BACKEND_WRITE_THEENTITY",
"type": "resource",
"logic": "POSITIVE",
"decisionStrategy": "AFFIRMATIVE",
"config": {
"resources": "[\"MOBIDAM_SST_MANAGEMENT_BACKEND_WRITE_THEENTITY\"]",
"applyPolicies": "[\"rolepolicy_admin\"]"
}
},
{
"name": "permission_MOBIDAM_SST_MANAGEMENT_BACKEND_READ_THEENTITY",
"type": "resource",
"logic": "POSITIVE",
"decisionStrategy": "AFFIRMATIVE",
"config": {
"resources": "[\"MOBIDAM_SST_MANAGEMENT_BACKEND_READ_THEENTITY\"]",
"applyPolicies": "[\"rolepolicy_admin\",\"rolepolicy_readonly\"]"
}
}
],
"scopes": []
}
"allowRemoteResourceManagement": true,
"policyEnforcementMode": "ENFORCING",
"resources": [
{
"name": "Default Resource",
"type": "urn:mobidam-sst-management:resources:default",
"ownerManagedAccess": false,
"attributes": {},
"_id": "92c37f30-1f5c-4af6-81fb-180431377912",
"uris": [
"/*"
]
}
],
"policies": [],
"scopes": [],
"decisionStrategy": "UNANIMOUS"
}
197 changes: 130 additions & 67 deletions mobidam-sst-management-backend/sso-config/sso-client.json
View file
Original file line number Diff line number Diff line change
@@ -1,70 +1,133 @@
{
"clientId": "mobidam-sst-management",
"surrogateAuthRequired": false,
"enabled": true,
"clientAuthenticatorType": "client-secret",
"redirectUris": [ "*" ],
"webOrigins": [],
"notBefore": 0,
"bearerOnly": false,
"consentRequired": false,
"standardFlowEnabled": true,
"implicitFlowEnabled": false,
"directAccessGrantsEnabled": true,
"serviceAccountsEnabled": true,
"authorizationServicesEnabled": true,
"publicClient": false,
"frontchannelLogout": false,
"protocol": "openid-connect",
"attributes": {
"saml.assertion.signature": "false",
"saml.force.post.binding": "false",
"saml.multivalued.roles": "false",
"saml.encrypt": "false",
"saml_force_name_id_format": "false",
"saml.client.signature": "false",
"saml.authnstatement": "false",
"saml.server.signature": "false",
"saml.server.signature.keyinfo.ext": "false",
"saml.onetimeuse.condition": "false"
},
"fullScopeAllowed": true,
"nodeReRegistrationTimeout": -1,
"protocolMappers": [
{
"name": "Client ROLES to user_role",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-client-role-mapper",
"consentRequired": false,
"consentText": "",
"config": {
"usermodel.clientRoleMapping.rolePrefix": "ROLE_",
"multivalued": "true",
"userinfo.token.claim": "true",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "user_roles",
"jsonType.label": "String",
"usermodel.clientRoleMapping.clientId": "mobidam-sst-management"
}
"clientId": "mobidam-sst-management",
"surrogateAuthRequired": false,
"enabled": true,
"alwaysDisplayInConsole": false,
"clientAuthenticatorType": "client-secret",
"secret": "",
"redirectUris": [
"*"
],
"webOrigins": [],
"notBefore": 0,
"bearerOnly": false,
"consentRequired": false,
"standardFlowEnabled": true,
"implicitFlowEnabled": false,
"directAccessGrantsEnabled": true,
"serviceAccountsEnabled": true,
"authorizationServicesEnabled": true,
"publicClient": false,
"frontchannelLogout": false,
"protocol": "openid-connect",
"attributes": {
"saml.force.post.binding": "false",
"saml.multivalued.roles": "false",
"frontchannel.logout.session.required": "false",
"oauth2.device.authorization.grant.enabled": "false",
"backchannel.logout.revoke.offline.tokens": "false",
"saml.server.signature.keyinfo.ext": "false",
"use.refresh.tokens": "true",
"oidc.ciba.grant.enabled": "false",
"backchannel.logout.session.required": "true",
"client_credentials.use_refresh_token": "false",
"require.pushed.authorization.requests": "false",
"saml.client.signature": "false",
"saml.allow.ecp.flow": "false",
"id.token.as.detached.signature": "false",
"saml.assertion.signature": "false",
"client.secret.creation.time": "1695303409",
"saml.encrypt": "false",
"saml.server.signature": "false",
"exclude.session.state.from.auth.response": "false",
"saml.artifact.binding": "false",
"saml_force_name_id_format": "false",
"acr.loa.map": "{}",
"tls.client.certificate.bound.access.tokens": "false",
"saml.authnstatement": "false",
"display.on.consent.screen": "false",
"token.response.type.bearer.lower-case": "false",
"saml.onetimeuse.condition": "false"
},
{
"name": "Client PERMISSION to Spring Security authorities",
"protocol": "openid-connect",
"protocolMapper": "oidc-authorities-mapper",
"consentRequired": false,
"config": {
"authorities": "authorities",
"userinfo.token.claim": "true"
}
"authenticationFlowBindingOverrides": {},
"fullScopeAllowed": false,
"nodeReRegistrationTimeout": -1,
"protocolMappers": [
{
"name": "Client ROLES to authorities",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-client-role-mapper",
"consentRequired": false,
"config": {
"usermodel.clientRoleMapping.rolePrefix": "ROLE_",
"multivalued": "true",
"userinfo.token.claim": "true",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "authorities",
"jsonType.label": "String",
"usermodel.clientRoleMapping.clientId": "mobidam-sst-management"
}
},
{
"name": "Client ID",
"protocol": "openid-connect",
"protocolMapper": "oidc-usersessionmodel-note-mapper",
"consentRequired": false,
"config": {
"user.session.note": "clientId",
"userinfo.token.claim": "true",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "clientId",
"jsonType.label": "String"
}
},
{
"name": "Client Host",
"protocol": "openid-connect",
"protocolMapper": "oidc-usersessionmodel-note-mapper",
"consentRequired": false,
"config": {
"user.session.note": "clientHost",
"userinfo.token.claim": "true",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "clientHost",
"jsonType.label": "String"
}
},
{
"name": "Client IP Address",
"protocol": "openid-connect",
"protocolMapper": "oidc-usersessionmodel-note-mapper",
"consentRequired": false,
"config": {
"user.session.note": "clientAddress",
"userinfo.token.claim": "true",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "clientAddress",
"jsonType.label": "String"
}
}
],
"defaultClientScopes": [
"web-origins",
"acr",
"roles",
"profile",
"email"
],
"optionalClientScopes": [
"address",
"phone",
"offline_access",
"microprofile-jwt"
],
"access": {
"view": true,
"configure": true,
"manage": true
}
],
"useTemplateConfig": false,
"useTemplateScope": false,
"useTemplateMappers": false,
"access": {
"view": true,
"configure": true,
"manage": true
}
}
}

0 comments on commit 2d4e5b3

Please sign in to comment.