sharang/certifai
1
0
Fork 0
Code Issues 4 Pull Requests 1 Actions Packages Projects Releases Activity

feat(keycloak): add tenant-context client scope + M7.1 test users #41

Open
sharang wants to merge 1 commits from feat/m7.1-realm-claims into main
pull from: feat/m7.1-realm-claims
merge into: sharang:main
Conversation 0 Commits 1 Files Changed 1
+202 -6
1 changed files with 202 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
keycloak/realm-export.json
+202 -6
View File
@@ -53,7 +53,7 @@
"description": "CERTifAI administration dashboard", "description": "CERTifAI administration dashboard",
"enabled": true, "enabled": true,
"publicClient": true, "publicClient": true,
"directAccessGrantsEnabled": false, "directAccessGrantsEnabled": true,
"standardFlowEnabled": true, "standardFlowEnabled": true,
"implicitFlowEnabled": false, "implicitFlowEnabled": false,
"serviceAccountsEnabled": false, "serviceAccountsEnabled": false,
@@ -73,7 +73,8 @@
"defaultClientScopes": [ "defaultClientScopes": [
"openid", "openid",
"profile", "profile",
"email" "email",
"tenant-context"
], ],
"optionalClientScopes": [ "optionalClientScopes": [
"offline_access" "offline_access"
@@ -106,7 +107,8 @@
"defaultClientScopes": [ "defaultClientScopes": [
"openid", "openid",
"profile", "profile",
"email" "email",
"tenant-context"
], ],
"optionalClientScopes": [ "optionalClientScopes": [
"offline_access" "offline_access"
@@ -139,7 +141,8 @@
"defaultClientScopes": [ "defaultClientScopes": [
"openid", "openid",
"profile", "profile",
"email" "email",
"tenant-context"
], ],
"optionalClientScopes": [ "optionalClientScopes": [
"offline_access" "offline_access"
@@ -269,6 +272,105 @@
} }
} }
] ]
},
{
"name": "tenant-context",
"description": "Breakpilot platform tenant + org claims (M7.1)",
"protocol": "openid-connect",
"attributes": {
"include.in.token.scope": "true",
"display.on.consent.screen": "false"
},
"protocolMappers": [
{
"name": "tenant_id",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-attribute-mapper",
"consentRequired": false,
"config": {
"user.attribute": "tenant_id",
"claim.name": "tenant_id",
"id.token.claim": "true",
"access.token.claim": "true",
"userinfo.token.claim": "true",
"jsonType.label": "String"
}
},
{
"name": "tenant_slug",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-attribute-mapper",
"consentRequired": false,
"config": {
"user.attribute": "tenant_slug",
"claim.name": "tenant_slug",
"id.token.claim": "true",
"access.token.claim": "true",
"userinfo.token.claim": "true",
"jsonType.label": "String"
}
},
{
"name": "tenant_status",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-attribute-mapper",
"consentRequired": false,
"config": {
"user.attribute": "tenant_status",
"claim.name": "tenant_status",
"id.token.claim": "true",
"access.token.claim": "true",
"userinfo.token.claim": "true",
"jsonType.label": "String"
}
},
{
"name": "plan",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-attribute-mapper",
"consentRequired": false,
"config": {
"user.attribute": "plan",
"claim.name": "plan",
"id.token.claim": "true",
"access.token.claim": "true",
"userinfo.token.claim": "true",
"jsonType.label": "String"
}
},
{
"name": "org_roles",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-attribute-mapper",
"consentRequired": false,
"config": {
"user.attribute": "org_roles",
"claim.name": "org_roles",
"id.token.claim": "true",
"access.token.claim": "true",
"userinfo.token.claim": "true",
"jsonType.label": "String",
"multivalued": "true",
"aggregate.attrs": "true"
}
},
{
"name": "products",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-attribute-mapper",
"consentRequired": false,
"config": {
"user.attribute": "products",
"claim.name": "products",
"id.token.claim": "true",
"access.token.claim": "true",
"userinfo.token.claim": "true",
"jsonType.label": "String",
"multivalued": "true",
"aggregate.attrs": "true"
}
}
]
} }
], ],
"users": [ "users": [
@@ -289,7 +391,15 @@
"realmRoles": [ "realmRoles": [
"admin", "admin",
"user" "user"
] ],
"attributes": {
"tenant_id": ["00000000-0000-0000-0000-000000000001"],
"tenant_slug": ["acme"],
"tenant_status": ["active"],
"plan": ["professional"],
"org_roles": ["IT_ADMIN", "CXO"],
"products": ["compliance", "certifai"]
}
}, },
{ {
"username": "user@certifai.local", "username": "user@certifai.local",
@@ -307,7 +417,93 @@
], ],
"realmRoles": [ "realmRoles": [
"user" "user"
] ],
"attributes": {
"tenant_id": ["00000000-0000-0000-0000-000000000001"],
"tenant_slug": ["acme"],
"tenant_status": ["active"],
"plan": ["professional"],
"org_roles": ["USER"],
"products": ["compliance"]
}
},
{
"username": "frozen@acme.local",
"email": "frozen@acme.local",
"firstName": "Frozen",
"lastName": "Tenant",
"enabled": true,
"emailVerified": true,
"credentials": [
{
"type": "password",
"value": "frozen",
"temporary": false
}
],
"realmRoles": [
"user"
],
"attributes": {
"tenant_id": ["00000000-0000-0000-0000-000000000002"],
"tenant_slug": ["frozenco"],
"tenant_status": ["frozen"],
"plan": ["starter"],
"org_roles": ["IT_ADMIN"],
"products": ["compliance"]
}
},
{
"username": "archived@acme.local",
"email": "archived@acme.local",
"firstName": "Archived",
"lastName": "Tenant",
"enabled": true,
"emailVerified": true,
"credentials": [
{
"type": "password",
"value": "archived",
"temporary": false
}
],
"realmRoles": [
"user"
],
"attributes": {
"tenant_id": ["00000000-0000-0000-0000-000000000003"],
"tenant_slug": ["archiveco"],
"tenant_status": ["archived"],
"plan": ["starter"],
"org_roles": ["IT_ADMIN"],
"products": ["compliance"]
}
},
{
"username": "trial@acme.local",
"email": "trial@acme.local",
"firstName": "Trial",
"lastName": "Tenant",
"enabled": true,
"emailVerified": true,
"credentials": [
{
"type": "password",
"value": "trial",
"temporary": false
}
],
"realmRoles": [
"user"
],
"attributes": {
"tenant_id": ["00000000-0000-0000-0000-000000000004"],
"tenant_slug": ["trialco"],
"tenant_status": ["trial"],
"plan": ["starter"],
"org_roles": ["IT_ADMIN"],
"products": ["compliance"]
}
} }
] ]
} }