Skip to content

Commit d74d8b2

Browse files
alukachalukach
committed
Fix keycloak bootstrap
1 parent 5d7f04a commit d74d8b2

File tree

2 files changed

+73
-73
lines changed

2 files changed

+73
-73
lines changed

‎demo/keycloak/eoapi-realm.json

+71-71
Original file line numberDiff line numberDiff line change
@@ -412,43 +412,43 @@
412412
"webAuthnPolicyPasswordlessExtraOrigins": [],
413413
"scopeMappings": [
414414
{
415-
"clientScope": "offline_access",
415+
"clientScope": "stac:item:create",
416416
"roles": [
417-
"offline_access"
417+
"Data Admin"
418418
]
419419
},
420420
{
421-
"clientScope": "stac:collection:create",
421+
"clientScope": "stac:item:delete",
422422
"roles": [
423423
"Data Admin"
424424
]
425425
},
426426
{
427-
"clientScope": "stac:collection:delete",
427+
"clientScope": "offline_access",
428428
"roles": [
429-
"Data Admin"
429+
"offline_access"
430430
]
431431
},
432432
{
433-
"clientScope": "stac:collection:update",
433+
"clientScope": "stac:collection:create",
434434
"roles": [
435435
"Data Admin"
436436
]
437437
},
438438
{
439-
"clientScope": "stac:item:create",
439+
"clientScope": "stac:item:update",
440440
"roles": [
441441
"Data Admin"
442442
]
443443
},
444444
{
445-
"clientScope": "stac:item:delete",
445+
"clientScope": "stac:collection:delete",
446446
"roles": [
447447
"Data Admin"
448448
]
449449
},
450450
{
451-
"clientScope": "stac:item:update",
451+
"clientScope": "stac:collection:update",
452452
"roles": [
453453
"Data Admin"
454454
]
@@ -784,15 +784,15 @@
784784
],
785785
"defaultClientScopes": [
786786
"web-origins",
787+
"stac:item:delete",
787788
"acr",
789+
"stac:item:create",
788790
"profile",
789791
"roles",
790792
"stac:collection:create",
791793
"stac:collection:delete",
792-
"stac:collection:update",
793-
"stac:item:create",
794-
"stac:item:delete",
795794
"stac:item:update",
795+
"stac:collection:update",
796796
"email"
797797
],
798798
"optionalClientScopes": [
@@ -1038,6 +1038,18 @@
10381038
}
10391039
]
10401040
},
1041+
{
1042+
"id": "45a21cc4-dc79-467a-8b62-19b9318d93b5",
1043+
"name": "stac:item:create",
1044+
"description": "Ability to create STAC items",
1045+
"protocol": "openid-connect",
1046+
"attributes": {
1047+
"include.in.token.scope": "true",
1048+
"display.on.consent.screen": "true",
1049+
"gui.order": "",
1050+
"consent.screen.text": ""
1051+
}
1052+
},
10411053
{
10421054
"id": "cd343b34-d750-4397-bd77-82cd23cba2e8",
10431055
"name": "role_list",
@@ -1086,6 +1098,18 @@
10861098
}
10871099
]
10881100
},
1101+
{
1102+
"id": "4baf7214-a062-4a64-a07c-26f653e04d4a",
1103+
"name": "stac:item:delete",
1104+
"description": "Ability to delete STAC items",
1105+
"protocol": "openid-connect",
1106+
"attributes": {
1107+
"include.in.token.scope": "true",
1108+
"display.on.consent.screen": "true",
1109+
"gui.order": "",
1110+
"consent.screen.text": ""
1111+
}
1112+
},
10891113
{
10901114
"id": "3c9ae02e-b43c-4e3d-89a7-525323914765",
10911115
"name": "email",
@@ -1310,6 +1334,30 @@
13101334
}
13111335
]
13121336
},
1337+
{
1338+
"id": "127420f1-cc96-4bb0-9bcb-c86a39b92507",
1339+
"name": "stac:collection:create",
1340+
"description": "Ability to create STAC collections",
1341+
"protocol": "openid-connect",
1342+
"attributes": {
1343+
"include.in.token.scope": "true",
1344+
"display.on.consent.screen": "true",
1345+
"gui.order": "",
1346+
"consent.screen.text": ""
1347+
}
1348+
},
1349+
{
1350+
"id": "21c9767a-9941-43ee-94c9-e99fc9e7b556",
1351+
"name": "stac:item:update",
1352+
"description": "Ability to update STAC items",
1353+
"protocol": "openid-connect",
1354+
"attributes": {
1355+
"include.in.token.scope": "true",
1356+
"display.on.consent.screen": "true",
1357+
"gui.order": "",
1358+
"consent.screen.text": ""
1359+
}
1360+
},
13131361
{
13141362
"id": "44058cfa-4682-46be-9cea-3508535c7ca5",
13151363
"name": "address",
@@ -1342,18 +1390,6 @@
13421390
}
13431391
]
13441392
},
1345-
{
1346-
"id": "127420f1-cc96-4bb0-9bcb-c86a39b92507",
1347-
"name": "stac:collection:create",
1348-
"description": "Ability to create STAC collections",
1349-
"protocol": "openid-connect",
1350-
"attributes": {
1351-
"include.in.token.scope": "true",
1352-
"display.on.consent.screen": "true",
1353-
"gui.order": "",
1354-
"consent.screen.text": ""
1355-
}
1356-
},
13571393
{
13581394
"id": "b2d5a08e-1db4-4b2a-9fec-133bc0afc8d4",
13591395
"name": "stac:collection:delete",
@@ -1377,42 +1413,6 @@
13771413
"gui.order": "",
13781414
"consent.screen.text": ""
13791415
}
1380-
},
1381-
{
1382-
"id": "45a21cc4-dc79-467a-8b62-19b9318d93b5",
1383-
"name": "stac:item:create",
1384-
"description": "Ability to create STAC items",
1385-
"protocol": "openid-connect",
1386-
"attributes": {
1387-
"include.in.token.scope": "true",
1388-
"display.on.consent.screen": "true",
1389-
"gui.order": "",
1390-
"consent.screen.text": ""
1391-
}
1392-
},
1393-
{
1394-
"id": "4baf7214-a062-4a64-a07c-26f653e04d4a",
1395-
"name": "stac:item:delete",
1396-
"description": "Ability to delete STAC items",
1397-
"protocol": "openid-connect",
1398-
"attributes": {
1399-
"include.in.token.scope": "true",
1400-
"display.on.consent.screen": "true",
1401-
"gui.order": "",
1402-
"consent.screen.text": ""
1403-
}
1404-
},
1405-
{
1406-
"id": "21c9767a-9941-43ee-94c9-e99fc9e7b556",
1407-
"name": "stac:item:update",
1408-
"description": "Ability to update STAC items",
1409-
"protocol": "openid-connect",
1410-
"attributes": {
1411-
"include.in.token.scope": "true",
1412-
"display.on.consent.screen": "true",
1413-
"gui.order": "",
1414-
"consent.screen.text": ""
1415-
}
14161416
}
14171417
],
14181418
"defaultDefaultClientScopes": [
@@ -1422,12 +1422,12 @@
14221422
"roles",
14231423
"web-origins",
14241424
"acr",
1425-
"stac:collection:create",
14261425
"stac:collection:delete",
14271426
"stac:collection:update",
14281427
"stac:item:create",
14291428
"stac:item:delete",
1430-
"stac:item:update"
1429+
"stac:item:update",
1430+
"stac:collection:create"
14311431
],
14321432
"defaultOptionalClientScopes": [
14331433
"offline_access",
@@ -1485,14 +1485,14 @@
14851485
"subComponents": {},
14861486
"config": {
14871487
"allowed-protocol-mapper-types": [
1488-
"oidc-address-mapper",
1488+
"oidc-usermodel-attribute-mapper",
1489+
"oidc-sha256-pairwise-sub-mapper",
1490+
"oidc-usermodel-property-mapper",
1491+
"saml-user-attribute-mapper",
14891492
"saml-user-property-mapper",
14901493
"oidc-full-name-mapper",
1491-
"oidc-sha256-pairwise-sub-mapper",
14921494
"saml-role-list-mapper",
1493-
"saml-user-attribute-mapper",
1494-
"oidc-usermodel-property-mapper",
1495-
"oidc-usermodel-attribute-mapper"
1495+
"oidc-address-mapper"
14961496
]
14971497
}
14981498
},
@@ -1504,14 +1504,14 @@
15041504
"subComponents": {},
15051505
"config": {
15061506
"allowed-protocol-mapper-types": [
1507-
"saml-user-property-mapper",
1508-
"saml-role-list-mapper",
15091507
"oidc-address-mapper",
15101508
"oidc-sha256-pairwise-sub-mapper",
1511-
"saml-user-attribute-mapper",
15121509
"oidc-usermodel-attribute-mapper",
15131510
"oidc-full-name-mapper",
1514-
"oidc-usermodel-property-mapper"
1511+
"saml-user-attribute-mapper",
1512+
"oidc-usermodel-property-mapper",
1513+
"saml-role-list-mapper",
1514+
"saml-user-property-mapper"
15151515
]
15161516
}
15171517
},

‎demo/keycloak/eoapi-users-0.json

+2-2
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@
2525
"requiredActions": [],
2626
"realmRoles": ["default-roles-eoapi"],
2727
"notBefore": 0,
28-
"groups": []
28+
"groups": ["/Admins"]
2929
},
3030
{
3131
"id": "ebe7613f-377e-416d-9ef5-c990c5ddbe66",
@@ -54,4 +54,4 @@
5454
"groups": []
5555
}
5656
]
57-
}
57+
}

0 commit comments

Comments
 (0)