7a3932f969
* feat: oidc feat: organization switcher refactor: org context feat: invitations GLM * feat: link current account * refactor: own page for sso registration * feat: per-user account management * refactor: code style * refactor: user existing check * refactor: restrict provider configuration to super admins only * refactor: cleanup / pr review * chore: fix lint issues * chore: pr feedbacks * test(e2e): automated tests for OIDC * fix: check url first for sso provider identification * fix: prevent oidc provider to be named "credential"
50 lines
1.5 KiB
YAML
50 lines
1.5 KiB
YAML
issuer: http://dex:5557/dex
|
|
|
|
storage:
|
|
type: sqlite3
|
|
config:
|
|
file: /tmp/dex.db
|
|
|
|
web:
|
|
http: 0.0.0.0:5557
|
|
|
|
enablePasswordDB: true
|
|
|
|
staticPasswords:
|
|
- email: "admin@example.com"
|
|
hash: "$2a$10$2b2cU8CPhOTaGrs1HRQuAueS7JTT5ZHsHSzYiFPm1leZck7Mc8T4W"
|
|
username: "admin"
|
|
- email: "user@example.com"
|
|
hash: "$2a$10$2b2cU8CPhOTaGrs1HRQuAueS7JTT5ZHsHSzYiFPm1leZck7Mc8T4W"
|
|
username: "user"
|
|
- email: "test@example.com"
|
|
hash: "$2a$10$2b2cU8CPhOTaGrs1HRQuAueS7JTT5ZHsHSzYiFPm1leZck7Mc8T4W"
|
|
username: "test"
|
|
- email: "test@test.com"
|
|
hash: "$2a$10$2b2cU8CPhOTaGrs1HRQuAueS7JTT5ZHsHSzYiFPm1leZck7Mc8T4W"
|
|
username: "test-local"
|
|
|
|
staticClients:
|
|
- id: zerobyte-test
|
|
name: Zerobyte Test
|
|
redirectURIs:
|
|
- "http://localhost:3000/api/auth/sso/callback/credential"
|
|
- "http://localhost:3000/api/auth/sso/callback/dex"
|
|
- "http://localhost:4096/api/auth/sso/callback/test-oidc"
|
|
- "http://localhost:4096/api/auth/sso/callback/test-oidc-register"
|
|
- "http://localhost:4096/api/auth/sso/callback/test-oidc-uninvited"
|
|
- "http://localhost:4096/api/auth/sso/callback/test-oidc-invited"
|
|
- "http://localhost:4096/api/auth/sso/callback/test-oidc-autolink"
|
|
secret: test-secret-12345
|
|
|
|
oauth2:
|
|
skipApprovalScreen: true
|
|
|
|
logger:
|
|
level: debug
|
|
format: json
|
|
|
|
# Issuer URL: http://dex:5557/dex
|
|
# Discovery URL: http://dex:5557/dex/.well-known/openid-configuration
|
|
# Client ID: zerobyte-test
|
|
# Client Secret: test-secret-12345
|