Configure keycloak correctly in api
This commit is contained in:
@@ -12,11 +12,15 @@ builder.Services.AddProblemDetails();
|
||||
builder.Services.AddOpenApi();
|
||||
|
||||
builder.Services.AddAuthentication()
|
||||
.AddKeycloakJwtBearer(ServiceNames.Keycloak, "TODO", options =>
|
||||
.AddKeycloakJwtBearer(ServiceNames.Keycloak, KeycloakConstants.Realm, options =>
|
||||
{
|
||||
options.Audience = "TODO";
|
||||
options.Authority = "TODO";
|
||||
// options.
|
||||
var keycloakHost = builder.Configuration.GetValue<string>($"services:{ServiceNames.Keycloak}:http:0")
|
||||
?? throw new InvalidOperationException("Keycloak host is not configured.");
|
||||
|
||||
options.MetadataAddress = $"{keycloakHost}/realms/{KeycloakConstants.Realm}/.well-known/openid-configuration";
|
||||
options.RequireHttpsMetadata = !builder.Environment.IsDevelopment();
|
||||
options.Audience = KeycloakConstants.ClientId;
|
||||
options.Authority = keycloakHost;
|
||||
});
|
||||
builder.Services.AddAuthorization();
|
||||
|
||||
|
||||
Reference in New Issue
Block a user