Configure keycloak correctly in api

This commit is contained in:
2025-08-03 19:45:34 +02:00
parent e28eb4bada
commit 865a21458d
2 changed files with 16 additions and 4 deletions

View File

@@ -12,11 +12,15 @@ builder.Services.AddProblemDetails();
builder.Services.AddOpenApi();
builder.Services.AddAuthentication()
.AddKeycloakJwtBearer(ServiceNames.Keycloak, "TODO", options =>
.AddKeycloakJwtBearer(ServiceNames.Keycloak, KeycloakConstants.Realm, options =>
{
options.Audience = "TODO";
options.Authority = "TODO";
// options.
var keycloakHost = builder.Configuration.GetValue<string>($"services:{ServiceNames.Keycloak}:http:0")
?? throw new InvalidOperationException("Keycloak host is not configured.");
options.MetadataAddress = $"{keycloakHost}/realms/{KeycloakConstants.Realm}/.well-known/openid-configuration";
options.RequireHttpsMetadata = !builder.Environment.IsDevelopment();
options.Audience = KeycloakConstants.ClientId;
options.Authority = keycloakHost;
});
builder.Services.AddAuthorization();