Configure keycloak correctly in api
This commit is contained in:
@@ -12,11 +12,15 @@ builder.Services.AddProblemDetails();
|
|||||||
builder.Services.AddOpenApi();
|
builder.Services.AddOpenApi();
|
||||||
|
|
||||||
builder.Services.AddAuthentication()
|
builder.Services.AddAuthentication()
|
||||||
.AddKeycloakJwtBearer(ServiceNames.Keycloak, "TODO", options =>
|
.AddKeycloakJwtBearer(ServiceNames.Keycloak, KeycloakConstants.Realm, options =>
|
||||||
{
|
{
|
||||||
options.Audience = "TODO";
|
var keycloakHost = builder.Configuration.GetValue<string>($"services:{ServiceNames.Keycloak}:http:0")
|
||||||
options.Authority = "TODO";
|
?? throw new InvalidOperationException("Keycloak host is not configured.");
|
||||||
// options.
|
|
||||||
|
options.MetadataAddress = $"{keycloakHost}/realms/{KeycloakConstants.Realm}/.well-known/openid-configuration";
|
||||||
|
options.RequireHttpsMetadata = !builder.Environment.IsDevelopment();
|
||||||
|
options.Audience = KeycloakConstants.ClientId;
|
||||||
|
options.Authority = keycloakHost;
|
||||||
});
|
});
|
||||||
builder.Services.AddAuthorization();
|
builder.Services.AddAuthorization();
|
||||||
|
|
||||||
|
|||||||
8
PresentPortal.Shared/KeycloakConstants.cs
Normal file
8
PresentPortal.Shared/KeycloakConstants.cs
Normal file
@@ -0,0 +1,8 @@
|
|||||||
|
namespace PresentPortal.Shared;
|
||||||
|
|
||||||
|
public static class KeycloakConstants
|
||||||
|
{
|
||||||
|
public const string Realm = "present-portal";
|
||||||
|
|
||||||
|
public const string ClientId = "present-portal";
|
||||||
|
}
|
||||||
Reference in New Issue
Block a user