Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sample config.yaml file for Keycloak #551

Open
wants to merge 5 commits into
base: master
Choose a base branch
from
+40 −1
Open

Sample config.yaml file for Keycloak #551

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
0516bcf
Added sample config file for keycloak
shkpk Feb 5, 2024
f825b4d
reverting .gitignore
shkpk Feb 5, 2024
bbeb9a5
Updated README.md for keycloak sample config
shkpk Feb 5, 2024
b639ae8
README.md file update for keycloak sample config
shkpk Feb 5, 2024
6669758
Fixed README.md file for keycloak sample config
shkpk Feb 5, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
Added sample config file for keycloak
  • Loading branch information
@shkpk
shkpk committed Feb 5, 2024
commit 0516bcfb7e5403bb3566bafe835c9f4a5190cf2a
2 changes: 1 addition & 1 deletion .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ vouch-proxy
main
config/config.yml
config/*config.yml
config/config.yml_*
#config/config.yml_*
config/google_config.json
config/secret
!config/testing/*
Expand Down
39 changes: 39 additions & 0 deletions config/config.yml_example_keycloak
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,39 @@

# Vouch Proxy configuration
# bare minimum to get Vouch Proxy running with Keycloak

vouch:
domains:
- yourdomain.com

# - OR -
# instead of setting specific domains you may prefer to allow all users...
# set allowAllUsers: true to use Vouch Proxy to just accept anyone who can authenticate at the configured provider
# and set vouch.cookie.domain to the domain you wish to protect
# allowAllUsers: true

cookie:
# allow the jwt/cookie to be set into http://yourdomain.com (defaults to true, requiring https://yourdomain.com)
secure: false
# vouch.cookie.domain must be set when enabling allowAllUsers
# domain: yourdomain.com

oauth:
# Generic OpenID Connect
# for Keycloak
provider: oidc
client_id: xxxxxxxxxxxxxxxxxxxxxxxxxxxx
client_secret: xxxxxxxxxxxxxxxxxxxxxxxx
auth_url: https://{yourKeycloakDomain}/realms/{yourKeycloakRealm}/protocol/openid-connect/auth
token_url: https://{yourKeycloakDomain}/realms/{yourKeycloakRealm}/protocol/openid-connect/token
user_info_url: https://{yourKeycloakDomain}/realms/{yourKeycloakRealm}/protocol/openid-connect/userinfo
scopes:
- openid
- email
- profile
callback_url: http://vouch.yourdomain.com:9090/auth
# you can get values of of auth_url, token_url and user_info_url from https://{yourKeycloakDomain}/realms/{yourKeycloakRealm}/.well-known/openid-configuration
# When configuring client in Keycloak, you should use following values
## valid redirect: http://vouch.yourdomain.com:9090/auth
## valid logout: http://vouch.yourdomain.com:9090/logout
## web origin: http://vouch.yourdomain.com:9090