identity_providers:
  oidc:
    claims_policies:
      linkwarden:
        id_token:
          - 'preferred_username'
          - 'name'
          - 'email'
          - 'email_verified'
          - 'groups'
    clients:
      # https://www.authelia.com/integration/openid-connect/clients/linkwarden/
      - client_id: 'linkwarden'
        claims_policy: 'linkwarden'
        client_name: 'linkwarden'
        consent_mode: 'implicit'
        client_secret: ''
        public: false
        authorization_policy: 'one_factor'
        require_pkce: false
        pkce_challenge_method: ''
        redirect_uris:
          - 'https://linkwarden.example.com/api/v1/auth/callback/oidc'
        scopes:
          - 'openid'
          - 'groups'
          - 'email'
          - 'profile'
        response_types:
          - 'code'
        grant_types:
          - 'authorization_code'
        access_token_signed_response_alg: 'none'
        userinfo_signed_response_alg: 'none'
        token_endpoint_auth_method: 'client_secret_basic'