il
4527e39d0f
archived stacks: - actual-budget - ezbookkeeping - opencloud - trilium - vikunja - wikijs
111 lines
3.2 KiB
YAML
111 lines
3.2 KiB
YAML
---
|
|
identity_providers:
|
|
oidc:
|
|
# For the app which doesn't use secret.
|
|
cors:
|
|
endpoints:
|
|
- 'authorization'
|
|
- 'token'
|
|
- 'revocation'
|
|
- 'introspection'
|
|
- 'userinfo'
|
|
allowed_origins:
|
|
- 'https://opencloud.example.com'
|
|
allowed_origins_from_client_redirect_uris: true
|
|
clients:
|
|
# OpenCloud configuration
|
|
## https://docs.opencloud.eu/docs/admin/configuration/authentication-and-user-management/external-idp/
|
|
## Web
|
|
- client_id: 'opencloud'
|
|
client_name: 'OpenCloud'
|
|
public: true
|
|
authorization_policy: 'one_factor'
|
|
require_pkce: true
|
|
pkce_challenge_method: 'S256'
|
|
redirect_uris:
|
|
- 'https://opencloud.example.com/'
|
|
- 'https://opencloud.example.com/oidc-callback.html'
|
|
- 'https://opencloud.example.com/oidc-silent-redirect.html'
|
|
scopes:
|
|
- 'openid'
|
|
- 'profile'
|
|
- 'email'
|
|
- 'groups'
|
|
response_types:
|
|
- 'code'
|
|
grant_types:
|
|
- 'authorization_code'
|
|
access_token_signed_response_alg: 'RS256'
|
|
userinfo_signed_response_alg: 'none'
|
|
token_endpoint_auth_method: 'none'
|
|
## desktop
|
|
- client_id: 'OpenCloudDesktop'
|
|
client_name: 'OpenCloud'
|
|
public: true
|
|
authorization_policy: 'one_factor'
|
|
require_pkce: true
|
|
pkce_challenge_method: 'S256'
|
|
redirect_uris:
|
|
- 'http://localhost'
|
|
- 'http://127.0.0.1'
|
|
scopes:
|
|
- 'openid'
|
|
- 'profile'
|
|
- 'email'
|
|
- 'groups'
|
|
- 'offline_access'
|
|
response_types:
|
|
- 'code'
|
|
grant_types:
|
|
- 'authorization_code'
|
|
- 'refresh_token'
|
|
access_token_signed_response_alg: 'RS256'
|
|
userinfo_signed_response_alg: 'none'
|
|
token_endpoint_auth_method: 'none'
|
|
## Android
|
|
- client_id: 'OpenCloudAndroid'
|
|
client_name: 'OpenCloud'
|
|
public: true
|
|
authorization_policy: 'one_factor'
|
|
require_pkce: true
|
|
pkce_challenge_method: 'S256'
|
|
redirect_uris:
|
|
- 'oc://android.opencloud.eu'
|
|
scopes:
|
|
- 'openid'
|
|
- 'profile'
|
|
- 'email'
|
|
- 'groups'
|
|
- 'offline_access'
|
|
response_types:
|
|
- 'code'
|
|
grant_types:
|
|
- 'authorization_code'
|
|
- 'refresh_token'
|
|
access_token_signed_response_alg: 'RS256'
|
|
userinfo_signed_response_alg: 'none'
|
|
token_endpoint_auth_method: 'none'
|
|
## IOS
|
|
- client_id: 'OpenCloudIOS'
|
|
client_name: 'OpenCloud'
|
|
public: true
|
|
authorization_policy: 'one_factor'
|
|
require_pkce: true
|
|
pkce_challenge_method: 'S256'
|
|
redirect_uris:
|
|
- 'oc://ios.opencloud.eu'
|
|
scopes:
|
|
- 'openid'
|
|
- 'profile'
|
|
- 'email'
|
|
- 'groups'
|
|
- 'offline_access'
|
|
response_types:
|
|
- 'code'
|
|
grant_types:
|
|
- 'authorization_code'
|
|
- 'refresh_token'
|
|
access_token_signed_response_alg: 'RS256'
|
|
userinfo_signed_response_alg: 'none'
|
|
token_endpoint_auth_method: 'none'
|