io.helidon.security.providers.oidc.common.TenantConfig
Description
Open ID Connect tenant configuration
Configuration options
| Key | Type | Default | Description |
|---|---|---|---|
audience | String | Audience of issued tokens | |
authorization- | URI | URI of an authorization endpoint used to redirect users to for logging-in | |
base- | String | openid | Configure base scopes |
check- | Boolean | true | Configure audience claim check |
client- | String | Client ID as generated by OIDC server | |
client- | String | Client secret as generated by OIDC server | |
client- | Duration | 30000 | Timeout of calls using web client |
decryption- | Configuration for decryption-keys | ||
identity- | URI | URI of the identity server, base used to retrieve OIDC metadata | |
introspect- | URI | Endpoint to use to validate JWT | |
issuer | String | Issuer of issued tokens | |
name | String | Name of the tenant | |
oidc- | Configuration for oidc-metadata | ||
oidc- | Boolean | true | If set to true, metadata will be loaded from default (well known) location, unless it is explicitly defined using oidc-metadata-resource |
optional- | Boolean | false | Allow audience claim to be optional |
scope- | String | Audience of the scope required by this application | |
server- | String | @default | Configure one of the supported types of identity servers |
sign- | Configuration for sign-jwk | ||
token- | Client | CLIENT_ | Type of authentication to use when invoking the token endpoint. With CLIENT_SECRET_BASIC, credentials are sent only to POST requests on the resolved token endpoint scheme, host, and path and, when JWT introspection is used, to POST requests on the resolved introspection endpoint scheme, host, and path |
token- | URI | URI of a token endpoint used to obtain a JWT based on the authentication code | |
validate- | Boolean | true | Use JWK (a set of keys to validate signatures of JWT) to validate tokens |
Usages
security.providers. idcs- role- mapper. oidc- config. tenants security.providers. oidc. tenants server.features. security. security. providers. idcs- role- mapper. oidc- config. tenants server.features. security. security. providers. oidc. tenants
See the manifest for all available types.