argos/dmp-backend/web/src/main/resources/config/security.yml

15 lines
513 B
YAML
Raw Normal View History

2023-10-11 16:53:12 +02:00
web:
security:
enabled: true
authorized-endpoints: [ api ]
2024-03-11 14:20:09 +01:00
allowed-endpoints: [ api/public, api/dmp/public, api/description/public, /api/supportive-material/public, api/language/public, api/contact-support/public, api/dashboard/public ]
2023-10-11 16:53:12 +02:00
idp:
api-key:
2023-12-11 14:00:21 +01:00
enabled: false
2023-10-11 16:53:12 +02:00
resource:
token-type: JWT #| opaque
2023-10-11 16:53:12 +02:00
jwt:
claims: [ role, x-role ]
2023-12-11 14:00:21 +01:00
issuer-uri: ${IDP_ISSUER_URI:}
audiences: [ "dmp_web" ]
validIssuer: ${IDP_ISSUER_URI:}