Marek Lesko
e4c25bfaa7
Move all hard-coded identity server settings (API resource, scope, client, users/roles) from Program.cs into config/idp-config.json and add parsing logic. The config file is copied to the output directory so it works for local development and is available at /app/config/idp-config.json in the Docker image, making it straightforward to override via a volume mount. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
65 lines
1.5 KiB
JSON
65 lines
1.5 KiB
JSON
{
|
|
"realm": "master",
|
|
"api": {
|
|
"name": "BI Portal API",
|
|
"audience": "urn:bighand:api:bi:portal"
|
|
},
|
|
"scope": {
|
|
"name": "bi.portal",
|
|
"description": "BI Portal Scope",
|
|
"claimMappers": [
|
|
{
|
|
"targetClaimPath": "roles",
|
|
"sourceUserAttribute": "role",
|
|
"tokenClaimJsonType": "STRING",
|
|
"isMultiValued": true
|
|
},
|
|
{
|
|
"targetClaimPath": "tid",
|
|
"sourceUserAttribute": "tid",
|
|
"tokenClaimJsonType": "STRING",
|
|
"isMultiValued": false
|
|
},
|
|
{
|
|
"targetClaimPath": "upn",
|
|
"sourceUserAttribute": "email",
|
|
"tokenClaimJsonType": "STRING",
|
|
"isMultiValued": false
|
|
}
|
|
]
|
|
},
|
|
"client": {
|
|
"clientId": "212C9DB96C2A4B6DA0AFDB2222F6EEAA.bighand.com",
|
|
"name": "BI Portal",
|
|
"redirectUris": [
|
|
"http://localhost:4200/loggedin"
|
|
],
|
|
"isPublic": true
|
|
},
|
|
"users": [
|
|
{
|
|
"login": "administrator",
|
|
"password": "password",
|
|
"name": "Administrator",
|
|
"email": "adm@mail.com",
|
|
"firstname": "Administrator",
|
|
"emailVerified": true,
|
|
"roles": [
|
|
"BI.PORTAL_ADMIN",
|
|
"BI.TENANT_ADMIN"
|
|
],
|
|
"claims": {
|
|
"tid": "cbaa13c2-e95b-470a-bbcb-18911d5a6025",
|
|
"aud": "urn:bighand:api:bi:portal"
|
|
},
|
|
"consents": [
|
|
{
|
|
"realm": "master",
|
|
"clientId": "212C9DB96C2A4B6DA0AFDB2222F6EEAA.bighand.com",
|
|
"scope": "bi.portal"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|