backend: update auth config

smartuni · Jun 12, 2024 · d879b9f · d879b9f
1 parent 028ad91
commit d879b9f
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 53 deletions.
diff --git a/web_backend/src/main/java/authorization/AdminResource.java b/web_backend/src/main/java/authorization/AdminResource.java
diff --git a/web_backend/src/main/java/authorization/UsersResource.java b/web_backend/src/main/java/authorization/UsersResource.java
diff --git a/web_backend/src/main/resources/application.properties b/web_backend/src/main/resources/application.properties
@@ -24,11 +24,20 @@ quarkus.http.cors.origins=*
 ## OIDC Configuration
 quarkus.oidc.auth-server-url=http://localhost:4000/kc/realms/teamagochi
 quarkus.oidc.client-id=teamagochi-backend
-quarkus.oidc.credentials.secret=9I0F8oZ7UHIzTzMm4FgLMfgSmId9L8T5
+quarkus.oidc.credentials.secret=5DACLJH84KTWBG22UpdnS9DSjVCIu5zB
 quarkus.oidc.tls.verification=none
 
 ## Enable Policy Enforcement
 quarkus.keycloak.policy-enforcer.enable=true
+quarkus.keycloak.policy-enforcer.enforcement-mode=ENFORCING
+quarkus.keycloak.policy-enforcer.lazy-load-paths=true
+
+## Policy rules
+## For enforcement modes, see https://www.keycloak.org/docs/latest/authorization_services/#resource_server_settings.
+quarkus.keycloak.policy-enforcer.paths.q.paths=/q/*
+quarkus.keycloak.policy-enforcer.paths.q.enforcement-mode=DISABLED
+#%dev.quarkus.keycloak.policy-enforcer.paths.admin.paths=/api/v1/*
+#%dev.quarkus.keycloak.policy-enforcer.paths.admin.enforcement-mode=ENFORCING
 
 # Services
 quarkus.rest.path=/api