Added missing scopes and client

bcgov · Jan 3, 2025 · 160ba99 · 160ba99
1 parent 7ae87b3
commit 160ba99
Show file tree

Hide file tree

Showing 2 changed files with 132 additions and 1 deletion.
diff --git a/Keycloak/clients.dat b/Keycloak/clients.dat
@@ -2129,5 +2129,118 @@
             "configure": true,
             "manage": true
         }
+    },
+    {
+        "clientId": "grad-business-api-client",
+        "name": "",
+        "description": "",
+        "rootUrl": "",
+        "adminUrl": "",
+        "baseUrl": "",
+        "surrogateAuthRequired": false,
+        "enabled": true,
+        "alwaysDisplayInConsole": false,
+        "clientAuthenticatorType": "client-secret",
+        "redirectUris": [],
+        "webOrigins": [],
+        "notBefore": 0,
+        "bearerOnly": false,
+        "consentRequired": false,
+        "standardFlowEnabled": false,
+        "implicitFlowEnabled": false,
+        "directAccessGrantsEnabled": false,
+        "serviceAccountsEnabled": true,
+        "authorizationServicesEnabled": true,
+        "publicClient": false,
+        "frontchannelLogout": false,
+        "protocol": "openid-connect",
+        "attributes": {
+            "saml.assertion.signature": "false",
+            "saml.multivalued.roles": "false",
+            "saml.force.post.binding": "false",
+            "saml.encrypt": "false",
+            "oauth2.device.authorization.grant.enabled": "false",
+            "saml.server.signature": "false",
+            "backchannel.logout.revoke.offline.tokens": "false",
+            "saml.server.signature.keyinfo.ext": "false",
+            "exclude.session.state.from.auth.response": "false",
+            "oidc.ciba.grant.enabled": "false",
+            "backchannel.logout.session.required": "true",
+            "client_credentials.use_refresh_token": "false",
+            "saml_force_name_id_format": "false",
+            "saml.client.signature": "false",
+            "tls.client.certificate.bound.access.tokens": "false",
+            "saml.authnstatement": "false",
+            "display.on.consent.screen": "false",
+            "saml.onetimeuse.condition": "false"
+        },
+        "authenticationFlowBindingOverrides": {},
+        "fullScopeAllowed": true,
+        "nodeReRegistrationTimeout": -1,
+        "protocolMappers": [
+            {
+                "name": "Client IP Address",
+                "protocol": "openid-connect",
+                "protocolMapper": "oidc-usersessionmodel-note-mapper",
+                "consentRequired": false,
+                "config": {
+                    "user.session.note": "clientAddress",
+                    "userinfo.token.claim": "true",
+                    "id.token.claim": "true",
+                    "access.token.claim": "true",
+                    "claim.name": "clientAddress",
+                    "jsonType.label": "String"
+                }
+            },
+            {
+                "name": "Client ID",
+                "protocol": "openid-connect",
+                "protocolMapper": "oidc-usersessionmodel-note-mapper",
+                "consentRequired": false,
+                "config": {
+                    "user.session.note": "clientId",
+                    "userinfo.token.claim": "true",
+                    "id.token.claim": "true",
+                    "access.token.claim": "true",
+                    "claim.name": "clientId",
+                    "jsonType.label": "String"
+                }
+            },
+            {
+                "name": "Client Host",
+                "protocol": "openid-connect",
+                "protocolMapper": "oidc-usersessionmodel-note-mapper",
+                "consentRequired": false,
+                "config": {
+                    "user.session.note": "clientHost",
+                    "userinfo.token.claim": "true",
+                    "id.token.claim": "true",
+                    "access.token.claim": "true",
+                    "claim.name": "clientHost",
+                    "jsonType.label": "String"
+                }
+            }
+        ],
+        "defaultClientScopes": [
+            "web-origins",
+            "READ_GRAD_LETTER_GRADE_DATA",
+            "roles",
+            "profile",
+            "READ_EQUIVALENT_OR_CHALLENGE_CODE",
+            "READ_GRAD_STUDENT_REPORT_DATA",
+            "email",
+            "READ_GRAD_SCHOOL_DATA"
+        ],
+        "optionalClientScopes": [
+            "address",
+            "phone",
+            "offline_access",
+            "microprofile-jwt"
+        ],
+        "access": {
+            "view": true,
+            "configure": true,
+            "manage": true
+        }
     }
-]
+]
diff --git a/Keycloak/grad-client-scopes.lst b/Keycloak/grad-client-scopes.lst
@@ -1031,5 +1031,23 @@
             "include.in.token.scope": "true",
             "display.on.consent.screen": "true"
         }
+    },
+    {
+        "id": "8dba551c-9e61-4cd0-8553-6f6b37da97cf",
+        "name": "WRITE_EVENT_HISTORY",
+        "protocol": "openid-connect",
+        "attributes": {
+            "include.in.token.scope": "true",
+            "display.on.consent.screen": "true"
+        }
+    },
+    {
+        "id": "e0ad3237-347c-458c-b240-2df0f3206ab3",
+        "name": "READ_EVENT_HISTORY",
+        "protocol": "openid-connect",
+        "attributes": {
+            "include.in.token.scope": "true",
+            "display.on.consent.screen": "true"
+        }
     }
 ]