PIXILAB Wiki

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
blocks:sso:keycloak [2025-06-26 08:53] – Post logout redirect URI melvinblocks:sso:keycloak [2026-11-10 09:07] (current) – Keycloak YML file changes (Blocks 8) joao
Line 29: Line 29:
 server: server:
   type: pixilab_server   type: pixilab_server
 +  requireHttps: false
   auth:   auth:
-    urlResolver: null 
-    ajaxRequestResolver: null 
-    callbackUrl: http://[BLOCKS-IP-OR-DOMAIN]/rest/auth/callback 
-    rolesOwner: claims 
-    rolesPath: realm_access.roles 
-    clients: 
-      - org.pac4j.oidc.client.OidcClient: 
-          configuration: 
-            discoveryURI: https://[KEYCLOAK-IP]/realms/[REALM-NAME]/.well-known/openid-configuration 
-            clientId: [CLIENT-ID] 
-            secret: [CLIENT-SECRET] 
-            clientAuthenticationMethod: client_secret_basic 
-            scope: openid profile 
     servlet:     servlet:
       security:       security:
         - matchers: internalMatcher         - matchers: internalMatcher
-          clients: OidcClient 
           authorizers: isAuthenticated           authorizers: isAuthenticated
 +          clients: KeycloakOidcClient  
 +    clients:
 +      callbackUrl: http://[BLOCKS-IP-OR-DOMAIN]/rest/auth/callback
 +    oidc:
 +      discoveryURI: https://[KEYCLOAK-IP]/realms/[REALM-NAME]/.well-known/openid-configuration
 +      clientId: [CLIENT-ID]
 +      secret: [CLIENT-SECRET]
 +      clientAuthenticationMethod: client_secret_basic
 +      scope: openid profile email
 +    rolesOwner: claims
 +    rolesPath: realm_access.roles
 </code> </code>
   - Start Blocks and go to "/edit" for login.   - Start Blocks and go to "/edit" for login.