Changes for page 1. Registering an OIDC client
Last modified by messines on 2022/05/25 10:11
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -10,6 +10,10 @@ 10 10 11 11 [[https:~~/~~/dzone.com/articles/the-right-flow-for-the-job-which-oauth-20-flow-sho>>url:https://dzone.com/articles/the-right-flow-for-the-job-which-oauth-20-flow-sho]] 12 12 13 +Also a live exemple of client ID creation is available here on our lab, you can perfectly use this notebook to create your client, the next steps in this documentation reproduce the content of the notebook. 14 + 15 +[[https:~~/~~/lab.ebrains.eu/user/user-redirect/lab/tree/shared/Collaboratory%20Community%20Apps/Managing%20an%20OpenID%20Connect%20client.ipynb>>https://lab.ebrains.eu/user/user-redirect/lab/tree/shared/Collaboratory%20Community%20Apps/Managing%20an%20OpenID%20Connect%20client.ipynb]] 16 + 13 13 == Creating your OpenID Connect client == 14 14 15 15 The steps to create an OpenID Connect (OIDC) client are the following: ... ... @@ -83,25 +83,26 @@ 83 83 curl -X POST https://iam.ebrains.eu/auth/realms/hbp/clients-registrations/default/ \ 84 84 -H "Authorization: Bearer ${clb_dev_token}" \ 85 85 -H 'Content-Type: application/json' \ 86 - -d '{ 87 - "clientId": "my-awesome-client", 88 - "name": "My Awesome App", 90 + -d '{ "clientId": "your_client_id", 91 + "name": "Collaboratory workshop demo client edited", 89 89 "description": "This describes what my app is for end users", 90 - "rootUrl": "https:// root.url.of.my.app",91 - "baseUrl": " /relative/path/to/its/frontpage.html",93 + "rootUrl": "https://example.org", 94 + "baseUrl": "https://example.org", 92 92 "redirectUris": [ 93 - "/ relative/redirect/path",94 - " /these/can/use/wildcards/*"96 + "/login/*", 97 + "https://example.org/login/*" 95 95 ], 96 - "webOrigins": 97 - "bearerOnly": false,98 - "consentRequired": true,99 - "standardFlowEnabled": true,100 - "implicitFlowEnabled": true,101 - "directAccessGrantsEnabled": false,99 + "webOrigins":["http://localhost:8080","https://example.org","+"], 100 + "bearerOnly": False, 101 + "consentRequired": True, 102 + "standardFlowEnabled": True, 103 + "implicitFlowEnabled": False, 104 + "directAccessGrantsEnabled": False, 102 102 "attributes": { 103 103 "contacts": "first.contact@example.com; second.contact@example.com" 104 - } 107 + }, 108 + "defaultClientScopes": ["openid","profile","email","roles"], 109 + "optionalClientScopes": ["team","group"] 105 105 }' | 106 106 107 107 # Pretty print the JSON response