Attention: The Keycloak upgrade has been completed. As this was a major upgrade, there may be some unexpected issues occurring. Please report any issues you find to support by using the contact form found at https://www.ebrains.eu/contact/. Thank you for your patience and understanding. 


Last modified by messines on 2022/05/25 10:11

From version 5.1
edited by messines
on 2021/03/18 12:17
Change comment: There is no comment for this version
To version 8.1
edited by messines
on 2021/11/15 14:33
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -10,6 +10,10 @@
10 10  
11 11  [[https:~~/~~/dzone.com/articles/the-right-flow-for-the-job-which-oauth-20-flow-sho>>url:https://dzone.com/articles/the-right-flow-for-the-job-which-oauth-20-flow-sho]]
12 12  
13 +Also a live exemple of client ID creation is available here on our lab, you can perfectly use this notebook to create your client, the next steps in this documentation reproduce the content of the notebook.
14 +
15 +[[https:~~/~~/lab.ebrains.eu/user/user-redirect/lab/tree/shared/Collaboratory%20Community%20Apps/Managing%20an%20OpenID%20Connect%20client.ipynb>>https://lab.ebrains.eu/user/user-redirect/lab/tree/shared/Collaboratory%20Community%20Apps/Managing%20an%20OpenID%20Connect%20client.ipynb]]
16 +
13 13  == Creating your OpenID Connect client ==
14 14  
15 15  The steps to create an OpenID Connect (OIDC) client are the following:
... ... @@ -83,25 +83,26 @@
83 83  curl -X POST https://iam.ebrains.eu/auth/realms/hbp/clients-registrations/default/ \
84 84   -H "Authorization: Bearer ${clb_dev_token}" \
85 85   -H 'Content-Type: application/json' \
86 - -d '{
87 - "clientId": "my-awesome-client",
88 - "name": "My Awesome App",
90 + -d '{ "clientId": "your_client_id",
91 + "name": "Collaboratory workshop demo client edited",
89 89   "description": "This describes what my app is for end users",
90 - "rootUrl": "https://root.url.of.my.app",
91 - "baseUrl": "/relative/path/to/its/frontpage.html",
93 + "rootUrl": "https://example.org",
94 + "baseUrl": "https://example.org",
92 92   "redirectUris": [
93 - "/relative/redirect/path",
94 - "/these/can/use/wildcards/*"
96 + "/login/*",
97 + "https://example.org/login/*"
95 95   ],
96 - "webOrigins": ["+"],
97 - "bearerOnly": false,
98 - "consentRequired": true,
99 - "standardFlowEnabled": true,
100 - "implicitFlowEnabled": true,
101 - "directAccessGrantsEnabled": false,
99 + "webOrigins":["http://localhost:8080","https://example.org","+"],
100 + "bearerOnly": False,
101 + "consentRequired": True,
102 + "standardFlowEnabled": True,
103 + "implicitFlowEnabled": False,
104 + "directAccessGrantsEnabled": False,
102 102   "attributes": {
103 103   "contacts": "first.contact@example.com; second.contact@example.com"
104 - }
107 + },
108 + "defaultClientScopes": ["openid","profile","email","roles"],
109 + "optionalClientScopes": ["team","group"]
105 105   }' |
106 106  
107 107  # Pretty print the JSON response