backstage-keycloak-auth/oauth2-proxy.cfg at main · brunobastosg/backstage-keycloak-auth · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
http_address=":4180"

provider="keycloak"
provider_display_name="Keycloak"

login_url = "http://localhost:8080/realms/backstage/protocol/openid-connect/auth"
redeem_url = "http://keycloak:8080/realms/backstage/protocol/openid-connect/token"
profile_url = "http://keycloak:8080/realms/backstage/protocol/openid-connect/userinfo"
validate_url = "http://keycloak:8080/realms/backstage/protocol/openid-connect/userinfo"
oidc_issuer_url = "http://localhost:8080/realms/backstage"

client_id = "backstage"
client_secret = "uMvkJiL48Nk5AzKbXiCvBkkg4IXDuYcm"

redirect_url = "http://localhost:4180/oauth2/callback"

upstreams = [
  "http://host.docker.internal:3000" ,
  "http://host.docker.internal:7007/api/"
]

request_logging = true

pass_basic_auth = true
pass_user_headers = true
pass_host_header = true

email_domains = [
  "*"
]

pass_access_token = true
ssl_insecure_skip_verify = false
cookie_secret = "OQINaROshtE9TcZkNAm-5Zs2Pv3xaWytBmc5W7sPX7w="
cookie_secure = false
set_authorization_header = "true"
reverse_proxy = "true"
scope = "openid email profile"
whitelist_domains = "*"
skip_provider_button = "true"
set_xauthrequest = "true"