Client configuration for Keycloak to work with a local instance of mitxonline.

keycloak-mit-odl-mitxonline-local-client.json

{
  "clientId": "mitxonline-client-id",
  "name": "MITxOnline",
  "description": "Client configured for use with a locally running instance of mitxonline",
  "rootUrl": "http://mitxonline.odl.local:8013",
  "adminUrl": "",
  "baseUrl": "http://mitxonline.odl.local:8013",
  "surrogateAuthRequired": false,
  "enabled": true,
  "alwaysDisplayInConsole": false,
  "clientAuthenticatorType": "client-secret",
  "secret": "7xnQdhWAuvcTTVjKuLihdIicDm3sGswl",
  "redirectUris": [
    "http://mitxonline.odl.local:8013/*"
  ],
  "webOrigins": [
    "*"
  ],
  "notBefore": 0,
  "bearerOnly": false,
  "consentRequired": false,
  "standardFlowEnabled": true,
  "implicitFlowEnabled": false,
  "directAccessGrantsEnabled": true,
  "serviceAccountsEnabled": false,
  "publicClient": false,
  "frontchannelLogout": true,
  "protocol": "openid-connect",
  "attributes": {
    "client.secret.creation.time": "1676480224",
    "oauth2.device.authorization.grant.enabled": "false",
    "use.jwks.url": "true",
    "backchannel.logout.revoke.offline.tokens": "false",
    "use.refresh.tokens": "true",
    "jwt.credential.certificate": "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",
    "tls-client-certificate-bound-access-tokens": "false",
    "oidc.ciba.grant.enabled": "false",
    "backchannel.logout.session.required": "true",
    "client_credentials.use_refresh_token": "false",
    "acr.loa.map": "{}",
    "require.pushed.authorization.requests": "false",
    "display.on.consent.screen": "false",
    "token.response.type.bearer.lower-case": "false"
  },
  "authenticationFlowBindingOverrides": {},
  "fullScopeAllowed": true,
  "nodeReRegistrationTimeout": -1,
  "defaultClientScopes": [
    "web-origins",
    "acr",
    "address",
    "profile",
    "roles",
    "email"
  ],
  "optionalClientScopes": [
    "phone",
    "offline_access",
    "microprofile-jwt"
  ],
  "access": {
    "view": true,
    "configure": true,
    "manage": true
  }
}