Skip to content

Commit f4f0ad3

Browse files
mnonnenmacheroheger-bosch
authored andcommitted
fix(compose): Include the ort-server-client client scope
Include the `ort-server-client` client scope in the `ort-server-ui` and `ort-server-ui-dev` clients by default. This ensures that the `ort-server` client is included in the audience claim even when the user has no roles from that client assigned. Otherwise, the backend will not accept the JWT from such users. Signed-off-by: Martin Nonnenmacher <[email protected]>
1 parent 351a879 commit f4f0ad3

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

scripts/docker/keycloak/master-realm.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -704,7 +704,7 @@
704704
"authenticationFlowBindingOverrides" : { },
705705
"fullScopeAllowed" : true,
706706
"nodeReRegistrationTimeout" : -1,
707-
"defaultClientScopes" : [ "web-origins", "acr", "roles", "profile", "basic", "email" ],
707+
"defaultClientScopes" : [ "web-origins", "acr", "roles", "profile", "basic", "email", "ort-server-client" ],
708708
"optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
709709
}, {
710710
"id" : "90717130-1595-44ea-9658-0c8a507d4879",
@@ -749,7 +749,7 @@
749749
"authenticationFlowBindingOverrides" : { },
750750
"fullScopeAllowed" : true,
751751
"nodeReRegistrationTimeout" : -1,
752-
"defaultClientScopes" : [ "web-origins", "acr", "roles", "profile", "basic", "email" ],
752+
"defaultClientScopes" : [ "web-origins", "acr", "roles", "profile", "basic", "email", "ort-server-client" ],
753753
"optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
754754
}, {
755755
"id" : "115c6dcc-fcba-460c-95bb-f2ad93a2aba3",

0 commit comments

Comments
 (0)