Uploaded image for project: 'Kogito'
  1. Kogito
  2. KOGITO-2678

Configure Kogito Services to enable/disable security at runtime

XMLWordPrintable

    • 2020 Week 34-36 (from Aug 17)

      From Quarkus 1.7.0, it will be possible to enable/disable security at runtime for Quarkus apps (see PR).
      We should configure the Kogito components to allow doing this using quarkus profiles at runtime.

      For the unsecured profile, this is the configuration in the properties:

      quarkus.http.auth.permission.1.paths=/*
quarkus.http.auth.permission.1.policy=permit
quarkus.oidc.enabled=true
quarkus.oidc.tenant-enabled=false

      For secured profile:

      quarkus.http.auth.permission.1.paths=/*
quarkus.http.auth.permission.1.policy=authenticated
quarkus.oidc.enabled=true
quarkus.oidc.tenant-enabled=true # this is the key!
quarkus.oidc.auth-server-url=http://XXX:8280/auth/realms/kogito
quarkus.oidc.client-id=kogito-service
quarkus.oidc.credentials.secret=secret

            nmirasch@redhat.com Neus Miras Chueca
            jcarvaja@redhat.com Jose Carvajal Hilario
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: