Uploaded image for project: 'Kogito'
  1. Kogito
  2. KOGITO-2678

Configure Kogito Services to enable/disable security at runtime

XMLWordPrintable

    • 2020 Week 34-36 (from Aug 17)

      From Quarkus 1.7.0, it will be possible to enable/disable security at runtime for Quarkus apps (see PR).
      We should configure the Kogito components to allow doing this using quarkus profiles at runtime.

      For the unsecured profile, this is the configuration in the properties:

      quarkus.http.auth.permission.1.paths=/*
quarkus.http.auth.permission.1.policy=permit
quarkus.oidc.enabled=true
quarkus.oidc.tenant-enabled=false

      For secured profile:

      quarkus.http.auth.permission.1.paths=/*
quarkus.http.auth.permission.1.policy=authenticated
quarkus.oidc.enabled=true
quarkus.oidc.tenant-enabled=true # this is the key!
quarkus.oidc.auth-server-url=http://XXX:8280/auth/realms/kogito
quarkus.oidc.client-id=kogito-service
quarkus.oidc.credentials.secret=secret

              nmirasch@redhat.com Neus Miras Chueca
              jcarvaja@redhat.com Jose Carvajal Hilario
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: