keycloak deployment: Add demo groups

Update the keycloak example to include the demo groups. Also add a new client scope "groups" and enable for all owncloud clients. Related issue: #5538
owncloud · Jun 19, 2024 · 936d12f · 936d12f
1 parent 025a66f
commit 936d12f
Show file tree

Hide file tree

Showing 6 changed files with 167 additions and 32 deletions.
diff --git a/deployments/examples/ocis_keycloak/config/keycloak/clients/android_app.json b/deployments/examples/ocis_keycloak/config/keycloak/clients/android_app.json
@@ -46,6 +46,7 @@
     "web-origins",
     "profile",
     "roles",
+    "groups",
     "basic",
     "email"
   ],
@@ -60,4 +61,4 @@
     "configure": true,
     "manage": true
   }
-}
+}
diff --git a/deployments/examples/ocis_keycloak/config/keycloak/clients/cyberduck.json b/deployments/examples/ocis_keycloak/config/keycloak/clients/cyberduck.json
@@ -49,6 +49,8 @@
     "web-origins",
     "profile",
     "roles",
+    "groups",
+    "basic",
     "email"
   ],
   "optionalClientScopes": [
@@ -62,4 +64,4 @@
     "configure": true,
     "manage": true
   }
-}
+}
diff --git a/deployments/examples/ocis_keycloak/config/keycloak/clients/desktop_client.json b/deployments/examples/ocis_keycloak/config/keycloak/clients/desktop_client.json
@@ -47,6 +47,7 @@
     "web-origins",
     "profile",
     "roles",
+    "groups",
     "basic",
     "email"
   ],
@@ -61,4 +62,4 @@
     "configure": true,
     "manage": true
   }
-}
+}
diff --git a/deployments/examples/ocis_keycloak/config/keycloak/clients/ios_app.json b/deployments/examples/ocis_keycloak/config/keycloak/clients/ios_app.json
@@ -46,6 +46,7 @@
     "web-origins",
     "profile",
     "roles",
+    "groups",
     "basic",
     "email"
   ],
@@ -60,4 +61,4 @@
     "configure": true,
     "manage": true
   }
-}
+}
diff --git a/deployments/examples/ocis_keycloak/config/keycloak/clients/web.json b/deployments/examples/ocis_keycloak/config/keycloak/clients/web.json
@@ -37,8 +37,8 @@
     "saml.server.signature.keyinfo.ext": "false",
     "exclude.session.state.from.auth.response": "false",
     "oidc.ciba.grant.enabled": "false",
-    "backchannel.logout.session.required": "true",
     "backchannel.logout.url": "https://ocis.owncloud.test/backchannel_logout",
+    "backchannel.logout.session.required": "true",
     "client_credentials.use_refresh_token": "false",
     "saml_force_name_id_format": "false",
     "saml.client.signature": "false",
@@ -54,6 +54,7 @@
     "web-origins",
     "profile",
     "roles",
+    "groups",
     "basic",
     "email"
   ],
@@ -68,4 +69,4 @@
     "configure": true,
     "manage": true
   }
-}
+}