Files
alfresco-content-app/docker/auth/alfresco-realm.json
Denys Vuika c8b99b9d29 1.7.0 (#1037)
* remove deprecated file

* [ACA-1904] Language labels (#879)

* [ACA-2083] reset router cache on login/logout (#867)

* reset router cache on login/logout

* Update src/app/app.routes.strategy.ts

Co-Authored-By: DenysVuika <denys.vuika@gmail.com>

* merge suggestion

* [ACA-2083] reset content filters on logout

* [ACA-2083] unit tests

* [ACA-2067] Side navigation - highlight element with children only when not expanded (#880)

* highlight parent element condition

* update test

* e2e

* add context menu (#881)

* [ACA-2107] upgrade to ADF latest beta (#882)

* [ACA-2107] upgrade ADF to latest beta

* fix adf sidenav class name

* [ACA-2107] update is-selected to adf-is-selected

* [ACA-2107] add 'adf' prefix to classes name

* [ACA-2107] remove ADF duplicate css style

* [ACA-2107] use 'adf-full-width' class

* [ACA-2107] add 'adf' prefix

* [ACA-1928] e2e improvements - part1 (#883)

* refactor Mark as favourite tests
rename method to be more clear
create separate methods for some checks and actions

* forgot some changes

* refactor delete-undo tests

* some more refactoring

* fix

* [ACA-1928] e2e improvements - part2 (#884)

* refactor Mark as favourite tests
rename method to be more clear
create separate methods for some checks and actions

* forgot some changes

* refactor delete-undo tests

* some more refactoring

* fix

* small improvements / refactoring

* upgrade 3rd party dependencies (#886)

* upgrade 3rd party dependencies

* update datepicker

* update code

* remove duplicated strings, use ADF instead (#887)

* extension recommendations

* [ACA-1558] cache busting for index.html (#888)

* use dynamic columns from ADF (#889)

* upgrade to latest ADF 3.0.0 alpha

* migrate to ADF column components

* use dynamic column from ADF

* fix e2e tests

* [ACA-2122] automatic code formatting on commit (#890)

* [ACA-2120] update library toolbar (#891)

* [ACA-2131] fix leave library icon for context menu

* remove moment-es6 usage (#892)

* [ACA] Create Library - switch to ADF component (#893)

* use adf component

* fix component name locator

* update extension registration docs

* fix SSO defaults

* fix pre-commit issue with partial commits

* [ACA-2116] search results available actions (#895)

* add item.id to File Libraries

* add method to wait for node to be indexed

* create separate methods in queries API to wait for sites or wait for nodes

* improvements, renaming

* renaming

* fix

* add tests for actions on search results

* add wait and use new method

* fix

* another fix

* use correct method

* more fixes

* create method for clickView button

* fixes

* no message

* unified format for viewer sub-menus (#901)

* unified format for viewer sub-menus

* fix tests

* update prettier

* [ACA-2157] Added basic ABN metadata (#902)

* upgrade to latest JS-API and ADF (#896)

* improved update script and latest ADF libs

* upgrade to latest js-api and ADF

* upgrade tests

* update viewer code

* use @alfresco/js-api

* update to latest adf

* fix deprecation issues

* update viewer

* fix copy/move dialog

* change expect

* fix remove site from favorites

* fix unit test

* update adf version

* use ADF upload dialog

* [ACA-820] add tests for Copy content (#899)

* add tests for Copy content

* fix

* forgot some ids

* update expected favorites number

* support for SSO settings (#905)

* [ACA-2157] Fixed structure, markup and links (#904)

* [ACA-2157] Added brief description and updated links

* [ACA-2157] Fixed broken image URL

* [ADF-2157] Added YAML index file for ABN (#903)

* [e2e] new reporter (#906)

* try new reporter

* run specific suite for testing purposes

* change folder output for report

* more report settings

* remove fdescribe

* remove package and update package-lock

* remove disabled tests not needed by the new reporter

* try to identify cause of travis failure

* run only specific tests for investigation purpose

* remove sleep and increase retry delay

* try a different fix

* revert to previous fix

* try different expects

* call different js-api method

* remove parameter not needed anymore

* upgrade dependencies (#907)

* add tests for Move content (#908)

* [ACA-213] Edit Offline (#909)

* WRITE_LOCK evaluator

* evaluate actions for WRITE_LOCK

* edit offline action

* DL icon for WRITE_LOCK files

* edit offline directive

* custom name column

* localisation

* toggle offline edit extension

* move takeUntil operator

* add tooltip

* better selector to differentiate Edit folder from Edit Offline

* default to empty object for null properties object

* isPersonalFiles evaluator

* isLibraryFiles evaluator

* isLibraryFiles evaluator

* isPersonalFiles evaluator

* update canEditLockedFile rule

* upgrade libraries (#910)

* upgrade libraries

* fix breaking changes

* fix divider

* remove header workarounds

* update repository to 6.1.2-ga, SSO example (#914)

* remove old compose, update to 6.1.2-ga

* SSO with vanilla keycloak

* [ACA-2162] allow custom icons with navbar (#917)

* allow custom icons with navbar

* fix breaking change

* update protractor settings

* pin typescript version, regenerate lock file

* [ACA-2168] auto-generate licenses for docker image (#918)

* auto-generate licenses for docker image

* update version label

* make app agnostic

* [ACA-213] Edit Offline - permissions (#911)

* edit offline action rules

* unlock node error message

* update extensions rules

* lock unlock evaluators

* LockNodeDirective over EditOfflineDirective

* disable tests failing cause of unrelated bug

* isUserWriteLockOwner over isUserWriteLock

* fix lock icon for retina displays

* [ACA-2164] Node version action (#916)

* export upload effects and actions

* remove node version effect and action

* remove node version theme

* change old version manager implementation

* get node info from store selection

* upload version dialog container

* node version form

* update app module

* upload version effect and action

* update version action

* internationalization

* refresh on upload version

* remove old implementation tests

* remove adf-version-manager dialog implementation

* revert adf version component

* fix viewer version action

* [ACA-2160] add tests for Edit offline actions availability (#921)

* add tests for Edit offline actions availability

* fix delete / undo delete tests

* Keensoft AOS extension (#920)

* aos extension

* update karma

* lint improvements and fixes

* update script

* update scripts

* update scripts

* reduce about 56.4 kB of polyfills for modern browsers

* deficated aosHost value to have AOS on separate servers

* context menu and toolbar

* visibility evaluator

* code improvements and fixes

* support locking, lock checks

* [ACA-2193] Lock node - unlock after new version is uploaded (#924)

* unlock node api call

* unlock action and effect

* unlock node after version upload

* check if locked

* clear version input on dialog cancel event

* update viewer on node version upload

* update viewer on file upload delete

* test

* update tests

* update tests

* rename evaluators

* update docs

* minor script improvements

* update AOS extension docs and version

* update package configuration for AOS ext

* update AOS extension details

* Search on mobile opens Sidemenu (#929)

* Added a check for mobile pages to prevent sidemenu opening

* [ACA-2200] Upgrade to 3.0.0-beta9 ADF (#931)

* upgrade to latest ADF 3.0.0-alpha

- remove selectedFacetQueries check
- renamed hasPermission from ADF ContentService to hasAllowableOperations

* update to ADF 3.0.0-beta9

* [ACA-2200] mincount workaround

- until we get the fix for the facet update issue (ADF-3401)

* [ACA-2171] enable copy and move to library tests (#933)

* [ACA-2198 ACA-2206]  Node version - align dialog with XD (#937)

* make comment field not required

* make Minor default version option

* tests

* fix form version options label

* test form state on initialization

* [ACA-2210] Version Dialog - update button text (#939)

* dialog action buttons text to uppercase

* dialog text Cancel over Close

* update translation reference

* [ACA-213] Upload Version - version options use boolean values (#940)

* version form data interface

* subscribe value data type

* use form data  boolean value

* update tests

* [ACA-2208] Hide app menu on swipe (#934)

* mobile: hide app menu on swipe left

* check for mobile screen size

* space for click out on small devices

* added test

* fix test

* [ACA-2199] Upload Version - granular permission   (#938)

* canUploadVersion evaluator

* change upload version action rule

* update docs

* simplify condition

* unit tests and code fixes

* [ACA-2211] auth guard: add support for withCredentials (#942)

* auth guard: add support for withCredentials

* formatting fixes

* remove fdescribe

* [ACA-2204] Upgrade to ADF 3.0.0 release (#949)

* upgrade to ADF 3.0.0

* update unit tests

* disable versioning tab in info drawer (#941)

* [ACA-213] Version Dialog - tests (#948)

* enable Esc action to close dialog

* version dialog form tests

* test fix

* [ACA-2193] Upload new content version - unsubscribe upload event (#925)

* remove console log

* unsubscribe upload event after new version

* unit tests

* update AOS extension to ADF 3.0.0

* Upgrade libs (#952)

* update libs

* remove i18n workaround

* node locking  enhancements and fixes (#955)

* optimize image resolver

* allow previewing locked files

* allow selecting locked nodes

* fix comments and metadata tabs

* improved lock checks

* remove obsolete "experimental" directive

* [ACA-2177] Actions - rearrange actions order  (#922)

* rearange actions

* remove separator duplication

* don't show last divider element

* update e2e

* update e2e

* Update toolbar-single-selection.test.ts

remove fdescribe

* move comment as well

* edit folder locator

* edit folder action

* edit folder action from toolbar more menu

* edit folder context menu id

* dont render versions tab

* [ACA-2199] fix Upload New Version action availability (#959)

* fix Upload New Version action availability

* update unit tests

* remove workaround

* add catch for tests failing on Bamboo

* add new line

* add tests for Upload New Version (#960)

* remove separator between Favorite and Edit folder (#963)

* [ACA-2221] Lock node - check selection is not null (#966)

* check selection is not null

* test

* add tests for downloading a single file (#967)

* [ACA-833] automate tests for download as zip (#968)

* add tests for downloading a single file

* automate tests for download as zip

* [ACA-2216] Shared link preview - use extension actions (#964)

* isSharedFileViewer evaluator

* navigation evaluators tests

* update docs

* fallback for SharedLink entry

* shared link view use extensions

* rules for link shared view actions

* dedicated extension definition for shared link action toolbar

* resolve selection and actions

* update tests

* remove un used imports

* nest shared link viewer toolbar actions in to viewer structure

* [ACA-2180] Viewer toolbar - rearrange actions layout (#962)

* merge action in toolbar submenu

* viewer add info drawer action

* toggle infoDrawer extension action

* hide viewer toolbar info drawer action

* fix typo

* allow to  unsubscribe from infoDrawerOpened event

* [ACA-2207] Upload Dialog - restore previous version on delete (#951)

* restore version over delete node

* apply prettier

* clean up unnecessary dependencies

* remove style file

* set CANCEL status on on deleted node version instances

* Update upload.module.ts

remove extra licence text

* fix typo

* remove duplicate strings

* [ACA-2212] allow "edit in office" only for basic auth (#971)

* allow AOS only for basic auth for now

* bump aos extension version

* [ACA-2208] Hide app menu on swipe (#970)

* [ACA-2220] simple "search in fields" support (#972)

* simple "search in fields" support

* unit tests

* add separator (#974)

* [ACA-2222] add e2e tests for pagination on Favorite Libraries (#969)

* add tests for pagination on Favorite Libraries

* add TestRail ids
add tests for pagination for empty page and single page

* Delete package-lock.json

* Revert "Delete package-lock.json"

This reverts commit 41eba0c57532373d87d454372273b54ba00e880a.

* restore package-lock

* [ACA-2219] support more precise searching (#976)

* support more precise searching

* exact term matching

* remove fdescribe

* update docs

* [ACA-1259] automate remaining tests for sidebar (#977)

* automate remaining tests for sidebar

* formatting

* reload active doclist via NgRx actions (#978)

* doclist reload action and effect

* deprecate folderEdited event

* deprecate "favoriteToggle" event

* deprecate "favoriteRemoved" event

* update docs

* unified reload function

* deprecate "nodesRestored" event

* deprecate "nodesPurged" event

* test fixes

* deprecate "nodesMoved" event

* reduce the use of "nodesDeleted"

* [ACA-2229] run aca nginx as non-root (#979)

* run aca nginx as non-root

* remove edit permissions from html folder

* [ACA-2229] docker security fixes (#980)

* docker permission fixes

* remove index.html edit permissions

* support repository info with app state (#984)

* [ACA-2214] Sharing URL being constructed from ECM Host incorrectly (#981)

* fix baseShareUrl defaults

* allow controlling full path

* unit test

* update tomcat settings

* use single slash

* simplify documentation

* [ACA-2194] better custom aspects in metadata tab (#985)

* better custom aspects in metadata tab

* update test

* fix lockby position (#986)

* compatibility matrix (#989)

* [ACA-2228] Add PipeModule to AppTestingModule (#993)

- fixes unit tests after upgrade to 3.1.0-beta4

* responsive breadcrumb (#990)

* [ACA-2239] initial localisation support for AOS extension (#988)

* setup i18n for aos extension

* translate action names, generic icon

* unit tests and bug fixes

* use AOS testing with CI

* [ACA-2242] add old style back (#994)

fixes missing buttons styles issue until ADF 3.1.0 will fix it

* upgrade libs to latest versions (#996)

* Windows compatibility

* [ACA-2195] fix redirect on login after page reload (#997)

* fix build script for Windows

* update evaluator docs, workspace snippet (#995)

* add missing docs and code hints

* update app evaluator docs and code hints

* fix route url special characters (#1000)

* revert change for AOS related to lock owners

* [ACA-2215] toggle search filter (#998)

* support for toggling search filter

* update docs

* disable e2e test

* update e2e

* [ACA-2133] fix application ready event for kerberos (#1002)

* fix application ready event for kerberos

* format file

* spellcheck fixes

* hide AOS when in trashcan

* fix broken test

* [ACA] Search - show error message on error (#1003)

* show error message

* remove fdescribe

* add documentation on SSO, minor docs fixes (#1005)

* menu filter disabled items (#1009)

* 1.7.0

* [ACA-2261] improve UX on search input (#1004)

* Remove search on change

- search call would be triggered only on submit or on option change

* clicking search icon triggers search

* caches user changes for a possible future search

* caches non-empty user changes for a possible future search

* close search options menu on submit

* update queryBuilder and navigate to new search url

* add setting to enable/disable searching after typing on search input

* fix double search call

* Apply suggestions from code review

- custom name to distinguish between ADF and ACA settings

Co-Authored-By: suzanadirla <dirla.silvia.suzana@gmail.com>

* [ACA-2264] fix loading on search (#1011)

- do nothing on null built query

* readme update

* update readme

* [ACA-1627] add automated tests for Comments (#1012)

* bump runtime version for core extension

* json schema fixes

* [ACA-2260] Open in Office - action breaks application in IE (#1014)

* ie office luncher workaround

* open office without location navigation

* check instance before remove

* various bug fixes (#1010)

* various bug fixes

* use 'remove favorite' label where appropriate

* fix toggle favorite component labels

* e2e type check and fixes

* favorite library label

* support toggle favorite component selectors

* update tests

* update e2e tests

* update e2e

* e2e update

* update e2e

* [ACA-2259] Edit in Microsoft Office - check update permissions (#1015)

* [ACA-2259] Edit in Microsoft Office - check update permissions

* [ACA-2259] check update permissions - unit tests

* [ACA-2259] refactor - check allowableOperationsOnTarget from service

* [ACA-2259] add back check only on target for SharedFiles

* [ACA-2259] SharedLinks are not folders

* type-safe api for node permissions

* workaround for shared files

* use hasOwnProperty function

* fix visibility evaluation for create menu (#1017)

* [ACA-2270] allow add comments on folder (#1018)

* [ACA-2270] allow add comments on folder

* [ACA-2270] fix return on else

* [ACA-2270] add unit tests

* update translations (#1023)

* assert file extension validity first (#1025)

* hide empty metadata by default (#1024)

* update copyright year (#1022)

* update copyright year

* forgot a file

* update year on licence header

* extensions flag inside settings page

* support "disabled" rules for Viewer extensions

* set relevance descending by default (#1027)

* [ACA-2284] Shared Link - Error when trying to download a shared file (#1026)

* shared link content download action

* use same action and effect

* call appropriate api baes on location

* remove unused property

* remove unneeded divider from toolbar (#1028)

* use LTS node.js (#1031)

* Update README.md (#1032)

* Update README.md

* Update README.md

* Update introduction-to-extending.md

* Update search-results.md (#1034)

* Update document-list-layout.md (#1035)

* Update README.md (#1033)

* Update README.md (#1036)

* [ACA-2299] fix search error translation (#1030)

* fix search error translation

* fix translation fallback

* remove fdescribe
2019-03-22 14:51:40 +00:00

1674 lines
52 KiB
JSON

{
"id": "alfresco",
"realm": "alfresco",
"notBefore": 0,
"revokeRefreshToken": false,
"refreshTokenMaxReuse": 0,
"accessTokenLifespan": 300,
"accessTokenLifespanForImplicitFlow": 900,
"ssoSessionIdleTimeout": 1800,
"ssoSessionMaxLifespan": 36000,
"offlineSessionIdleTimeout": 2592000,
"accessCodeLifespan": 60,
"accessCodeLifespanUserAction": 300,
"accessCodeLifespanLogin": 1800,
"actionTokenGeneratedByAdminLifespan": 43200,
"actionTokenGeneratedByUserLifespan": 300,
"enabled": true,
"sslRequired": "none",
"registrationAllowed": false,
"registrationEmailAsUsername": false,
"rememberMe": false,
"verifyEmail": false,
"loginWithEmailAllowed": true,
"duplicateEmailsAllowed": false,
"resetPasswordAllowed": false,
"editUsernameAllowed": false,
"bruteForceProtected": false,
"permanentLockout": false,
"maxFailureWaitSeconds": 900,
"minimumQuickLoginWaitSeconds": 60,
"waitIncrementSeconds": 60,
"quickLoginCheckMilliSeconds": 1000,
"maxDeltaTimeSeconds": 43200,
"failureFactor": 30,
"roles": {
"realm": [
{
"id": "39654467-e529-418e-bd27-354a0414fb52",
"name": "admin",
"scopeParamRequired": false,
"composite": false,
"clientRole": false,
"containerId": "alfresco"
},
{
"id": "5b481c9b-38fe-474a-a047-50c3935262cb",
"name": "uma_authorization",
"description": "${role_uma_authorization}",
"scopeParamRequired": false,
"composite": false,
"clientRole": false,
"containerId": "alfresco"
},
{
"id": "86db4867-8c3c-4cdf-8950-e18790f5bf6a",
"name": "offline_access",
"description": "${role_offline-access}",
"scopeParamRequired": true,
"composite": false,
"clientRole": false,
"containerId": "alfresco"
}
],
"client": {
"realm-management": [
{
"id": "a637f20f-fd3e-4db6-9d2a-c91acb1e14e8",
"name": "create-client",
"description": "${role_create-client}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "4232f8bf-dab4-4b4a-8ccf-28b8984f8ae7",
"name": "realm-admin",
"description": "${role_realm-admin}",
"scopeParamRequired": false,
"composite": true,
"composites": {
"client": {
"realm-management": [
"create-client",
"view-authorization",
"manage-events",
"query-users",
"manage-authorization",
"view-realm",
"view-clients",
"query-clients",
"query-groups",
"impersonation",
"manage-users",
"manage-clients",
"manage-identity-providers",
"view-users",
"query-realms",
"view-identity-providers",
"view-events",
"manage-realm"
]
}
},
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "ae0da5c2-643c-480e-8900-59bdca3581b3",
"name": "view-authorization",
"description": "${role_view-authorization}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "8a69ec22-4fe9-43e0-b4f0-16b632c2d324",
"name": "manage-events",
"description": "${role_manage-events}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "1c2c870c-5428-4144-ab12-c7304d1a7d2d",
"name": "query-users",
"description": "${role_query-users}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "9884df61-b63f-4f8b-8fba-650db69c8784",
"name": "manage-authorization",
"description": "${role_manage-authorization}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "003ae8b9-e32a-4c0b-b319-d2a985249348",
"name": "view-realm",
"description": "${role_view-realm}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "d0d2eaa3-e737-4a7e-990d-4c6efa323cc3",
"name": "view-clients",
"description": "${role_view-clients}",
"scopeParamRequired": false,
"composite": true,
"composites": {
"client": {
"realm-management": ["query-clients"]
}
},
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "d9f0638c-e045-4d92-b4ff-e0c71f68f4ba",
"name": "query-clients",
"description": "${role_query-clients}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "02d5937c-929b-4928-8a55-b0de4c9b4924",
"name": "query-groups",
"description": "${role_query-groups}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "c74d9c9b-65e4-4847-a47a-3edbb2fce0fb",
"name": "impersonation",
"description": "${role_impersonation}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "e681501e-a8da-4653-861c-c37e2e1f8609",
"name": "manage-users",
"description": "${role_manage-users}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "067b5e3c-9918-4713-85ca-749c6aae13e1",
"name": "manage-clients",
"description": "${role_manage-clients}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "5b395e85-f5fa-4af9-b573-497cc9b1e694",
"name": "manage-identity-providers",
"description": "${role_manage-identity-providers}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "b4ec253f-4d52-425e-b091-ed51aac7bd4c",
"name": "view-users",
"description": "${role_view-users}",
"scopeParamRequired": false,
"composite": true,
"composites": {
"client": {
"realm-management": ["query-groups", "query-users"]
}
},
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "574e930a-07d5-446f-9628-3d7568eb483a",
"name": "query-realms",
"description": "${role_query-realms}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "0cb1c9c8-55ce-4f22-b6d5-b6882c8b74fd",
"name": "view-identity-providers",
"description": "${role_view-identity-providers}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "5d07f2b1-9f28-4e8b-8f91-7d68699d327c",
"name": "view-events",
"description": "${role_view-events}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
},
{
"id": "53ccf3c9-4391-4d43-9d9e-6e644b989e9f",
"name": "manage-realm",
"description": "${role_manage-realm}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "c1f65e94-ed07-4bba-bafd-413db402a5f2"
}
],
"security-admin-console": [],
"alfresco": [],
"admin-cli": [],
"broker": [
{
"id": "560b729f-ebc7-4ce6-967b-045611d35cde",
"name": "read-token",
"description": "${role_read-token}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "887e537f-4a97-4374-a5de-45ad37bfe2df"
}
],
"account": [
{
"id": "86de6e40-74c1-4aa6-9a8b-bff434fb9a18",
"name": "manage-account-links",
"description": "${role_manage-account-links}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "140feb9e-fd73-4d02-97f6-928ed67020f1"
},
{
"id": "6a95ddc1-2b12-4e59-8d14-01a98c0fad71",
"name": "manage-account",
"description": "${role_manage-account}",
"scopeParamRequired": false,
"composite": true,
"composites": {
"client": {
"account": ["manage-account-links"]
}
},
"clientRole": true,
"containerId": "140feb9e-fd73-4d02-97f6-928ed67020f1"
},
{
"id": "a8e8d710-1f71-4481-93a1-db030533b64a",
"name": "view-profile",
"description": "${role_view-profile}",
"scopeParamRequired": false,
"composite": false,
"clientRole": true,
"containerId": "140feb9e-fd73-4d02-97f6-928ed67020f1"
}
]
}
},
"groups": [
{
"id": "21cd4641-e7cb-456f-846d-214589cef3da",
"name": "admin",
"path": "/admin",
"attributes": {},
"realmRoles": [],
"clientRoles": {},
"subGroups": []
}
],
"defaultRoles": ["offline_access", "uma_authorization"],
"requiredCredentials": ["password"],
"otpPolicyType": "totp",
"otpPolicyAlgorithm": "HmacSHA256",
"otpPolicyInitialCounter": 0,
"otpPolicyDigits": 6,
"otpPolicyLookAheadWindow": 1,
"otpPolicyPeriod": 30,
"otpSupportedApplications": ["FreeOTP"],
"clients": [
{
"id": "fca5da6d-fd90-4596-a754-346d872b779f",
"clientId": "security-admin-console",
"name": "${client_security-admin-console}",
"baseUrl": "/auth/admin/alfresco/console/index.html",
"surrogateAuthRequired": false,
"enabled": true,
"clientAuthenticatorType": "client-secret",
"secret": "**********",
"redirectUris": ["/auth/admin/alfresco/console/*"],
"webOrigins": [],
"notBefore": 0,
"bearerOnly": false,
"consentRequired": false,
"standardFlowEnabled": true,
"implicitFlowEnabled": false,
"directAccessGrantsEnabled": false,
"serviceAccountsEnabled": false,
"publicClient": true,
"frontchannelLogout": false,
"protocol": "openid-connect",
"attributes": {},
"fullScopeAllowed": false,
"nodeReRegistrationTimeout": 0,
"protocolMappers": [
{
"id": "50435a57-d933-4392-aa63-c7b93969cb77",
"name": "role list",
"protocol": "saml",
"protocolMapper": "saml-role-list-mapper",
"consentRequired": false,
"config": {
"single": "false",
"attribute.nameformat": "Basic",
"attribute.name": "Role"
}
},
{
"id": "9d065ef2-ac16-4314-bdce-6df1e32b45da",
"name": "username",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${username}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "username",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "preferred_username",
"jsonType.label": "String"
}
},
{
"id": "f21fa9c5-090a-4873-a059-5a714e186e08",
"name": "full name",
"protocol": "openid-connect",
"protocolMapper": "oidc-full-name-mapper",
"consentRequired": true,
"consentText": "${fullName}",
"config": {
"id.token.claim": "true",
"access.token.claim": "true"
}
},
{
"id": "1d28c5e3-d1ab-4563-838d-06c61e96fd3c",
"name": "family name",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${familyName}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "lastName",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "family_name",
"jsonType.label": "String"
}
},
{
"id": "0fd5ed6e-65af-4661-9d40-09a0dc90d705",
"name": "locale",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-attribute-mapper",
"consentRequired": false,
"consentText": "${locale}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "locale",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "locale",
"jsonType.label": "String"
}
},
{
"id": "47febcd5-e6e8-4c83-8ea0-551f66cbef51",
"name": "email",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${email}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "email",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "email",
"jsonType.label": "String"
}
},
{
"id": "fc891ffd-b5b7-4d56-b1cd-60ae25ec0040",
"name": "given name",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${givenName}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "firstName",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "given_name",
"jsonType.label": "String"
}
}
],
"useTemplateConfig": false,
"useTemplateScope": false,
"useTemplateMappers": false
},
{
"id": "be13165d-2792-43aa-abdb-2c6cdb627184",
"clientId": "alfresco",
"surrogateAuthRequired": false,
"enabled": true,
"clientAuthenticatorType": "client-secret",
"secret": "**********",
"redirectUris": ["*"],
"webOrigins": [],
"notBefore": 0,
"bearerOnly": false,
"consentRequired": false,
"standardFlowEnabled": true,
"implicitFlowEnabled": true,
"directAccessGrantsEnabled": true,
"serviceAccountsEnabled": false,
"publicClient": true,
"frontchannelLogout": false,
"protocol": "openid-connect",
"attributes": {},
"fullScopeAllowed": true,
"nodeReRegistrationTimeout": -1,
"protocolMappers": [
{
"id": "202b6b67-dea4-440b-b250-867fa7eb7333",
"name": "role list",
"protocol": "saml",
"protocolMapper": "saml-role-list-mapper",
"consentRequired": false,
"config": {
"single": "false",
"attribute.nameformat": "Basic",
"attribute.name": "Role"
}
},
{
"id": "cdb53973-5bf0-4de4-945d-901de3205016",
"name": "email",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${email}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "email",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "email",
"jsonType.label": "String"
}
},
{
"id": "8dd3c664-426e-44e7-931f-5e0700ed9e7f",
"name": "username",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${username}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "username",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "preferred_username",
"jsonType.label": "String"
}
},
{
"id": "aa1a443c-4716-424b-b695-49961d9cf98a",
"name": "family name",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${familyName}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "lastName",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "family_name",
"jsonType.label": "String"
}
},
{
"id": "b29201a7-e442-47f6-a589-1b6faaf27b20",
"name": "full name",
"protocol": "openid-connect",
"protocolMapper": "oidc-full-name-mapper",
"consentRequired": true,
"consentText": "${fullName}",
"config": {
"id.token.claim": "true",
"access.token.claim": "true"
}
},
{
"id": "292f1e75-3216-447d-886a-6ab91b0dee1d",
"name": "given name",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${givenName}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "firstName",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "given_name",
"jsonType.label": "String"
}
}
],
"useTemplateConfig": false,
"useTemplateScope": false,
"useTemplateMappers": false
},
{
"id": "887e537f-4a97-4374-a5de-45ad37bfe2df",
"clientId": "broker",
"name": "${client_broker}",
"surrogateAuthRequired": false,
"enabled": true,
"clientAuthenticatorType": "client-secret",
"secret": "**********",
"redirectUris": [],
"webOrigins": [],
"notBefore": 0,
"bearerOnly": false,
"consentRequired": false,
"standardFlowEnabled": true,
"implicitFlowEnabled": false,
"directAccessGrantsEnabled": false,
"serviceAccountsEnabled": false,
"publicClient": false,
"frontchannelLogout": false,
"protocol": "openid-connect",
"attributes": {},
"fullScopeAllowed": false,
"nodeReRegistrationTimeout": 0,
"protocolMappers": [
{
"id": "865fd86a-4c5e-4900-80de-34f30feb55b8",
"name": "family name",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${familyName}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "lastName",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "family_name",
"jsonType.label": "String"
}
},
{
"id": "80b5d7cc-1ec3-4d73-8344-d0479bb4178a",
"name": "username",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${username}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "username",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "preferred_username",
"jsonType.label": "String"
}
},
{
"id": "54578e9a-e782-4a83-8f24-13da2b2f598c",
"name": "given name",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${givenName}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "firstName",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "given_name",
"jsonType.label": "String"
}
},
{
"id": "a8cd846c-f538-4001-ba5f-e37d77ff87cd",
"name": "full name",
"protocol": "openid-connect",
"protocolMapper": "oidc-full-name-mapper",
"consentRequired": true,
"consentText": "${fullName}",
"config": {
"id.token.claim": "true",
"access.token.claim": "true"
}
},
{
"id": "a259f058-dbda-473a-b96e-2998958f8510",
"name": "role list",
"protocol": "saml",
"protocolMapper": "saml-role-list-mapper",
"consentRequired": false,
"config": {
"single": "false",
"attribute.nameformat": "Basic",
"attribute.name": "Role"
}
},
{
"id": "c7aed2b8-6716-4770-a936-31d973bdc557",
"name": "email",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${email}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "email",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "email",
"jsonType.label": "String"
}
}
],
"useTemplateConfig": false,
"useTemplateScope": false,
"useTemplateMappers": false
},
{
"id": "c1f65e94-ed07-4bba-bafd-413db402a5f2",
"clientId": "realm-management",
"name": "${client_realm-management}",
"surrogateAuthRequired": false,
"enabled": true,
"clientAuthenticatorType": "client-secret",
"secret": "**********",
"redirectUris": [],
"webOrigins": [],
"notBefore": 0,
"bearerOnly": true,
"consentRequired": false,
"standardFlowEnabled": true,
"implicitFlowEnabled": false,
"directAccessGrantsEnabled": false,
"serviceAccountsEnabled": false,
"publicClient": false,
"frontchannelLogout": false,
"protocol": "openid-connect",
"attributes": {},
"fullScopeAllowed": false,
"nodeReRegistrationTimeout": 0,
"protocolMappers": [
{
"id": "b51a2178-2121-42c8-9ae1-7a6f356377c0",
"name": "full name",
"protocol": "openid-connect",
"protocolMapper": "oidc-full-name-mapper",
"consentRequired": true,
"consentText": "${fullName}",
"config": {
"id.token.claim": "true",
"access.token.claim": "true"
}
},
{
"id": "091f3317-7f74-417f-9854-1726ede0fba8",
"name": "username",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${username}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "username",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "preferred_username",
"jsonType.label": "String"
}
},
{
"id": "033aeb3f-f04f-460b-9eeb-fd9376b1f639",
"name": "family name",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${familyName}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "lastName",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "family_name",
"jsonType.label": "String"
}
},
{
"id": "5e3d143c-1792-41c1-bf10-2ece9684a8fc",
"name": "given name",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${givenName}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "firstName",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "given_name",
"jsonType.label": "String"
}
},
{
"id": "e0464a63-f5ac-4fb8-9cf5-dc671badf59e",
"name": "email",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${email}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "email",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "email",
"jsonType.label": "String"
}
},
{
"id": "b68aec8b-327d-4238-8021-cefda0f66690",
"name": "role list",
"protocol": "saml",
"protocolMapper": "saml-role-list-mapper",
"consentRequired": false,
"config": {
"single": "false",
"attribute.nameformat": "Basic",
"attribute.name": "Role"
}
}
],
"useTemplateConfig": false,
"useTemplateScope": false,
"useTemplateMappers": false
},
{
"id": "140feb9e-fd73-4d02-97f6-928ed67020f1",
"clientId": "account",
"name": "${client_account}",
"baseUrl": "/auth/realms/alfresco/account",
"surrogateAuthRequired": false,
"enabled": true,
"clientAuthenticatorType": "client-secret",
"secret": "**********",
"defaultRoles": ["view-profile", "manage-account"],
"redirectUris": ["/auth/realms/alfresco/account/*"],
"webOrigins": [],
"notBefore": 0,
"bearerOnly": false,
"consentRequired": false,
"standardFlowEnabled": true,
"implicitFlowEnabled": false,
"directAccessGrantsEnabled": false,
"serviceAccountsEnabled": false,
"publicClient": false,
"frontchannelLogout": false,
"protocol": "openid-connect",
"attributes": {},
"fullScopeAllowed": false,
"nodeReRegistrationTimeout": 0,
"protocolMappers": [
{
"id": "fbda389d-78dd-4566-8238-c49a8809a3ac",
"name": "email",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${email}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "email",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "email",
"jsonType.label": "String"
}
},
{
"id": "88b68fdb-7f1b-459b-9013-2c1dfcb4ab87",
"name": "family name",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${familyName}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "lastName",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "family_name",
"jsonType.label": "String"
}
},
{
"id": "9d129b38-1b18-4c79-a987-088ec7460d8d",
"name": "username",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${username}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "username",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "preferred_username",
"jsonType.label": "String"
}
},
{
"id": "6ca7c6ca-4d2f-4fbe-8288-c65ec1f1a2ef",
"name": "role list",
"protocol": "saml",
"protocolMapper": "saml-role-list-mapper",
"consentRequired": false,
"config": {
"single": "false",
"attribute.nameformat": "Basic",
"attribute.name": "Role"
}
},
{
"id": "dcaaafc2-72d0-41b1-9df1-250aa82c3aa3",
"name": "full name",
"protocol": "openid-connect",
"protocolMapper": "oidc-full-name-mapper",
"consentRequired": true,
"consentText": "${fullName}",
"config": {
"id.token.claim": "true",
"access.token.claim": "true"
}
},
{
"id": "64a2de57-3811-415f-a6b9-b550c3dfd8b0",
"name": "given name",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${givenName}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "firstName",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "given_name",
"jsonType.label": "String"
}
}
],
"useTemplateConfig": false,
"useTemplateScope": false,
"useTemplateMappers": false
},
{
"id": "b5947c98-5a51-47f4-b7c9-935c491d17e9",
"clientId": "admin-cli",
"name": "${client_admin-cli}",
"surrogateAuthRequired": false,
"enabled": true,
"clientAuthenticatorType": "client-secret",
"secret": "**********",
"redirectUris": [],
"webOrigins": [],
"notBefore": 0,
"bearerOnly": false,
"consentRequired": false,
"standardFlowEnabled": false,
"implicitFlowEnabled": false,
"directAccessGrantsEnabled": true,
"serviceAccountsEnabled": false,
"publicClient": true,
"frontchannelLogout": false,
"protocol": "openid-connect",
"attributes": {},
"fullScopeAllowed": false,
"nodeReRegistrationTimeout": 0,
"protocolMappers": [
{
"id": "3a7400ad-d225-401f-bdb7-91d60db990f6",
"name": "username",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${username}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "username",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "preferred_username",
"jsonType.label": "String"
}
},
{
"id": "e4353798-aaac-40fa-967d-64aea182dd69",
"name": "email",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${email}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "email",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "email",
"jsonType.label": "String"
}
},
{
"id": "8fe5f0fa-b9f3-41c4-9a52-b195582d9239",
"name": "family name",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${familyName}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "lastName",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "family_name",
"jsonType.label": "String"
}
},
{
"id": "44872cc3-57b5-41d3-aae1-825dd2c350c0",
"name": "full name",
"protocol": "openid-connect",
"protocolMapper": "oidc-full-name-mapper",
"consentRequired": true,
"consentText": "${fullName}",
"config": {
"id.token.claim": "true",
"access.token.claim": "true"
}
},
{
"id": "29d794ba-6708-49cd-8a83-c50d6fc0e293",
"name": "role list",
"protocol": "saml",
"protocolMapper": "saml-role-list-mapper",
"consentRequired": false,
"config": {
"single": "false",
"attribute.nameformat": "Basic",
"attribute.name": "Role"
}
},
{
"id": "4c266a5c-cb5f-407a-876e-18f002b7792a",
"name": "given name",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": true,
"consentText": "${givenName}",
"config": {
"userinfo.token.claim": "true",
"user.attribute": "firstName",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "given_name",
"jsonType.label": "String"
}
}
],
"useTemplateConfig": false,
"useTemplateScope": false,
"useTemplateMappers": false
}
],
"browserSecurityHeaders": {
"xContentTypeOptions": "nosniff",
"xRobotsTag": "none",
"xFrameOptions": "SAMEORIGIN",
"xXSSProtection": "1; mode=block",
"contentSecurityPolicy": "frame-src 'self'; frame-ancestors 'self'; object-src 'none';"
},
"smtpServer": {},
"loginTheme": "keycloak",
"eventsEnabled": false,
"eventsListeners": ["jboss-logging"],
"enabledEventTypes": [],
"adminEventsEnabled": false,
"adminEventsDetailsEnabled": false,
"components": {
"org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy": [
{
"id": "20f304be-9abc-4fa2-801e-c02440148d1b",
"name": "Trusted Hosts",
"providerId": "trusted-hosts",
"subType": "anonymous",
"subComponents": {},
"config": {
"host-sending-registration-request-must-match": ["true"],
"client-uris-must-match": ["true"]
}
},
{
"id": "dd0ae9d2-7af3-4d38-b8e7-d9c5825d3b1f",
"name": "Full Scope Disabled",
"providerId": "scope",
"subType": "anonymous",
"subComponents": {},
"config": {}
},
{
"id": "b3099bb7-0064-4315-85d9-cdbcc0bfef71",
"name": "Consent Required",
"providerId": "consent-required",
"subType": "anonymous",
"subComponents": {},
"config": {}
},
{
"id": "7f35ed4a-2140-478b-b2f8-46585315b71f",
"name": "Allowed Protocol Mapper Types",
"providerId": "allowed-protocol-mappers",
"subType": "anonymous",
"subComponents": {},
"config": {
"allowed-protocol-mapper-types": [
"saml-user-attribute-mapper",
"oidc-usermodel-property-mapper",
"saml-role-list-mapper",
"saml-user-property-mapper",
"oidc-address-mapper",
"oidc-full-name-mapper",
"oidc-sha256-pairwise-sub-mapper",
"oidc-usermodel-attribute-mapper"
],
"consent-required-for-all-mappers": ["true"]
}
},
{
"id": "30ac8e1b-b8e4-4877-aeab-42af7c2af5ff",
"name": "Allowed Client Templates",
"providerId": "allowed-client-templates",
"subType": "anonymous",
"subComponents": {},
"config": {}
},
{
"id": "db5b54f2-258b-40f9-92f9-ef83a887d1fa",
"name": "Allowed Protocol Mapper Types",
"providerId": "allowed-protocol-mappers",
"subType": "authenticated",
"subComponents": {},
"config": {
"allowed-protocol-mapper-types": [
"saml-user-attribute-mapper",
"oidc-usermodel-attribute-mapper",
"oidc-usermodel-property-mapper",
"saml-role-list-mapper",
"oidc-address-mapper",
"saml-user-property-mapper",
"oidc-full-name-mapper",
"oidc-sha256-pairwise-sub-mapper"
],
"consent-required-for-all-mappers": ["true"]
}
},
{
"id": "cd68d51f-9c85-4560-b1d6-9379bf3fce54",
"name": "Allowed Client Templates",
"providerId": "allowed-client-templates",
"subType": "authenticated",
"subComponents": {},
"config": {}
},
{
"id": "cd3bfc37-cc55-40dc-8d83-98b76ad5a521",
"name": "Max Clients Limit",
"providerId": "max-clients",
"subType": "anonymous",
"subComponents": {},
"config": {
"max-clients": ["200"]
}
}
],
"org.keycloak.keys.KeyProvider": [
{
"id": "14b13815-a8b1-412c-a98d-0da235e8c8f9",
"name": "rsa-generated",
"providerId": "rsa-generated",
"subComponents": {},
"config": {
"priority": ["100"]
}
},
{
"id": "306d8c4c-9ad1-444e-af1a-d6c67dffc5b7",
"name": "hmac-generated",
"providerId": "hmac-generated",
"subComponents": {},
"config": {
"priority": ["100"]
}
},
{
"id": "bff7cf8c-001f-4cfb-8d47-9a8bd5bc48d3",
"name": "aes-generated",
"providerId": "aes-generated",
"subComponents": {},
"config": {
"priority": ["100"]
}
}
]
},
"internationalizationEnabled": true,
"supportedLocales": [
"de",
"no",
"ru",
"sv",
"pt-BR",
"lt",
"en",
"it",
"fr",
"zh-CN",
"es",
"ja",
"ca",
"nl"
],
"defaultLocale": "en",
"authenticationFlows": [
{
"id": "ac4ffcd4-6547-4e1c-90ac-aa56304011fb",
"alias": "Handle Existing Account",
"description": "Handle what to do if there is existing account with same email/username like authenticated identity provider",
"providerId": "basic-flow",
"topLevel": false,
"builtIn": true,
"authenticationExecutions": [
{
"authenticator": "idp-confirm-link",
"requirement": "REQUIRED",
"priority": 10,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"authenticator": "idp-email-verification",
"requirement": "ALTERNATIVE",
"priority": 20,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"requirement": "ALTERNATIVE",
"priority": 30,
"flowAlias": "Verify Existing Account by Re-authentication",
"userSetupAllowed": false,
"autheticatorFlow": true
}
]
},
{
"id": "affb11d0-0542-4824-a433-a41e90295ec1",
"alias": "Verify Existing Account by Re-authentication",
"description": "Reauthentication of existing account",
"providerId": "basic-flow",
"topLevel": false,
"builtIn": true,
"authenticationExecutions": [
{
"authenticator": "idp-username-password-form",
"requirement": "REQUIRED",
"priority": 10,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"authenticator": "auth-otp-form",
"requirement": "OPTIONAL",
"priority": 20,
"userSetupAllowed": false,
"autheticatorFlow": false
}
]
},
{
"id": "19c7907b-c38a-4cbf-b106-f42ae613fce7",
"alias": "browser",
"description": "browser based authentication",
"providerId": "basic-flow",
"topLevel": true,
"builtIn": true,
"authenticationExecutions": [
{
"authenticator": "auth-cookie",
"requirement": "ALTERNATIVE",
"priority": 10,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"authenticator": "auth-spnego",
"requirement": "DISABLED",
"priority": 20,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"authenticator": "identity-provider-redirector",
"requirement": "ALTERNATIVE",
"priority": 25,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"requirement": "ALTERNATIVE",
"priority": 30,
"flowAlias": "forms",
"userSetupAllowed": false,
"autheticatorFlow": true
}
]
},
{
"id": "5d678091-c1f9-4100-866f-fe35b032ae9d",
"alias": "clients",
"description": "Base authentication for clients",
"providerId": "client-flow",
"topLevel": true,
"builtIn": true,
"authenticationExecutions": [
{
"authenticator": "client-secret",
"requirement": "ALTERNATIVE",
"priority": 10,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"authenticator": "client-jwt",
"requirement": "ALTERNATIVE",
"priority": 20,
"userSetupAllowed": false,
"autheticatorFlow": false
}
]
},
{
"id": "d41512a5-3b62-477c-9590-badbe9f8044d",
"alias": "direct grant",
"description": "OpenID Connect Resource Owner Grant",
"providerId": "basic-flow",
"topLevel": true,
"builtIn": true,
"authenticationExecutions": [
{
"authenticator": "direct-grant-validate-username",
"requirement": "REQUIRED",
"priority": 10,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"authenticator": "direct-grant-validate-password",
"requirement": "REQUIRED",
"priority": 20,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"authenticator": "direct-grant-validate-otp",
"requirement": "OPTIONAL",
"priority": 30,
"userSetupAllowed": false,
"autheticatorFlow": false
}
]
},
{
"id": "34c91e7e-dc6c-495a-889f-f033c9311911",
"alias": "docker auth",
"description": "Used by Docker clients to authenticate against the IDP",
"providerId": "basic-flow",
"topLevel": true,
"builtIn": true,
"authenticationExecutions": [
{
"authenticator": "docker-http-basic-authenticator",
"requirement": "REQUIRED",
"priority": 10,
"userSetupAllowed": false,
"autheticatorFlow": false
}
]
},
{
"id": "d28bb33e-87a2-4712-a62c-01015ddfdf57",
"alias": "first broker login",
"description": "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
"providerId": "basic-flow",
"topLevel": true,
"builtIn": true,
"authenticationExecutions": [
{
"authenticatorConfig": "review profile config",
"authenticator": "idp-review-profile",
"requirement": "REQUIRED",
"priority": 10,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"authenticatorConfig": "create unique user config",
"authenticator": "idp-create-user-if-unique",
"requirement": "ALTERNATIVE",
"priority": 20,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"requirement": "ALTERNATIVE",
"priority": 30,
"flowAlias": "Handle Existing Account",
"userSetupAllowed": false,
"autheticatorFlow": true
}
]
},
{
"id": "e65923ea-0c5b-43e3-9ebb-648391445207",
"alias": "forms",
"description": "Username, password, otp and other auth forms.",
"providerId": "basic-flow",
"topLevel": false,
"builtIn": true,
"authenticationExecutions": [
{
"authenticator": "auth-username-password-form",
"requirement": "REQUIRED",
"priority": 10,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"authenticator": "auth-otp-form",
"requirement": "OPTIONAL",
"priority": 20,
"userSetupAllowed": false,
"autheticatorFlow": false
}
]
},
{
"id": "2d8d3a79-2e44-4d52-9aa2-919a400e0ab0",
"alias": "registration",
"description": "registration flow",
"providerId": "basic-flow",
"topLevel": true,
"builtIn": true,
"authenticationExecutions": [
{
"authenticator": "registration-page-form",
"requirement": "REQUIRED",
"priority": 10,
"flowAlias": "registration form",
"userSetupAllowed": false,
"autheticatorFlow": true
}
]
},
{
"id": "5043cb5e-d76e-4a57-a0db-98366acb6bf7",
"alias": "registration form",
"description": "registration form",
"providerId": "form-flow",
"topLevel": false,
"builtIn": true,
"authenticationExecutions": [
{
"authenticator": "registration-user-creation",
"requirement": "REQUIRED",
"priority": 20,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"authenticator": "registration-profile-action",
"requirement": "REQUIRED",
"priority": 40,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"authenticator": "registration-password-action",
"requirement": "REQUIRED",
"priority": 50,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"authenticator": "registration-recaptcha-action",
"requirement": "DISABLED",
"priority": 60,
"userSetupAllowed": false,
"autheticatorFlow": false
}
]
},
{
"id": "79f99e59-6a78-4262-a86a-231e0c69d4bd",
"alias": "reset credentials",
"description": "Reset credentials for a user if they forgot their password or something",
"providerId": "basic-flow",
"topLevel": true,
"builtIn": true,
"authenticationExecutions": [
{
"authenticator": "reset-credentials-choose-user",
"requirement": "REQUIRED",
"priority": 10,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"authenticator": "reset-credential-email",
"requirement": "REQUIRED",
"priority": 20,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"authenticator": "reset-password",
"requirement": "REQUIRED",
"priority": 30,
"userSetupAllowed": false,
"autheticatorFlow": false
},
{
"authenticator": "reset-otp",
"requirement": "OPTIONAL",
"priority": 40,
"userSetupAllowed": false,
"autheticatorFlow": false
}
]
},
{
"id": "62e8ccd7-e995-4226-bee4-4ef9f1d6edc1",
"alias": "saml ecp",
"description": "SAML ECP Profile Authentication Flow",
"providerId": "basic-flow",
"topLevel": true,
"builtIn": true,
"authenticationExecutions": [
{
"authenticator": "http-basic-authenticator",
"requirement": "REQUIRED",
"priority": 10,
"userSetupAllowed": false,
"autheticatorFlow": false
}
]
}
],
"authenticatorConfig": [
{
"id": "d1eae692-c7d2-4d52-ac4d-7b1231ce0a22",
"alias": "create unique user config",
"config": {
"require.password.update.after.registration": "false"
}
},
{
"id": "c6f89a26-2c86-4b6b-aee9-a483370fa20a",
"alias": "review profile config",
"config": {
"update.profile.on.first.login": "missing"
}
}
],
"requiredActions": [
{
"alias": "CONFIGURE_TOTP",
"name": "Configure OTP",
"providerId": "CONFIGURE_TOTP",
"enabled": true,
"defaultAction": false,
"config": {}
},
{
"alias": "UPDATE_PASSWORD",
"name": "Update Password",
"providerId": "UPDATE_PASSWORD",
"enabled": true,
"defaultAction": false,
"config": {}
},
{
"alias": "UPDATE_PROFILE",
"name": "Update Profile",
"providerId": "UPDATE_PROFILE",
"enabled": true,
"defaultAction": false,
"config": {}
},
{
"alias": "VERIFY_EMAIL",
"name": "Verify Email",
"providerId": "VERIFY_EMAIL",
"enabled": true,
"defaultAction": false,
"config": {}
},
{
"alias": "terms_and_conditions",
"name": "Terms and Conditions",
"providerId": "terms_and_conditions",
"enabled": false,
"defaultAction": false,
"config": {}
}
],
"browserFlow": "browser",
"registrationFlow": "registration",
"directGrantFlow": "direct grant",
"resetCredentialsFlow": "reset credentials",
"clientAuthenticationFlow": "clients",
"dockerAuthenticationFlow": "docker auth",
"attributes": {
"_browser_header.xXSSProtection": "1; mode=block",
"_browser_header.xFrameOptions": "SAMEORIGIN",
"permanentLockout": "false",
"quickLoginCheckMilliSeconds": "1000",
"_browser_header.xRobotsTag": "none",
"maxFailureWaitSeconds": "900",
"minimumQuickLoginWaitSeconds": "60",
"failureFactor": "30",
"actionTokenGeneratedByUserLifespan": "300",
"maxDeltaTimeSeconds": "43200",
"_browser_header.xContentTypeOptions": "nosniff",
"actionTokenGeneratedByAdminLifespan": "43200",
"bruteForceProtected": "false",
"_browser_header.contentSecurityPolicy": "frame-src 'self'; frame-ancestors 'self'; object-src 'none';",
"waitIncrementSeconds": "60"
},
"users": [
{
"id": "9c978d30-c9ad-4dcb-b61c-840fe56f72f2",
"createdTimestamp": 1533234734911,
"username": "admin",
"enabled": true,
"totp": false,
"emailVerified": true,
"firstName": "admin",
"lastName": "admin",
"email": "admin.adf@alfresco.com",
"credentials": [
{
"type": "password",
"value": "admin"
}
],
"disableableCredentialTypes": ["password"],
"requiredActions": [],
"realmRoles": ["uma_authorization", "user", "offline_access"],
"clientRoles": {
"realm-management": [
"view-clients",
"manage-users",
"manage-clients",
"view-users",
"manage-realm",
"view-realm"
],
"account": ["manage-account", "view-profile"]
},
"groups": ["/admin"]
}
],
"keycloakVersion": "4.8.3.Final"
}