mirror of
https://github.com/bmlong137/alfresco-keycloak.git
synced 2025-09-10 14:11:09 +00:00
91 lines
4.2 KiB
XML
91 lines
4.2 KiB
XML
<?xml version='1.0' encoding='UTF-8' ?>
|
|
<!--
|
|
Copyright 2019 - 2021 Acosix GmbH
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
-->
|
|
<alfresco-config>
|
|
|
|
<config evaluator="string-compare" condition="Remote">
|
|
<remote>
|
|
<connector>
|
|
<id>alfrescoCookie</id>
|
|
<name>Alfresco Connector</name>
|
|
<description>Connects to an Alfresco instance using cookie-based authentication and awareness of Keycloak access tokens</description>
|
|
<class>de.acosix.alfresco.keycloak.share.remote.AccessTokenAwareSlingshotAlfrescoConnector</class>
|
|
<authenticator-id>acosix-kc-authenticator</authenticator-id>
|
|
</connector>
|
|
|
|
<authenticator>
|
|
<id>acosix-kc-authenticator</id>
|
|
<name>Acosix Keycloak Authenticator</name>
|
|
<description>Authenticator with flexible support for ticket, cookie, remote user, and access token</description>
|
|
<class>de.acosix.alfresco.keycloak.share.remote.AccessTokenAwareAlfrescoAuthenticator</class>
|
|
</authenticator>
|
|
|
|
<endpoint>
|
|
<id>alfresco</id>
|
|
<name>Alfresco - user access</name>
|
|
<description>Access to Alfresco Repository WebScripts that require user authentication</description>
|
|
<connector-id>alfrescoCookie</connector-id>
|
|
<endpoint-url>http://repository:8080/alfresco/wcs</endpoint-url>
|
|
<identity>user</identity>
|
|
<external-auth>true</external-auth>
|
|
</endpoint>
|
|
|
|
<endpoint>
|
|
<id>alfresco-feed</id>
|
|
<name>Alfresco Feed</name>
|
|
<description>Alfresco Feed - supports basic HTTP authentication via the EndPointProxyServlet</description>
|
|
<connector-id>alfrescoCookie</connector-id>
|
|
<endpoint-url>http://repository:8080/alfresco/wcs</endpoint-url>
|
|
<basic-auth>true</basic-auth>
|
|
<identity>user</identity>
|
|
<external-auth>true</external-auth>
|
|
</endpoint>
|
|
|
|
<endpoint>
|
|
<id>alfresco-api</id>
|
|
<parent-id>alfresco</parent-id>
|
|
<name>Alfresco Public API - user access</name>
|
|
<description>Access to Alfresco Repository Public API that require user authentication. This makes use of the authentication that is provided by parent 'alfresco' endpoint. </description>
|
|
<connector-id>alfrescoCookie</connector-id>
|
|
<endpoint-url>http://repository:8080/alfresco/api</endpoint-url>
|
|
<identity>user</identity>
|
|
<external-auth>true</external-auth>
|
|
</endpoint>
|
|
</remote>
|
|
</config>
|
|
|
|
<config evaluator="string-compare" condition="Keycloak">
|
|
<keycloak-auth-config>
|
|
<enhance-login-form>true</enhance-login-form>
|
|
<enable-sso-filter>true</enable-sso-filter>
|
|
<force-keycloak-sso>false</force-keycloak-sso>
|
|
<perform-token-exchange>true</perform-token-exchange>
|
|
</keycloak-auth-config>
|
|
<keycloak-adapter-config>
|
|
<directAuthHost>http://keycloak:8080</directAuthHost>
|
|
<auth-server-url>http://localhost:${docker.tests.keycloakPort}/auth</auth-server-url>
|
|
<realm>test</realm>
|
|
<resource>alfresco-share</resource>
|
|
<ssl-required>none</ssl-required>
|
|
<public-client>false</public-client>
|
|
<credentials>
|
|
<provider>secret</provider>
|
|
<secret>a5b3e8bc-39cc-4ddd-8c8f-1c34e7a35975</secret>
|
|
</credentials>
|
|
</keycloak-adapter-config>
|
|
</config>
|
|
|
|
</alfresco-config> |