keycloak-config.json

{
    "id": "cbio",
    "realm": "cbio",
    "displayName": "cBioPortal",
    "enabled": true,
    "defaultGroups": [
        "PUBLIC_STUDIES"
    ],
    "loginWithEmailAllowed": false,
    "sslRequired": "none",
    "clients": [
        {
            "clientId": "cbioportal",
            "enabled": true,
            "protocol": "saml",
            "fullScopeAllowed": false,
            "adminUrl": "http://localhost:8080/saml",
            "redirectUris": [
                "http://localhost:8080/*"
            ],
            "attributes": {
                "saml.assertion.signature": "false",
                "saml.signing.certificate": "MIIDjzCCAnegAwIBAgIUMhfqNu/uQxalm+C0fzO1gW6Z4MUwDQYJKoZIhvcNAQEL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\nqe0z",
                "saml.force.post.binding": "false",
                "saml.signature.algorithm": "RSA_SHA256",
                "saml_single_logout_service_url_post": "http://localhost:8080/saml/logout",
                "saml_force_name_id_format": "true",
                "saml.client.signature": "true",
                "saml.authnstatement": "true",
                "saml_name_id_format": "email",
                "saml.server.signature": "true",
                "saml_signature_canonicalization_method": "http://www.w3.org/2001/10/xml-exc-c14n#"
            },
            "protocolMappers": [
                {
                    "name": "role list",
                    "protocol": "saml",
                    "protocolMapper": "saml-role-list-mapper",
                    "consentRequired": false,
                    "config": {
                        "single": "false",
                        "attribute.name": "Role",
                        "attribute.nameformat": "Basic"
                    }
                },
                {
                    "name": "X500 email",
                    "protocol": "saml",
                    "protocolMapper": "saml-user-property-mapper",
                    "consentRequired": false,
                    "consentText": "${email}",
                    "config": {
                        "user.attribute": "email",
                        "friendly.name": "email",
                        "attribute.name": "email",
                        "attribute.nameformat": "Basic"
                    }
                }
            ],
            "defaultClientScopes": [],
            "optionalClientScopes": []
        },
        {
            "clientId": "cbioportal_api",
            "name": "cBioPortal OIDC client",
            "enabled": true,
            "protocol": "openid-connect",
            "fullScopeAllowed": true,
            "redirectUris": [
                "http://localhost:8080/api/data-access-token/oauth2"
            ],
            "protocolMappers": [
                {
                    "name": "cbioportal_api_audience",
                    "protocol": "openid-connect",
                    "protocolMapper": "oidc-audience-mapper",
                    "config": {
                        "included.client.audience": "cbioportal_api",
                        "id.token.claim": "false",
                        "access.token.claim": "true"
                    }
                }
            ],
            "defaultClientScopes": [
                "roles"
            ],
            "optionalClientScopes": [
                "offline_access"
            ]
        }
    ],
    "users": [
        {
            "username": "testuser",
            "enabled": true,
            "email": "testuser@thehyve.nl",
            "credentials": [
                {
                    "type": "password",
                    "value": "P@ssword1"
                }
            ],
            "realmRoles": [
                "offline_access"
            ],
            "groups": [
                "/PUBLIC_STUDIES"
            ]
        }
    ],
    "groups": [
        {
            "name": "PUBLIC_STUDIES",
            "clientRoles": {
                "cbioportal": []
            }
        }
    ],
    "roles": {
        "client": {
            "cbioportal": []
        }
    }
}