didi-lot2-backend/backend/services/gateway-auth-layer/didiKeycloak/realm-import/didi-clients-realm.json
2026-07-10 03:39:53 -07:00

446 lines
No EOL
10 KiB
JSON

{
"realm": "didi-clients",
"enabled": true,
"displayName": "DIDI - Misinformation Detection Platform",
"displayNameHtml": "<strong>DIDI</strong> - Misinformation Detection Platform",
"registrationAllowed": false,
"registrationEmailAsUsername": true,
"rememberMe": true,
"verifyEmail": false,
"loginWithEmailAllowed": true,
"duplicateEmailsAllowed": false,
"resetPasswordAllowed": true,
"editUsernameAllowed": false,
"bruteForceProtected": true,
"permanentLockout": false,
"maxFailureWaitSeconds": 900,
"minimumQuickLoginWaitSeconds": 60,
"waitIncrementSeconds": 60,
"quickLoginCheckMilliSeconds": 1000,
"maxDeltaTimeSeconds": 43200,
"failureFactor": 5,
"defaultSignatureAlgorithm": "RS256",
"ssoSessionIdleTimeout": 7200,
"ssoSessionMaxLifespan": 86400,
"accessTokenLifespan": 600,
"accessTokenLifespanForImplicitFlow": 900,
"roles": {
"realm": [
{
"name": "admin",
"description": "Administrator with full access",
"composite": false
},
{
"name": "analyst",
"description": "Can create and manage analyses",
"composite": false
},
{
"name": "viewer",
"description": "Can view analysis results",
"composite": false
},
{
"name": "api_user",
"description": "Can access API endpoints",
"composite": false
},
{
"name": "free_tier",
"description": "Free tier privileges",
"composite": false
},
{
"name": "paid_tier",
"description": "Paid tier privileges",
"composite": false
},
{
"name": "enterprise_tier",
"description": "Enterprise tier privileges",
"composite": false
}
]
},
"groups": [
{
"name": "free-users",
"path": "/free-users",
"attributes": {
"tier": [
"free"
],
"daily_limit": [
"10"
],
"rate_limit": [
"10"
]
},
"realmRoles": [
"free_tier",
"viewer",
"api_user"
]
},
{
"name": "paid-users",
"path": "/paid-users",
"attributes": {
"tier": [
"paid"
],
"daily_limit": [
"100"
],
"rate_limit": [
"60"
]
},
"realmRoles": [
"paid_tier",
"viewer",
"analyst",
"api_user"
]
},
{
"name": "enterprise-users",
"path": "/enterprise-users",
"attributes": {
"tier": [
"enterprise"
],
"daily_limit": [
"unlimited"
],
"rate_limit": [
"600"
]
},
"realmRoles": [
"enterprise_tier",
"viewer",
"analyst",
"api_user"
]
},
{
"name": "administrators",
"path": "/administrators",
"attributes": {
"tier": [
"admin"
],
"daily_limit": [
"unlimited"
],
"rate_limit": [
"unlimited"
]
},
"realmRoles": [
"admin",
"analyst",
"viewer",
"api_user",
"enterprise_tier"
]
}
],
"defaultRoles": [
"viewer",
"free_tier"
],
"requiredCredentials": [
"password"
],
"clients": [
{
"clientId": "didi-web-app",
"name": "DIDI Web Application",
"description": "Main web frontend for end users",
"enabled": true,
"publicClient": true,
"standardFlowEnabled": true,
"directAccessGrantsEnabled": true,
"redirectUris": [
"http://localhost:3001/*",
"http://localhost:5173/*",
"http://localhost:13001/*",
"http://localhost:33001/*",
"http://127.0.0.1:3001/*",
"http://127.0.0.1:5173/*",
"http://127.0.0.1:13001/*",
"http://127.0.0.1:33001/*"
],
"webOrigins": [
"http://localhost:3001",
"http://localhost:5173",
"http://localhost:13001",
"http://localhost:33001",
"http://127.0.0.1:3001",
"http://127.0.0.1:5173",
"http://127.0.0.1:13001",
"http://127.0.0.1:33001",
"+"
],
"defaultClientScopes": [
"web-origins",
"acr",
"profile",
"roles",
"email"
],
"optionalClientScopes": [
"address",
"phone",
"offline_access",
"microprofile-jwt"
]
},
{
"clientId": "admin-dashboard",
"name": "Admin Dashboard",
"description": "React admin dashboard application",
"rootUrl": "http://localhost:13003",
"adminUrl": "http://localhost:13003",
"baseUrl": "/",
"enabled": true,
"publicClient": true,
"standardFlowEnabled": true,
"implicitFlowEnabled": false,
"directAccessGrantsEnabled": true,
"serviceAccountsEnabled": false,
"attributes": {
"pkce.code.challenge.method": "S256",
"post.logout.redirect.uris": "http://localhost:13003/* http://localhost:3003/* http://localhost:33003/* http://10.11.50.11:33003/*"
},
"redirectUris": [
"http://localhost:13003/*",
"http://localhost:3003/*",
"http://localhost:33003/*",
"http://localhost:33001/*",
"http://localhost:3001/*",
"http://127.0.0.1:13003/*",
"http://127.0.0.1:3003/*",
"http://127.0.0.1:33003/*",
"http://127.0.0.1:33001/*",
"http://10.11.50.11:33003/*",
"http://10.11.50.11:3003/*"
],
"webOrigins": [
"http://localhost:13003",
"http://localhost:3003",
"http://localhost:33003",
"http://localhost:33001",
"http://localhost:3001",
"http://127.0.0.1:13003",
"http://127.0.0.1:3003",
"http://127.0.0.1:33003",
"http://127.0.0.1:33001",
"http://10.11.50.11:33003",
"http://10.11.50.11:3003",
"+"
]
},
{
"clientId": "orchestrator-api",
"name": "Analysis Orchestrator API",
"description": "Backend orchestrator service",
"rootUrl": "http://localhost:18000",
"enabled": true,
"publicClient": false,
"serviceAccountsEnabled": true,
"standardFlowEnabled": false,
"implicitFlowEnabled": false,
"directAccessGrantsEnabled": true,
"secret": "nmmImrmPAcADuPh-ZTqLY7GDhCAjfXsolDOM6TxZbHg",
"redirectUris": [
"http://localhost:18000/*",
"http://localhost:8000/*"
],
"webOrigins": [
"http://localhost:18000",
"http://localhost:8000"
]
},
{
"clientId": "kong-api-gateway",
"name": "Kong API Gateway",
"description": "API Gateway for JWT validation",
"rootUrl": "http://localhost:18100",
"enabled": true,
"publicClient": false,
"bearerOnly": true,
"standardFlowEnabled": false,
"implicitFlowEnabled": false,
"directAccessGrantsEnabled": false,
"serviceAccountsEnabled": true,
"secret": "Fu1rJ8QsjCj4j4_qZiMXyx6Ewo3xC2ik7X5m_MvSLOE"
}
],
"users": [
{
"username": "admin@didi.local",
"email": "admin@didi.local",
"firstName": "Admin",
"lastName": "User",
"enabled": true,
"emailVerified": true,
"credentials": [
{
"type": "password",
"value": "Admin12345",
"temporary": false
}
],
"realmRoles": [
"admin",
"analyst",
"viewer",
"api_user",
"enterprise_tier"
],
"groups": [
"/administrators"
],
"attributes": {
"tier": [
"admin"
]
}
},
{
"username": "demo@didi.local",
"email": "demo@didi.local",
"firstName": "Demo",
"lastName": "User",
"enabled": true,
"emailVerified": true,
"credentials": [
{
"type": "password",
"value": "Demo12345!",
"temporary": false
}
],
"realmRoles": [
"viewer",
"api_user",
"free_tier"
],
"groups": [
"/free-users"
],
"attributes": {
"tier": [
"free"
]
}
},
{
"username": "free@didi.local",
"email": "free@didi.local",
"firstName": "Free",
"lastName": "User",
"enabled": true,
"emailVerified": true,
"credentials": [
{
"type": "password",
"value": "Password123",
"temporary": false
}
],
"realmRoles": [
"free_tier",
"viewer",
"api_user"
],
"groups": [
"/free-users"
],
"attributes": {
"tier": [
"free"
]
}
},
{
"username": "paid@didi.local",
"email": "paid@didi.local",
"firstName": "Paid",
"lastName": "User",
"enabled": true,
"emailVerified": true,
"credentials": [
{
"type": "password",
"value": "Password123",
"temporary": false
}
],
"realmRoles": [
"paid_tier",
"viewer",
"analyst",
"api_user"
],
"groups": [
"/paid-users"
],
"attributes": {
"tier": [
"paid"
]
}
},
{
"username": "enterprise@didi.local",
"email": "enterprise@didi.local",
"firstName": "Enterprise",
"lastName": "User",
"enabled": true,
"emailVerified": true,
"credentials": [
{
"type": "password",
"value": "Password123",
"temporary": false
}
],
"realmRoles": [
"enterprise_tier",
"viewer",
"analyst",
"api_user"
],
"groups": [
"/enterprise-users"
],
"attributes": {
"tier": [
"enterprise"
]
}
}
],
"eventsEnabled": true,
"eventsListeners": [
"jboss-logging"
],
"adminEventsEnabled": true,
"adminEventsDetailsEnabled": true,
"internationalizationEnabled": true,
"supportedLocales": [
"en"
],
"defaultLocale": "en",
"passwordPolicy": "length(10) and digits(1) and upperCase(1) and lowerCase(1) and notUsername(undefined) and passwordHistory(3)",
"otpPolicyType": "totp",
"otpPolicyAlgorithm": "HmacSHA1",
"otpPolicyDigits": 6,
"otpPolicyPeriod": 30
}