mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-28 18:12:16 +00:00
320ddfa46d
* feat: add/ remove external idps * feat: external idp add /remove * fix: auth proto * fix: handle login * feat: loginpolicy on authrequest * feat: idp providers on login * feat: link external idp * fix: check login policy on check username * feat: add mapping fields for idp config * feat: use user org id if existing * feat: use user org id if existing * feat: register external user * feat: register external user * feat: user linking * feat: user linking * feat: design external login * feat: design external login * fix: tests * fix: regenerate login design * feat: next step test linking process * feat: next step test linking process * feat: cascade remove external idps on user * fix: tests * fix: tests * feat: external idp requsts on users * fix: generate protos * feat: login styles * feat: login styles * fix: link user * fix: register user on specifig org * fix: user linking * fix: register external, linking auto * fix: remove unnecessary request from proto * fix: tests * fix: new oidc package * fix: migration version * fix: policy permissions * Update internal/ui/login/static/i18n/en.yaml Co-authored-by: Livio Amstutz <[email protected]> * Update internal/ui/login/static/i18n/en.yaml Co-authored-by: Livio Amstutz <[email protected]> * Update internal/ui/login/handler/renderer.go Co-authored-by: Livio Amstutz <[email protected]> * Update internal/ui/login/handler/renderer.go Co-authored-by: Livio Amstutz <[email protected]> * fix: pr requests * Update internal/ui/login/handler/link_users_handler.go Co-authored-by: Livio Amstutz <[email protected]> * fix: pr requests * fix: pr requests * fix: pr requests * fix: login name size * fix: profile image light * fix: colors * fix: pr requests * fix: remove redirect uri validator * fix: remove redirect uri validator Co-authored-by: Livio Amstutz <[email protected]>
295 lines
7.4 KiB
YAML
295 lines
7.4 KiB
YAML
Log:
|
|
Level: $ZITADEL_LOG_LEVEL
|
|
Formatter:
|
|
Format: text
|
|
|
|
Tracing:
|
|
Type: $ZITADEL_TRACING_TYPE
|
|
Config:
|
|
ProjectID: $ZITADEL_TRACING_PROJECT_ID
|
|
MetricPrefix: ZITADEL-V1
|
|
Fraction: $ZITADEL_TRACING_FRACTION
|
|
|
|
AuthZ:
|
|
Repository:
|
|
Eventstore:
|
|
ServiceName: 'AuthZ'
|
|
Repository:
|
|
SQL:
|
|
Host: $ZITADEL_EVENTSTORE_HOST
|
|
Port: $ZITADEL_EVENTSTORE_PORT
|
|
User: 'authz'
|
|
Database: 'eventstore'
|
|
Password: $CR_AUTHZ_PASSWORD
|
|
SSL:
|
|
Mode: $CR_SSL_MODE
|
|
RootCert: $CR_ROOT_CERT
|
|
Cert: $CR_AUTHZ_CERT
|
|
Key: $CR_AUTHZ_KEY
|
|
Cache:
|
|
Type: 'fastcache'
|
|
Config:
|
|
MaxCacheSizeInByte: 10485760 #10mb
|
|
View:
|
|
Host: $ZITADEL_EVENTSTORE_HOST
|
|
Port: $ZITADEL_EVENTSTORE_PORT
|
|
User: 'authz'
|
|
Database: 'authz'
|
|
Password: $CR_AUTHZ_PASSWORD
|
|
SSL:
|
|
Mode: $CR_SSL_MODE
|
|
RootCert: $CR_ROOT_CERT
|
|
Cert: $CR_AUTHZ_CERT
|
|
Key: $CR_AUTHZ_KEY
|
|
Spooler:
|
|
ConcurrentWorkers: 1
|
|
BulkLimit: 100
|
|
FailureCountUntilSkip: 5
|
|
|
|
Auth:
|
|
SearchLimit: 100
|
|
Domain: $ZITADEL_DEFAULT_DOMAIN
|
|
Eventstore:
|
|
ServiceName: 'authAPI'
|
|
Repository:
|
|
SQL:
|
|
Host: $ZITADEL_EVENTSTORE_HOST
|
|
Port: $ZITADEL_EVENTSTORE_PORT
|
|
User: 'auth'
|
|
Database: 'eventstore'
|
|
Password: $CR_AUTH_PASSWORD
|
|
SSL:
|
|
Mode: $CR_SSL_MODE
|
|
RootCert: $CR_ROOT_CERT
|
|
Cert: $CR_AUTH_CERT
|
|
Key: $CR_AUTH_KEY
|
|
Cache:
|
|
Type: 'fastcache'
|
|
Config:
|
|
MaxCacheSizeInByte: 10485760 #10mb
|
|
AuthRequest:
|
|
Connection:
|
|
Host: $ZITADEL_EVENTSTORE_HOST
|
|
Port: $ZITADEL_EVENTSTORE_PORT
|
|
User: 'auth'
|
|
Database: 'auth'
|
|
Password: $CR_AUTH_PASSWORD
|
|
SSL:
|
|
Mode: $CR_SSL_MODE
|
|
RootCert: $CR_ROOT_CERT
|
|
Cert: $CR_AUTH_CERT
|
|
Key: $CR_AUTH_KEY
|
|
View:
|
|
Host: $ZITADEL_EVENTSTORE_HOST
|
|
Port: $ZITADEL_EVENTSTORE_PORT
|
|
User: 'auth'
|
|
Database: 'auth'
|
|
Password: $CR_AUTH_PASSWORD
|
|
SSL:
|
|
Mode: $CR_SSL_MODE
|
|
RootCert: $CR_ROOT_CERT
|
|
Cert: $CR_AUTH_CERT
|
|
Key: $CR_AUTH_KEY
|
|
Spooler:
|
|
ConcurrentWorkers: 1
|
|
BulkLimit: 100
|
|
FailureCountUntilSkip: 5
|
|
KeyConfig:
|
|
Size: 2048
|
|
PrivateKeyLifetime: 6h
|
|
PublicKeyLifetime: 30h
|
|
EncryptionConfig:
|
|
EncryptionKeyID: $ZITADEL_OIDC_KEYS_ID
|
|
SigningKeyRotation: 10s
|
|
|
|
Admin:
|
|
SearchLimit: 100
|
|
Domain: $ZITADEL_DEFAULT_DOMAIN
|
|
Eventstore:
|
|
ServiceName: 'Admin'
|
|
Repository:
|
|
SQL:
|
|
Host: $ZITADEL_EVENTSTORE_HOST
|
|
Port: $ZITADEL_EVENTSTORE_PORT
|
|
User: 'adminapi'
|
|
Database: 'eventstore'
|
|
Password: $CR_ADMINAPI_PASSWORD
|
|
SSL:
|
|
Mode: $CR_SSL_MODE
|
|
RootCert: $CR_ROOT_CERT
|
|
Cert: $CR_ADMINAPI_CERT
|
|
Key: $CR_ADMINAPI_KEY
|
|
Cache:
|
|
Type: 'fastcache'
|
|
Config:
|
|
MaxCacheSizeInByte: 10485760 #10mb
|
|
View:
|
|
Host: $ZITADEL_EVENTSTORE_HOST
|
|
Port: $ZITADEL_EVENTSTORE_PORT
|
|
User: 'adminapi'
|
|
Database: 'adminapi'
|
|
Password: $CR_ADMINAPI_PASSWORD
|
|
SSL:
|
|
Mode: $CR_SSL_MODE
|
|
RootCert: $CR_ROOT_CERT
|
|
Cert: $CR_ADMINAPI_CERT
|
|
Key: $CR_ADMINAPI_KEY
|
|
Spooler:
|
|
ConcurrentWorkers: 1
|
|
BulkLimit: 100
|
|
FailureCountUntilSkip: 5
|
|
|
|
Mgmt:
|
|
SearchLimit: 100
|
|
Domain: $ZITADEL_DEFAULT_DOMAIN
|
|
Eventstore:
|
|
ServiceName: 'ManagementAPI'
|
|
Repository:
|
|
SQL:
|
|
Host: $ZITADEL_EVENTSTORE_HOST
|
|
Port: $ZITADEL_EVENTSTORE_PORT
|
|
User: 'management'
|
|
Database: 'eventstore'
|
|
Password: $CR_MANAGEMENT_PASSWORD
|
|
SSL:
|
|
Mode: $CR_SSL_MODE
|
|
RootCert: $CR_ROOT_CERT
|
|
Cert: $CR_MANAGEMENT_CERT
|
|
Key: $CR_MANAGEMENT_KEY
|
|
Cache:
|
|
Type: 'fastcache'
|
|
Config:
|
|
MaxCacheSizeInByte: 10485760 #10mb
|
|
View:
|
|
Host: $ZITADEL_EVENTSTORE_HOST
|
|
Port: $ZITADEL_EVENTSTORE_PORT
|
|
User: 'management'
|
|
Database: 'management'
|
|
Password: $CR_MANAGEMENT_PASSWORD
|
|
SSL:
|
|
Mode: $CR_SSL_MODE
|
|
RootCert: $CR_ROOT_CERT
|
|
Cert: $CR_MANAGEMENT_CERT
|
|
Key: $CR_MANAGEMENT_KEY
|
|
Spooler:
|
|
ConcurrentWorkers: 1
|
|
BulkLimit: 100
|
|
FailureCountUntilSkip: 5
|
|
|
|
API:
|
|
GRPC:
|
|
ServerPort: 50001
|
|
GatewayPort: 50002
|
|
CustomHeaders:
|
|
- x-zitadel-
|
|
OIDC:
|
|
OPConfig:
|
|
Issuer: $ZITADEL_ISSUER
|
|
DefaultLogoutRedirectURI: $ZITADEL_ACCOUNTS/logout/done
|
|
CodeMethodS256: true
|
|
StorageConfig:
|
|
DefaultLoginURL: $ZITADEL_ACCOUNTS/login?authRequestID=
|
|
DefaultAccessTokenLifetime: 12h
|
|
DefaultIdTokenLifetime: 12h
|
|
SigningKeyAlgorithm: RS256
|
|
UserAgentCookieConfig:
|
|
Name: caos.zitadel.useragent
|
|
Domain: $ZITADEL_COOKIE_DOMAIN
|
|
MaxAge: 8760h #365*24h (1 year)
|
|
Key:
|
|
EncryptionKeyID: $ZITADEL_COOKIE_KEY
|
|
Cache:
|
|
MaxAge: $ZITADEL_CACHE_MAXAGE
|
|
SharedMaxAge: $ZITADEL_CACHE_SHARED_MAXAGE
|
|
Endpoints:
|
|
Auth:
|
|
Path: 'authorize'
|
|
URL: '$ZITADEL_AUTHORIZE/authorize'
|
|
Token:
|
|
Path: 'token'
|
|
URL: '$ZITADEL_OAUTH/token'
|
|
EndSession:
|
|
Path: 'endsession'
|
|
URL: '$ZITADEL_AUTHORIZE/endsession'
|
|
Userinfo:
|
|
Path: 'userinfo'
|
|
URL: '$ZITADEL_OAUTH/userinfo'
|
|
Keys:
|
|
Path: 'keys'
|
|
URL: '$ZITADEL_OAUTH/keys'
|
|
|
|
UI:
|
|
Port: 50003
|
|
Login:
|
|
Handler:
|
|
BaseURL: '$ZITADEL_ACCOUNTS'
|
|
OidcAuthCallbackURL: '$ZITADEL_AUTHORIZE/authorize/'
|
|
ZitadelURL: '$ZITADEL_CONSOLE'
|
|
LanguageCookieName: 'caos.zitadel.login.lang'
|
|
DefaultLanguage: 'de'
|
|
CSRF:
|
|
CookieName: 'caos.zitadel.login.csrf'
|
|
Key:
|
|
EncryptionKeyID: $ZITADEL_CSRF_KEY
|
|
Development: $ZITADEL_CSRF_DEV
|
|
UserAgentCookieConfig:
|
|
Name: caos.zitadel.useragent
|
|
Domain: $ZITADEL_COOKIE_DOMAIN
|
|
MaxAge: 8760h #365*24h (1 year)
|
|
Key:
|
|
EncryptionKeyID: $ZITADEL_COOKIE_KEY
|
|
Cache:
|
|
MaxAge: $ZITADEL_CACHE_MAXAGE
|
|
SharedMaxAge: $ZITADEL_CACHE_SHARED_MAXAGE
|
|
Console:
|
|
EnvOverwriteDir: $ZITADEL_CONSOLE_ENV_DIR
|
|
ShortCache:
|
|
MaxAge: $ZITADEL_SHORT_CACHE_MAXAGE
|
|
SharedMaxAge: $ZITADEL_SHORT_CACHE_SHARED_MAXAGE
|
|
LongCache:
|
|
MaxAge: $ZITADEL_CACHE_MAXAGE
|
|
SharedMaxAge: $ZITADEL_CACHE_SHARED_MAXAGE
|
|
CSPDomain: $ZITADEL_DEFAULT_DOMAIN
|
|
|
|
Notification:
|
|
Repository:
|
|
DefaultLanguage: 'de'
|
|
Domain: $ZITADEL_DEFAULT_DOMAIN
|
|
Eventstore:
|
|
ServiceName: 'Notification'
|
|
Repository:
|
|
SQL:
|
|
Host: $ZITADEL_EVENTSTORE_HOST
|
|
Port: $ZITADEL_EVENTSTORE_PORT
|
|
User: 'notification'
|
|
Database: 'eventstore'
|
|
Password: $CR_NOTIFICATION_PASSWORD
|
|
SSL:
|
|
Mode: $CR_SSL_MODE
|
|
RootCert: $CR_ROOT_CERT
|
|
Cert: $CR_NOTIFICATION_CERT
|
|
Key: $CR_NOTIFICATION_KEY
|
|
Cache:
|
|
Type: 'fastcache'
|
|
Config:
|
|
MaxCacheSizeInByte: 10485760 #10mb
|
|
View:
|
|
Host: $ZITADEL_EVENTSTORE_HOST
|
|
Port: $ZITADEL_EVENTSTORE_PORT
|
|
User: 'notification'
|
|
Database: 'notification'
|
|
Password: $CR_NOTIFICATION_PASSWORD
|
|
SSL:
|
|
Mode: $CR_SSL_MODE
|
|
RootCert: $CR_ROOT_CERT
|
|
Cert: $CR_NOTIFICATION_CERT
|
|
Key: $CR_NOTIFICATION_KEY
|
|
Spooler:
|
|
ConcurrentWorkers: 1
|
|
BulkLimit: 100
|
|
FailureCountUntilSkip: 5
|
|
Handlers:
|
|
Notification:
|
|
MinimumCycleDuration: 5s
|
|
User:
|
|
MinimumCycleDuration: 5s |