feat: establish AIOA identity and organization baseline

2026-07-18 08:05:45 +08:00
commit bbb09ed56f
42 changed files with 2473 additions and 0 deletions
@@ -0,0 +1,84 @@
+{
+  "realm": "aioa",
+  "enabled": true,
+  "displayName": "AIOA Development",
+  "registrationAllowed": false,
+  "resetPasswordAllowed": true,
+  "loginWithEmailAllowed": true,
+  "roles": {
+    "realm": [
+      { "name": "employee", "description": "普通员工" },
+      { "name": "department_manager", "description": "部门主管" },
+      { "name": "oa_admin", "description": "OA 管理员" }
+    ]
+  },
+  "clients": [
+    {
+      "clientId": "aioa-mobile",
+      "name": "AIOA Mobile",
+      "enabled": true,
+      "publicClient": true,
+      "standardFlowEnabled": true,
+      "directAccessGrantsEnabled": true,
+      "redirectUris": ["aioa://oauth/callback", "http://localhost:*"],
+      "webOrigins": ["+"],
+      "attributes": {
+        "pkce.code.challenge.method": "S256"
+      },
+      "protocolMappers": [
+        {
+          "name": "tenant-id",
+          "protocol": "openid-connect",
+          "protocolMapper": "oidc-usermodel-attribute-mapper",
+          "consentRequired": false,
+          "config": {
+            "user.attribute": "tenant_id",
+            "claim.name": "tenant_id",
+            "jsonType.label": "String",
+            "id.token.claim": "true",
+            "access.token.claim": "true",
+            "userinfo.token.claim": "true"
+          }
+        }
+      ]
+    }
+  ],
+  "users": [
+    {
+      "id": "10000000-0000-7000-8000-000000000001",
+      "username": "employee",
+      "enabled": true,
+      "emailVerified": true,
+      "firstName": "小明",
+      "lastName": "员工",
+      "email": "employee@example.local",
+      "attributes": { "tenant_id": ["00000000-0000-7000-8000-000000000001"] },
+      "credentials": [{ "type": "password", "value": "Employee123!", "temporary": false }],
+      "realmRoles": ["employee"]
+    },
+    {
+      "id": "10000000-0000-7000-8000-000000000002",
+      "username": "manager",
+      "enabled": true,
+      "emailVerified": true,
+      "firstName": "主管",
+      "lastName": "王",
+      "email": "manager@example.local",
+      "attributes": { "tenant_id": ["00000000-0000-7000-8000-000000000001"] },
+      "credentials": [{ "type": "password", "value": "Manager123!", "temporary": false }],
+      "realmRoles": ["employee", "department_manager"]
+    },
+    {
+      "id": "10000000-0000-7000-8000-000000000003",
+      "username": "admin",
+      "enabled": true,
+      "emailVerified": true,
+      "firstName": "管理员",
+      "lastName": "OA",
+      "email": "admin@example.local",
+      "attributes": { "tenant_id": ["00000000-0000-7000-8000-000000000001"] },
+      "credentials": [{ "type": "password", "value": "Admin123!", "temporary": false }],
+      "realmRoles": ["employee", "oa_admin"]
+    }
+  ]
+}