{
  "realm": "aioa",
  "enabled": true,
  "displayName": "AIOA Development",
  "registrationAllowed": false,
  "resetPasswordAllowed": true,
  "loginWithEmailAllowed": true,
  "roles": {
    "realm": [
      { "name": "employee", "description": "普通员工" },
      { "name": "department_manager", "description": "部门主管" },
      { "name": "oa_admin", "description": "OA 管理员" },
      { "name": "hr_reviewer", "description": "人力资源复核人" }
    ]
  },
  "clients": [
    {
      "clientId": "aioa-mobile",
      "name": "AIOA Mobile",
      "enabled": true,
      "publicClient": true,
      "standardFlowEnabled": true,
      "directAccessGrantsEnabled": true,
      "redirectUris": ["aioa://oauth/callback", "http://localhost:*"],
      "webOrigins": ["+"],
      "attributes": {
        "pkce.code.challenge.method": "S256"
      },
      "protocolMappers": [
        {
          "name": "tenant-id",
          "protocol": "openid-connect",
          "protocolMapper": "oidc-usermodel-attribute-mapper",
          "consentRequired": false,
          "config": {
            "user.attribute": "tenant_id",
            "claim.name": "tenant_id",
            "jsonType.label": "String",
            "id.token.claim": "true",
            "access.token.claim": "true",
            "userinfo.token.claim": "true"
          }
        }
      ]
    }
  ],
  "users": [
    {
      "id": "10000000-0000-7000-8000-000000000001",
      "username": "employee",
      "enabled": true,
      "emailVerified": true,
      "firstName": "小明",
      "lastName": "员工",
      "email": "employee@example.local",
      "attributes": { "tenant_id": ["00000000-0000-7000-8000-000000000001"] },
      "credentials": [{ "type": "password", "value": "Employee123!", "temporary": false }],
      "realmRoles": ["employee"]
    },
    {
      "id": "10000000-0000-7000-8000-000000000002",
      "username": "manager",
      "enabled": true,
      "emailVerified": true,
      "firstName": "主管",
      "lastName": "王",
      "email": "manager@example.local",
      "attributes": { "tenant_id": ["00000000-0000-7000-8000-000000000001"] },
      "credentials": [{ "type": "password", "value": "Manager123!", "temporary": false }],
      "realmRoles": ["employee", "department_manager"]
    },
    {
      "id": "10000000-0000-7000-8000-000000000003",
      "username": "admin",
      "enabled": true,
      "emailVerified": true,
      "firstName": "管理员",
      "lastName": "OA",
      "email": "admin@example.local",
      "attributes": { "tenant_id": ["00000000-0000-7000-8000-000000000001"] },
      "credentials": [{ "type": "password", "value": "Admin123!", "temporary": false }],
      "realmRoles": ["employee", "oa_admin"]
    },
    {
      "id": "10000000-0000-7000-8000-000000000004",
      "username": "hr",
      "enabled": true,
      "emailVerified": true,
      "firstName": "人力",
      "lastName": "HR",
      "email": "hr@example.local",
      "attributes": { "tenant_id": ["00000000-0000-7000-8000-000000000001"] },
      "credentials": [{ "type": "password", "value": "HrReviewer123!", "temporary": false }],
      "realmRoles": ["employee", "hr_reviewer"]
    }
  ]
}