85 lines
2.6 KiB
JSON
85 lines
2.6 KiB
JSON
{
|
|
"realm": "aioa",
|
|
"enabled": true,
|
|
"displayName": "AIOA Development",
|
|
"registrationAllowed": false,
|
|
"resetPasswordAllowed": true,
|
|
"loginWithEmailAllowed": true,
|
|
"roles": {
|
|
"realm": [
|
|
{ "name": "employee", "description": "普通员工" },
|
|
{ "name": "department_manager", "description": "部门主管" },
|
|
{ "name": "oa_admin", "description": "OA 管理员" }
|
|
]
|
|
},
|
|
"clients": [
|
|
{
|
|
"clientId": "aioa-mobile",
|
|
"name": "AIOA Mobile",
|
|
"enabled": true,
|
|
"publicClient": true,
|
|
"standardFlowEnabled": true,
|
|
"directAccessGrantsEnabled": true,
|
|
"redirectUris": ["aioa://oauth/callback", "http://localhost:*"],
|
|
"webOrigins": ["+"],
|
|
"attributes": {
|
|
"pkce.code.challenge.method": "S256"
|
|
},
|
|
"protocolMappers": [
|
|
{
|
|
"name": "tenant-id",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"user.attribute": "tenant_id",
|
|
"claim.name": "tenant_id",
|
|
"jsonType.label": "String",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"userinfo.token.claim": "true"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"users": [
|
|
{
|
|
"id": "10000000-0000-7000-8000-000000000001",
|
|
"username": "employee",
|
|
"enabled": true,
|
|
"emailVerified": true,
|
|
"firstName": "小明",
|
|
"lastName": "员工",
|
|
"email": "employee@example.local",
|
|
"attributes": { "tenant_id": ["00000000-0000-7000-8000-000000000001"] },
|
|
"credentials": [{ "type": "password", "value": "Employee123!", "temporary": false }],
|
|
"realmRoles": ["employee"]
|
|
},
|
|
{
|
|
"id": "10000000-0000-7000-8000-000000000002",
|
|
"username": "manager",
|
|
"enabled": true,
|
|
"emailVerified": true,
|
|
"firstName": "主管",
|
|
"lastName": "王",
|
|
"email": "manager@example.local",
|
|
"attributes": { "tenant_id": ["00000000-0000-7000-8000-000000000001"] },
|
|
"credentials": [{ "type": "password", "value": "Manager123!", "temporary": false }],
|
|
"realmRoles": ["employee", "department_manager"]
|
|
},
|
|
{
|
|
"id": "10000000-0000-7000-8000-000000000003",
|
|
"username": "admin",
|
|
"enabled": true,
|
|
"emailVerified": true,
|
|
"firstName": "管理员",
|
|
"lastName": "OA",
|
|
"email": "admin@example.local",
|
|
"attributes": { "tenant_id": ["00000000-0000-7000-8000-000000000001"] },
|
|
"credentials": [{ "type": "password", "value": "Admin123!", "temporary": false }],
|
|
"realmRoles": ["employee", "oa_admin"]
|
|
}
|
|
]
|
|
}
|