veylant/deploy/keycloak/realm-export.json
2026-02-23 13:35:04 +01:00

171 lines
4.2 KiB
JSON

{
"realm": "veylant",
"displayName": "Veylant IA",
"enabled": true,
"sslRequired": "none",
"registrationAllowed": false,
"loginWithEmailAllowed": true,
"duplicateEmailsAllowed": false,
"resetPasswordAllowed": true,
"editUsernameAllowed": false,
"bruteForceProtected": true,
"accessTokenLifespan": 3600,
"refreshTokenMaxReuse": 0,
"roles": {
"realm": [
{
"name": "admin",
"description": "Full access to all resources and settings"
},
{
"name": "manager",
"description": "Manage users and policies within their department"
},
{
"name": "user",
"description": "Standard AI proxy access — restricted to allowed models"
},
{
"name": "auditor",
"description": "Read-only access to audit logs and compliance reports"
}
]
},
"clients": [
{
"clientId": "veylant-proxy",
"name": "Veylant IA Proxy",
"enabled": true,
"protocol": "openid-connect",
"publicClient": false,
"serviceAccountsEnabled": true,
"directAccessGrantsEnabled": true,
"standardFlowEnabled": true,
"secret": "dev-secret-change-in-production",
"redirectUris": [
"http://localhost:3000/*",
"http://localhost:8090/*"
],
"webOrigins": [
"http://localhost:3000",
"http://localhost:8090"
],
"defaultClientScopes": [
"openid",
"profile",
"email",
"roles"
],
"protocolMappers": [
{
"name": "tenant-id-mapper",
"protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-attribute-mapper",
"consentRequired": false,
"config": {
"userinfo.token.claim": "true",
"user.attribute": "tenant_id",
"id.token.claim": "true",
"access.token.claim": "true",
"claim.name": "tenant_id",
"jsonType.label": "String"
}
}
]
},
{
"clientId": "veylant-dashboard",
"name": "Veylant IA Dashboard",
"enabled": true,
"protocol": "openid-connect",
"publicClient": true,
"directAccessGrantsEnabled": false,
"standardFlowEnabled": true,
"redirectUris": [
"http://localhost:3000/*"
],
"webOrigins": [
"http://localhost:3000"
]
}
],
"users": [
{
"username": "admin@veylant.dev",
"email": "admin@veylant.dev",
"firstName": "Admin",
"lastName": "Veylant",
"enabled": true,
"emailVerified": true,
"credentials": [
{
"type": "password",
"value": "admin123",
"temporary": false
}
],
"realmRoles": ["admin"],
"attributes": {
"tenant_id": ["00000000-0000-0000-0000-000000000001"]
}
},
{
"username": "manager@veylant.dev",
"email": "manager@veylant.dev",
"firstName": "Manager",
"lastName": "Finance",
"enabled": true,
"emailVerified": true,
"credentials": [
{
"type": "password",
"value": "manager123",
"temporary": false
}
],
"realmRoles": ["manager"],
"attributes": {
"tenant_id": ["00000000-0000-0000-0000-000000000001"]
}
},
{
"username": "user@veylant.dev",
"email": "user@veylant.dev",
"firstName": "User",
"lastName": "Test",
"enabled": true,
"emailVerified": true,
"credentials": [
{
"type": "password",
"value": "user123",
"temporary": false
}
],
"realmRoles": ["user"],
"attributes": {
"tenant_id": ["00000000-0000-0000-0000-000000000001"]
}
},
{
"username": "auditor@veylant.dev",
"email": "auditor@veylant.dev",
"firstName": "Auditor",
"lastName": "Compliance",
"enabled": true,
"emailVerified": true,
"credentials": [
{
"type": "password",
"value": "auditor123",
"temporary": false
}
],
"realmRoles": ["auditor"],
"attributes": {
"tenant_id": ["00000000-0000-0000-0000-000000000001"]
}
}
]
}