11770b4058
Implement a full OAuth2 2.0 and OpenID Connect 1.0 authorization server with support for authorization code flow (with PKCE), refresh token rotation, device authorization grant, dynamic client registration, token introspection, and token revocation. Includes database schema, coredata layer, service logic, HTTP handlers, OIDC discovery endpoint, and JWKS publishing. Signed-off-by: Bryan Frimin <bryan@getprobo.com>
100 lines
2.2 KiB
YAML
100 lines
2.2 KiB
YAML
unit:
|
|
metrics:
|
|
addr: "localhost:19081"
|
|
tracing:
|
|
addr: "localhost:14317"
|
|
max-batch-size: 512
|
|
batch-timeout: 5
|
|
export-timeout: 30
|
|
max-queue-size: 2048
|
|
|
|
probod:
|
|
base-url: "http://localhost:18080"
|
|
encryption-key: "thisisnotasecretAAAAAAAAAAAAAAAAAAAAAAAAAAA="
|
|
chrome-dp-addr: "localhost:9222"
|
|
|
|
api:
|
|
addr: "localhost:18080"
|
|
cors:
|
|
allowed-origins: ["http://localhost:18080"]
|
|
extra-header-fields: {}
|
|
|
|
pg:
|
|
addr: "localhost:5432"
|
|
username: "postgres"
|
|
password: "postgres"
|
|
database: "probod_test"
|
|
pool-size: 10
|
|
|
|
auth:
|
|
disable-signup: false
|
|
invitation-confirmation-token-validity: 3600
|
|
cookie:
|
|
name: "SSID"
|
|
domain: "localhost"
|
|
secret: "this-is-a-secure-secret-for-cookie-signing-at-least-32-bytes"
|
|
duration: 24
|
|
secure: false
|
|
password:
|
|
pepper: "this-is-a-secure-pepper-for-password-hashing-at-least-32-bytes"
|
|
iterations: 600000
|
|
oauth2-server:
|
|
signing-keys:
|
|
- key-file: "./testdata/oauth2_signing_key.pem"
|
|
kid: "test-key-1"
|
|
active: true
|
|
access-token-duration: 10
|
|
refresh-token-duration: 10
|
|
authorization-code-duration: 5
|
|
device-code-duration: 15
|
|
|
|
trust-center:
|
|
http-addr: ":10080"
|
|
https-addr: ":10443"
|
|
|
|
aws:
|
|
region: "us-east-1"
|
|
bucket: "probod-test"
|
|
access-key-id: "probod"
|
|
secret-access-key: "thisisnotasecret"
|
|
endpoint: "http://127.0.0.1:8333"
|
|
|
|
notifications:
|
|
mailer:
|
|
sender-name: "Probo Test"
|
|
sender-email: "no-reply@test.getprobo.com"
|
|
smtp:
|
|
addr: "localhost:1025"
|
|
tls-required: false
|
|
mailer-interval: 1
|
|
slack:
|
|
sender-interval: 60
|
|
|
|
llm:
|
|
providers:
|
|
openai:
|
|
type: "openai"
|
|
api-key: "thisisnotasecret"
|
|
defaults:
|
|
provider: "openai"
|
|
model-name: "gpt-4o"
|
|
temperature: 0.1
|
|
max-tokens: 4096
|
|
|
|
evidence-describer:
|
|
interval: 10
|
|
stale-after: 300
|
|
max-concurrency: 10
|
|
|
|
custom-domains:
|
|
renewal-interval: 3600
|
|
provision-interval: 30
|
|
cname-target: "custom.test.getprobo.com"
|
|
acme:
|
|
directory: "https://localhost:14000/dir"
|
|
email: "admin@test.getprobo.com"
|
|
key-type: "EC256"
|
|
root-ca: ""
|
|
|
|
connectors: []
|