#
# Copyright (c) 2018, 2019 Oracle and/or its affiliates. All rights reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

# Security requires Helidon config

server:
  port: 7987
  # location on classpath (e.g. src/main/resources/WEB in maven)
  static.classpath:
    location: "/WEB"
    # this is optional, defaults to "/"
    context: "/web"
security:
  config.require-encryption: false
  properties:
    # This is a nice way to be able to override this with local properties or env-vars
    idcs-uri: "https://tenant-id.identity.oracle.com"
    idcs-client-id: "client-id"
    idcs-client-secret: "client-secret"
    # Used as a base for redirects back to us
    frontend-uri: "http://localhost:7987"
    proxy-host: "if you need proxy"
  providers:
  - abac:
  - oidc:
      client-id: "${ALIAS=security.properties.idcs-client-id}"
      client-secret: "${ALIAS=security.properties.idcs-client-secret}"
      identity-uri: "${ALIAS=security.properties.idcs-uri}"
      # A prefix used for custom scopes
      scope-audience: "http://localhost:7987/test-application"
      proxy-host: "${ALIAS=security.properties.proxy-host}"
      frontend-uri: "${ALIAS=security.properties.frontend-uri}"
      # Retrieve roles
      idcs-roles: true
  web-server:
    paths:
    - path: "/web[/{*}]"
      authenticate: true
