diff --git a/docker/configs/hydra/hydra.yml b/docker/configs/hydra/hydra.yml index 3f9d1da..06772f6 100644 --- a/docker/configs/hydra/hydra.yml +++ b/docker/configs/hydra/hydra.yml @@ -1,13 +1,17 @@ serve: cookies: same_site_mode: Lax + names: + login_csrf: login + consent_csrf: consent + session: session urls: self: issuer: http://127.0.0.1:4444 - consent: http://127.0.0.1:3000/consent - login: http://127.0.0.1:3000/login - logout: http://127.0.0.1:3000/logout + consent: http://127.0.0.1:4455/consent + login: http://127.0.0.1:4455/login + logout: http://127.0.0.1:4455/logout secrets: system: @@ -19,4 +23,14 @@ oidc: - pairwise - public pairwise: - salt: youReallyNeedToChangeThis \ No newline at end of file + salt: youReallyNeedToChangeThis + +oauth2: + grant: + jwt: + jti_optional: true + iat_optional: true + max_ttl: 1h + +log: + leak_sensitive_values: true diff --git a/docker/configs/kratos/kratos.yml b/docker/configs/kratos/kratos.yml index 8ad2dd7..9d8bebe 100644 --- a/docker/configs/kratos/kratos.yml +++ b/docker/configs/kratos/kratos.yml @@ -7,6 +7,21 @@ serve: base_url: http://127.0.0.1:4433/ cors: enabled: true + allowed_origins: + - http://127.0.0.1 + allowed_methods: + - POST + - GET + - PUT + - PATCH + - DELETE + allowed_headers: + - Authorization + - Cookie + - Content-Type + exposed_headers: + - Content-Type + - Set-Cookie admin: base_url: http://kratos:4434/ @@ -27,7 +42,7 @@ selfservice: provider: generic client_id: 7527e7b4-c96a-4df0-8fc5-00fde18bb65d client_secret: gto_cc5uvpb5lsdczkwnbarvwmbpv5kcjwg7nhbc75zt65yrfh2ldenq - issuer_url: http://git.towk.local + issuer_url: http://127.0.0.1:3000 mapper_url: "base64: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" scope: - read_user diff --git a/docker/docker-compose.yaml b/docker/docker-compose.yaml index 68bb963..6f0132e 100644 --- a/docker/docker-compose.yaml +++ b/docker/docker-compose.yaml @@ -77,11 +77,20 @@ services: kratos-selfservice-ui-node: image: oryd/kratos-selfservice-ui-node:v1.1.0 environment: + - PORT=4455 + - SECURITY_MODE= + - HYDRA_ADMIN_URL=http://127.0.0.1:4445/ - KRATOS_PUBLIC_URL=http://kratos:4433/ - KRATOS_BROWSER_URL=http://127.0.0.1:4433/ + - COOKE_SECRET=1234567890 + - CSRF_COOKIE_NAME=_OPENCHAMI-CSRF + - CSRF_COOKIE_SECRET=OCHAMI1234 + - COOKIE_SECRET=testTESTtestTESTtestTEST networks: - internal restart: on-failure + ports: + - "4455:4455" kratos: depends_on: - kratos-migrate