diff --git a/Keycloak.md b/Keycloak.md index 5aed195..f3218f3 100644 --- a/Keycloak.md +++ b/Keycloak.md @@ -6,17 +6,6 @@ Keycloak settings: [realm-export.zip](https://wekan.github.io/keycloak/realm-exp Environment Variables that need to be set in your Wekan environment: -* OAUTH2_ENABLED = TRUE -* OAUTH2_CLIENT_ID = `` -* OAUTH2_SERVER_URL = `/auth` -* OAUTH2_AUTH_ENDPOINT = `/realms//protocol/openid-connect/auth` -* OAUTH2_USERINFO_ENDPOINT = `/realms//protocol/openid-connect/userinfo` -* OAUTH2_TOKEN_ENDPOINT = `/realms//protocol/openid-connect/token` -* OAUTH2_SECRET = `` -* OAUTH2_ID_MAP = `preferred_username` -* OAUTH2_USERNAME_MAP = `preferred_username` -* OAUTH2_FULLNAME_MAP = `given_name` -* OAUTH2_EMAIL_MAP = `email` > When creating a Client in keycloak, ensure the access type is confidential under the settings tab. After clicking save, you will have a Credentials tab. You can retrieve the secret from that location. ## Snap @@ -34,3 +23,34 @@ sudo snap set wekan oauth2-username-map='preferred_username' sudo snap set wekan oauth2-fullname-map='given_name' sudo snap set wekan oauth2-email-map='email' ``` +### Debugging, if it does not work +``` +sudo snap set wekan debug='true' +``` +Click Oidc button. Then: +``` +sudo snap logs wekan.wekan +sudo systemctl status snap.wekan.wekan +``` + +## Docker + +[docker-compose.yml](https://github.com/wekan/wekan/blob/devel/docker-compose.yml) +``` +- DEBUG=true +- OAUTH2_ENABLED=true +- OAUTH2_CLIENT_ID= +- OAUTH2_SERVER_URL=/auth +- OAUTH2_AUTH_ENDPOINT=/realms//protocol/openid-connect/auth +- OAUTH2_USERINFO_ENDPOINT=/realms//protocol/openid-connect/userinfo +- OAUTH2_TOKEN_ENDPOINT=/realms//protocol/openid-connect/token +- OAUTH2_SECRET= +- OAUTH2_ID_MAP=preferred_username +- OAUTH2_USERNAME_MAP=preferred_username +- OAUTH2_FULLNAME_MAP=given_name +- OAUTH2_EMAIL_MAP=email +``` +### Debugging, if it does not work +``` +docker logs wekan-app +``` \ No newline at end of file