identity

README

kubectl create namespace identity

helm upgrade --install identity chart/ -n identity -f ~/Desktop/values-identity.yml

serve:
  public:
    cors:
      enabled: true

secrets:
  system:
    - youReallyNeedToChangeThis

urls:
  self:
    issuer: http://localhost:8080

  login: http://localhost:8080/login
  consent: http://localhost:8080/consent
  logout: http://localhost:8080/logout

  error: http://localhost:8080/error
  post_logout_redirect: http://localhost:8080

strategies:
  access_token: jwt

log:
  leak_sensitive_values: true

webfinger:
  oidc_discovery:
    supported_claims:
      - sub
    supported_scope:
      - openid
      - email
      - profile
      - offline
      - offline_access

docker run -it --rm -v $(pwd)/data:/data -e DSN="sqlite:///data/db.sqlite?_fk=true" oryd/hydra:v1 migrate -c /data/hydra.yaml sql -e --yes

docker run -it --rm -v $(pwd)/data:/data -e DSN="sqlite:///data/db.sqlite?_fk=true" -p 4444:4444 -p 4445:4445 oryd/hydra:v1 serve -c /data/hydra.yaml all --dangerous-force-http --sqa-opt-out

docker run -it --rm oryd/hydra:v1 clients create \
    --endpoint http://host.docker.internal:4445 \
    --id demo-id \
    --secret demo-secret \
    --callbacks http://127.0.0.1:4446/callback \
    --token-endpoint-auth-method client_secret_post

docker run -it --rm -p 4446:4446 oryd/hydra:v1 clients list --endpoint http://host.docker.internal:4445

docker run -it --rm -p 4446:4446 oryd/hydra:v1 token user \
        --endpoint http://localhost:8080 \
        --client-id=demo-id \
        --client-secret=demo-secret \
        --redirect http://127.0.0.1:4446/callback \
        --token-url http://host.docker.internal:8080/oauth2/token \
        --no-shutdown