mirror of
https://github.com/CommunitySolidServer/CommunitySolidServer.git
synced 2024-10-03 14:55:10 +00:00
1e1edd5c67
Each IDP class using storage now has a different storage. This way those classes don't have to worry about clashing keys anymore. All internal storage is now in the /.internal/ container, thereby making it easier to take the location of the internal data into account: only 1 path needs to be blocked and a regex router handling internal data differently only has to match 1 path as well.
52 lines
1.9 KiB
JSON
52 lines
1.9 KiB
JSON
{
|
|
"@context": "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^1.0.0/components/context.jsonld",
|
|
"@graph": [
|
|
{
|
|
"comment": [
|
|
"Sets all the relevant oidc parameters.",
|
|
"webid claim is in openid scope until an official scope has been decided: https://github.com/solid/authentication-panel/issues/86"
|
|
],
|
|
"@id": "urn:solid-server:default:IdentityProviderFactory",
|
|
"@type": "IdentityProviderFactory",
|
|
"args_adapterFactory": { "@id": "urn:solid-server:default:IdpAdapterFactory" },
|
|
"args_baseUrl": { "@id": "urn:solid-server:default:variable:baseUrl" },
|
|
"args_idpPath": "/idp",
|
|
"args_storage": { "@id": "urn:solid-server:default:IdpKeyStorage" },
|
|
"args_errorHandler": { "@id": "urn:solid-server:default:ErrorHandler" },
|
|
"args_responseWriter": { "@id": "urn:solid-server:default:ResponseWriter" },
|
|
"config": {
|
|
"claims": {
|
|
"openid": [ "webid", "client_id" ]
|
|
},
|
|
"cookies": {
|
|
"long": { "signed": true, "maxAge": 86400000 },
|
|
"short": { "signed": true }
|
|
},
|
|
"discovery": {
|
|
"solid_oidc_supported": "https://solidproject.org/TR/solid-oidc"
|
|
},
|
|
"features": {
|
|
"claimsParameter": { "enabled": true },
|
|
"devInteractions": { "enabled": false },
|
|
"dPoP": { "enabled": true, "ack": "draft-01" },
|
|
"introspection": { "enabled": true },
|
|
"registration": { "enabled": true },
|
|
"revocation": { "enabled": true }
|
|
},
|
|
"formats": {
|
|
"AccessToken": "jwt"
|
|
},
|
|
"scopes": [ "openid", "profile", "offline_access" ],
|
|
"subjectTypes": [ "public", "pairwise" ],
|
|
"ttl": {
|
|
"AccessToken": 3600,
|
|
"AuthorizationCode": 600,
|
|
"DeviceCode": 600,
|
|
"IdToken": 3600,
|
|
"RefreshToken": 86400
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|