From 0c1fade445f164d185d82bbfb0237adda19a33a3 Mon Sep 17 00:00:00 2001 From: Jim Martens Date: Mon, 11 Aug 2025 08:01:32 +0200 Subject: [PATCH] security: Enable PKCE for wahlrecht frontend --- terraform/keycloak.tf | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/terraform/keycloak.tf b/terraform/keycloak.tf index ad49d3b..1e94d83 100644 --- a/terraform/keycloak.tf +++ b/terraform/keycloak.tf @@ -186,14 +186,15 @@ resource "keycloak_generic_role_mapper" "timetable_frontend_view_profile" { } resource "keycloak_openid_client" "twomartens_wahlrecht_frontend" { - realm_id = keycloak_realm.twomartens_realm.id - name = "Wahlrecht Frontend" - enabled = true - access_type = "PUBLIC" - client_id = "wahlrecht-frontend" - standard_flow_enabled = true - use_refresh_tokens = false - full_scope_allowed = false + realm_id = keycloak_realm.twomartens_realm.id + name = "Wahlrecht Frontend" + enabled = true + access_type = "PUBLIC" + client_id = "wahlrecht-frontend" + standard_flow_enabled = true + use_refresh_tokens = false + full_scope_allowed = false + pkce_code_challenge_method = "S256" valid_redirect_uris = [ "http://localhost:4200/*",