security: Enable PKCE for wahlrecht frontend

This commit is contained in:
2025-08-11 08:01:32 +02:00
parent c6595c281e
commit 0c1fade445
+9 -8
View File
@@ -186,14 +186,15 @@ resource "keycloak_generic_role_mapper" "timetable_frontend_view_profile" {
} }
resource "keycloak_openid_client" "twomartens_wahlrecht_frontend" { resource "keycloak_openid_client" "twomartens_wahlrecht_frontend" {
realm_id = keycloak_realm.twomartens_realm.id realm_id = keycloak_realm.twomartens_realm.id
name = "Wahlrecht Frontend" name = "Wahlrecht Frontend"
enabled = true enabled = true
access_type = "PUBLIC" access_type = "PUBLIC"
client_id = "wahlrecht-frontend" client_id = "wahlrecht-frontend"
standard_flow_enabled = true standard_flow_enabled = true
use_refresh_tokens = false use_refresh_tokens = false
full_scope_allowed = false full_scope_allowed = false
pkce_code_challenge_method = "S256"
valid_redirect_uris = [ valid_redirect_uris = [
"http://localhost:4200/*", "http://localhost:4200/*",