From c6595c281e8fa9b8ffa7038a81d4ea31cada5318 Mon Sep 17 00:00:00 2001 From: Jim Martens Date: Mon, 11 Aug 2025 08:01:04 +0200 Subject: [PATCH] security: Enable PKCE for timetable frontend --- terraform/keycloak.tf | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/terraform/keycloak.tf b/terraform/keycloak.tf index 20434b0..ad49d3b 100644 --- a/terraform/keycloak.tf +++ b/terraform/keycloak.tf @@ -160,14 +160,15 @@ resource "keycloak_openid_client" "twomartens_nextcloud" { } resource "keycloak_openid_client" "twomartens_timetable_frontend" { - realm_id = keycloak_realm.twomartens_realm.id - name = "Timetable Frontend" - enabled = true - access_type = "PUBLIC" - client_id = "tsw-timetable-frontend" - standard_flow_enabled = true - use_refresh_tokens = false - full_scope_allowed = false + realm_id = keycloak_realm.twomartens_realm.id + name = "Timetable Frontend" + enabled = true + access_type = "PUBLIC" + client_id = "tsw-timetable-frontend" + standard_flow_enabled = true + use_refresh_tokens = false + full_scope_allowed = false + pkce_code_challenge_method = "S256" valid_redirect_uris = [ "http://localhost:8100/*",