78612ea29d
- Add JWT Bearer token validation to API Gateway with restricted CORS - Add cookie-based JWT validation to FileService for browser image requests - Create shared authentication infrastructure in FictionArchive.Service.Shared - Update frontend to set fa_session cookie after OIDC login - Add [Authorize] attributes to GraphQL mutations with role-based restrictions - Configure OIDC settings for both services in docker-compose Implements FA-17: Authentication for microservices architecture
19 lines
432 B
JSON
19 lines
432 B
JSON
{
|
|
"Logging": {
|
|
"LogLevel": {
|
|
"Default": "Information",
|
|
"Microsoft.AspNetCore": "Warning"
|
|
}
|
|
},
|
|
"AllowedHosts": "*",
|
|
"OIDC": {
|
|
"Authority": "https://auth.orfl.xyz/application/o/fictionarchive/",
|
|
"ClientId": "fictionarchive-api",
|
|
"Audience": "fictionarchive-api",
|
|
"ValidateIssuer": true,
|
|
"ValidateAudience": true,
|
|
"ValidateLifetime": true,
|
|
"ValidateIssuerSigningKey": true
|
|
}
|
|
}
|