78612ea29d
- Add JWT Bearer token validation to API Gateway with restricted CORS - Add cookie-based JWT validation to FileService for browser image requests - Create shared authentication infrastructure in FictionArchive.Service.Shared - Update frontend to set fa_session cookie after OIDC login - Add [Authorize] attributes to GraphQL mutations with role-based restrictions - Configure OIDC settings for both services in docker-compose Implements FA-17: Authentication for microservices architecture
32 lines
755 B
JSON
32 lines
755 B
JSON
{
|
|
"Logging": {
|
|
"LogLevel": {
|
|
"Default": "Information",
|
|
"Microsoft.AspNetCore": "Warning"
|
|
}
|
|
},
|
|
"ProxyConfiguration": {
|
|
"BaseUrl": "https://localhost:7247/api"
|
|
},
|
|
"RabbitMQ": {
|
|
"ConnectionString": "amqp://localhost2",
|
|
"ClientIdentifier": "FileService"
|
|
},
|
|
"S3": {
|
|
"Url": "https://s3.orfl.xyz",
|
|
"Bucket": "fictionarchive",
|
|
"AccessKey": "REPLACE_ME",
|
|
"SecretKey": "REPLACE_ME"
|
|
},
|
|
"OIDC": {
|
|
"Authority": "https://auth.orfl.xyz/application/o/fictionarchive/",
|
|
"ClientId": "fictionarchive-files",
|
|
"Audience": "fictionarchive-api",
|
|
"ValidateIssuer": true,
|
|
"ValidateAudience": true,
|
|
"ValidateLifetime": true,
|
|
"ValidateIssuerSigningKey": true
|
|
},
|
|
"AllowedHosts": "*"
|
|
}
|