apicurio-registry
apicurio-registry copied to clipboard
Allow to configure scopes for UI
Hello team! It's my first interaction here so I would like to use opportunity to say thank you for a great work you are doing by contributing to open source community!
Feature or Problem Description
I tried to connect Apicurio to Azure AD for a SSO directly (without using Keycloak). The problem is that Apicurio has hardcoded scopes here: https://github.com/Apicurio/apicurio-registry/blame/main/ui/src/services/auth/auth.service.ts#L129
The error I get from Microsoft:
The application XXXX asked for scope api1 that doesn't exist on the resource 00000003-0000-0000-c000-000000000000
After some investigation I realized that 00000003-0000-0000-c000-000000000000 is Microsoft Graph and I don't think it's possible to add api1 scope to it. What does this scope stands for?
Proposed Solution
Add an ability to configure scopes through application properties so that would a possibility to set them using environment variables.
Additional Context
I was able to add Azure AD as Identity Provider to KC and SSO works fine, I read somewhere in other issue that you decoupled Apicurio from KC by allowing to configure other oidc providers, but didn't actually test it, so I thought creating this issue may be helpful.