apicurio-registry icon indicating copy to clipboard operation
apicurio-registry copied to clipboard

Allow to configure scopes for UI

Open justinaslelys opened this issue 1 year ago • 1 comments

Hello team! It's my first interaction here so I would like to use opportunity to say thank you for a great work you are doing by contributing to open source community!

Feature or Problem Description

I tried to connect Apicurio to Azure AD for a SSO directly (without using Keycloak). The problem is that Apicurio has hardcoded scopes here: https://github.com/Apicurio/apicurio-registry/blame/main/ui/src/services/auth/auth.service.ts#L129

The error I get from Microsoft:

The application XXXX asked for scope api1 that doesn't exist on the resource 00000003-0000-0000-c000-000000000000

After some investigation I realized that 00000003-0000-0000-c000-000000000000 is Microsoft Graph and I don't think it's possible to add api1 scope to it. What does this scope stands for?

Proposed Solution

Add an ability to configure scopes through application properties so that would a possibility to set them using environment variables.

Additional Context

I was able to add Azure AD as Identity Provider to KC and SSO works fine, I read somewhere in other issue that you decoupled Apicurio from KC by allowing to configure other oidc providers, but didn't actually test it, so I thought creating this issue may be helpful.

justinaslelys avatar May 12 '23 06:05 justinaslelys