enable-google-provider.yml

gistfile1.txt

#@ load("@ytt:overlay", "overlay")

#@overlay/match by=overlay.subset({"metadata": {"name": "uaa-config"}}), expects=1
---
#@overlay/match-child-defaults missing_ok=True
data:
  uaa.yml:
    login:
      oauth:
        providers:
          google:
            type: oidc1.0
            authUrl: https://accounts.google.com/o/oauth2/v2/auth
            tokenUrl:  https://oauth2.googleapis.com/token
            tokenKeyUrl: https://www.googleapis.com/oauth2/v3/certs
            issuer: https://accounts.google.com
            redirectUrl: uaa.my-cf-domain.com
            scopes:
              - openid
              - email
            linkText: Login with google
            showLinkText: true
            addShadowUserOnLogin: true
            relyingPartyId: myID
            relyingPartySecret: mySecret
            skipSslValidation: true
            attributeMappings:
              user_name: email