Skip to content

Instantly share code, notes, and snippets.

@dolph

dolph/keystone_apache.conf

Last active November 29, 2022 08:18
Show Gist options
  • Star 2 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save dolph/2575ae3e7058505195ee to your computer and use it in GitHub Desktop.
Save dolph/2575ae3e7058505195ee to your computer and use it in GitHub Desktop.
Download ZIP
Keystone OpenID Connect + Authorization Code Flow
Raw
keystone_apache.conf
<VirtualHost *:5000>
...
OIDCClaimPrefix "OIDC-"
OIDCResponseType "code"
OIDCScope "openid email profile"
OIDCProviderMetadataURL http://<keycloak_host>:8080/auth/realms/master/.well-known/openid-configuration
OIDCClientID <client_id>
OIDCClientSecret <client_secret>
OIDCCryptoPassphrase openstack
OIDCRedirectURI http://<openstack_host>:5000/v3/OS-FEDERATION/identity_providers/keycloak/protocols/oidc/auth/redirect
<LocationMatch /v3/OS-FEDERATION/identity_providers/.*?/protocols/oidc/auth>
AuthType oauth20
Require valid-user
LogLevel debug
</LocationMatch>
</VirtualHost>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment