uaa.yml

spring_profiles: postgresql

database:
  driverClassName: org.postgresql.Driver
  url: jdbc:postgresql://${DB_PORT_5432_TCP_ADDR}:${DB_PORT_5432_TCP_PORT}/${DB_ENV_DB:postgres}
  username: ${DB_ENV_USER:postgres}
  password: ${DB_ENV_PASS:}

jwt:
  token:
    signing-key: tokensecret
    verification-key: tokensecret

oauth:
  client:
    override: true
    autoapprove:
      - myresourceserver_shell
      - mywebapp
      - myresourceserver
  clients:
    admin:
      authorized-grant-types: client_credentials
      authorities: clients.read,clients.write,clients.secret,uaa.admin
      id: admin
      secret: adminsecret
    mywebapp:
      id: mywebapp
      secret: changeme
      authorized-grant-types: authorization_code
      scope: myresourceserver.scope1,myresourceserver.scope2,openid,password.write
      authorities: uaa.none
      redirect-uri: http://localhost:3000/authorize
    myresourceserver:
      id: myresourceserver
      secret: changemetoo
      authorized-grant-types: client_credentials
      scope: scim.read,scim.write,password.write
      authorities: uaa.resource,scim.read,scim.write,password.write
    myresourceserver_shell:
      id: myresourceserver_shell
      authorized-grant-types: implicit
      scope: myresourceserver.scope1,myresourceserver.scope2,openid,password.write
      authorities: uaa.none
      redirect-uri: http://myresourceserver.shell

scim:
  username_pattern: '[a-z0-9+\-_.@]+'
  users:
    - admin|admin|scim.write,scim.read,openid,cloud_controller.admin
    - admin2|admin|scim.write,scim.read,openid,cloud_controller.admin
    - foo|bar|openid,myresourceserver.scope1,myresourceserver.scope2
    - felipe|felipe|openid,myresourceserver.scope1,myresourceserver.scope2