Merge pull request #427 from bcgov/403-add-sso

[FEATURE][BCMI-403] Added keycloak plugin to strapi
bcgov · Oct 24, 2024 · 6ca5bf3 · 6ca5bf3
2 parents 2ce514a + 7c4c937
commit 6ca5bf3
Show file tree

Hide file tree

Showing 8 changed files with 2,217 additions and 4,193 deletions.
diff --git a/cms/.strapi-updater.json b/cms/.strapi-updater.json
@@ -1,5 +1,5 @@
 {
-	"latest": "5.0.2",
-	"lastUpdateCheck": 1727893933240,
-	"lastNotification": 1727454524118
+	"latest": "5.1.0",
+	"lastUpdateCheck": 1729621435338,
+	"lastNotification": 1729535011105
 }
diff --git a/cms/.strapi/client/app.js b/cms/.strapi/client/app.js
@@ -3,6 +3,7 @@
  * Any modifications made will be discarded.
  */
 import ckeditor5 from "@_sh/strapi-plugin-ckeditor/strapi-admin";
+import strapiPluginSso from "@chordata-insight/strapi-plugin-sso/strapi-admin";
 import strapiCloud from "@strapi/plugin-cloud/strapi-admin";
 import graphql from "@strapi/plugin-graphql/strapi-admin";
 import i18N from "@strapi/plugin-i18n/strapi-admin";
@@ -16,6 +17,7 @@ renderAdmin(document.getElementById("strapi"), {
 
   plugins: {
     ckeditor5: ckeditor5,
+    "strapi-plugin-sso": strapiPluginSso,
     "strapi-cloud": strapiCloud,
     graphql: graphql,
     i18n: i18N,

diff --git a/cms/config/middlewares.ts b/cms/config/middlewares.ts
@@ -9,4 +9,5 @@ export default [
   'strapi::session',
   'strapi::favicon',
   'strapi::public',
+  {resolve: './src/middlewares/admin-redirect'},
 ];
diff --git a/cms/config/plugins.ts b/cms/config/plugins.ts
@@ -1,9 +1,24 @@
-export default () => ({
+export default ({ env }) => ({
     graphql: {
         enabled: true,
         config: {
             defaultLimit: 50,
             maxLimit: 100
         }
-    }
+    },
+    'strapi-plugin-sso': {
+        enabled: true,
+        config: {
+            // Keycloak
+            KEYCLOAK_DOMAIN: env('KEYCLOAK_URL'),
+            KEYCLOAK_REALM:  env('KEYCLOAK_REALM'),
+            KEYCLOAK_CLIENT_ID: env('KEYCLOAK_CLIENT_ID'),
+            KEYCLOAK_CLIENT_SECRET: env('KEYCLOAK_CLIENT_SECRET'),
+            KEYCLOAK_REDIRECT_URI: 'http://localhost:1337/strapi-plugin-sso/keycloak/callback',
+            KEYCLOAK_STRAPI_SUPER_ADMIN_ROLE: 'strapi.super_admin',
+            KEYCLOAK_STRAPI_EDITOR_ROLE: 'strapi.editor',
+            KEYCLOAK_STRAPI_AUTHOR_ROLE: 'strapi.author',
+            KEYCLOAK_REQUIRE_EMAIL_VERIFICATION: false,
+        },
+    },
 });