Registry testing - part 16

tests/docker/keycloak/stalwart-realm.json

@@ -11,14 +11,23 @@
       "enabled": true,
       "clientAuthenticatorType": "client-secret",
       "secret": "stalwart-secret",
-      "redirectUris": ["*"],
-      "webOrigins": ["*"],
+      "redirectUris": [
+        "*"
+      ],
+      "webOrigins": [
+        "*"
+      ],
       "publicClient": false,
       "protocol": "openid-connect",
       "directAccessGrantsEnabled": true,
       "standardFlowEnabled": true,
       "serviceAccountsEnabled": true,
-      "defaultClientScopes": ["openid", "email", "profile", "roles"],
+      "defaultClientScopes": [
+        "openid",
+        "email",
+        "profile",
+        "roles"
+      ],
       "protocolMappers": [
         {
           "name": "groups",
@@ -46,6 +55,17 @@
             "userinfo.token.claim": "true",
             "jsonType.label": "String"
           }
+        },
+        {
+          "name": "audience",
+          "protocol": "openid-connect",
+          "protocolMapper": "oidc-audience-mapper",
+          "consentRequired": false,
+          "config": {
+            "included.client.audience": "stalwart",
+            "id.token.claim": "false",
+            "access.token.claim": "true"
+          }
         }
       ]
     }
@@ -65,7 +85,9 @@
           "temporary": false
         }
       ],
-      "groups": ["/sales@example.org"]
+      "groups": [
+        "/sales@example.org"
+      ]
     },
     {
       "username": "jane.smith@example.org",
@@ -81,7 +103,10 @@
           "temporary": false
         }
       ],
-      "groups": ["/sales@example.org", "/corporate@example.org"]
+      "groups": [
+        "/sales@example.org",
+        "/corporate@example.org"
+      ]
     },
     {
       "username": "bill.foobar@example.org",
@@ -97,7 +122,9 @@
           "temporary": false
         }
       ],
-      "groups": ["/corporate@example.org"]
+      "groups": [
+        "/corporate@example.org"
+      ]
     }
   ],
   "groups": [
@@ -110,4 +137,4 @@
       "path": "/corporate@example.org"
     }
   ]
-}
+}