wekan-oauth-client.yaml

apiVersion: hydra.ory.sh/v1alpha1
kind: OAuth2Client
metadata:
  name: wekan-oauth-client
  # Has to live in the same namespace as the stackspin-wordpress-oauth-variables
  # secret
  namespace: flux-system
spec:
  # https://github.com/wekan/wekan/wiki/Keycloak
  grantTypes:
    - authorization_code
    - refresh_token
    - client_credentials
    - implicit
  responseTypes:
    - id_token
    - code
  scope: "openid profile email stackspin_roles"
  secretName: stackspin-wekan-oauth-variables
  # these are optional
  redirectUris:
    - https://wekan.${domain}/_oauth/oidc
  tokenEndpointAuthMethod: client_secret_post