Disable proactive auth to allow public landing page
This commit is contained in:
@@ -77,24 +77,23 @@ quarkus.oidc.authentication.cookie-same-site=lax
|
||||
quarkus.oidc.authentication.java-script-auto-redirect=false
|
||||
quarkus.oidc.discovery-enabled=true
|
||||
quarkus.oidc.verify-access-token=true
|
||||
quarkus.security.auth.enabled=true
|
||||
|
||||
# Désactiver l'authentification proactive (pas de redirection automatique)
|
||||
# Seules les pages /pages/* nécessiteront une authentification
|
||||
quarkus.http.auth.proactive=false
|
||||
|
||||
# ============================================
|
||||
# Security Permissions - Pages publiques
|
||||
# ============================================
|
||||
# Landing page publique
|
||||
quarkus.http.auth.permission.public.paths=/,/index.xhtml,/index.jsf
|
||||
# Ressources statiques et landing page publiques (par défaut tout est public)
|
||||
quarkus.http.auth.permission.public.paths=/,/index.xhtml,/index.jsf,/resources/*,/jakarta.faces.resource/*,/javax.faces.resource/*
|
||||
quarkus.http.auth.permission.public.policy=permit
|
||||
|
||||
# Ressources statiques publiques
|
||||
quarkus.http.auth.permission.static.paths=/resources/*,/jakarta.faces.resource/*,/javax.faces.resource/*
|
||||
quarkus.http.auth.permission.static.policy=permit
|
||||
|
||||
# Callback OIDC (doit être accessible)
|
||||
quarkus.http.auth.permission.callback.paths=/auth/callback
|
||||
quarkus.http.auth.permission.callback.policy=permit
|
||||
|
||||
# Pages sécurisées (toutes les autres pages nécessitent une authentification)
|
||||
# Pages sécurisées (toutes les pages /pages/* nécessitent une authentification)
|
||||
quarkus.http.auth.permission.authenticated.paths=/pages/*
|
||||
quarkus.http.auth.permission.authenticated.policy=authenticated
|
||||
|
||||
|
||||
Reference in New Issue
Block a user