Page MenuHomeSoftware Heritage

keycloak: Remove realm direct grant flow override
ClosedPublic

Authored by anlambert on Feb 11 2022, 3:18 PM.

Details

Summary

This was added at the time to workaround token generation when user
has activated 2FA on his account but currently it makes the "swh
auth generate-token" CLI fail.

Looking at the base Direct Grant flow configuration in production,
the 2FA validation step is disabled so better removing that flow
override as user can generate a token regardless 2FA activation
using the base Direct Grant flow.

Diff Detail

Repository
rSPSITE puppet-swh-site
Lint
Automatic diff as part of commit; lint not applicable.
Unit
Automatic diff as part of commit; unit tests not applicable.