coulomb/coulomb-social
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Register coulomb-social OIDC client on live KeyCape (CSOC-WP-0002-T03)

Browse source 
Public PKCE client on kc.coulomb.social with local and production redirect
URIs. Add register-keycape-client.sh, document env, and harden public-client
token exchange (no secret). Authorize probe verified registered vs reject.
This commit is contained in:
tegwick 2026-08-09 01:50:51 +02:00
parent 179b20ceed
commit 76ec8cfe41
7 changed files with 138 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

21
.env.example Normal file
View file

@ -0,0 +1,21 @@
# Copy to .env for local overrides (never commit .env).
# python-decouple loads .env automatically when present.
SECRET_KEY=change-me
DEBUG=true
DATABASE_URL=sqlite:///db.sqlite3
DEFAULT_TENANT_ID=binky
# --- NetKingdom OIDC (KeyCape) ---
# Offline shell: leave OIDC_ENABLED=false and use /auth/dev-login/
OIDC_ENABLED=false
OIDC_ISSUER=https://kc.coulomb.social
OIDC_CLIENT_ID=coulomb-social
OIDC_REDIRECT_URI=http://127.0.0.1:8008/auth/callback/
# Public client — no secret:
# OIDC_CLIENT_SECRET=
OIDC_SCOPES=openid profile email groups
USER_ENGINE_APPLICATION_ID=coulomb-social
# USER_ENGINE_BASE_URL=
# FLEX_AUTH_BASE_URL=