Configuration

In this section, the configuration of the SSO bridge is explained. Configuration is used based on a config.yaml file which should be placed in the apps/backend folder. This config.yaml file is loaded when booting the application. The values get type checked, and it gives a clear error message if there is a configuration field missing or provided incorrectly. Next to the config.yaml file, you can also set environment variables. These override the values that are listed in the config.yaml file.

Databases

By default, the development database is sqlite. We use postgres databases for production type instances of the http data planes.

Configuration parameters

Key	Required	Type	Description	Default
DatabaseConfig
db		DatabaseConfig	Database configuration
db.type		"sqlite" | "postgres"	Type of database
db.database		String	Name of the database
db.synchronize	Yes	Boolean	Synchronize database schema
db{type=sqlite}		SQLiteConfig	Database configuration
db{type=sqlite}.type		"sqlite" | "postgres"	Type of database	"sqlite"
db{type=sqlite}.database		String	Name of the database
db{type=sqlite}.synchronize	Yes	Boolean	Synchronize database schema
db{type=postgres}		PostgresConfig	Database configuration
db{type=postgres}.host		String	Host of the database
db{type=postgres}.port		Number	Port of the database
db{type=postgres}.username		String	Username of the database
db{type=postgres}.password		String	Password of the database
db{type=postgres}.ssl	Yes	Unknown	SSL configuration of the database
db{type=postgres}.type		"sqlite" | "postgres"	Type of database	"postgres"
db{type=postgres}.database		String	Name of the database
db{type=postgres}.synchronize	Yes	Boolean	Synchronize database schema
ServerConfig
server	Yes	ServerConfig	Server configuration
server.listen	Yes	String	IP address the server listens on	"0.0.0.0"
server.port	Yes	Number	Port the server listens on	3000
server.publicDomain	Yes	String	Public domain of the server	"localhost"
server.publicAddress	Yes	String	Public address of the server	"http://localhost:3000"
server.subPath	Yes	String	Sub path of the server
InitClient
initClients	Yes	InitClient[]	Initial client configurations
initClients[].clientId		String	Client ID
initClients[].clientSecret		String	Client secret
initClients[].secretName		String	Kubernetes secret name
initClients[].roles		String	Client roles
initClients[].grants	Yes	String	Client grants types supported	["client_credentials"]
initClients[].name		String	Client name
initClients[].description		String	Client description
initClients[].redirectUris		String	Allowed Client redirect URIs regex
InitUser
initUsers	Yes	InitUser[]	Initial user configurations
initUsers[].username		String	Username
initUsers[].password		String	Password
initUsers[].email		String	Email
initUsers[].roles		String	User roles
initUsers[].grants	Yes	String	Grant types supported	["authorization_code","refresh_token"]
kubernetesNamespace		String	Kubernetes namespace	"default"
presentationDefinition		String	Presentation Definition for OID4VP	"{\"id\":\"ac60a5c8-5677-420e-931f-58d769fc3b83\",\"input_descriptors\":[{\"id\":\"14322c69-1bce-4d7f-b6c2-ecc29b2c123b\",\"constraints\":{\"fields\":[{\"path\":[\"$.type\"],\"filter\":{\"type\":\"string\",\"pattern\":\"VerifiableCredential\"}}]}}]}"