config.ci.yaml

passwordAuthenticator:
  type: user
  config:
    entries:
      - username: user
        enabled: true
        passwordHash: $2a$12$vox7h99HV.gzbZGeBj69jeJVgkkP2nHTndG9USjp..00.WtIqvSpa # password is "password"
        attributes:
          roles: [user]
      - username: admin
        enabled: true
        passwordHash: $2a$12$vox7h99HV.gzbZGeBj69jeJVgkkP2nHTndG9USjp..00.WtIqvSpa # password is "password"
        attributes:
          roles: [admin]
      - username: customer
        enabled: true
        passwordHash: $2a$12$vox7h99HV.gzbZGeBj69jeJVgkkP2nHTndG9USjp..00.WtIqvSpa # password is "password"
        attributes:
          roles: [customer]
          entitlements: [product1]
      - username: system
        enabled: true
        passwordHash: $2a$12$vox7h99HV.gzbZGeBj69jeJVgkkP2nHTndG9USjp..00.WtIqvSpa # password is "password"
        attributes:
          roles: [system]

accessTokenIssuer:
  type: jwt
  config:
    issuer: issuer.portward.dev
    privateKeyFile: private_key.pem
    expiration: 15m

refreshTokenIssuer:
  type: jwt
  config:
    issuer: issuer.portward.dev
    privateKeyFile: private_key.pem

authorizer:
  type: cerbos
  config:
    address: cerbos:3593
    options:
      plaintext: true