kickstart.json

{
  "variables": {
    "apiKeyValue": "master",
    "jwksKeyId": "#{UUID()}",

    "minio-applicationId": "myminioadmin",
    "minio-clientSecret": "minio-secret-key-change-me",
    "minio-tenantId": "minio-tenant",

    "oauth2-applicationId": "myoauth2admin",
    "oauth2-clientSecret": "oauth2-secret-key",
    "oauth2-tenantId": "oauth2-tenantId",

    "sample-application12-tenantId": "sampleApplicationI-tenantId",
    "sample-application1": "sampleApplicationI",
    "sample-application1-clientSecret": "sampleApplicationI-secret-key",
    "sample-application2": "sampleApplicationII",
    "sample-application2-clientSecret": "sampleApplicationII-secret-key",

    "sample-application3-tenantId": "sampleApplicationIII-tenantId",
    "sample-application3": "sampleApplicationIII",
    "sample-application3-clientSecret": "sampleApplicationIII-secret-key",

    "sample-application4-tenantId": "sampleApplicationIV-tenantId",
    "sample-application4": "sampleApplicationIV",
    "sample-application4-clientSecret": "sampleApplicationIV-secret-key",

    "minio-user-roleId": "userRoleId",
    "minio-admin-roleId": "adminRoleId",

    "normal-groupId": "ugroup",
    "admin-groupId": "agroup",

    "adminUsername": "admin",
    "adminPassword": "admin",

    "admin-Email": "adminuser@email.com",
    "user1-Email": "user@email.com",
    "user2-Email": "user2@email.com",

    "password": "pass"
  },
  "apiKey": {
    "key": "#{apiKeyValue}",
    "description": "Unrestricted API key"
  },
  "requests": [
    {
      "method": "POST",
      "url": "/admin",
      "body": {
        "password": "#{adminPassword}",
        "username": "#{adminUsername}"
      }
    },
    {
      "method": "POST",
      "url": "/key/generate/#{jwksKeyId}",
      "headers": {
        "x-stencil-tenantid": "#{tenantId}",
        "authorization": "#{apiKeyValue}"
      },
      "body": {
        "key": {
          "algorithm": "RS256",
          "issuer": "Stencil Service",
          "name": "First jwks"
        }
      }
    },

    {
      "method": "POST",
      "url": "/tenant/#{minio-tenantId}",
      "headers": {
        "x-stencil-tenantid": "#{minio-tenantId}",
        "authorization": "#{apiKeyValue}"
      },
      "body": {
        "data": {
          "name": "First tenant",
          "jwtConfiguration": {
            "accessTokenSigningKeysID": "#{jwksKeyId}",
            "refreshTokenTimeToLiveInMinutes": 3600,
            "timeToLiveInSeconds": 60,
            "idTokenSigningKeysID": "#{jwksKeyId}"
          }
        }
      }
    },
    {
      "method": "POST",
      "url": "/tenant/#{oauth2-tenantId}",
      "headers": {
        "x-stencil-tenantid": "#{oauth2-tenantId}",
        "authorization": "#{apiKeyValue}"
      },
      "body": {
        "data": {
          "name": "Second tenant",
          "jwtConfiguration": {
            "accessTokenSigningKeysID": "#{jwksKeyId}",
            "refreshTokenTimeToLiveInMinutes": 3600,
            "timeToLiveInSeconds": 60,
            "idTokenSigningKeysID": "#{jwksKeyId}"
          }
        }
      }
    },
    {
      "method": "POST",
      "url": "/tenant/#{sample-application12-tenantId}",
      "headers": {
        "x-stencil-tenantid": "#{sample-application12-tenantId}",
        "authorization": "#{apiKeyValue}"
      },
      "body": {
        "data": {
          "name": "Third tenant",
          "jwtConfiguration": {
            "accessTokenSigningKeysID": "#{jwksKeyId}",
            "refreshTokenTimeToLiveInMinutes": 3600,
            "timeToLiveInSeconds": 60,
            "idTokenSigningKeysID": "#{jwksKeyId}"
          }
        }
      }
    },
    {
      "method": "POST",
      "url": "/tenant/#{sample-application3-tenantId}",
      "headers": {
        "x-stencil-tenantid": "#{sample-application3-tenantId}",
        "authorization": "#{apiKeyValue}"
      },
      "body": {
        "data": {
          "name": "Fourth tenant",
          "jwtConfiguration": {
            "accessTokenSigningKeysID": "#{jwksKeyId}",
            "refreshTokenTimeToLiveInMinutes": 3600,
            "timeToLiveInSeconds": 60,
            "idTokenSigningKeysID": "#{jwksKeyId}"
          }
        }
      }
    },
    {
      "method": "POST",
      "url": "/tenant/#{sample-application4-tenantId}",
      "headers": {
        "x-stencil-tenantid": "#{sample-application4-tenantId}",
        "authorization": "#{apiKeyValue}"
      },
      "body": {
        "data": {
          "name": "Fifth tenant",
          "jwtConfiguration": {
            "accessTokenSigningKeysID": "#{jwksKeyId}",
            "refreshTokenTimeToLiveInMinutes": 3600,
            "timeToLiveInSeconds": 60,
            "idTokenSigningKeysID": "#{jwksKeyId}"
          }
        }
      }
    },

    {
      "method": "POST",
      "url": "/application/#{minio-applicationId}",
      "headers": {
        "x-stencil-tenantid": "#{minio-tenantId}",
        "authorization": "#{apiKeyValue}"
      },
      "body": {
        "data": {
          "active": true,
          "name": "First Stencil application",
          "scopes": [
            {
              "name": "offline_access",
              "defaultConsentDetail": "Required for getting access token",
              "defaultConsentMessage": "Perform actions from your behalf",
              "required": false
            },
            {
              "name": "profile",
              "defaultConsentDetail": "Your username, firstname and lastname will be shared",
              "defaultConsentMessage": "Access to your profile data",
              "required": false
            },
            {
              "name": "openid",
              "defaultConsentDetail": "Openid",
              "defaultConsentMessage": "Access to your profile data",
              "required": false
            },
            {
              "name": "email",
              "defaultConsentDetail": "Your email will be shared",
              "defaultConsentMessage": "Access to your email",
              "required": false
            }
          ],
          "roles": [
            {
              "name": "urn:myminioadmin:policy:readwrite",
              "description": "This is user role",
              "isDefault": true,
              "isSuperRole": false,
              "id": "#{minio-user-roleId}"
            },
            {
              "name": "urn:myminioadmin:policy:['consoleAdmin','readwrite']",
              "description": "This is special role assigned to admin users",
              "isDefault": false,
              "isSuperRole": true,
              "id": "#{minio-admin-roleId}"
            }
          ],
          "oauthConfiguration": {
            "authorizedOriginURLs": [
              "*",
              "https://strong-chairs-fall.loca.lt",
              "https://jl4spt7t-3000.inc1.devtunnels.ms/"
            ],
            "authorizedRedirectURLs": [
              "http://localhost:9001/oauth_callback",
              "http://192.168.233.157:9001/oauth_callback",
              "http://localhost:4180/oauth2/callback",
              "http://localhost:3001",
              "http://localhost:9001",
              "http://localhost:3001/callback",
              "http://192.168.250.157:9001/oauth_callback"
            ],
            "clientSecret": "#{minio-clientSecret}",
            "enabledGrants": ["authorization_code", "refresh_token"],
            "logoutURL": "http://localhost:3001/logout",
            "enablePKCE": false,
            "skipConsentScreen": false,
            "grantTimeToLiveInSeconds": 600,
            "authorizationCodeTimeToLiveInSeconds": 600,
            "sessionTimeToLiveInMinutes": 10,
            "idTokenTimeToLiveInMinutes": 100
          }
        }
      }
    },
    {
      "method": "POST",
      "url": "/application/#{oauth2-applicationId}",
      "headers": {
        "x-stencil-tenantid": "#{oauth2-tenantId}",
        "authorization": "#{apiKeyValue}"
      },
      "body": {
        "data": {
          "active": true,
          "name": "oAuth2-proxy application",
          "scopes": [
            {
              "name": "offline_access",
              "defaultConsentDetail": "Required for getting access token",
              "defaultConsentMessage": "Perform actions from your behalf",
              "required": false
            },
            {
              "name": "profile",
              "defaultConsentDetail": "Your username, firstname and lastname will be shared",
              "defaultConsentMessage": "Access to your profile data",
              "required": false
            },
            {
              "name": "openid",
              "defaultConsentDetail": "Openid",
              "defaultConsentMessage": "Access to your profile data",
              "required": false
            },
            {
              "name": "email",
              "defaultConsentDetail": "Your email will be shared",
              "defaultConsentMessage": "Access to your email",
              "required": false
            }
          ],
          "roles": [
            {
              "name": "role-in-oauth2",
              "description": "This is just a role",
              "isDefault": true,
              "isSuperRole": false
            }
          ],
          "oauthConfiguration": {
            "authorizedOriginURLs": [
              "https://strong-chairs-fall.loca.lt",
              "https://jl4spt7t-3000.inc1.devtunnels.ms/"
            ],
            "authorizedRedirectURLs": [
              "http://localhost:9001/oauth_callback",
              "http://192.168.233.157:9001/oauth_callback",
              "http://localhost:4180/oauth2/callback",
              "http://localhost:3001",
              "http://localhost:9001",
              "http://localhost:3001/callback",
              "http://192.168.250.157:9001/oauth_callback"
            ],
            "clientSecret": "#{oauth2-clientSecret}",
            "enabledGrants": ["authorization_code", "refresh_token"],
            "logoutURL": "http://localhost:3001/logout",
            "enablePKCE": false,
            "skipConsentScreen": false,
            "grantTimeToLiveInSeconds": 600,
            "authorizationCodeTimeToLiveInSeconds": 600,
            "sessionTimeToLiveInMinutes": 10,
            "idTokenTimeToLiveInMinutes": 100
          }
        }
      }
    },
    {
      "method": "POST",
      "url": "/application/#{sample-application1}",
      "headers": {
        "x-stencil-tenantid": "#{sample-application12-tenantId}",
        "authorization": "#{apiKeyValue}"
      },
      "body": {
        "data": {
          "active": true,
          "name": "First Sample application",
          "scopes": [
            {
              "name": "offline_access",
              "defaultConsentDetail": "Required for getting access token",
              "defaultConsentMessage": "Perform actions from your behalf",
              "required": false
            },
            {
              "name": "profile",
              "defaultConsentDetail": "Your username, firstname and lastname will be shared",
              "defaultConsentMessage": "Access to your profile data",
              "required": false
            },
            {
              "name": "openid",
              "defaultConsentDetail": "Openid",
              "defaultConsentMessage": "Access to your profile data",
              "required": false
            },
            {
              "name": "email",
              "defaultConsentDetail": "Your email will be shared",
              "defaultConsentMessage": "Access to your email",
              "required": false
            }
          ],
          "roles": [
            {
              "name": "role-in-sample1",
              "description": "This is just a role",
              "isDefault": true,
              "isSuperRole": false
            }
          ],
          "oauthConfiguration": {
            "authorizedOriginURLs": [
              "*",
              "https://strong-chairs-fall.loca.lt",
              "https://jl4spt7t-3000.inc1.devtunnels.ms/"
            ],
            "authorizedRedirectURLs": [
              "http://localhost:9001/oauth_callback",
              "http://192.168.233.157:9001/oauth_callback",
              "http://localhost:4180/oauth2/callback",
              "http://localhost:3001",
              "http://localhost:9001",
              "http://localhost:3001/callback",
              "http://192.168.250.157:9001/oauth_callback"
            ],
            "clientSecret": "#{sample-application1-clientSecret}",
            "enabledGrants": ["authorization_code", "refresh_token"],
            "logoutURL": "http://localhost:3001/logout",
            "enablePKCE": false,
            "skipConsentScreen": false,
            "grantTimeToLiveInSeconds": 600,
            "authorizationCodeTimeToLiveInSeconds": 600,
            "sessionTimeToLiveInMinutes": 10,
            "idTokenTimeToLiveInMinutes": 100
          }
        }
      }
    },
    {
      "method": "POST",
      "url": "/application/#{sample-application2}",
      "headers": {
        "x-stencil-tenantid": "#{sample-application12-tenantId}",
        "authorization": "#{apiKeyValue}"
      },
      "body": {
        "data": {
          "active": true,
          "name": "Second Sample application",
          "scopes": [
            {
              "name": "offline_access",
              "defaultConsentDetail": "Required for getting access token",
              "defaultConsentMessage": "Perform actions from your behalf",
              "required": false
            },
            {
              "name": "profile",
              "defaultConsentDetail": "Your username, firstname and lastname will be shared",
              "defaultConsentMessage": "Access to your profile data",
              "required": false
            },
            {
              "name": "openid",
              "defaultConsentDetail": "Openid",
              "defaultConsentMessage": "Access to your profile data",
              "required": false
            },
            {
              "name": "email",
              "defaultConsentDetail": "Your email will be shared",
              "defaultConsentMessage": "Access to your email",
              "required": false
            }
          ],
          "roles": [
            {
              "name": "role-in-sample2",
              "description": "This is just a role",
              "isDefault": true,
              "isSuperRole": false
            }
          ],
          "oauthConfiguration": {
            "authorizedOriginURLs": [
              "https://strong-chairs-fall.loca.lt",
              "https://jl4spt7t-3000.inc1.devtunnels.ms/"
            ],
            "authorizedRedirectURLs": [
              "http://localhost:9001/oauth_callback",
              "http://192.168.233.157:9001/oauth_callback",
              "http://localhost:4180/oauth2/callback",
              "http://localhost:3001",
              "http://localhost:9001",
              "http://localhost:3001/callback",
              "http://192.168.250.157:9001/oauth_callback"
            ],
            "clientSecret": "#{sample-application2-clientSecret}",
            "enabledGrants": ["authorization_code", "refresh_token"],
            "logoutURL": "http://localhost:3001/logout",
            "enablePKCE": false,
            "skipConsentScreen": false,
            "grantTimeToLiveInSeconds": 600,
            "authorizationCodeTimeToLiveInSeconds": 600,
            "sessionTimeToLiveInMinutes": 10,
            "idTokenTimeToLiveInMinutes": 100
          }
        }
      }
    },
    {
      "method": "POST",
      "url": "/application/#{sample-application3}",
      "headers": {
        "x-stencil-tenantid": "#{sample-application3-tenantId}",
        "authorization": "#{apiKeyValue}"
      },
      "body": {
        "data": {
          "active": true,
          "name": "Third Sample application with pkce enabled",
          "scopes": [
            {
              "name": "offline_access",
              "defaultConsentDetail": "Required for getting access token",
              "defaultConsentMessage": "Perform actions from your behalf",
              "required": false
            },
            {
              "name": "profile",
              "defaultConsentDetail": "Your username, firstname and lastname will be shared",
              "defaultConsentMessage": "Access to your profile data",
              "required": false
            },
            {
              "name": "openid",
              "defaultConsentDetail": "Openid",
              "defaultConsentMessage": "Access to your profile data",
              "required": false
            },
            {
              "name": "email",
              "defaultConsentDetail": "Your email will be shared",
              "defaultConsentMessage": "Access to your email",
              "required": false
            }
          ],
          "roles": [
            {
              "name": "role-in-sample3",
              "description": "This is just a role",
              "isDefault": true,
              "isSuperRole": false
            }
          ],
          "oauthConfiguration": {
            "authorizedOriginURLs": [
              "https://strong-chairs-fall.loca.lt",
              "https://jl4spt7t-3000.inc1.devtunnels.ms/"
            ],
            "authorizedRedirectURLs": [
              "http://localhost:9001/oauth_callback",
              "http://192.168.233.157:9001/oauth_callback",
              "http://localhost:4180/oauth2/callback",
              "http://localhost:3001",
              "http://localhost:9001",
              "http://localhost:3001/callback",
              "http://192.168.250.157:9001/oauth_callback"
            ],
            "clientSecret": "#{sample-application3-clientSecret}",
            "enabledGrants": ["authorization_code", "refresh_token"],
            "logoutURL": "http://localhost:3001/logout",
            "enablePKCE": true,
            "skipConsentScreen": false,
            "grantTimeToLiveInSeconds": 600,
            "authorizationCodeTimeToLiveInSeconds": 600,
            "sessionTimeToLiveInMinutes": 10,
            "idTokenTimeToLiveInMinutes": 100
          }
        }
      }
    },
    {
      "method": "POST",
      "url": "/application/#{sample-application4}",
      "headers": {
        "x-stencil-tenantid": "#{sample-application4-tenantId}",
        "authorization": "#{apiKeyValue}"
      },
      "body": {
        "data": {
          "active": true,
          "name": "Fourth Sample application with consentless login",
          "scopes": [
            {
              "name": "offline_access",
              "defaultConsentDetail": "Required for getting access token",
              "defaultConsentMessage": "Perform actions from your behalf",
              "required": false
            },
            {
              "name": "profile",
              "defaultConsentDetail": "Your username, firstname and lastname will be shared",
              "defaultConsentMessage": "Access to your profile data",
              "required": false
            },
            {
              "name": "openid",
              "defaultConsentDetail": "Openid",
              "defaultConsentMessage": "Access to your profile data",
              "required": false
            },
            {
              "name": "email",
              "defaultConsentDetail": "Your email will be shared",
              "defaultConsentMessage": "Access to your email",
              "required": false
            }
          ],
          "roles": [
            {
              "name": "role-in-sample4",
              "description": "This is just a role",
              "isDefault": true,
              "isSuperRole": false
            }
          ],
          "oauthConfiguration": {
            "authorizedOriginURLs": [
              "https://strong-chairs-fall.loca.lt",
              "https://jl4spt7t-3000.inc1.devtunnels.ms/"
            ],
            "authorizedRedirectURLs": [
              "http://localhost:9001/oauth_callback",
              "http://192.168.233.157:9001/oauth_callback",
              "http://localhost:4180/oauth2/callback",
              "http://localhost:3001",
              "http://localhost:9001",
              "http://localhost:3001/callback",
              "http://192.168.250.157:9001/oauth_callback"
            ],
            "clientSecret": "#{sample-application4-clientSecret}",
            "enabledGrants": ["authorization_code", "refresh_token"],
            "logoutURL": "http://localhost:3001/logout",
            "enablePKCE": false,
            "skipConsentScreen": true,
            "grantTimeToLiveInSeconds": 600,
            "authorizationCodeTimeToLiveInSeconds": 600,
            "sessionTimeToLiveInMinutes": 10,
            "idTokenTimeToLiveInMinutes": 100
          }
        }
      }
    },
    {
      "method": "POST",
      "url": "/group/#{admin-groupId}",
      "headers": {
        "authorization": "#{apiKeyValue}",
        "x-stencil-tenantid": "#{minio-tenantId}"
      },
      "body": {
        "group": {
          "name": "Admin group",
          "roleIDs": ["#{minio-admin-roleId}"]
        }
      }
    },
    {
      "method": "POST",
      "url": "/group/#{normal-groupId}",
      "headers": {
        "authorization": "#{apiKeyValue}",
        "x-stencil-tenantid": "#{minio-tenantId}"
      },
      "body": {
        "group": {
          "name": "user group",
          "roleIDs": ["#{minio-user-roleId}"]
        }
      }
    },
    {
      "method": "POST",
      "url": "/user/registration/combined/",
      "headers": {
        "x-stencil-tenantid": "#{minio-tenantId}",
        "authorization": "#{apiKeyValue}"
      },
      "body": {
        "data": {
          "userInfo": {
            "active": true,
            "applicationId": "#{minio-applicationId}",
            "membership": ["#{admin-groupId}"],
            "userData": {
              "username": "adminUser",
              "password": "#{password}"
            },
            "email": "#{user1-Email}"
          },
          "registrationInfo": {
            "generateAuthenticationToken": true,
            "applicationId": "#{minio-applicationId}"
          }
        }
      }
    },
    {
      "method": "POST",
      "url": "/user/registration/combined/",
      "headers": {
        "x-stencil-tenantid": "#{minio-tenantId}",
        "authorization": "#{apiKeyValue}"
      },
      "body": {
        "data": {
          "userInfo": {
            "active": true,
            "applicationId": "#{minio-applicationId}",
            "membership": ["#{normal-groupId}"],
            "userData": {
              "username": "normalUser",
              "password": "#{password}"
            },
            "email": "#{user2-Email}"
          },
          "registrationInfo": {
            "generateAuthenticationToken": true,
            "applicationId": "#{minio-applicationId}"
          }
        }
      }
    }
  ]
}