#
# Copyright (c) 2018, 2024 Oracle and/or its affiliates.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
env: docker

server:
  port: 8080
  features:
    access-log:
      enabled: true
    security:
      paths:
        - path: "/api/{+}"
          authenticate: true

cors:
  allow-origins: ["https://cdnjs.cloudflare.com", "https://raw.githubusercontent.com"]
  allow-methods: ["GET"]

tracing:
  service: "todo:front"
  port: 9411

services:
  backend.endpoint: "http://localhost:8854"

security:
  config:
    require-encryption: false
    aes.insecure-passphrase: "changeit"
  provider-policy:
    type: "COMPOSITE"
    authentication:
      - name: "google-login"
    outbound:
      - name: "google-login"
      - name: "http-signatures"
  providers:
    - google-login:
        client-id: "1048216952820-6a6ke9vrbjlhngbc0al0dkj9qs9tqbk2.apps.googleusercontent.com"
        outbound:
          - name: "backend"
            hosts: [ "localhost" ]
    - abac:
    - http-signatures:
        outbound:
          - name: "backend"
            hosts: [ "localhost" ]
            signature:
              key-id: "frontend"
              hmac.secret: "${CLEAR=changeit}"
