ansible-role-sso/templates/hydra-client.json.j2

{
	"client_id": {{ item.client_id | to_json }},
	"client_name": {{ item.client_name | default(item.client_id) | to_json }},
	"client_secret": {{ item.client_secret | default(lookup('ansible.builtin.password', '/dev/null chars=ascii_lowercase,digits length=32 seed=inventory_hostname')) | to_json }},
	"grant_types": {{ item.grant_types | default(["authorization_code","refresh_token"]) | to_json }},
	"jwks": {},
	"metadata": {},
	"post_logout_redirect_uris": {{ item.post_logout_redirect_uris | default([]) | to_json }},
	"redirect_uris": {{ item.redirect_uris | default([]) | to_json }},
	"response_types": {{ item.response_types | default(["code"]) | to_json }},
	"logo_uri": {{ item.logo_uri | default("") | to_json }},
	"scope": {{ item.scope | default("openid profile email roles") | to_json }},
	"token_endpoint_auth_method": {{ item.token_endpoint_auth_method | default("client_secret_post") | to_json }}
}