diff --git a/教程/20250111-Nacos安装及SSO接入指南.md b/教程/20250111-Nacos安装及SSO接入指南.md index c5e4e0e..93a47c4 100644 --- a/教程/20250111-Nacos安装及SSO接入指南.md +++ b/教程/20250111-Nacos安装及SSO接入指南.md @@ -250,23 +250,23 @@ docker compose -f /usr/local/nacos/docker-compose.yaml up -d ```properties #*************** OIDC Related Configurations ***************# -### OpenId providers' key, list is supported(separated by comma) +###- OpenId providers' key, list is supported(separated by comma) nacos.core.auth.oidc-idp=keycloak -### corresponding OpenId providers' name, displayed in the login page +###- corresponding OpenId providers' name, displayed in the login page nacos.core.auth.oidc-idp.keycloak.name=企业微信 -### the url of the corresponding OpenId provider used to initialize the authentication +###- the url of the corresponding OpenId provider used to initialize the authentication nacos.core.auth.oidc-idp.keycloak.auth-url=http://keycloak.qifu.com/realms/keyfil/protocol/openid-connect/auth -### the url of the corresponding OpenId provider used to get the access token +###- the url of the corresponding OpenId provider used to get the access token nacos.core.auth.oidc-idp.keycloak.exchange-token-url=http://keycloak.qifu.com/realms/keyfil/protocol/openid-connect/token -### the url of the corresponding OpenId provider used to get the user information +###- the url of the corresponding OpenId provider used to get the user information nacos.core.auth.oidc-idp.keycloak.userinfo-url=http://keycloak.qifu.com/realms/keyfil/protocol/openid-connect/userinfo -### the client_id of the corresponding OpenId provider +###- the client_id of the corresponding OpenId provider nacos.core.auth.oidc-idp.keycloak.client-id=nacos -### the client_secret of the corresponding OpenId provider +###- the client_secret of the corresponding OpenId provider nacos.core.auth.oidc-idp.keycloak.client-secret=7bBJVwRRAxb6PGzrGOj2SyIaSpxcPC9Y -### the scopes of the corresponding OpenId provider, sometimes it can be omitted (e.g. Github) +###- the scopes of the corresponding OpenId provider, sometimes it can be omitted (e.g. Github) nacos.core.auth.oidc-idp.keycloak.scope=openid profile email -### the jsonpath expression of the corresponding OpenId provider used to extract the user's unique identifier from the user information +###- the jsonpath expression of the corresponding OpenId provider used to extract the user's unique identifier from the user information nacos.core.auth.oidc-idp.keycloak.username-key=preferred_username nacos.core.auth.oidc-idp.keycloak.email-key=email nacos.core.auth.oidc-idp.keycloak.full-name-key=name