zot/examples/config-openid.json

{
  "distSpecVersion": "1.1.0-dev",
  "storage": {
    "rootDirectory": "/tmp/zot",
    "dedupe": true
  },
  "http": {
    "address": "127.0.0.1",
    "port": "8080",
    "externalUrl": "http://127.0.0.1:8080",
    "realm": "zot",
    "auth": {
      "htpasswd": {
        "path": "test/data/htpasswd"
      },
      "apikey": true,
      "openid": {
        "providers": {
          "github": {
            "clientid": "client_id",
            "clientsecret": "client_secret",
            "keypath": "",
            "scopes": ["read:org", "user", "repo"]
          },
          "google": {
            "issuer": "https://accounts.google.com",
            "clientid": "client_id",
            "clientsecret": "client_secret",
            "scopes": ["openid", "email"]
          },
          "gitlab": {
            "issuer": "https://gitlab.com",
            "clientid": "client_id",
            "clientsecret": "client_secret",
            "scopes": ["openid", "read_api", "read_user", "profile", "email"]
          },
          "oidc": {
            "name": "Corporate SSO",
            "issuer": "http://127.0.0.1:5556/dex",
            "clientid": "client_id",
            "clientsecret": "client_secret",
            "scopes": ["openid", "user", "email", "groups"]
          }
        }
      },
      "failDelay": 5
    },
    "accessControl": {
      "repositories": {
        "**": {
          "policies": [
            {
              "users": [
                "test"
              ],
              "actions": [
                "read",
                "create"
              ]
            }
          ],
          "defaultPolicy": ["read"]
        }
      }
    }
  },
  "log": {
    "level": "debug"
  },
  "extensions": {}
}