QR 로그인 구현 완료

docker/ory/kratos/kratos.yml

@@ -3,84 +3,90 @@ version: v1.3.0
 dsn: memory
 
 serve:
-  public:
-    base_url: http://localhost:4433/
-    cors:
-      enabled: true
-  admin:
-    base_url: http://localhost:4434/
+    public:
+        base_url: http://localhost:4433/
+        cors:
+            enabled: true
+    admin:
+        base_url: http://localhost:4434/
 
 selfservice:
-  default_browser_return_url: http://localhost:4455/
-  allowed_return_urls:
-    - http://localhost:4455
-    - http://localhost:5000
+    default_browser_return_url: http://localhost:4455/
+    allowed_return_urls:
+        - http://localhost:4455
+        - http://localhost:5000
+        - https://sss.hmac.kr
+        - https://sss.hmac.kr/
+        - https://sso.hmac.kr
+        - https://sso.hmac.kr/
+        - https://app.hmac.kr
+        - https://app.hmac.kr/
 
-  methods:
-    password:
-      enabled: true
-    link:
-      enabled: true
-    code:
-      enabled: true
-      passwordless_enabled: true
+    methods:
+        password:
+            enabled: true
+        link:
+            enabled: true
+        code:
+            enabled: true
+            passwordless_enabled: true
 
-  flows:
-    error:
-      ui_url: http://localhost:4455/error
-    settings:
-      ui_url: http://localhost:4455/settings
-      privileged_session_max_age: 15m
-    recovery:
-      ui_url: http://localhost:4455/recovery
-      use: code
-    verification:
-      ui_url: http://localhost:4455/verification
-      use: code
-    logout:
-      after:
-        default_browser_return_url: http://localhost:4455/login
-    login:
-      ui_url: http://localhost:4455/login
-      lifespan: 10m
-    registration:
-      ui_url: http://localhost:4455/registration
-      lifespan: 10m
+    flows:
+        error:
+            ui_url: http://localhost:4455/error
+        settings:
+            ui_url: http://localhost:4455/settings
+            privileged_session_max_age: 15m
+        recovery:
+            ui_url: http://localhost:4455/recovery
+            use: code
+        verification:
+            ui_url: http://localhost:4455/verification
+            use: code
+        logout:
+            after:
+                default_browser_return_url: http://localhost:4455/login
+        login:
+            ui_url: http://localhost:4455/login
+            lifespan: 10m
+        registration:
+            ui_url: http://localhost:4455/registration
+            lifespan: 10m
 
 log:
-  level: debug
-  format: text
-  leak_sensitive_values: true
+    level: debug
+    format: text
+    leak_sensitive_values: true
 
 secrets:
-  cookie:
-    - PLEASE-CHANGE-ME-I-AM-VERY-INSECURE
-  cipher:
-    - 32-LONG-SECRET-NOT-SECURE-AT-ALL
+    cookie:
+        - PLEASE-CHANGE-ME-I-AM-VERY-INSECURE
+    cipher:
+        - 32-LONG-SECRET-NOT-SECURE-AT-ALL
 
 ciphers:
-  algorithm: xchacha20-poly1305
+    algorithm: xchacha20-poly1305
 
 hashers:
-  algorithm: bcrypt
-  bcrypt:
-    cost: 8
+    algorithm: bcrypt
+    bcrypt:
+        cost: 8
 
 identity:
-  default_schema_id: default
-  schemas:
-    - id: default
-      url: file:///etc/config/kratos/identity.schema.json
+    default_schema_id: default
+    schemas:
+        - id: default
+          url: file:///etc/config/kratos/identity.schema.json
 
 courier:
-  template_override_path: /etc/config/kratos/courier-templates
-  delivery_strategy: http
-  http:
-    request_config:
-      url: http://baron_backend:3000/api/v1/auth/webhooks/kratos-courier
-      method: POST
-      body: file:///etc/config/kratos/courier-http.jsonnet
-      headers:
-        Content-Type: application/json
-  smtp:
-    connection_uri: smtps://test:test@mailslurper:1025/?skip_ssl_verify=true
+    template_override_path: /etc/config/kratos/courier-templates
+    delivery_strategy: http
+    http:
+        request_config:
+            url: http://baron_backend:3000/api/v1/auth/webhooks/kratos-courier
+            method: POST
+            body: file:///etc/config/kratos/courier-http.jsonnet
+            headers:
+                Content-Type: application/json
+    smtp:
+        connection_uri: smtps://test:test@mailslurper:1025/?skip_ssl_verify=true