Configuration Reference

Base URL of the Casdoor server, for example https://door.casdoor.com. Defaults to quarkus.oidc.auth-server-url.

Environment variable: QUARKUS_CASDOOR_ENDPOINT

Client ID used to call the Casdoor API. Defaults to quarkus.oidc.client-id.

Environment variable: QUARKUS_CASDOOR_CLIENT_ID

Client secret used to call the Casdoor API. Defaults to quarkus.oidc.credentials.secret.

Environment variable: QUARKUS_CASDOOR_CLIENT_SECRET

Add the names of the user’s Casdoor roles to the security identity, so that @RolesAllowed works. Roles are read from the roles claim of the token; with the JWT-Standard token format they are read from the UserInfo response, which requires quarkus.oidc.authentication.user-info-required=true.

Environment variable: QUARKUS_CASDOOR_ROLES_ENABLED

Check @PermissionsAllowed permissions and the casdoor HTTP security policy with the Casdoor /api/enforce API.

Environment variable: QUARKUS_CASDOOR_AUTHORIZATION_ENABLED

Casdoor permission to enforce, as <organization>/<name>.

Set at most one of permission-id, model-id, resource-id and enforcer-id. If none is set, all permissions of the user’s organization are checked, and access is granted if any of them allows the request.

Environment variable: QUARKUS_CASDOOR_AUTHORIZATION_PERMISSION_ID

Casdoor model whose permissions are enforced, as <organization>/<name>.

Environment variable: QUARKUS_CASDOOR_AUTHORIZATION_MODEL_ID

Casdoor resource whose permissions are enforced.

Environment variable: QUARKUS_CASDOOR_AUTHORIZATION_RESOURCE_ID

Casdoor enforcer to use, as <organization>/<name>.

Environment variable: QUARKUS_CASDOOR_AUTHORIZATION_ENFORCER_ID

How long an enforce result is cached. 0 disables the cache, so that permission changes in Casdoor take effect immediately.

Environment variable: QUARKUS_CASDOOR_AUTHORIZATION_CACHE_TTL

Timeout of a call to the Casdoor API.

Environment variable: QUARKUS_CASDOOR_AUTHORIZATION_TIMEOUT