diff --git a/keycloak/ABOUT.md b/keycloak/ABOUT.md index 2d6e952..62eaf56 100644 --- a/keycloak/ABOUT.md +++ b/keycloak/ABOUT.md @@ -8,5 +8,5 @@ - `"protocol": "openid-connect"`: OIDC (modern, uses json - jwt -) vs SAML (older, uses XML); explicit even though OIDC is the default. - `"publicClient": true`: Whether the client needs a `client_secret`; on (no secret) — our backend is trusted and it keeps config simpler. - `"standardFlowEnabled": false`: OAuth2 Authorization Code flow (redirect-based browser login); off for simplicity but not recommanded. - - `"directAccessGrantsEnabled": true`: toggles the Resource Owner Password Credentials (ROPC) that we uses for logging + - `"directAccessGrantsEnabled": true`: toggles the Resource Owner Password Credentials (ROPC) that we uses for login - `"components": ...`: Only makes email required to avoid "Account is not fully set up" error message