clients:
  http:
    disallow_private_ip_ranges: false
oauth2_provider:
  url: "http://localhost:4745"
selfservice:
  methods:
    password:
      enabled: true
    code:
      enabled: true
    oidc:
      enabled: true
      config:
        providers:
          - id: google
            provider: generic
            client_id: ${OIDC_GOOGLE_CLIENT_ID}
            client_secret: ${OIDC_GOOGLE_CLIENT_SECRET}
            issuer_url: http://localhost:4444/
            scope:
              - offline
            mapper_url: file://test/e2e/profiles/oidc-provider/hydra.jsonnet
  flows:
    settings:
      privileged_session_max_age: 5m
      ui_url: http://localhost:4455/settings

    logout:
      after:
        default_browser_return_url: http://localhost:4455/login

    registration:
      enable_legacy_one_step: true
      ui_url: http://localhost:4455/registration
      after:
        oidc:
          hooks:
            - hook: session
        password:
          hooks:
            - hook: session
    login:
      ui_url: http://localhost:4455/login
    error:
      ui_url: http://localhost:4455/error
    verification:
      ui_url: http://localhost:4455/verify
    recovery:
      ui_url: http://localhost:4455/recovery
      enabled: true
      lifespan: 5m

identity:
  schemas:
    - id: default
      url: file://test/e2e/profiles/oidc-provider/identity.traits.schema.json

secrets:
  cipher:
    - secret-thirty-two-character-long