Skip to content

Commit 1c18ef4

Browse files
committed
beautify docs
1 parent 5fc2926 commit 1c18ef4

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

README.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -107,27 +107,27 @@ server.route([
107107
## API
108108
#### Plugin Options
109109

110-
> **Hint**: By default, the Keycloak server has built-in two ways to authenticate the client: client ID and client secret, or with a signed JWT. This plugin supports both. Check the description of `secret` and `publicKey` for further information.
110+
> By default, the Keycloak server has built-in two ways to authenticate the client: client ID and client secret, or with a signed JWT. This plugin supports both. Check the description of `secret` and `publicKey` for further information.
111111
>
112-
> If the signed JWTs are used as online strategy, ensure that the identifier of the related realm key (`kid`) is included in their header.
112+
> If the signed JWTs are used as online strategy, ensure that the identifier of the related realm key is included in their header as `kid`.
113113
>
114114
> | Strategy | Online | Option |
115115
> |:------------|:------:|:------------|
116116
> | ID + Secret | x | `secret` |
117117
> | Signed JWT | x | |
118118
> | Signed JWT | | `publicKey` |
119119
120-
- `realmUrl {string}`: The absolute uri of the Keycloak realm.<br/>
120+
- `realmUrl {string}` The absolute uri of the Keycloak realm.<br/>
121121
Required. Example: `https://localhost:8080/auth/realms/testme`<br/>
122122

123-
- `clientId {string}` The identifier of the Keycloak client/application.<br/>
123+
- `clientId {string}` The identifier of the Keycloak client/application.<br/>
124124
Required. Example: `foobar`<br/>
125125

126-
- `secret {string}` The related secret of the Keycloak client/application.<br/>
126+
- `secret {string}` The related secret of the Keycloak client/application.<br/>
127127
Defining this option enables the traditional method described in the OAuth2 specification. To perform an almost offline validation enable the cache — a simple offline verfication with symmetric keys is not provided for security reasons.<br/>
128128
Optional. Example: `1234-bar-4321-foo`<br/>
129129

130-
- `publicKey {string}` The related public key of the Keycloak client/application.<br/>
130+
- `publicKey {string}` The related public key of the Keycloak client/application.<br/>
131131
Defining this option enables the offline validation using signed JWTs. The public key has to be in [PEM][pem] or [JWK][jwk] format. If you define neither `secret` nor `public` key, the plugin assumes that a signed JWT has to be validated – it retrieves the public key itself from `{realmUrl}/protocol/openid-connect/certs`. The offline strategy its performance is higher but the online strategy is the most flexible one.<br/>
132132
Optional.
133133

0 commit comments

Comments
 (0)