version: '3.8'

# Override file for enabling SSO testing
# Usage: podman-compose -f docker-compose.yml -f docker-compose.sso.yml up -d

services:
  api-service:
    environment:
      # Enable OAuth2 for Keycloak testing  
      OAUTH2_ENABLED: true
      # Enable SAML for SimpleSAMLphp testing
      SAML_ENABLED: true
      # Switch to SSO auth provider instead of header
      AUTH_PROVIDER: sso
      # Set the required SSO configuration
      SSO_PROVIDER_URL: http://keycloak:8080/realms/kms
      SSO_CLIENT_ID: kms-api
      SSO_CLIENT_SECRET: kms-client-secret
      SSO_REDIRECT_URL: http://localhost:8081/api/sso/callback
    depends_on:
      - keycloak
      - saml-idp