{
  "realm": "go-bananas-dev",
  "enabled": true,
  "displayName": "go-bananas (development)",
  "sslRequired": "none",
  "registrationAllowed": true,
  "registrationEmailAsUsername": true,
  "rememberMe": true,
  "verifyEmail": false,
  "loginWithEmailAllowed": true,
  "duplicateEmailsAllowed": false,
  "resetPasswordAllowed": true,
  "editUsernameAllowed": false,
  "bruteForceProtected": false,
  "accessTokenLifespan": 300,
  "ssoSessionIdleTimeout": 1800,
  "ssoSessionMaxLifespan": 36000,
  "clients": [
    {
      "clientId": "go-bananas",
      "name": "go-bananas",
      "description": "The theme service: admin UI and runtime API.",
      "enabled": true,
      "protocol": "openid-connect",
      "publicClient": false,
      "secret": "go-bananas-dev-secret",
      "standardFlowEnabled": true,
      "implicitFlowEnabled": false,
      "directAccessGrantsEnabled": false,
      "serviceAccountsEnabled": false,
      "redirectUris": [
        "http://localhost:8080/auth/callback",
        "http://localhost:5173/auth/callback"
      ],
      "webOrigins": [
        "http://localhost:8080",
        "http://localhost:5173"
      ],
      "attributes": {
        "pkce.code.challenge.method": "S256",
        "post.logout.redirect.uris": "http://localhost:8080/*"
      },
      "defaultClientScopes": [
        "openid",
        "profile",
        "email",
        "groups",
        "roles"
      ],
      "optionalClientScopes": [
        "offline_access"
      ]
    }
  ],
  "roles": {
    "realm": [
      { "name": "bananas-admin", "description": "Full administrative access." },
      { "name": "bananas-editor", "description": "Create and publish themes." },
      { "name": "bananas-viewer", "description": "Read-only access." }
    ]
  },
  "groups": [
    {
      "name": "bananas-admins",
      "path": "/bananas-admins",
      "attributes": { "displayName": "go-bananas administrators" }
    },
    {
      "name": "bananas-editors",
      "path": "/bananas-editors",
      "attributes": { "displayName": "go-bananas editors" }
    },
    {
      "name": "bananas-viewers",
      "path": "/bananas-viewers",
      "attributes": { "displayName": "go-bananas viewers" }
    }
  ],
  "users": [
    {
      "username": "admin",
      "email": "admin@go-bananas.local",
      "firstName": "Dev",
      "lastName": "Admin",
      "emailVerified": true,
      "enabled": true,
      "credentials": [
        { "type": "password", "value": "admin", "temporary": false }
      ],
      "groups": ["/bananas-admins"],
      "realmRoles": ["bananas-admin"]
    },
    {
      "username": "editor",
      "email": "editor@go-bananas.local",
      "firstName": "Dev",
      "lastName": "Editor",
      "emailVerified": true,
      "enabled": true,
      "credentials": [
        { "type": "password", "value": "editor", "temporary": false }
      ],
      "groups": ["/bananas-editors"],
      "realmRoles": ["bananas-editor"]
    },
    {
      "username": "viewer",
      "email": "viewer@go-bananas.local",
      "firstName": "Dev",
      "lastName": "Viewer",
      "emailVerified": true,
      "enabled": true,
      "credentials": [
        { "type": "password", "value": "viewer", "temporary": false }
      ],
      "groups": ["/bananas-viewers"],
      "realmRoles": ["bananas-viewer"]
    }
  ]
}