feat: default user profile config

docker/keycloak/Dockerfile-24

@@ -30,5 +30,7 @@ COPY ./configuration/24/keycloak.conf /opt/keycloak/conf
 
 COPY ./configuration/24/quarkus.properties /opt/keycloak/conf
 
+COPY ./configuration/keycloak-default-user-profile.json /tmp
+
 # change these values to point to a running postgres instance
 ENTRYPOINT ["/opt/keycloak/bin/kc.sh"]

docker/keycloak/configuration/24/keycloak-default-user-profile.json

@@ -0,0 +1,61 @@
+{
+  "unmanagedAttributePolicy": "ENABLED",
+  "attributes": [
+    {
+      "name": "username",
+      "displayName": "${username}",
+      "permissions": {
+        "view": ["admin", "user"],
+        "edit": ["admin", "user"]
+      },
+      "validations": {
+        "length": { "min": 3, "max": 255 },
+        "username-prohibited-characters": {},
+        "up-username-not-idn-homograph": {}
+      }
+    },
+    {
+      "name": "email",
+      "displayName": "${email}",
+      "permissions": {
+        "view": ["admin", "user"],
+        "edit": ["admin", "user"]
+      },
+      "validations": {
+        "email": {},
+        "length": { "max": 255 }
+      }
+    },
+    {
+      "name": "firstName",
+      "displayName": "${firstName}",
+      "permissions": {
+        "view": ["admin", "user"],
+        "edit": ["admin", "user"]
+      },
+      "validations": {
+        "length": { "max": 255 },
+        "person-name-prohibited-characters": {}
+      }
+    },
+    {
+      "name": "lastName",
+      "displayName": "${lastName}",
+      "permissions": {
+        "view": ["admin", "user"],
+        "edit": ["admin", "user"]
+      },
+      "validations": {
+        "length": { "max": 255 },
+        "person-name-prohibited-characters": {}
+      }
+    }
+  ],
+  "groups": [
+    {
+      "name": "user-metadata",
+      "displayHeader": "User metadata",
+      "displayDescription": "Attributes, which refer to user metadata"
+    }
+  ]
+}

docker/keycloak/configuration/24/keycloak.conf

@@ -22,6 +22,7 @@ log-file-output=json
 
 # SPIs
 spi-login-protocol-openid-connect-legacy-logout-redirect-uri=true
+spi-user-profile-declarative-user-profile-config-file=/tmp/keycloak-default-user-profile.json
 
 # cache
 cache=ispn