Merge pull request #74 from navikt/on-behalf-of-scope

Setting up variables for client id

src/main/resources/application-dev-gcp.yml

@@ -1,4 +1,7 @@
+TENANT_ID: 966ac572-f5b7-4bbe-aa88-c76419c0f851
 SECURITY_TOKEN_SERVICE_REST_URL: https://api-gw-q1.oera.no/security-token-service
 PDL_BASE_URL: https://api-gw-q1.oera.no/pdl-api/graphql
 
 NORG2_API_V1_URL: https://api-gw-q1.oera.no/norg2/api/v1
+
+PROXY_APP_CLIENT_ID: c6050231-3b9f-4173-8d1e-39b7e6e3392e

src/main/resources/application.yml

@@ -53,10 +53,6 @@ management:
 
 SERVICE_USER_USERNAME: srvklage-saksbeh
 
-TENANT_ID: 966ac572-f5b7-4bbe-aa88-c76419c0f851
-
-PROXY_APP_CLIENT_ID: c6050231-3b9f-4173-8d1e-39b7e6e3392e
-
 no.nav.security.jwt:
   issuer:
     aad:
@@ -83,7 +79,7 @@ no.nav.security.jwt:
       proxy-onbehalfof:
         token-endpoint-url: https://login.microsoftonline.com/${TENANT_ID}/oauth2/v2.0/token
         grant-type: urn:ietf:params:oauth:grant-type:jwt-bearer
-        scope: api://${PROXY_APP_CLIENT_ID}e/.default
+        scope: api://${PROXY_APP_CLIENT_ID}/.default
         authentication:
           client-id: ${AZURE_APP_CLIENT_ID}
           client-secret: ${AZURE_APP_CLIENT_SECRET}