Настройка аутентификации OpenID connect используя Keykloack при подключении к 1С

. /etc/os-release
echo "deb https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_${VERSION_ID}/ /" | sudo tee /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
curl -L https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_${VERSION_ID}/Release.key | sudo apt-key add -
sudo apt-get update
sudo apt-get -y install podman

podman pull quay.io/keycloak/keycloak

podman run -d \
  --name keycloak \
  -p 8080:8080 \
  -e KEYCLOAK_USER=admin \
  -e KEYCLOAK_PASSWORD=AdminPAssw0rd \
  quay.io/keycloak/keycloak

<?xml version="1.0" encoding="UTF-8"?>
<point xmlns="http://v8.1c.ru/8.2/virtual-resource-system" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" base="/test1" ib="Srvr=&quot;localhost&quot;;Ref=&quot;test1&quot;;">
	<ws enable="false" />
	<standardOdata enable="false" reuseSessions="autouse" sessionMaxAge="20" poolSize="10" poolTimeout="5" />
	<analytics enable="false" />

	<openidconnect>
		<providers>
			<![CDATA[
        [
            {
                "name": "KeyCloack",
                "title": "KeyCloack",
                "authenticationClaimName": "email",
                "providerconfig": {
                    "issuer": "http://auth.malikov.lan:8080/auth/realms/onec_openid",
                    "authorization_endpoint": "http://auth.malikov.lan:8080/auth/realms/onec_openid/protocol/openid-connect/auth",
                    "token_endpoint": "http://auth.malikov.lan:8080/auth/realms/onec_openid/protocol/openid-connect/token",
                    "response_types_supported": [
                        "code",
                        "token",
						"id_token token"
                    ],
                    "scopes_supported": [
                        "openid",
                        "email",
                        "profile"
                    ],
                    "jwks_uri": "http://auth.malikov.lan:8080/auth/realms/onec_openid/protocol/openid-connect/certs",
                    "userinfo_endpoint": "http://auth.malikov.lan:8080/auth/realms/onec_openid/protocol/openid-connect/userinfo"
                },
                "clientconfig": {
                    "authority": "http://auth.malikov.lan:8080/auth/realms/onec_openid/protocol/openid-connect/auth",
                    "client_id": "onec_client",
                    "redirect_uri": "http://localhost/test1/authform.html",
                    "response_type": "id_token token",
                    "scope": "openid email"
                }
            }
        ]
        ]]>
		</providers>

		<allowStandardAuthentication>true</allowStandardAuthentication>
	</openidconnect>
</point>

<?xml version="1.0" encoding="UTF-8"?>
<point xmlns="http://v8.1c.ru/8.2/virtual-resource-system" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" base="/test" ib="Srvr=&quot;localhost&quot;;Ref=&quot;test&quot;;">
	<ws enable="false" />
	<standardOdata enable="false" reuseSessions="autouse" sessionMaxAge="20" poolSize="10" poolTimeout="5" />
	<analytics enable="false" />

	<openidconnect>
		<providers>
			<![CDATA[
        [
            {
                "name": "KeyCloack",
                "title": "KeyCloack",
                "authenticationClaimName": "email",
                "providerconfig": {
                    "issuer": "http://auth.malikov.lan:8080/auth/realms/onec_openid",
                    "authorization_endpoint": "http://auth.malikov.lan:8080/auth/realms/onec_openid/protocol/openid-connect/auth",
                    "token_endpoint": "http://auth.malikov.lan:8080/auth/realms/onec_openid/protocol/openid-connect/token",
                    "response_types_supported": [
                        "code",
                        "token",
						"id_token token"
                    ],
                    "scopes_supported": [
                        "openid",
                        "email",
                        "profile"
                    ],
                    "jwks_uri": "http://auth.malikov.lan:8080/auth/realms/onec_openid/protocol/openid-connect/certs",
                    "userinfo_endpoint": "http://auth.malikov.lan:8080/auth/realms/onec_openid/protocol/openid-connect/userinfo"
                },
                "clientconfig": {
                    "authority": "http://auth.malikov.lan:8080/auth/realms/onec_openid/protocol/openid-connect/auth",
                    "client_id": "onec_client",
                    "redirect_uri": "http://srv1c01.malikov.lan/test/authform.html",
                    "response_type": "id_token token",
                    "scope": "openid email"
                }
            }
        ]
        ]]>
		</providers>

		<allowStandardAuthentication>true</allowStandardAuthentication>
	</openidconnect>
</point>