Authentication

The core AI assessment and the user authentication are separate services exposed through separate ports. These can be set by the options LF_ASSESSMENT_PORT and LF_KEYCLOAK_PORT, respectively. Both ports need to be accessible by the end-user. When a user attempts to login, they are redirected from the core service to the authentication service. For this to work, the core service needs to know the address on which the authentication service is exposed to end users. Use the following options to configure this.

Option	Description	Default
`LF_OIDC_ALLOW_INSECURE_REDIRECT_URI`	Set this option to `True` if the user-facing address of the authentication service is not using HTTPS. NOTE: This is a security hazard as it exposes authentication details on the network.	False
`LF_KC_EXTERNAL_PORT`	The port on which the authentication service is exposed to the end user. Set this option when the authentication service is accessed on the same HTTP host as the core AI service. If you have configured the authentication service to run on a different HTTP host, leave this option unset.	8080
`LF_KC_URL`	The URL on which the core service will communicate with the authentication service. Typically, both services are deployed in a their own network and exposed to the outside world. In this case the communication is done through this network and this option should not be changed. Change the option if the authentication service is reachable by the core service on a non-standard address.	http://latticeflow-assessment-keycloak:8080

Option

Description

Default

LF_OIDC_ALLOW_INSECURE_REDIRECT_URI

Set this option to True if the user-facing address of the authentication service is not using HTTPS.

NOTE: This is a security hazard as it exposes authentication details on the network.

False

LF_KC_EXTERNAL_PORT

The port on which the authentication service is exposed to the end user.

Set this option when the authentication service is accessed on the same HTTP host as the core AI service.

If you have configured the authentication service to run on a different HTTP host, leave this option unset.

8080

LF_KC_URL

The URL on which the core service will communicate with the authentication service.

Typically, both services are deployed in a their own network and exposed to the outside world. In this case the communication is done through this network and this option should not be changed.

Change the option if the authentication service is reachable by the core service on a non-standard address.

http://latticeflow-assessment-keycloak:8080